-1
$\begingroup$

I am currently reviewing for my exam and a questions comes to my mind when I read an example about a simple key exchange protocol. In my textbook, the author comes up with an example about a simple key exchange which is the same as in the below image. The Needham-Schroeder, Denning-Sacco protocols are both based on this simple protocol. enter image description here

My question is why C does not send session key directly to B? In my opinion, the reason is to avoid DoS attack to C. But is it the only reason?

$\endgroup$
0
$\begingroup$

Why would that prevent a denial of service to C? If it were left out of the loop, that would improve performance. But C is needed as a trusted party in an unteusted network. Alice initiates the exchange, and needs a session key for B. If C were to just forward A's request, the trusted party would be useless.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.