Assume Alice and Bob communicate over an insecure channel using one-time perfectly-secret encryption together with one-time secure message authentication code. Say Eve has the ability to eavesdrop and to inject messages into this insecure channel, but not to block or delay messages (i.e. Eve can mostly only replay authenticated encrypted messages).

Of course we can design scenario damaging to Alice and/or Bob. How can they protect themselves against such replay attacks?

  • $\begingroup$ For a full protocol that works well in this scenario, look at CurveCP. It's design goals explicitly take your scenario into account. $\endgroup$ Oct 8, 2012 at 19:44
  • $\begingroup$ @CodesInChaos Are you referring to CurveCP's use of nonces, aka number used once? I only added this comment because the current highest voted answer gives a similar answer. $\endgroup$ Oct 9, 2012 at 2:41
  • $\begingroup$ @HeatfanJohn Both the use of nonces and that no forged packet can disrupt the connection. $\endgroup$ Oct 9, 2012 at 6:21


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.