Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

Authentication is successfully validating that an entity you are communicating with is actually who they claim to be. The entity typically demonstrates who they are by showing they possess a secret that only they could know.

2
votes
1answer
62 views

I don't want to store passwords, can I use them as an encryption key for another field?

I'm not a 'cryptographic' anything, so if this is a super-dumb question please let me know (politely). So here's the deal, say I don't want to store passwords because that opens me up to all sorts of ...
-1
votes
0answers
16 views

How do I revoke aws smtp oauth token2 on iPhone [closed]

How do I revoke oauth 2 tokens and phishing emails
0
votes
0answers
39 views

How can a node establish pairwise shared key with other nodes using its own polynomial share together with other's public values?

A server has a symmetric bivariate polynomial $ F(x, y) = \sum_{{i,j}=0}^{t-1}a_{i,j}x^iy^j$ $\in GF(p)[X, Y] $ of degree $t-1$. For simpliciy, $ F(x, y) = a_{0,0}+a_{1,0} x+a_{0,1}y+ a_{1,1}xy$ mod ...
2
votes
1answer
36 views

Does the AES-KW (Key Wrap Algorithm) perform authenticated encryption?

The RFC for AES-KW doesn't actually mention authentication, only integrity, where the unwrapping/decryption process should produce an identical IV of ...
0
votes
0answers
45 views

Are key files good authentication?

Let's say $p$ is the pool of files in a folder. And $k$ is the files in the pool that are "key files" for authenticating in a service. Note: The order of the key files matter. Then we have $c$ which ...
0
votes
0answers
19 views

Difference between double unilateral authentication and bilateral authentication?

What is the difference between applying bilateral authentication once and applying unilateral authentication twice?
0
votes
0answers
28 views

Two-party symmetric key establishment protocol

I need a symmetric key protocol that will mutually authenticate and establish a new short-living session key between two parties that have a pre-shared key. Unfortunately, I have not found any ...
3
votes
2answers
85 views

How to encrypt numeric data on a ticket

I have a customer with an existing ticketing system that generates tickets for events like theaters, movies, football and so on. The information in each ticket is encoded in a 16 decimal digit ...
0
votes
1answer
50 views

What is the difference between static and dynamic tokens?

First, what is the difference between hardware and software tokens? Tokens are "what you have" for example a car key or a chipcard. This would be (I think) hardware tokens? But what are software ...
1
vote
0answers
31 views

Privacy Preserving Authentication Protocol

I am learning this new concept. I found different algorithms (similar bases) in different papers. example1 (Fig. 1) example2 (Fig. 5) I was wondering if some one can explain it in simple words. ...
3
votes
0answers
42 views

Password Derived Signature Authentication

I'd like to avoid sending user passwords over the wire. Would the following challenge response protocol be secure (served over TLS)? I know this is similar to SRP. Sign-up Client takes password and ...
2
votes
2answers
68 views

Authentication without decrypting the password?

To my knowledge it works like this: The server receives the username-password values over a secure & encrypted channel. The username-password values are decrypted in the server and are present as ...
0
votes
0answers
34 views

Most energy-efficient authentication protocol?

I am looking for a cryptographic protocol that is as energy-efficient as possible. I am talking about battery drain. Alice wants to do a mutual authentication with Bob. Maybe symmetric is good, maybe ...
0
votes
0answers
17 views

Is my method of identifying remote ZMQ clients secure?

ZMQ provides a CURVE based authorization / encryption system based on certs/keys. After endpoints are authenticated to the server, they can send an "identity" with each request. Unfortunately they ...
1
vote
0answers
49 views

Could you design something like a ring signature that uses website accounts instead of keys?

Ring signatures allow one to prove that you own a private key corresponding to a public key from a set of keys, without revealing which private key you control. This is useful if you are part of some ...
3
votes
1answer
142 views

Fiat-Shamir zero knowledge protocol

In Fiat-Shamir protocol, the final calculation is $$y^2=x\,v^c$$ Where $c$ is the random $\{1,0\}$, $x$ is the witness and $v$ is the public key $s^2 \bmod n$. My questions are: What stops the ...
0
votes
0answers
33 views

Rolling Code via Encrypted Index vs Pre-Generated Keys

I am planning on designing a system that needs a password to be operated, using a rolling key. Now I am facing two options, as far as I am concerned: Having an index saved, which will be incremented ...
1
vote
1answer
92 views

Message authentication vs entity authentication

Does message authentication authenticate the entity? If the answer is "No", because message authentications like MAC work with the shared symmetric key, then my second question is: Does a message ...
1
vote
1answer
65 views

Definition of Short Authentication String

I am studying for my cryptography final and I passed by the following term: short authentication string. Please, can anyone explain it to me, thank you very much.
7
votes
1answer
281 views

What is the use of SCRAM-SHA-256 (over SCRAM-SHA-1)?

The Salted Challenge Response Authentication Mechanism (SCRAM) specified in RFC 5802 can use arbitrary hash functions to operate. The base version from RFC 5802 uses SHA-1. From my understanding, ...
0
votes
1answer
45 views

Two-way secret sharing for authentication?

Secret sharing, using methods such as Shamir's Secret Sharing allows for t out of n shares to recreate a secret. For authentication, the secret can be a user ID. A client with a logged-in user can ...
4
votes
0answers
49 views

Can “OPAQUE-over-TLS” authentication be optimized?

So while discussing the issues of password-hashing off-loading in our chat I noticed that it's easy to extend OPAQUE (CFRG draft) to essentially be a better standard password based authentication when ...
1
vote
1answer
79 views

Disadvantage of the using a counter within plain text for encrypting with AES256 and authentication?

What if we use a counter within the plain text and then encrypt the plain text with aes 256 to encrypt & authenticate? For example: encryptAES(32bit_counter+plain_text_of_96bit); or encryptAES(...
-2
votes
1answer
72 views

Is this device authentication method (using AES-256) secure?

Let's say we have: client_id_ran: 256 bit random text (chosen only once for whole system) used to generate client_id by ...
1
vote
0answers
58 views

Security of three-pass mutual authentication under ISO/IEC 9798-2

Based on 5.2.2 of the international standard ISO/IEC 9798-2 (http://bcc.portal.gov.bd/sites/default/files/files/bcc.portal.gov.bd/page/adeaf3e5_cc55_4222_8767_f26bcaec3f70/ISO_IEC_9798-2.pdf) Why ...
3
votes
1answer
135 views

Are SSH key-pairs an example of a zero knowledge proof?

Quoting from source, authentication using SSH key pairs goes something like this: 1) The client begins by sending an ID for the key pair it would like to authenticate with to the server. 2) ...
1
vote
1answer
158 views

How does the user get the private/public key with HMAC based request signing?

I need to implement a HMAC signing of requests and I have read this article which explains the basics of what it is and how to achieve on theory. https://blog.andrewhoang.me/how-api-request-signing-...
2
votes
1answer
167 views

What would happen if the last message in a three-pass authentication protocol was undelivered?

I did read some articles about the protocol but couldn't figure out what would happen. Would the two parties be unable to verify each other? Or would it be something else? based on the international ...
1
vote
1answer
64 views

Authentication protocol for communication with Arduino Uno

I am using an ECDH key exchange to establish a shared secret between an Arduino Uno and an Android device. For this purpose I am using this library and more specifically Curve25519. This is the ...
0
votes
1answer
45 views

Can a Message Authenticaty Code recover original data from corrupted data?

I am new to cryptography and have been studying for Dan Boneh's Stanford Course on Coursera, after going through encrytpion and decryption I've started the integrity portion of the Course. Sir ...
2
votes
2answers
110 views

Cryptography scheme to prove you really are the author for something

Say I'm a researcher like Satoshi Nakamoto that wants to stay anonymous. I want to publish documents and sign them somehow. A few years, I want to reveal my identity and prove it was me who was ...
3
votes
4answers
238 views

JWT Login Security

I am new to security and I am wondering if JWT is secure enough. From what I have read online the flow goes like this: Clients log in by sending their credentials to the identity provider. The ...
1
vote
0answers
11 views

Asymmetrical encryption with multiple sufficient key-pairs [duplicate]

I have the following requirement: There are N public/private RSA key pairs. The encrypted data must be decryptable by any of the private keys alone, but not by any other key. For encryption, the ...
2
votes
2answers
53 views

How to calculate a multiple-character checksum for authentication using a tabula recta?

I am not sure if this is possible to do using a tabula recta, but I would like to know how to calculate a multiple-character checksum of a text. For a single-character checksum, it's easy. You just ...
5
votes
1answer
109 views

Login security and plaintext of a password stored in Argon2i to derive a key via halite safe?

I'm using Symfony 4. I have set parameters on all my Argon2 stuff below so that it takes 1s per iteration. This website is supposed to encrypt HIPAA information. Basically I have a table like this <...
5
votes
1answer
114 views

How is ZKPP better than signing nonces?

I am trying to understand the use case for zero knowledge password proofs. Clearly, it is not ideal for a remote server to store a password hash. Then I need to upload the password to the server for ...
1
vote
1answer
386 views

How to generate tokens from a secret key?

The problem is simple: I want to be able to spit out 256-bit "tokens" that only I could've produced because I know my secret key $s$, and given any number of these tokens, no one can figure what $s$ ...
1
vote
0answers
71 views

Drawbacks of Schnorr Authentication that require Fiat-Shamir and Random Oracles?

I've been going through G. Maxwell's paper on the Borromean Ring Signature, and I don't fully understand this part on Schnorr Signature. If some could explain it more intuitively thank you. "...
1
vote
1answer
32 views

How does EAP-TLS authenticate?

I understand that a client and server certificate is required, however the validation process isn't clear to me. Is it simply that the certificates are check to ensure they're valid, aren't revoked, ...
0
votes
1answer
89 views

Where should I start to learn cryptography? [duplicate]

I want to learn cryptography. I just wanted to ask people who experienced about the field that where should I start? Any recommendation would be something for me. Thank you in advance.
1
vote
0answers
35 views

Cost of asymmetric signature checks vs password hashing

This is a question about standard every day web authentication. I have the following assumptions: one of the reasons public key user authentication is not used as bread and butter on the web is that ...
3
votes
1answer
191 views

Is using a smart card and password two-factor authentication?

I use a smart card - as read only device - for user identity as well as a password: The smart card (holds the user ID) is something I have; The password is something I know. Is this still two-factor ...
6
votes
4answers
2k views

Using a blockchain for secure communication

I've recently heard of the idea of using a blockchain for secure communication. No details were given so it's a little hard for me to say that it can't be done. But as far as I know: Secure ...
1
vote
0answers
44 views

Is timing attack practical in a web developer's perspective?

Let's say my server has a non-constant-time compare function for checking if the visitor has a valid session id. The time it takes for the comparator to run would be very insignificant, usually within ...
1
vote
1answer
50 views

CCM authenticity bound

Can someone help me understanding the CCM authenticity bound by Phillip Rogaway? i-e Success probability < $q_{\text{dec}}/2^\tau + \sigma/2^b$. $\tau$ is tag length, where as $b$ is block length. ...
1
vote
1answer
102 views

Authentication scheme using HMAC

I have an authentication service, a client and an application service. The client needs to use the application, but they have to be authenticated first. I'm trying to create a simple scheme to do ...
5
votes
1answer
92 views

Using nested signatures to trust public key of inner signatures

I have a scenario where entity $A$ has an unauthentic copy of the public key $P_B$ of $B$ and an authentic copy of $P_C$ of $C$, trusted by both $A$ and $B$. Now $A$ wants to establish trust in $P_B$...
0
votes
2answers
85 views

Client-side password stretching - danger of the salt being public?

In case of using client-side password stretching (plus a single hash on the server) - the server would need to send the salt before authentication, of course. Though the salt is not considered a real ...
4
votes
2answers
231 views

passive corruption ?= Byzantine corruption in the UC framework?

Notations: We follow the convention in the UC framework. We use $\mathcal{A}$ to denote the adversary, $\mathcal{P}$ to denote a party in the model. We focus on two types of corruption in the UC ...
0
votes
1answer
131 views

Authentication and integrity

I was trying to solve this problem: Sometimes Alice needs to send a file to Bob, guaranteeing her identity and the file integrity (no confidentiality required); the two parties are sharing a secret w ...