meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 10 months |
| seen | Feb 6 at 14:14 | |
| stats | profile views | 18 |
|
Aug 3 |
comment |
ID-Secret Scheme SECRET is the key, ID is the message on the HMAC. Perhaps I didn't make clear that the HMAC only serves as an identification method to Party 2 without revealing the actual ID or SECRET (the values I'm trying to hide). Why will it be better to include a MAC of the ciphertext? The ciphertext is encrypted and as such one needs the SECRET (key) to successfully change the underlying input. If an attacker tries to change the ciphertext (without knowing the key), the intended recipient of the message will run into an error decrypting the ciphertext, or the underlying message will fail to be validated |
|
Aug 3 |
comment |
ID-Secret Scheme @Paul Crowley My aim is to authenticate a user successfully without revealing either the ID or the SECRET. I am fairly certain it is secure as it it, I'm just asking if there are any attacks (theoretical or practical) which reveal the values I'm trying to keep hidden. |
|
Aug 3 |
awarded | Student |
|
Aug 3 |
asked | ID-Secret Scheme |
