208 reputation
16
bio website
location Sweden
age 41
visits member for 1 year, 7 months
seen Aug 16 '13 at 16:54

Jul
2
awarded  Curious
Dec
31
awarded  Yearling
Aug
16
comment Is it safe not to encrypt ping packets them?
Both would be in-protocol. The question is if one puts the ping at the packet dispatch/read layer, or if it should be done much higher up, on equal standing with normal (usually encrypted) messages.
Aug
16
comment Is it safe not to encrypt ping packets them?
I've clarified the usage. It's not a VPN connection but a custom protocol over a single connection.
Aug
16
revised Is it safe not to encrypt ping packets them?
Clarified usage.
Aug
16
asked Is it safe not to encrypt ping packets them?
Jun
30
accepted Is there a known vetted alternative to this key-exchange protocol?
Jun
29
accepted Prevent DOS against RSA authentication
Jun
23
comment Is there a known vetted alternative to this key-exchange protocol?
Actually I think you identified it. The first part of my protocol is very similar to TLS (with the client already holding the server cert, and the second part to Needham-Schroeder. But surely someone must have married those two before?
Jun
23
revised Is there a known vetted alternative to this key-exchange protocol?
Brief thread model
Jun
22
comment Recommended authenticated stream cipher for minimum overhead?
@D.W. I've tried my luck at asking for a protocol here: security.stackexchange.com/questions/37827/…. No protocol suggestion as of yet though.
Jun
22
comment Is there a known vetted alternative to this key-exchange protocol?
@CodesInChaos as for Kerberos, the similarity is in the encrypted session data M. Unlike Kerberos there is no central key store, instead I rely on an asymmetric key to securely request a "ticket". This in turn makes quite a different set of possible issues.
Jun
22
comment Is there a known vetted alternative to this key-exchange protocol?
@CodesInChaos I already tried a protocol with asymmetric key exchange. Granted, I used too large a key (which upped the cost by a magnitude), but even with that taken into a account I saw a large CPU impact so early that it's not an attractive solution. Also, with a separate login server, I can assure that resource-exhausting DoS/DDoS attack on the login won't affect games running on a different machine.
Jun
21
comment Is there a known vetted alternative to this key-exchange protocol?
@jcopenha A and B both do. Salts are constants and are only used to make sure keys for encryption and signing are different.
Jun
21
revised Is there a known vetted alternative to this key-exchange protocol?
Clarification on underlying protocol.
Jun
21
comment Is there a known vetted alternative to this key-exchange protocol?
@TildalWave the "previously suggested protocol" is exactly what I detail above. So basically this is asking if there's an alternative to my own hand-rolled protocol.
Jun
21
comment Is there a known vetted alternative to this key-exchange protocol?
@TildalWave basically the "session" M contains a nonce only known to the client and anyone who can decrypt M. Using this secret nonce together with public nonces from A and B, we can create new keys without having to retrieve a new session every time. Since public nonces from A and B are new for every connect, we can assure ourselves that our keys are different for each connect, even if the "session" used is the same.
Jun
21
revised Is there a known vetted alternative to this key-exchange protocol?
Change phrasing
Jun
21
asked Is there a known vetted alternative to this key-exchange protocol?
Jun
21
comment Any obvious flaws in this protocol?
@Michael thanks, that paper was interesting.