Cryptography & Network Security

User Authentication.

(a) Consider the following proposed authentication protocol between Alice and Bob based on symmetric encryption with a trusted third party (TTP) which is sup- posed to establish a shared session key K between the two users.

Show an attack against this protocol by demonstrating a scenario where Eve can impersonate Bob to Alice (i.e. Alice will think they are talking to Bob when they are in fact talking to Eve). Then provide a fix to the protocol to prevent this attack.

Alice TTP: Alice, Bob TTP + Alice : {K}KAT,{K}Ker Alice + Bob : {K}Ker Bob Alice : {Hello Alice! This is Bob}K