As the question suggests, I wanted to get a sanity-check on this issue... is it the case that the use of a random token exchange during SKID3 authentication itself constitute a prevention of a replay attack, or is there a window of vulnerability in this process (and post-authentication) to this particular attack as well?

Slides 18 through 23 on this presentation provides an excellent overview of SKID3 authentication: http://www.slideshare.net/sriprasanna/authentication-distributed-computing

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.