![]() |
|
|
|
|
|||||||
| Security Anything involving computer security goes here. |
|
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| sed xml challenge | katrvu | Shell Programming and Scripting | 2 | 04-10-2008 04:50 PM |
| sed replacement, challenge one!!!! | summer_cherry | Shell Programming and Scripting | 4 | 04-07-2008 08:14 AM |
| AWK Challenge | netmedic | Shell Programming and Scripting | 9 | 02-18-2008 12:08 AM |
| Wikia Search issues community-based challenge to Google and Yahoo | iBot | UNIX and Linux RSS News | 0 | 01-08-2008 08:50 AM |
| Email Authentication Gateway Software? (Challenge/Response) | Neo | UNIX for Advanced & Expert Users | 2 | 12-31-2004 10:13 AM |
|
|
Submit Tools | LinkBack | Thread Tools | Display Modes |
|
|||
|
Password-based challenge-response
Hello all,
I have this question, hope to get some guidance... Fora simple password-based challenge-response protocol between a user A and a server S, where Pa is A's password, n is a random nonce generated by the server, and h is a known cryptographic hash function. 1. S -> A: E(Pa,n) 2. A -> S: E(Pa,h(n)) How to show that this protocol is vulnerable to an off-line password guessing attack? and how would the attack take place ?. Under which circumstances would the vulnerability not be a problem? thanks for reading... cheers. |
| Forum Sponsor | ||
|
|
| Thread Tools | |
| Display Modes | |
|
|