Skip to main content

Questions tagged [replay-attack]

Attacks that are based on recording an encrypted and/or signed communication and replaying it at a later time.

Filter by
Sorted by
Tagged with
1 vote
0 answers
17 views

Necessary collision resistance of a nonce for replay protection

In request/response communication, replay protection can be implemented by exchanging a random number. For example, in its secure request, a client sends a random UID (nonce) to the server in addition ...
SBond's user avatar
  • 143
0 votes
0 answers
31 views

Is it possible to design purely staless replay attack free client-server relationship?

The use case is fairly simple: Client sends request1 to Server endpoint1. Server endpoint1 responses with response1. Then Client sends request2 to Server endpoint2. Server endpoint2 responses with ...
Azii's user avatar
  • 87
1 vote
0 answers
47 views

Is a sequence number as a key ID always problematic (replay attack)?

I would like to know whether a sequence number as a key ID is always problematic with regard to replay attacks. I am aware that there are several interesting aspects (predictability, overflows, ...
SBond's user avatar
  • 143
0 votes
0 answers
143 views

Simple and efficient auth scheme to prevent replay attacks

This is a machine-to-machine authentication proposal with the following requirements: Avoid replay attacks. Leaked or intercepted auth tokens cannot be reused at all. Impersonation resistant. The ...
actonchart's user avatar
0 votes
1 answer
441 views

AES-GCM vulnerabilities

Does AES-GCM take replay attacks into consideration? If an attacker intercepts the AES-GCM secured message and gains access to the initialization vector (IV), can they inject falsely fabricated data (...
udit's user avatar
  • 1
2 votes
0 answers
133 views

I understand the authentication procedure, but are replay attacks possible in these scenarios?

Would a replay attack be possible in any of these scenarios? My understanding is that in only images 3 & 4 it is possible.
timberus's user avatar
3 votes
0 answers
143 views

Do random numbers avoid replay attacks in Chaum's mixes?

So I've been visiting a security lecture at my university and they introduced the concept of Chaum's mixes to us and how replay attacks can compromise the anonymity granted by a mixnet. It is ...
prettybonsai's user avatar
0 votes
0 answers
760 views

How to use nonces to prevent replay attacks while enabling concurrent requests?

Nonces are often used to prevent replay attacks in networks. Because they are a one time use, any attacker replaying a request would be stopped because the nonce would be invalid. However using nonces ...
CMCDragonkai's user avatar
1 vote
1 answer
129 views

Can a nonce be completely random on (simplified) Needham–Schroeder Protocol?

From what I've read so far, nonces are random one-time values, which are sent in plaintext in addition to the ciphertext to verify identity of sender/receiver. Theoretically, if the nonce is random, ...
suigetsuh17's user avatar
1 vote
1 answer
171 views

How to properly guarantee authentication, confidentiality, and replay-resistance for multiple messages using a pre-shared key?

I have a device that needs to communicate with another host and exchange fixed-length messages. All traffic should be encrypted and authenticated, and it should be resistant to replay attacks. ...
Steven's user avatar
  • 131
2 votes
2 answers
2k views

Is it OK to use r-value from ECDSA signature (r, s) to prevent replay attack?

ECDSA signatures are malleable. Given a valid signature (r, s), one can create a second valid signature by negating the s value. I have searched workaround for this issue, and https://yondon.blog/2019/...
Plum Lee's user avatar
4 votes
1 answer
115 views

Replay attacks and LWE

Just a small question. Since in LWE the error is rather small, is there a problem with replay attacks? What I mean is that if we use the typical scheme of Regev [1] to encrypt a vector m, but this ...
absinthe_minded's user avatar
1 vote
1 answer
94 views

Could PAKE via smooth projective hash function protect agaist replay attacks?

I came across some password-based authenticated key exchange (PAKE) protocols that are based on the smooth projective hash function (SPHF) in the standard model. And I checked some related works, and ...
Z.P.'s user avatar
  • 353
1 vote
1 answer
84 views

If two hosts are using a transparent IP level authentication and encryption, is their communication subject to both MITM or replay attacks?

Encryption process for any outgoing packet to the specified "remote IP": -original payload P is encrypted (the bytes after the IP header) using RC4 with the preestablished key ...
Koolz's user avatar
  • 13
2 votes
1 answer
2k views

Replay attack resistant MAC?

I came up with a threat model where: Alice and Bob agree on a shared key $K$ Alice sends a plain text $M$ and its $\operatorname{MAC}$ tag, $T = \operatorname{MAC}(K,M)$ to Bob over an untrusted ...
shpark's user avatar
  • 123
0 votes
1 answer
554 views

What's the utility of the last two messages of Needham Schroeder Symmetric key protocol

The protocol works like this But I can't understand what's the utility of message 4 and 5, what do they protect from? They do not protect from replay attack if Ks gets compromised because B won't be ...
VariabileAleatoria's user avatar
0 votes
1 answer
185 views

Random oracle : Replay

What I understand about the random oracle game: The adversary can query the oracle polynomial many times with the same (secret but unknown) key. From the output returned by the oracle, the ...
hola's user avatar
  • 603
2 votes
0 answers
65 views

No freshness protection for single messages, but for the overall protocol

I am given a key exchange protocol between a component $C$ and a key master $K$. During the overall execution 4 messages are transferred between $C$ and $K$. DH keypairs are always chosen randomly for ...
user avatar
1 vote
1 answer
778 views

AES-CCM replay attack and nonce

My wireless sensor nodes and gateway application use timestamps as nonces and guarantee that different messages use different nonces so that security is not compromised. If the gateway does not ...
hcglitte's user avatar
0 votes
1 answer
235 views

Entity authentication protocol by encryption

I'm not a cryptography expert, so excuse me if the question seems very trivial. I need to know if this protocol is secure against a MiTM attacks and ensure a safe entity authentication method. We ...
thinker.92's user avatar
3 votes
1 answer
2k views

Timestamps, sequence numbers, and nonces for replay attack

What are the best practices or standardized methods to prevent replay attacks in a simple server client setup (preferably where the server is stateless) ? When should timestamps, sequence numbers, ...
NuminousName's user avatar
1 vote
2 answers
181 views

What is the connection between "replay attack" to CCA security?

Often in analyzing systems, the emulation of Replay Attack becomes important. Are systems that protected against CCA attacks also immune against replay attack, or it is a different criterion? Thanks
Evgeni Vaknin's user avatar
3 votes
1 answer
2k views

Getting a Keeloq manufacturer key

I have seen a lot of articles and research papers about breaking the Keeloq algorithm. My understanding is that the hardest part is getting the 64 bit manufacturer key. Some methods use crypto-...
Tareq Sulaiman's user avatar
1 vote
1 answer
480 views

How to detect if a protocol is vulnerable to a replay attack trying to impersonate?

I'm having a hard to finding out how I can detect if protocols are vulnerable to impersonation of Alice/Bob by Eves' replay attack! I have an example here: $$\begin{array}{lclcl} \mathsf A & \to &...
Anna Jeanine's user avatar
1 vote
1 answer
3k views

AES-GCM Encryption and Replay Attacks

I have a doubt about AES-GCM on how can I avoid replay attacks. We have 2 users (Alice and Bob). After that the entities negotiate crypto parameters and generate a symmetric key, they'll exchange ...
CipherX's user avatar
  • 381
2 votes
2 answers
2k views

Can One-time-password be used as nonce in HMAC to prevent replay?

Note: In the following post OTP = one-time-password I am working on a project wherein I need send one way messages between two end points. There is already a shared secret via a side channel between ...
Jake's user avatar
  • 163
1 vote
2 answers
856 views

How to stop an attacker from repeating the same ciphertext?

I have this situation where a PC is connected, via RS-232, to a certain hardware module that controls industial machinery. The hardware is supposed to receive commands to turn on or off these ...
Chi's user avatar
  • 115
0 votes
1 answer
491 views

About replay attack definition

I have read . Replay attack is a kind of attack in that the attacker eavesdrops valid message and sends that message repeatedly to make requestor in busy mode. It can be prevented by adding timestamp ...
myat's user avatar
  • 353
8 votes
1 answer
486 views

Is a key ratchet effective against replay attacks?

In the answer to this question, a message counter is used to protect against replay attacks. Could a key ratchet be used instead? The basic idea is that with every message sent, the symmetric ...
awelkie's user avatar
  • 203
4 votes
1 answer
756 views

Why is a nonce used to initialize Hash_DRBG, HMAC_DRBG, and CTR_DRBG?

In NIST 800-90A, Hash_DRBG, HMAC_DRBG and CTR_DRBG (with derivation function) all require a nonce for instantiation. I understand the usual application for a nonce to prevent replay attacks. However,...
Natto_Jihen's user avatar
9 votes
1 answer
3k views

Replay attack prevention in connectionless UDP encrypted communication

What are the options for replay attack prevention when two parties exchange UDP messages. No connection or session is estabilished. Communicating parties have pre shared key that is used for ...
PanJanek's user avatar
  • 193
2 votes
1 answer
599 views

Very simple and minimal replay prevention scheme

Suppose a desktop client communicates with an internet server program via HTTP requests. I have a symmetric secret key shared between them used for encrypting/securing communication between them. I ...
user40602's user avatar
  • 517
10 votes
1 answer
5k views

Can I use a HMAC for Replay Attack protection?

I am considering a system where a small device accepts messages/commands from another device over a wireless channel. I am worried about replay attacks. The messages will be encrypted. What are ...
err's user avatar
  • 195
3 votes
3 answers
5k views

Prevent replay attack without storage

I am designing a set of low-power sensing motes. Each mote will communicate to a central base over RF. I want the mote to be able to authenticate itself with the base, and send its data without being ...
kd5pev's user avatar
  • 33
3 votes
1 answer
240 views

Avoiding replay attack on certified announcements

Suppose two agents A and B share a common secret and A makes a regular unique 16-byte ...
Kar's user avatar
  • 473
1 vote
1 answer
747 views

On countermeasures for replay attacks. Does this one require plaint text password storage?

I was reading this wiki section on the countermeasures against replay attacks and it basically suggests that: If Bob wants to confirm Alice's identity he can send a one-time token (I think it should ...
Dziugas's user avatar
  • 113
1 vote
1 answer
776 views

Replay Attack in Stream Cipher

Stream ciphers are vulnerable to replay attack if the same key k is used. If E() is a stream cipher and an attacker intercepts the message m that's being transmitted at time t, how can the attacker ...
George's user avatar
  • 113
1 vote
2 answers
1k views

RSA signing security

I'm curious about the security of RSA signing with the same public private key pair when the same message is sent multiple times. It's my understanding that once you generate the hash of the message ...
Stephen Eckels's user avatar
0 votes
1 answer
1k views

What happens when cbc+hmac get a replay attack?

If it use AES-CBC and HMAC-SHA256 for message send online, and someone try to replay attack on this message. Can the attack be successful? what will be happen when attacking?
joewruou's user avatar
2 votes
0 answers
197 views

Does the initial exchange of random tokens in SKID3 authentication assure against replay attacks?

As the question suggests, I wanted to get a sanity-check on this issue... is it the case that the use of a random token exchange during SKID3 authentication itself constitute a prevention of a replay ...
Daniel's user avatar
  • 21
28 votes
3 answers
50k views

How does a rolling code work?

I have general questions regarding rolling codes. Basically there is a sender and a receiver. Both have a sequence generator. The receiver checks if the received sequence matches the newly generated. ...
matcauthon's user avatar
1 vote
1 answer
763 views

Which of the following protocols is susceptible to replay attack?

I have a hard time understandin which of the following protocols is susceptible to replay attack: A -----> B username, password A -----> B username, h(timestamp,password) A -----> B username ...
Ajit's user avatar
  • 243
3 votes
2 answers
586 views

Please punch holes in this authentication scheme

Folks, I am undertaking a crypto course in Uni. Our professor asked us to try and design some authentication schemes which are resistant to active attacks. This was just a in class exercise to get us ...
sukhvir's user avatar
  • 255
3 votes
1 answer
2k views

Advantages/disadvantages of different message numbering schemes

For a stream of packets, where each packet is individually encrypted with a block cipher, it's desirable to have each encrypted packet only valid for that position in the stream. A message number ...
Nuoji's user avatar
  • 803
2 votes
0 answers
145 views

Prevent/minimize replay attacks in public message board

Assume we have a public message board where anyone can send a message to. If plain messages are used, anyone can impersonate anyone. The goal is to disallow impersonations. We can use public key ...
Mansour's user avatar
  • 121
5 votes
1 answer
928 views

Why doesn't this replay attack work on ECDSA?

I've just started working with elliptic curves and ECSDA in particular, so my understanding of the underlying math isn't great. The thing I'm currently stuck on is trying to understand why replay ...
Kevin Howe's user avatar
2 votes
0 answers
135 views

Computer appliance protocol [closed]

I build the computer appliance system that consist of software server and multiple controllers. The system I want to build must be pluggable in the sense that when I connect a controller C to the ...
tsionyx's user avatar
  • 151
5 votes
0 answers
565 views

How can Alice and Bob safeguard their message exchanges against replay attacks?

Assume Alice and Bob communicate over an insecure channel using one-time perfectly-secret encryption together with one-time secure message authentication code. Say Eve has the ability to eavesdrop and ...
Nick's user avatar
  • 139
6 votes
2 answers
8k views

Replay attack in ECB mode

How do replay attacks work in ECB mode? I found this in Wikipedia: "ECB mode can also make protocols without integrity protection even more susceptible to replay attacks, since each block gets ...
goldroger's user avatar
  • 1,737
2 votes
1 answer
2k views

Replay attack prevention under strict conditions

Say I have a request-response protocol and the task to make it immune to replay attacks. The requirements are as follows: The defense mechanism cannot rely on the clocks of the parties. The defense ...
Chris Smith's user avatar
  • 1,202