Questions tagged [authentication]
The authentication tag has no usage guidance.
17
questions
0
votes
0
answers
16
views
Besides proof of work, is there any way to prove that a specific application was run given ONLY the data returned
I was thinking what would be involved to create a peer-to-peer account system that would not require any central authority to manage. This system would be based on setting up channels for ...
- 101
0
votes
0
answers
101
views
Diffie-Hellman with offline attack
There is a protocol that aims to transfer a password securely between the user and the server. The protocol is based on the Diffie-Hellman method.
In the protocol, p is a prime number, g is a ...
- 1
0
votes
1
answer
45
views
What is a Black Box attack against Machine Learning algorithms?
And is there an attack strategy that you can use to approximate the architecture of a machine learning system with the knowledge of class labels and some data points?
- 3
1
vote
0
answers
86
views
Non-Interactive Zero Knowledge Proofs: zk-snarks and zk-stark
I read up on an abstract example of ZKPs (the cave and the door), but I'm trying to understand NIZKs (specifically zk-snarks and zk-stark). All the examples I can find online seem to have some ...
- 113
1
vote
2
answers
104
views
Do ‘unspoofable’ email protocols exist?
Been getting a lot more spam lately and this question came to mind.
We already use SSL certificates to authenticate websites, can we do something similar for email?
If so, why do I still receive ...
- 13
0
votes
2
answers
27
views
How does storing encrypted password provide secure authentication?
It's universally accepted that storing an unencrypted password for automated authentication is a very bad idea, for the saved password can be used by malware, etc.
There is a number of systems that ...
- 560
2
votes
2
answers
170
views
Password authentication over an insecure connection
I was thinking a way to send password to server secure way without using secure connection,I found one solution.I want to find flaw in this.(Note: I am begginer,dont judge me, I know little about ...
- 25
1
vote
0
answers
203
views
why does message authentication using 2-universal family of hash functions require a prime number of possible hash values?
I am self-studying the book Intro to Algorithms 3ed by CLRS. One of the problems seems to give a piece of information that is not necessary, Problem 11-4 in the book states
Let H be class of hash ...
- 818
1
vote
0
answers
88
views
Can voice biometrics, (specifically voice recognition) application be used at windows logon screen? [closed]
I'm planning to develop an application in C# programming language for user authentication.
Target platform = Newer Windows versions such as Windows 8/10.
Your kind answers will be much appreciated. ...
- 21
4
votes
1
answer
85
views
How would P2P Kriegspiel be designed?
Kriegspiel chess is a variant of chess in which each player is not aware of where the opponent's pieces are. In a human match, a trusted intermediary relays piece losses, legality of moves etc. This ...
- 43
7
votes
2
answers
185
views
Zero-knowledge proof: Abstract example
So I was reading about ZKP on wikipedia, the abstract example in summary goes like this:
Peggy wants to prove to Victor that she knows the secret to a door inside a cave that connect A and B ...
- 71
2
votes
1
answer
96
views
User recognition through keystroke pattern
Hello thank you for taking time looking at this question. Is it possible to determine the keystroke patterns for a certain user?
My idea is that, when the user enters their username & password it ...
2
votes
1
answer
370
views
Can Eve impersonate Alice or Bob by using a replay attack?
For my computer science study, I have to design a replay attack (if possible) for the following authentication protocols.
I use the standard security protocol notation.
In these protocols, $A$ is ...
- 121
0
votes
1
answer
2k
views
Two Step Verification. 4 digits vs 6 digits
From a security level standpoint (such as Server, DataBase, Token Code, Authorization, Authentication, etc.) in regarding the Two Step Verification, usually Apple send a total of 4 digits security ...
- 111
9
votes
1
answer
637
views
Is WPA2 with pre-shared key an example of a zero-knowledge proof?
When setting up an access point and selecting WPA2, one must manually enter a pre-shared key (a password), PSK, into both the AP and the STA.
Both parties, AP and STA, must authenticate each other. ...
Maiken Holm
4
votes
1
answer
124
views
Break an authentication protocol based on a pre-shared symmetric key, with message numbers
Consider the following protocol, meant to authenticate $A$ (Alice) to $B$ (Bob) and vice versa.
$$ \begin{align*}
A \to B: &\quad \text{“I'm Alice”}, R_A \\
B \to A: &\quad E(\langle 1, R_A\...
13
votes
1
answer
400
views
Break an authentication protocol based on a pre-shared symmetric key
Consider the following protocol, meant to authenticate $A$ (Alice) to $B$ (Bob) and vice versa.
$$ \begin{align*}
A \to B: &\quad \text{“I'm Alice”}, R_A \\
B \to A: &\quad E(R_A, K) \...