I am studying for my cryptography final and I passed by the following term: short authentication string. Please, can anyone explain it to me, thank you very much.


The Short Authentication String (SAS) is used in various protocols, but in short, SAS is produced to transfer a long authentication tag into a smaller so that the two users can verbally verify. For example;

In Diffie-Hellman key Exchange, there is always a risk of Man-in-the-Middle attack. To ensure that there is no attacker in the first session, that there are no shared secrets yet, a SAS can be used. After verbal communication, if the values don't match then Man-in-the-Middle attack is detected.

Some Protocols that uses SAS;


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.