Tag Info

New answers tagged

2

I don't mean to be blunt, but as you're inventing your own authentication algorithm, you'll almost certainly mess it up and it will be subject to many types of attacks. I strongly suggest you study the available research papers and known cryptographic authentication algorithms before you create your own so that you know what mistakes to not make. Start with ...


1

You need to take in consideration the allowable time window (to compensate for Clock drift). If you allow Date's with a time window of plus/minus 10 minutes (total: 20 minutes) you need to use nonces that are unique on the whole time window, and you also need to store spent nonces from that time period. To avoid a race situation where a nonce is being ...


1

Yes, hashes can be used in conjunction with a shared key to authenticate a message (this kind of Hash-based Message Authentication Code is the HMAC often referred to in cryptographic protocols). Some details are here. This also provides message authentication (in your scheme, Mallory could modify T2 and Bob wouldn't know; that can't happen so easily with ...



Top 50 recent answers are included