Crypto researchers abuzz over flaws

TalkBack 6 of 9:

Next »

« Previous

• Thread View
• Flat View

More to Authentication Systems Than Hash Functions

(sigh)

Yes, we live in a world where people implicitly "trust" computers... even programmers.

However, authentication system designers have been aware of this issue for a long time. They typically include things such as: fixed bit patterns, time stamps, and message length information into the hash stream. Each of these elements must also pass for the message to be authenticated, not just the hash itself. Thus, the colliding random pattern is unlikely to pass one or more of these tests.

This is the difference between having cryptographic algorithms available and designing a secure system. And the difference between cryptanalytic attacks and successful system exploits.

Steven Davis
ceo "at" secureplay.com
http://www.secureplay.com/

Posted by: secureplay_z   Posted on: 08/19/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now