Questions tagged [authentication]

Authentication is successfully validating that an entity you are communicating with is actually who they claim to be. The entity typically demonstrates who they are by showing they possess a secret that only they could know.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Authenticating a device for remote motor control [migrated]

I'm looking for a standard solution to the following problem. I've been unable to find how something like this is normally accomplished. Even a key word that points me in the right direction would be ...
safety_motorhead_19's user avatar
0 votes
0 answers
38 views

High throughput authentication on ARMv8

I am working on a project where I need to authenticate data in parallel with computations on that data. The idea is to stream data from memory onto the chip only once; while the data is on-chip, we do ...
Nate's user avatar
  • 1
1 vote
0 answers
91 views

Does 'digitization' of tickets always need private data? Or is it just data gathering? Any simple method without?

Many companies argue their gathering of private data with 'digitization' but I guess their real intention is most likely just gathering data. However I didn't came up with a simple idea without it. ...
UncleBob's user avatar
0 votes
0 answers
74 views

Possible MAC design

The problem Let the following be a family of PRF functions with key length $2\lambda$ $$\mathbb{F} = \{F_k:\{0,1\}^n\rightarrow\{0,1\}^n\}_{k\in\{0,1\}^{2\lambda}}$$ Assuming one way functions exists, ...
zBION1C's user avatar
0 votes
0 answers
15 views

Example of an identification protocol that 1. With a private key 2. Resistant to attack with a fake ATM 3. Not resistant to eavesdropping attacks?

Can anyone please provide an example of an identification protocol that With a private key Resistant to attack with a fake ATM Not resistant to eavesdropping attacks ?
Антон Пичушкин's user avatar
0 votes
1 answer
125 views

Is there a quantum-safe password-based authentication method that doesn't require giving the server too much data

I've been reading up on different authentication protocols recently while I implemented the sign-in functionality for my website. Many of the suggested methods password-based authentication seem to ...
n-l-i's user avatar
  • 445
0 votes
0 answers
43 views

Is it secure to encrypt an authentication token using another possibly hashed authentication token?

I'm working on a web app ("main") which acts as a central access hub for several other web apps ("children"). The users are supposed to authenticate in the main app, resulting in a ...
Alex F's user avatar
  • 101
0 votes
1 answer
40 views

Question on SRP implementation

I'm comparing the Wikipedia description of SRP to the BouncyCastle implementation and some differences and I want to be sure the BouncyCastle implementation is suitable for my purpose. Wikipedia ...
Morty's user avatar
  • 599
0 votes
1 answer
260 views

Why does symmetric encryption not provide authentication and integrity? Is it only this type of encryption or cryptology in general have this issue?

Studying for Cryptology and came across a presentation regarding on "Integrity vs Authenticity" where the discussion briefly mentions how Encryption "does not provide integrity or ...
omar7439's user avatar
1 vote
1 answer
185 views

Cryptography to tackle deepfake, proving the photo is original

Deepfake technology has become very difficult to tackle due to sophisticated machine learning algorithms. Now, even when a journalist or bystander provides photo or video evidence, the culprit denies ...
Amiya Behera's user avatar
0 votes
0 answers
61 views

Client authentication: only talk to trusted clients?

As a preamble,I acknowledge that it is fundamentally impossible to authenticate that a networked client is who they claim to be. The question is, given that it's impossible, what should I do anyway? ...
ddyer's user avatar
  • 509
0 votes
1 answer
90 views

Shamir Secret Sharing for API Authentication

I want to implement authentication for an API and thought about using Shamir Secret Sharing to do so. My plan is to generate 1 Master Key which is stored in the Database, we then generate about 1000 ...
Michael's user avatar
1 vote
1 answer
67 views

Regarding the Digital Signature Algorithm During Client Authentication in TLS 1.2

In TLS 1.2, when client authentication is carried out, digital signatures are utilized. However, at what point is the specific signature algorithm communicated to the server? It seems to me that the ...
dusk's user avatar
  • 11
0 votes
1 answer
72 views

Safe implicit value validation: $H_k(k \oplus m) \sim H_k(m)$?

$H_k$ is a cryptographic hash function that's keyed using a section of key material $k$ (for whatever definition of "keyed" that's appropriate for the given hash function $H$). Are the ...
aiootp's user avatar
  • 785
0 votes
0 answers
339 views

Authenticate the users (in telegram bot) without storing user ids

Might be a bit weird but interesting scenario: I have a telegram bot and I need to authenticate users but I don't want to store any user data(at least openly). So here's a breakdown: I need to prove ...
Jordan Walker's user avatar
0 votes
1 answer
62 views

Reason for two random numbers in DSA?

Why is the signature in DSA the way it is? I am referring to $r$ and $k$ in the Signing-Algorithm depicted below. Is it really necessary to have both, $r$ and $s$, or would it still be secure if only ...
cryptoQueen's user avatar
0 votes
0 answers
19 views

What is the use of Secure Protocol Data Management (SPDM)?

By going through the document: https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_1.2.0.pdf I could get that this spec will be used to verify the identify and attestation of h/w &...
Abhishek Maurya's user avatar
0 votes
0 answers
27 views

How two secure elements can safely authenticate each other without a third party?

Assume there are multiple secure elements, and also multiple man-in-the-middle or malwares. How can any two secure elements authenticate each other without a third party and hard coding something in ...
MJay's user avatar
  • 103
1 vote
0 answers
26 views

Tag Management Problem in Authenticated Disk Encryption

1) For authenticated disk encryption, there are extra data such as IV or tag that need to be stored for all the alternative mods that are placed in Table 1. For these data, it will be necessary to use ...
NB_1907's user avatar
  • 610
1 vote
1 answer
108 views

Understanding the Communication Protocol of Apple HomeKey

I am currently analyzing the communication protocol of HomeKey. Here are two traces between the lock (reader) and the device (card). First set: ...
DANG Fan's user avatar
  • 111
0 votes
1 answer
109 views

who creates the passkey (and how many will be created)? [closed]

Passkey is nice. The math is nice. The tech is nice. https://security.googleblog.com/2023/05/so-long-passwords-thanks-for-all-phish.html What I still dont see after sooo many hours: what software ...
r j's user avatar
  • 101
0 votes
1 answer
198 views

How many bits should change in a password salt?

In https://crypto.stackexchange.com/a/27828/79037, it's indicated that one can "save space" by using something globally-unique, like an application-wide "pepper", together with ...
ManRow's user avatar
  • 343
2 votes
1 answer
147 views

Parameters needed for Chaum-Pedersen Protocol

I've came across a Stackexchange question about the Chaum-Pedersen Protocol which is based on the generalised schnorr protocol. As I understand it, it uses discrete logs and cyclic groups of prime ...
Jason L. B.'s user avatar
1 vote
1 answer
70 views

Is it undesirable for authentication to require decrypting a ciphertext?

A couple years ago, I devised some primitives for block ciphers and block cipher modes of operation; I was partly inspired by CAESAR. What these designs all had in common is that the encryption/...
Melab's user avatar
  • 3,645
1 vote
0 answers
187 views

Man-in-the-Middle attack on challenge-response authentication protocols

Say $B$ is a server and $A$ is a client who wants to login to the server, by proving herself to $B$. In challenge-response authentication protocols, $B$ sends challenge to $A$ and $A$ replies with ...
Lee Seungwoo's user avatar
8 votes
2 answers
246 views

Providing tokens for anonymous survey

I want to conduct an anonymous Internet survey (e.g. “What’s your favorite fruit?” with a multiple choice answer) among a given set of people. Double answers by the same participant are not allowed. ...
Alfe's user avatar
  • 219
2 votes
1 answer
139 views

Authenticated Key Exchange of Kyber.AKE

I have some questions about the setting of the one-way authenticated key exchange of Kyber.AKE as defined in section 5 of the paper. How does $P_2$ authenticate itself to $P_1$? It is not obvious to ...
P_Gate's user avatar
  • 403
6 votes
1 answer
819 views

Does the order of validations and MAC with clear text matter?

I have a request in which I get a series of data in clear (nothing encrypted) and a MAC / authentication tag. The question is whether the MAC should be validated first or if the fields are filled in ...
Felipe Rodriguez Fonte's user avatar
0 votes
1 answer
126 views

Securely sign URL using a 50 characters long key

I need to sign a URL to make sure the URL cannot be tampered or forged. The client has limited capabilities and I cannot use a key which is more than 50 characters long. Generally I use RSA to ...
Norcino's user avatar
  • 119
1 vote
0 answers
51 views

Secure two-factor authentication app for iOS

I'm working on an open source iOS-native (both UX- and implementation-wise) 2FA app. Two of primary goals for the project are ensuring security and simple backups. Addressing these two areas is the ...
Greg Navis's user avatar
2 votes
1 answer
110 views

Does having more than one HMAC provide more information to the attacker?

Suppose $N$ many messages has been sent from $A$ to $B$ in this format: $\operatorname{HMAC}(K, C(i)) \mathbin\| C(i)$. Where $C(i)$ is some cipher-text encrypted with some secure algorithm using ...
CuriousCrypto's user avatar
1 vote
1 answer
43 views

How to authenticate multiple IOT devices having unique certificates (ECDSA)?

I'm relatively new to the field of security. I'm working on an IoT system with WiFi-connected nodes (Bio-sensing devices) communicating with a server for centralized monitoring. I need to authenticate ...
jh_sh's user avatar
  • 13
1 vote
1 answer
1k views

How do non-"resident" keys work in WebAuthn?

If we look at the WebAuthn specification, then, during the "registration" ceremony, the authenticator generates a new key-pair and a unique user-id. Then the public-key and the unique user-...
Uwe Kohl's user avatar
3 votes
1 answer
986 views

Why does FIDO2/WebAuthn really need to generate a separate key-pair for each site?

I understand that FIDO2/WebAuthn generates a separate key-pair for each web-site (domain), and only allows a specific key-pair to be used for authentication on the same web-site (domain) who ...
Uwe Kohl's user avatar
3 votes
1 answer
242 views

Security of using key size larger than the message digest size in HMAC, with one time pads

I would like to know the security of using key size that is larger than the message digest (output) of a HMAC in one time pad encryption. One time pads for the message and the key of HMAC are ...
CuriousCrypto's user avatar
2 votes
0 answers
107 views

I understand the authentication procedure, but are replay attacks possible in these scenarios?

Would a replay attack be possible in any of these scenarios? My understanding is that in only images 3 & 4 it is possible.
timberus's user avatar
1 vote
1 answer
100 views

Disk encryption and advanced format

As far as I understand, the biggest problem of requesting authentication in disk encryption is that the plaintext and ciphertext are not having the same size -because of tag-. The XTS mode is already ...
NB_1907's user avatar
  • 610
2 votes
1 answer
85 views

Is it safe to use ECDH shared secret as a simple authentication cookie?

The protocol would look like this: User creates account and provides username, static public key User logs in by sending username Server responds by sending an ephemeral public key For the duration ...
pinhead's user avatar
  • 245
5 votes
1 answer
77 views

UF-naCMA not implies UF-CMA

I am trying to show that UF-naCMA doesn't imply UF-CMA. UF-naCMA is actually defined as UF-CMA but the adversary should send $q \in poly$ messages $m_i$ chosen non-adaptively (i.e. all at the same ...
Cristie's user avatar
  • 93
3 votes
0 answers
355 views

Why is ZKP authentication not used in practice?

I have been reading about Zero Knowledge Proof (ZKP) protocols for a while now. Among the applications I have seen the most is authentication (https://ethereum.org/en/zero-knowledge-proofs/#...
Ricardo Martínez's user avatar
3 votes
1 answer
303 views

Data Origin Authentication vs Non Repudiation?

I'm looking into how authenticated encryption primitives work and was wondering if non-repudiation is provided with these. Investigating further into them led to the answer being that data origin ...
Thanos's user avatar
  • 193
1 vote
0 answers
73 views

Does anonymous authentication based on ZKP have better unlinkability?

I am confused about whether/how ZKP based entity/message authentication scheme can achieve identity privacy, especially unlinkability. The security properties I'm looking for in the scheme is ...
Harold's user avatar
  • 11
2 votes
2 answers
233 views

What drivers are causing an increase in authenticated encryption modes?

So I'm currently working through this cryptography question and so far I have the answer of an increase of hackers due to increase in computational power. But apart from that I don't know what else. ...
Thanos's user avatar
  • 193
1 vote
2 answers
2k views

How does TLS 1.3 provide authentication without using the public key to verify that the server has a private key?

In the TLS 1.2 handshake, after checking the certificate, the public key from the certificate was used to encrypt the data to create a symmetric encryption key, hence the authentication took place on ...
Nikita Khodakovsky's user avatar
0 votes
1 answer
40 views

Authenticate people online with simple public / private key scheme or similar

How can I ensure that person X on website A is the same person who contacts me? Here is my use case. On website A I post message asking username X to contact me. Someone send me an email - how do I ...
Lofter's user avatar
  • 1
1 vote
3 answers
756 views

Base64 or hex to attach auth tokens to URL?

I just came across this question, but it does not really answer my main concern that I have regarding password tokens. To authenticate a client who is not logged in; I generate two random tokens and ...
DevelJoe's user avatar
  • 113
1 vote
0 answers
46 views

How LastPass decrypts database on web browser?

According to video from Dr. Pound, password managers (LastPass in particular) holds encrypted image of your data on their servers and then with master password you authenticate to get encrypted image ...
unalignedmemoryaccess's user avatar
1 vote
1 answer
100 views

Why is the following not a ZKP for discrete log?

Before looking at the textbook ZKP for discrete log, I tried to construct one myself. This turned out quite different to the textbook one, and I've been wondering what might be wrong with it? (I was ...
Anon's user avatar
  • 403
2 votes
1 answer
2k views

How can a root CA be kept offline and function

Based on many suggestions I have seen around, this, that.etc. Best practice says to keep the root CA offline for very understandable reasons. But how can it be truly offline? Doesn't the root ca have ...
dobro's user avatar
  • 21
1 vote
1 answer
647 views

Aes-Gcm how to perform decryption authentication without plaintext output in C#

I'm mainly trying to verify large file chunks which are encrypted each alone with a different key/salt/nonce for each chunk then appended to the whole file in the end to form 1 file. One thing I ...
Elie-M's user avatar
  • 23

1
2 3 4 5
15