authentication protocols

[David Jablon]

John,

Do your parties have any shared secret information?

If they share a cryptographic key, they can use a
simple hash-based challenge/response protocol.

If the have shared passwords or any other small
secrets, they can use EKE or SPEKE.

There are lots of neat tricks that might be applicable,
but you should first describe your needs in more detail.

-- David

At 06:14 PM 3/25/02 -0500, John Saylor wrote:
>Hi
>
>I'd like to find an authentication protocol that fits my needs:
>1. 2 [automated] parties
>2. no trusted 3rd party intemediary ['Trent' in _Applied_Crypto_]
>
>Most of the stuff in _Applied_Crypto_ requires that third party. It may
>be an impossible task, nothing seems obvious to me. Pointers,
>suggestions, or aphorisms all welcome.
>
>-- 
>\js     "innovate scalable infomediaries"



---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com