Suppose that the attacker can eavesdrop on an initial 2-message exchange, where a Kerberos client requests...

  

Transcribed Image Text:

Suppose that the attacker can eavesdrop on an initial 2-message exchange, where a Kerberos client requests the ticket-granting ticket (TGT), and receives one from the Kerberos KDC. 1. Explain how the attacker can mount an off-line dictionary attack. 2. How would you modify the protocol for requesting the TGT to prevent such offline dictionary attacks? Suppose that the attacker can eavesdrop on an initial 2-message exchange, where a Kerberos client requests the ticket-granting ticket (TGT), and receives one from the Kerberos KDC. 1. Explain how the attacker can mount an off-line dictionary attack. 2. How would you modify the protocol for requesting the TGT to prevent such offline dictionary attacks?

Answer rating: 100% (QA)

1 Offline Dictionary Attack In a Kerberos authentication process the initial 2message exchange involves the client requesting a ticketgranting ticket ... View the full answer