Suppose there's an entity which produces files. User A has one of those files and decides to send it to user B.

How can user B validate the authenticity of the file without communicating with the producer? Is it even possible?

  • 3
    $\begingroup$ Hi, take a look at digital signature and electronic signature. $\endgroup$ – knok16 Jul 23 '15 at 10:25
  • $\begingroup$ Do you allow for the producer to take appropriate measures so that authenticity can be validated by anyone without further communication with him, independently of the number of people who may want to check authenticity? BTW, what did you look, where did you search? What didn't you understand from available information? $\endgroup$ – babou Jul 23 '15 at 11:44
  • $\begingroup$ Didn't we close a very similar question not too long ago? $\endgroup$ – Raphael Jul 23 '15 at 13:41
  • 1
    $\begingroup$ What research have you done? What specifically can be assumed? Can you assume the existence of a PKI? assume that B knows A's public key in advance? Can B communicate with a trusted third party (Trent) who has previously communicated with A? (If so, then use Kerberos-like solutions, or have Trent be a certificate authority.) Please read the background material provided to you, then edit the question to provide this information. Until then, the answer will only be "it depends what your specific constraints are". $\endgroup$ – D.W. Jul 23 '15 at 21:59

It depends on what you call "without communicating". How does B know that A really exists ? Either B speaks to A, or C tells to B that A exists, and B trusts C.

So, if a trusted C exists, C may provide to B a key to authenticate A. If a trusted C doesn't exist, B can't know if A exist, and authenticate its messages makes no sense.

| cite | improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.