SIRS

SIRS

1. Authentication Protocols

   • Authentication of People
     • Memorised passwords
     • One-time passwords
     • Challenge-Response
     • Biometric
       • Desired Properties
         • Universality
         • Unicity
         • Stability
         • Correction
           • FAR (False Acceptance Rate)
           • FRR (False Rejection Rate)
         • Convenience
         • Acceptance
   • Machine Authentication
     • Name or Address
     • Secrets
   • Services Authentication
     • Shared secret keys
     • Pair of Asymmetrical keys per service
     • Services in a machine
   • Examples
     • With password
       • PAP
       • CHAP
       • MS-CHAP
         • Difference between V1 and V2 is that V2 uses only NTPH, has mutual authentication and the password renewal has been improved
       • Kerberos
     • With One-time passwords
       • S/Key
         • Generates a sequence of one-time passwords from a shared password
         • OTP1 = MD4(seed, password), ..., OTPN = MD4(OTPN-1)
       • SecurID
         • Generates a unique value every minute base on:
           • 64-bit key stored in card
           • Current date
           • SecurID Hash
           • PIN
     • With Asymmetrical keys
       • SSL
       • SSH
       • PGP
   • EKE (Encrypted Key Exchange)
     • Can use:
       • RSA
       • Diffie-Hellman
       • ElGamal