Tag Info

New answers tagged

2

Timestamps, as mentioned by user93353, are one possible answer. The drawback is that they require synchronized clocks, which can't always be assumed. Another possible approach to prove liveness (that is, that this isn't a replay) is for the receiver to select a random value (a "nonce"), send that to the server, and have the server sign the command ...


0

You can use time as a nonce. Add a timestamp to the message before signing it. Send the unsigned timestamp also to the receiver so that the receiver can verify the signature. Add a rule that timestamp cannot be +/- 'X' delta as compared to the current time. This rule will be verified by receiver before checking the validity of the signature. This will ...



Top 50 recent answers are included