Every article about port knocking, for instance https://wiki.archlinux.org/index.php/Port_Knocking , declares this method as security by obscurity. Is the following enough to remove that title;
- a scheme where a 2048 bit shared key is generated. Every 2 bytes of the key are chunked off to make a list of 128 port numbers (2048/8/2). These port numbers in order are then configured as the port knocking sequence.
- the MAC address of the sender is also factored in (maybe as the first 6 bytes of the key)
Does this fix the "Security by obscurity" aspect of port knocking?
I understand that this is a sniffable method. Thanks for your feedback!