Assume Alice and Bob communicate over an insecure channel using one-time perfectly-secret encryption together with one-time secure message authentication code. Say Eve has the ability to eavesdrop and to inject messages into this insecure channel, but not to block or delay messages (i.e. Eve can mostly only replay authenticated encrypted messages).

Of course we can design scenario damaging to Alice and/or Bob. How can they protect themselves against such replay attacks?

  • $\begingroup$ For a full protocol that works well in this scenario, look at CurveCP. It's design goals explicitly take your scenario into account. $\endgroup$ Oct 8 '12 at 19:44
  • $\begingroup$ @CodesInChaos Are you referring to CurveCP's use of nonces, aka number used once? I only added this comment because the current highest voted answer gives a similar answer. $\endgroup$ Oct 9 '12 at 2:41
  • $\begingroup$ @HeatfanJohn Both the use of nonces and that no forged packet can disrupt the connection. $\endgroup$ Oct 9 '12 at 6:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.