AuthenticationMD.pptVIP

Authentication MD5 Jen-Chang Liu, Fall 2005 Adapted from lecture slides by Lawrie Brown Model for Network Security Type of attacks disclosure traffic analysis masquerade 偽裝 content modification sequence modification Insertion, deletion, reordering timing modification Delay or replay of message source repudiation destination repudiation Outline Message authentication Message encryption Message authentication code: MAC=Ck(M), k is a shared secret key, MAC is a fixed-length code Hash function: h=H(M), h is a fixed-length code MD5 Message Authentication message authentication is concerned with: protecting the integrity of a message validating identity of originator non-repudiation of origin (dispute resolution) Two-level approach Produce an authenticator: a value to be used to authenticate a message Authentication protocol Message Encryption The ciphertext of the message serves as its authenticator symmetric encryption is used: Symmetric encryption for authentication Constraint: the plaintext have some well-formed structure Example 1: frame check sequence (FCS) Symmetric encryption for authentication (cont.) Example 2: TCP header Public-key encryption for authentication Outline Message authentication Message encryption Message authentication code: MAC=Ck(M), k is a shared secret key, MAC is a fixed-length code Hash function: h=H(M), h is a fixed-length code MD5 Message Authentication Code (MAC) MAC is a cryptographic checksum MAC=CK(M) condenses a variable-length message M using a secret key K to a fixed-sized authenticator Message Authentication Codes (cont.) why use a MAC instead of message encryption? Sometimes only authentication is needed Ex. Broadcast of shut down message, check MAC is cheaper Ex. The receiver side cannot afford time to decrypt Ex. Authentication of a program in plaintext Separation of authentication and confidentiality Sometimes need authentication to persist longer than the encryption (eg. archival use) note that a MAC is not a digital s