Authentication Protocols

Q.1) Explain briefly why an entity authentication protocol suitable for use on the Internet typically uses public key cryptography and cipher-suite negotiation.

Q.2) State why the messages used for cipher-suite negotiation are not cryptographically protected.

Q.3) Describe in general terms a unilateral challenge-response authentication protocol that

(i) uses public key encryption to confirm the identity of the claimant, and

(ii) enables the protocol participants to detect whether the messages used for cipher-suite negotiation were modified.