502 reputation
4
bio website
location Singapore
age 26
visits member for 10 months
seen Aug 31 at 2:08

Interested in authentication and privacy related stuff


Sep
24
awarded  Autobiographer
Apr
15
answered What is a 'secret key factory'? What precisely is it doing?
Mar
3
answered How does TLS generate the shared secret?
Feb
26
answered Diffie-Hellman Key Exchange with Authentication: Man-in-the-Middle query
Feb
26
answered Digital Signature using symmetric key cryptography
Feb
9
comment Unique, anonymous online authentication
Usually schemes for anonymity (e.g. www0.cs.ucl.ac.uk/staff/l.capra/publications/querciaTATA06.pdf) will make use of PKI for signatures, so the trusted party would be a CA in this case. Other schemes (e.g. blackhat.com/presentations/bh-usa-07/Lindell/Presentation/…) do not require a third party but are more complex in implementation.
Feb
8
answered Unique, anonymous online authentication
Jan
29
comment Authentication and deniability
oh I see.. So that was the reason the message M wasn't included in the hash. Then this leads to another issue, Bob cannot be sure that the received message was unmodified since encryption alone does not provide integrity.
Jan
29
answered Authentication and deniability
Jan
24
answered TLS: Is Integrity assured when using NULL cipher
Jan
18
comment Messages exchanged between Bob Alice are encrypted safe?
Yes, you would need a third party like the certificate authority or other peers(done in pgp) to assure you the validity of Alice's public key.
Jan
17
comment Messages exchanged between Bob Alice are encrypted safe?
I think unless the public key of Alice is securely communicated to you either thr a face to face meet up with Alice or thr the certificates then you cannot be sure that the public key you are using does indeed belong to Alice.
Jan
17
answered Messages exchanged between Bob Alice are encrypted safe?
Jan
17
comment Is the following authentication protocol insecure?
If Bob has a web address that you know. e.g. google.com. Then the Common Name listed in the certificate must contain google.com and not googlee.com . And since the certificate is assumed to be verified by a certificate authority, Bob is then authenticated in this case if he can recover K_AB. Eve is unable to register for another certificate with the Common Name listed as google.com since it has already been registered.
Jan
15
comment How to perform authentication without central server in P2P?
The 128-bit IPv6 addresses consists of two parts : the leftmost 64 bits are the subnet prefix (most probably assigned to you by your ISP) while the rightmost 64 bits are the interface identifier which can be indirectly chosen/generated by users as documented in RFC 3972.
Jan
15
answered How to perform authentication without central server in P2P?
Jan
14
answered Why use Needham-Schroeder if we have Diffie-Hellman?
Dec
31
awarded  Revival
Dec
25
answered Why is time-lapse cryptography not popular?
Dec
23
answered What parts of number theory does the RSA algorithm use?