Skip to main content

Questions tagged [authentication]

Authentication is successfully validating that an entity you are communicating with is actually who they claim to be. The entity typically demonstrates who they are by showing they possess a secret that only they could know.

Filter by
Sorted by
Tagged with
0 votes
0 answers
71 views

Simple and efficient auth scheme to prevent replay attacks

This is a machine-to-machine authentication proposal with the following requirements: Avoid replay attacks. Leaked or intercepted auth tokens cannot be reused at all. Impersonation resistant. The ...
actonchart's user avatar
1 vote
0 answers
56 views

Test data for AES based F8 encryption, F9 authentication

I am working on implementation of F8 confidentiality scheme for encryption/decryption and F9 based authentication scheme. These are specified by 3GPP standard, but the implementation in standard is ...
Ashish's user avatar
  • 11
0 votes
2 answers
55 views

Not able to find any references for opening of BBS+ signature

I've reviewed the BBS signature scheme and the constant size k-TAA, known as BBS+. However, I couldn't find any specific mechanism for opening in BBS+. In the constant size k-TAA, if a user attempts ...
Reisha Ali's user avatar
1 vote
0 answers
44 views

Unable to find any references for opening of BBS+ signature [duplicate]

I've reviewed the BBS signature scheme and the constant size k-TAA, known as BBS+. However, I couldn't find any specific mechanism for opening in BBS+. In the constant size k-TAA, if a user attempts ...
Reisha Ali's user avatar
1 vote
1 answer
50 views

Sankey Diagram for Wireless sensor network, accurate?

I've designed a Sankey diagram to depict security in Wireless Body Area Networks for my thesis. It's the first time I see such a diagram used for security. I need your help. Could you check its ...
Moh Kashani's user avatar
0 votes
1 answer
45 views

Authenticate with roles without a server

Introduction part I'm writing an application that requires authentication to be used, specifically the database and config file can only be read an authenticated user. However this authentication is ...
Nifil's user avatar
  • 101
1 vote
0 answers
66 views

I do not understand the result of 'proposition 2' of "MDx-MAC and building fast MACs from hash functions"

I saw the difference between the proof and the statement of "proposition 2" in the paper "MDx-MAC and building fast MACs from hash functions" by Bart Preneel & Paul C. van ...
hellobc's user avatar
  • 31
0 votes
0 answers
45 views

Peer-to-Peer message verification

I have a chat application that uses AES and RSA encryption to establish a peer-to-peer connection between two clients. Although the messages pass through a server, they are encrypted using a single ...
Higgs's user avatar
  • 1
1 vote
1 answer
57 views

SKI-based authentication

The idea is to authenticate the TLS peer by verification of the SHA-1 hash of his public key (aka SKI). So Alice meets Bob in person and they exchange SKIs of their public keys. When later they ...
Alex's user avatar
  • 11
2 votes
0 answers
79 views

Can you sign messages using Wireguard's keys?

I was wondering if I could use Wireguard's keys to sign messages, and prove authenticity of a node that runs Wireguard with its known public key from other nodes, so that I can use it in a system to ...
Alex's user avatar
  • 121
0 votes
0 answers
38 views

High throughput authentication on ARMv8

I am working on a project where I need to authenticate data in parallel with computations on that data. The idea is to stream data from memory onto the chip only once; while the data is on-chip, we do ...
Nate's user avatar
  • 1
1 vote
0 answers
93 views

Does 'digitization' of tickets always need private data? Or is it just data gathering? Any simple method without?

Many companies argue their gathering of private data with 'digitization' but I guess their real intention is most likely just gathering data. However I didn't came up with a simple idea without it. ...
UncleBob's user avatar
0 votes
0 answers
77 views

Possible MAC design

The problem Let the following be a family of PRF functions with key length $2\lambda$ $$\mathbb{F} = \{F_k:\{0,1\}^n\rightarrow\{0,1\}^n\}_{k\in\{0,1\}^{2\lambda}}$$ Assuming one way functions exists, ...
zBION1C's user avatar
0 votes
0 answers
15 views

Example of an identification protocol that 1. With a private key 2. Resistant to attack with a fake ATM 3. Not resistant to eavesdropping attacks?

Can anyone please provide an example of an identification protocol that With a private key Resistant to attack with a fake ATM Not resistant to eavesdropping attacks ?
Антон Пичушкин's user avatar
0 votes
2 answers
217 views

Is there a quantum-safe password-based authentication method that doesn't require giving the server too much data

I've been reading up on different authentication protocols recently while I implemented the sign-in functionality for my website. Many of the suggested methods password-based authentication seem to ...
n-l-i's user avatar
  • 705
0 votes
0 answers
58 views

Is it secure to encrypt an authentication token using another possibly hashed authentication token?

I'm working on a web app ("main") which acts as a central access hub for several other web apps ("children"). The users are supposed to authenticate in the main app, resulting in a ...
Alex F's user avatar
  • 101
0 votes
1 answer
51 views

Question on SRP implementation

I'm comparing the Wikipedia description of SRP to the BouncyCastle implementation and some differences and I want to be sure the BouncyCastle implementation is suitable for my purpose. Wikipedia ...
Morty's user avatar
  • 599
0 votes
1 answer
582 views

Why does symmetric encryption not provide authentication and integrity? Is it only this type of encryption or cryptology in general have this issue?

Studying for Cryptology and came across a presentation regarding on "Integrity vs Authenticity" where the discussion briefly mentions how Encryption "does not provide integrity or ...
omar7439's user avatar
1 vote
1 answer
211 views

Cryptography to tackle deepfake, proving the photo is original

Deepfake technology has become very difficult to tackle due to sophisticated machine learning algorithms. Now, even when a journalist or bystander provides photo or video evidence, the culprit denies ...
Amiya Behera's user avatar
0 votes
0 answers
61 views

Client authentication: only talk to trusted clients?

As a preamble,I acknowledge that it is fundamentally impossible to authenticate that a networked client is who they claim to be. The question is, given that it's impossible, what should I do anyway? ...
ddyer's user avatar
  • 509
0 votes
1 answer
100 views

Shamir Secret Sharing for API Authentication

I want to implement authentication for an API and thought about using Shamir Secret Sharing to do so. My plan is to generate 1 Master Key which is stored in the Database, we then generate about 1000 ...
Michael's user avatar
1 vote
1 answer
146 views

Regarding the Digital Signature Algorithm During Client Authentication in TLS 1.2

In TLS 1.2, when client authentication is carried out, digital signatures are utilized. However, at what point is the specific signature algorithm communicated to the server? It seems to me that the ...
dusk's user avatar
  • 11
0 votes
1 answer
75 views

Safe implicit value validation: $H_k(k \oplus m) \sim H_k(m)$?

$H_k$ is a cryptographic hash function that's keyed using a section of key material $k$ (for whatever definition of "keyed" that's appropriate for the given hash function $H$). Are the ...
aiootp's user avatar
  • 814
0 votes
0 answers
432 views

Authenticate the users (in telegram bot) without storing user ids

Might be a bit weird but interesting scenario: I have a telegram bot and I need to authenticate users but I don't want to store any user data(at least openly). So here's a breakdown: I need to prove ...
Jordan Walker's user avatar
0 votes
1 answer
81 views

Reason for two random numbers in DSA?

Why is the signature in DSA the way it is? I am referring to $r$ and $k$ in the Signing-Algorithm depicted below. Is it really necessary to have both, $r$ and $s$, or would it still be secure if only ...
cryptoQueen's user avatar
0 votes
0 answers
22 views

What is the use of Secure Protocol Data Management (SPDM)?

By going through the document: https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_1.2.0.pdf I could get that this spec will be used to verify the identify and attestation of h/w &...
Abhishek Maurya's user avatar
0 votes
0 answers
27 views

How two secure elements can safely authenticate each other without a third party?

Assume there are multiple secure elements, and also multiple man-in-the-middle or malwares. How can any two secure elements authenticate each other without a third party and hard coding something in ...
MJay's user avatar
  • 103
1 vote
0 answers
26 views

Tag Management Problem in Authenticated Disk Encryption

1) For authenticated disk encryption, there are extra data such as IV or tag that need to be stored for all the alternative mods that are placed in Table 1. For these data, it will be necessary to use ...
NB_1907's user avatar
  • 640
1 vote
1 answer
125 views

Understanding the Communication Protocol of Apple HomeKey

I am currently analyzing the communication protocol of HomeKey. Here are two traces between the lock (reader) and the device (card). First set: ...
DANG Fan's user avatar
  • 111
0 votes
1 answer
133 views

who creates the passkey (and how many will be created)? [closed]

Passkey is nice. The math is nice. The tech is nice. https://security.googleblog.com/2023/05/so-long-passwords-thanks-for-all-phish.html What I still dont see after sooo many hours: what software ...
r j's user avatar
  • 101
0 votes
1 answer
240 views

How many bits should change in a password salt?

In https://crypto.stackexchange.com/a/27828/79037, it's indicated that one can "save space" by using something globally-unique, like an application-wide "pepper", together with ...
ManRow's user avatar
  • 343
2 votes
1 answer
183 views

Parameters needed for Chaum-Pedersen Protocol

I've came across a Stackexchange question about the Chaum-Pedersen Protocol which is based on the generalised schnorr protocol. As I understand it, it uses discrete logs and cyclic groups of prime ...
Jason L. B.'s user avatar
1 vote
1 answer
71 views

Is it undesirable for authentication to require decrypting a ciphertext?

A couple years ago, I devised some primitives for block ciphers and block cipher modes of operation; I was partly inspired by CAESAR. What these designs all had in common is that the encryption/...
Melab's user avatar
  • 3,655
1 vote
0 answers
254 views

Man-in-the-Middle attack on challenge-response authentication protocols

Say $B$ is a server and $A$ is a client who wants to login to the server, by proving herself to $B$. In challenge-response authentication protocols, $B$ sends challenge to $A$ and $A$ replies with ...
Lee Seungwoo's user avatar
8 votes
2 answers
296 views

Providing tokens for anonymous survey

I want to conduct an anonymous Internet survey (e.g. “What’s your favorite fruit?” with a multiple choice answer) among a given set of people. Double answers by the same participant are not allowed. ...
Alfe's user avatar
  • 219
2 votes
1 answer
193 views

Authenticated Key Exchange of Kyber.AKE

I have some questions about the setting of the one-way authenticated key exchange of Kyber.AKE as defined in section 5 of the paper. How does $P_2$ authenticate itself to $P_1$? It is not obvious to ...
P_Gate's user avatar
  • 413
6 votes
1 answer
820 views

Does the order of validations and MAC with clear text matter?

I have a request in which I get a series of data in clear (nothing encrypted) and a MAC / authentication tag. The question is whether the MAC should be validated first or if the fields are filled in ...
Felipe Rodriguez Fonte's user avatar
0 votes
1 answer
151 views

Securely sign URL using a 50 characters long key

I need to sign a URL to make sure the URL cannot be tampered or forged. The client has limited capabilities and I cannot use a key which is more than 50 characters long. Generally I use RSA to ...
Norcino's user avatar
  • 119
1 vote
0 answers
55 views

Secure two-factor authentication app for iOS

I'm working on an open source iOS-native (both UX- and implementation-wise) 2FA app. Two of primary goals for the project are ensuring security and simple backups. Addressing these two areas is the ...
Greg Navis's user avatar
2 votes
1 answer
121 views

Does having more than one HMAC provide more information to the attacker?

Suppose $N$ many messages has been sent from $A$ to $B$ in this format: $\operatorname{HMAC}(K, C(i)) \mathbin\| C(i)$. Where $C(i)$ is some cipher-text encrypted with some secure algorithm using ...
CuriousCrypto's user avatar
1 vote
1 answer
54 views

How to authenticate multiple IOT devices having unique certificates (ECDSA)?

I'm relatively new to the field of security. I'm working on an IoT system with WiFi-connected nodes (Bio-sensing devices) communicating with a server for centralized monitoring. I need to authenticate ...
jh_sh's user avatar
  • 13
1 vote
1 answer
1k views

How do non-"resident" keys work in WebAuthn?

If we look at the WebAuthn specification, then, during the "registration" ceremony, the authenticator generates a new key-pair and a unique user-id. Then the public-key and the unique user-...
Uwe Kohl's user avatar
4 votes
1 answer
1k views

Why does FIDO2/WebAuthn really need to generate a separate key-pair for each site?

I understand that FIDO2/WebAuthn generates a separate key-pair for each web-site (domain), and only allows a specific key-pair to be used for authentication on the same web-site (domain) who ...
Uwe Kohl's user avatar
3 votes
1 answer
262 views

Security of using key size larger than the message digest size in HMAC, with one time pads

I would like to know the security of using key size that is larger than the message digest (output) of a HMAC in one time pad encryption. One time pads for the message and the key of HMAC are ...
CuriousCrypto's user avatar
2 votes
0 answers
124 views

I understand the authentication procedure, but are replay attacks possible in these scenarios?

Would a replay attack be possible in any of these scenarios? My understanding is that in only images 3 & 4 it is possible.
timberus's user avatar
1 vote
1 answer
102 views

Disk encryption and advanced format

As far as I understand, the biggest problem of requesting authentication in disk encryption is that the plaintext and ciphertext are not having the same size -because of tag-. The XTS mode is already ...
NB_1907's user avatar
  • 640
2 votes
1 answer
92 views

Is it safe to use ECDH shared secret as a simple authentication cookie?

The protocol would look like this: User creates account and provides username, static public key User logs in by sending username Server responds by sending an ephemeral public key For the duration ...
pinhead's user avatar
  • 245
5 votes
1 answer
78 views

UF-naCMA not implies UF-CMA

I am trying to show that UF-naCMA doesn't imply UF-CMA. UF-naCMA is actually defined as UF-CMA but the adversary should send $q \in poly$ messages $m_i$ chosen non-adaptively (i.e. all at the same ...
Cristie's user avatar
  • 93
3 votes
0 answers
391 views

Why is ZKP authentication not used in practice?

I have been reading about Zero Knowledge Proof (ZKP) protocols for a while now. Among the applications I have seen the most is authentication (https://ethereum.org/en/zero-knowledge-proofs/#...
Ricardo Martínez's user avatar
3 votes
1 answer
463 views

Data Origin Authentication vs Non Repudiation?

I'm looking into how authenticated encryption primitives work and was wondering if non-repudiation is provided with these. Investigating further into them led to the answer being that data origin ...
Thanos's user avatar
  • 193

1
2 3 4 5
15