Skip to main content

Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
1 answer

(Zero-knowledge?) Proof of Connection

I have a conundrum to solve but am not knowledgeable enough about cryptography to know whether it's possible to do, and if so, what method to use. I am a Provider and my task is to prove to some ...
Yellow's user avatar
  • 99
2 votes
2 answers

What reason could a system have to limit the length of a password to 8 chars?

From time to time I see systems that don't allow passwords longer than 8 chars: isn't that a security risk? What am I missing, here, that might have lead to such decision?
Pierpaolo's user avatar
  • 123
13 votes
9 answers

Do passwords need a max length?

I understand that password storage generally uses hashing for security due to it being irreversible and that the stored hash is just compared to the hash of the password inputed by a user attempting ...
Ethan's user avatar
  • 231
0 votes
1 answer

What is a Black Box attack against Machine Learning algorithms?

And is there an attack strategy that you can use to approximate the architecture of a machine learning system with the knowledge of class labels and some data points?
thatGuy's user avatar
1 vote
0 answers

Non-Interactive Zero Knowledge Proofs: zk-snarks and zk-stark

I read up on an abstract example of ZKPs (the cave and the door), but I'm trying to understand NIZKs (specifically zk-snarks and zk-stark). All the examples I can find online seem to have some ...
user760900's user avatar
1 vote
2 answers

Do ‘unspoofable’ email protocols exist?

Been getting a lot more spam lately and this question came to mind. We already use SSL certificates to authenticate websites, can we do something similar for email? If so, why do I still receive ...
Michael Finn's user avatar
0 votes
2 answers

How does storing encrypted password provide secure authentication?

It's universally accepted that storing an unencrypted password for automated authentication is a very bad idea, for the saved password can be used by malware, etc. There is a number of systems that ...
Michael's user avatar
  • 580
2 votes
2 answers

Password authentication over an insecure connection

I was thinking a way to send password to server secure way without using secure connection,I found one solution.I want to find flaw in this.(Note: I am begginer,dont judge me, I know little about ...
Angry Tomato's user avatar
1 vote
0 answers

why does message authentication using 2-universal family of hash functions require a prime number of possible hash values?

I am self-studying the book Intro to Algorithms 3ed by CLRS. One of the problems seems to give a piece of information that is not necessary, Problem 11-4 in the book states Let H be class of hash ...
xdavidliu's user avatar
  • 858
1 vote
0 answers

Can voice biometrics, (specifically voice recognition) application be used at windows logon screen? [closed]

I'm planning to develop an application in C# programming language for user authentication. Target platform = Newer Windows versions such as Windows 8/10. Your kind answers will be much appreciated. ...
De J Ali's user avatar
4 votes
1 answer

How would P2P Kriegspiel be designed?

Kriegspiel chess is a variant of chess in which each player is not aware of where the opponent's pieces are. In a human match, a trusted intermediary relays piece losses, legality of moves etc. This ...
Rusty's user avatar
  • 43
7 votes
2 answers

Zero-knowledge proof: Abstract example

So I was reading about ZKP on wikipedia, the abstract example in summary goes like this: Peggy wants to prove to Victor that she knows the secret to a door inside a cave that connect A and B ...
Brandon's user avatar
  • 71
2 votes
1 answer

User recognition through keystroke pattern

Hello thank you for taking time looking at this question. Is it possible to determine the keystroke patterns for a certain user? My idea is that, when the user enters their username & password it ...
Hornet Thunder Whip's user avatar
2 votes
1 answer

Can Eve impersonate Alice or Bob by using a replay attack?

For my computer science study, I have to design a replay attack (if possible) for the following authentication protocols. I use the standard security protocol notation. In these protocols, $A$ is ...
Peter's user avatar
  • 121
0 votes
1 answer

Two Step Verification. 4 digits vs 6 digits

From a security level standpoint (such as Server, DataBase, Token Code, Authorization, Authentication, etc.) in regarding the Two Step Verification, usually Apple send a total of 4 digits security ...
user2823725's user avatar
9 votes
1 answer

Is WPA2 with pre-shared key an example of a zero-knowledge proof?

When setting up an access point and selecting WPA2, one must manually enter a pre-shared key (a password), PSK, into both the AP and the STA. Both parties, AP and STA, must authenticate each other. ...
user avatar
4 votes
1 answer

Break an authentication protocol based on a pre-shared symmetric key, with message numbers

Consider the following protocol, meant to authenticate $A$ (Alice) to $B$ (Bob) and vice versa. $$ \begin{align*} A \to B: &\quad \text{“I'm Alice”}, R_A \\ B \to A: &\quad E(\langle 1, R_A\...
Gilles 'SO- stop being evil''s user avatar
13 votes
1 answer

Break an authentication protocol based on a pre-shared symmetric key

Consider the following protocol, meant to authenticate $A$ (Alice) to $B$ (Bob) and vice versa. $$ \begin{align*} A \to B: &\quad \text{“I'm Alice”}, R_A \\ B \to A: &\quad E(R_A, K) \...
Gilles 'SO- stop being evil''s user avatar