Questions tagged [man-in-the-middle]
A man-in-the-middle (MITM) attack is an active attack where the attacker is able to interpose himself between the sender and receiver. The attacker may monitor and/or modify some or all of the messages sent between the two endpoints.
101
questions
9
votes
0answers
146 views
The backdoor of Telegram on Diffie-Hellman Key Exchange and possible other examples?
Diffie-Hellman Key-Exchange (DHKE) should be used carefully during the end-to-end encryption. A man-in-the-middle (MITM) attack is possible.
Standard DHKE
The simple protocol on the multiplicative ...
11
votes
1answer
3k views
Is quantum key distribution safe against MITM attacks too?
i read this recently: http://www.newscientist.com/article/dn12786-quantum-cryptography-to-protect-swiss-election.html
and some parts of this: http://en.wikipedia.org/wiki/Quantum_key_distribution
...
1
vote
1answer
317 views
Triple Diffie-Hellman and MITM
While reading about Triple Diffie-Hellman, I was wondering how it can prevent MITM if the server decides to spoof key sets.
For example, Alice and Bob are connected using a server.
Alice ----- ...
2
votes
1answer
62 views
MitM with regard to unauthenticated clients
I'm trying to understand how man-in-the-middle attacks are prevented during key exchanges, and am confused by this Wikipedia statement:
Use of mutual authentication, in which both the server and the ...
0
votes
0answers
15 views
What advantage does Pairing using Legacy Pairing (BLE 4.0,4.1 devices) give me over a simple connection between 2 devices?
BLE 4.2 uses something called LESC (LE Secure Connection) for significantly enhancing the link encryption between 2 devices (using public private key pair model). But prior to that the way devices ...
5
votes
4answers
9k views
Diffie-Hellman Key Exchange with Authentication: Man-in-the-Middle query
I have been reading up on MiTM attacks, and the prevention of them using public key certificates. Recently I learnt about Diffie-Hellman Key Exchange with Authentication, and how it uses signed ...
0
votes
1answer
87 views
Possibility of Man-in-the-Middle on X3DH
I'm reading about the security of the Signal protocol (used in WhatsApp) and in particular, the X3DH part used to establish authentication, all papers seem to gloss over Man in the Middle attacks. Is ...
0
votes
0answers
65 views
Diffie-Hellman man-in-the-middle attack
Diffie-Hellman Key Exchange Basic Protocol:
Let G be a cyclic group of order $n$ and generator $g$.
Alice chooses $a \in \{0,\ldots,n-1\}$ and Bob chooses $b \in \{0,\ldots,n-1\}$.
...
1
vote
1answer
30 views
If two hosts are using a transparent IP level authentication and encryption, is their communication subject to both MITM or replay attacks?
Encryption process for any outgoing packet to the specified "remote IP":
-original payload P is encrypted (the bytes after the IP header) using RC4 with the preestablished key ...
5
votes
0answers
131 views
Multilinear trapdoor commitments secure against concurrent man-in-the-middle attacks
I am trying to understand how to apply a multi-trapdoor commitment described by Gennaro and what makes them secure against a concurrent MiM attack.
There are two ways to construct a multi-trapdoor ...
0
votes
0answers
26 views
Can Alice encrypt a message to Bob without hiding anything from Eve? [duplicate]
I know that if Alice and Bob both have secret-public key pairs, they can use RSA for example. If we remove the possibility that Alice can know anything which Eve doesn't (ie Alice's secret key), is ...
1
vote
3answers
181 views
Negotiate a secure connection without certificates?
I would like to have a simple experience for a user for setting up a secure connection between two computers against a MITM attack. Something like the following:
A number (possibly base64) appears ...
1
vote
0answers
47 views
attacks and defenses on multi party Diffie-Hellman protocol
I tried to create a 4 partied Diffie-Hellman implementation for 4 people using its cyclic group property.
However, I am not sure regarding those 2 issues, and would appreciate if you could elaborate ...
0
votes
0answers
34 views
Server stored, encypted messaging app
For my personal research, I have to create a messaging app, but security is only important part of application, security from MITM (man in the middle attack), at device end, and at server level. (note:...
2
votes
1answer
125 views
How is Diffle Hellman with RSA immune to man in the middle?
Alice and Bob want to exchange keys, Alice sends his half (the public key of the ephemeral key pair) signed with his private key and makes the public key available. Eve is bridging the connection so ...
0
votes
0answers
76 views
How does DHE-RSA work and why is PFS guaranteed?
How does it work and why is forward secrecy guaranteed? I understood that it is not susceptible to a man-in-the-middle attack by using certificates in the beginning.
0
votes
1answer
71 views
Observing cipher suites and certificate algorithms without man-in-the-middle
I manage a proxy server. Is it technically possible to observe and determine which cipher suite is selected between end points (client and server) without changing their SSL certificate, without ...
2
votes
1answer
193 views
Man-in-the-middle attack on text-book RSA PKE
I am attempting to solve the following problem:
I know the following:
3 messages are being sent between Alice and Bob, all messages are encrypted with the known public key $(d,N)$:
Alice sends ...
2
votes
1answer
548 views
Is there really any way to nullify or avoid MITM attacks?
The question pretty much sums it up.
Is there any way to make an attacker who is successfully performing an MITM attack to actually not be able to read or change the messages? Assuming there is no ...
0
votes
1answer
36 views
Is it necessary to have a certificate when we use TLS
When we say a communication is secured by the latest version of TLS, can we say that Man-in-the-Middle attack is not possible? Do not consider the situations that we can down grade the communication ...
2
votes
3answers
2k views
Diffie-Hellman algorithm and MITM attack
How does the Diffie-Hellman algorithm prevent MITM attack?
I have tried to search about it but i couldn't find any understandable reasons.
1
vote
0answers
145 views
Could MITM securely identify identity?
Consider protocol like QUIC or MinimaLT which are essentially layer4 replacement for TCP/UDP (riding on top of UDP currently because of fear of random firewalls dropping new L4 protocol).
From crypto ...
2
votes
5answers
831 views
Is use of pre-shared key for sharing session key in symmetric key cryptography vulnerable to MITM?
Consider the following protocol:
...
3
votes
1answer
4k views
MiTM on RSA public key encryption
a) Alice just generated a new pair of public and private RSA keys (pkA , skA ) = ((N, e), d) and would like to start a private conversation with Bob. How can Alice interact with Bob and exchange a ...
1
vote
1answer
109 views
Prevent a Man-In-The-Middle attack whilst transmitting a PSK for first time
I'm developing a network where two parties that want to join both compute ephemeral ECC keys for a key exchange, to create an encrypted connection. I plan to authenticate these keys by signing them ...
0
votes
1answer
171 views
Authentication and integrity
I was trying to solve this problem:
Sometimes Alice needs to send a file to Bob, guaranteeing her identity and the file integrity (no confidentiality
required); the two parties are sharing a secret w ...
0
votes
1answer
147 views
NeedhamāSchroeder fix by adding opponent's identity to the first message
Recap: NeedhamāSchroeder is as follows:
$A \rightarrow B : \{A, N_a\}_{pk_B}$
$B \rightarrow A : \{N_a, N_b\}_{pk_A}$
$A \rightarrow B : \{N_b\}_{pk_B}$
Then, there is a MITM attack by Lowe ...
0
votes
1answer
349 views
How is STS more secure than regular DH
I'm trying to understand the STS protocol (using the wikipedia page as source), but I don't see how this protocol is any more secure than DH regarding man in the middle attacks.
If Alice and Bob don'...
1
vote
1answer
70 views
How are public keys securely and reliably obtained across the internet?
I've just decided to start learning all about PKIs, and I have come across what seems like a paradox.
When fetching a public key from either a server or a CA, how can we be sure that the public key ...
0
votes
1answer
167 views
Entity authentication protocol by encryption
I'm not a cryptography expert, so excuse me if the question seems very trivial.
I need to know if this protocol is secure against a MiTM attacks and ensure a safe entity authentication method.
We ...
0
votes
1answer
75 views
Is this man in middle atack possible in quantum cryptography? [duplicate]
Lets consider there is channel between Alice and Bob, sequered with quantum cryptography.
To put it simple, Alice is left, Bob is right and the quantum states are 'up' ~ U and 'down' ~ D.
Alice ...
1
vote
2answers
363 views
7
votes
3answers
2k views
Vulnerabilities if encrypting the same data with 2 different keys
Let's say that Alice and Bob complete a key exchange and then Alice uses that key k1 to encrypt a 256-bit key kaes1 and sends it ...
0
votes
0answers
76 views
How to decrypt plain text x using man in the middle attack
Suppose Alice want to share a plain text $x = 5$ to Bob; using RSA, DHKE, and El-Gamal.
My question is if Man-in-the-middle attack is applied then weather oscar can compute/decrypt plain text in all ...
1
vote
0answers
112 views
Security of the Needham-Schroeder public key protocol after a minor adjustment
I'm preparing for a computer security exam by going through some past paper questions. And I came across this particular one that I could not answer:
We have the Needham Schroeder Public Key Protocol:...
2
votes
1answer
324 views
Interlock Protocol for Preventing Man-in-the-Middle (MitM) Attack
Trying to turn bookish knowledge to practical:
Alice sends half of the encrypted data to eve, eve eavesdrop and tries to decrypt the data and fails as eve has only half of the encrypted block. So, ...
0
votes
1answer
545 views
Public key on Server Key Exchange Generation vs Public key on Server's Certificate
To understand the distinction between TLS 1.2 and TLS 1.3. I am stuck in the past understanding for TLS and the current reference I am studying:
As I know certificate goes with owner's public key, ...
2
votes
1answer
208 views
Detect MITM with hashed session-key ā Is my protocol secure?
I have the following setup:
An app ("client") wants to communicate securely with a device I created ("server").
The client has the public key of the server (and a hashed password) preinstalled.
I use ...
1
vote
2answers
82 views
How is it possible for a VPN connection to be created through the ISP?
I will be theoretical here. Let's say you want to create a VPN connection with some VPN provider. You have to agree on some key to encrypt the data. how can you get the key without your ISP knowing it?...
-1
votes
2answers
523 views
MD5 hash functions to prove integrity of a download
It doesn't take a lot of time on the crypto StackExchange to realise the sentiment around MD5 hash functions is poor.
My questions are:
If it's such a bad idea to make use of MD5 hash functions why ...
6
votes
1answer
348 views
What is 'Carry-forward verification' defense against MITM?
Wikipedia article on Man-in-the-middle attack mentions, in the list of defenses against it, some method called "Carry-forward verification", but it does not explain it. I am curious about different ...
0
votes
1answer
230 views
Digital certificate issuing man-in-the-middle attack
While obtaining digital certificate the applicant trusts the certificate authority (or registering authority) as CA is digitally certified (and applicant has CA's public key).
To certify a domain ...
-1
votes
1answer
175 views
ECDH vs MITM ablity to change content
We all know how DH is great, and ECDH is much greater, but only in case of Eve spying on public keys, so how can ECDH defeat the ablity of "Eve" to change the public keys between Bob and Alice with ...
2
votes
2answers
155 views
Transmit half the bits of the $g^a$ and $g^b$ as MITM countermeasure in DH key exchange?
I remember this trick from one of my crypto courses way back then, but I can't find the details, and I'm unable to figure out the logic behind it.
I'm talking about a countermeasure to the MITM ...
1
vote
1answer
99 views
Is it Possible to Generate a Duplicate DH Session Key from 2 Pairs of DH Keys?
This might sound pointless at first, but I want to know if it's computationally feasible to generate the same resulting session key in 2 different DH key exchanges. The purpose would be for a man-in-...
1
vote
2answers
75 views
Is it impossible to have a decentralized service using email addresses as login?
Let's say we have a decentralized service S distributed on a network of 1000 nodes/servers. Is it possible to have a registration/sign up scheme using email address ...
3
votes
1answer
1k views
Man-in-the-middle attack on Diffie-Hellman with shared public keys?
Is it correct to say if the public key is known to all users beforehand, Diffie-Hellman key exchange is not vulnerable to man in the middle attack?
Sample key exchange ( assuming all users public ...
4
votes
1answer
3k views
What are the problems of IKEv1 aggressive mode (compared to IKEv1 main mode or IKEv2)?
I would like to seek confirmation/clarification of the following statements about IKE:
IKEv1 aggressive mode is supposed to be āinsecureā if used with PSK. But as far as I can see, correct (or more ...
1
vote
1answer
37 views
Organizational Internal Man In The Middle Scenario
Question. I'm a software developer. I design and write secured systems for my customer. My customer recently downward directed that all traffic to/from my server be routed through a new appliance. I ...
1
vote
1answer
605 views
MITM defense in Diffie-Hellman protocol
Let's consider that Alice and Bob both know a shared secret $secret$ and don't know each other DH public keys. They want to authenticate each other and their keys using only $secret$. Let's also ...