Question: Suppose the website uses the following silly function to verify a k - byte cookie: def verify ( submitted _ ck , stored _ ck
Suppose the website uses the following silly function to verify a kbyte cookie:
def verifysubmittedck storedck:
for i in rangeK:
if submittedcki storedcki:
sleep
else:
return False
return True
If the verify return False, the website will respond with a HTTP status OK otherwise it responds
with status Forbidden. Show that it's possible for an attacker to guess the cookie using ~K trials.
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
