Question: It is extremely difficult, without public key cryptography, to havean authentication scheme which protects against both eavesdropping and server databasedisclosure. Consider the following authentication protocol
It is extremely difficult, without public key cryptography, to havean authentication scheme which protects against both eavesdropping and server databasedisclosure. Consider the following authentication protocol (based on Novell version 3 security). Alice knows a password. Bob, a server that will authenticate Alice, stores a hash of Alice's password. Alice types her password (say, fiddlesticks) to her workstation.The following exchange takes place.Is this an example of an authentication scheme that isn't based on public key cryptography and yet guards against both eavesdropping and server database disclosure?
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
