Is protocol secure for sharing secrets on server computer

Assignment Help Computer Network Security
Reference no: EM1369666

Assume that Alice shares a secret s with her company's server computer. When Alice is on a trip, she tries to store an important message in the CEO's account directory. This message needn't be encrypted since confidentiality is not important here, but the CEO needs to be guaranteed that the message really is from someone who knows the secret s (e.g. Alice) when the CEO opens his/her computer the next day. A naïve protocol to achieve this may look like this:

Alice-->Server: "This is Alice, I have an important message to forward to the CEO"
Server-->Alice: "OK, please encrypt R" (where R is a random nonce)
Alice-->Server: "Es(R)" (that is, R is encrypted with the secret s)
Server-->Alice: "Please send the message"
Alice-->Server: "The CEO needs to attend a meeting in Liverpool on May 1, 2006"
The server stores this message in the CEO's directory

Is this protocol secure? If not, how do you feel it could be modified to make it so? 

Reference no: EM1369666

Questions Cloud

Which of following statements is true of a monopoly firm : Which of following statements is true of a monopoly firm. Drug companies are engaging in price discrimination, but this might improve global social welfare if it gives more people access to drugs
Explain the partnership agreement provided : Explain The partnership agreement provided that the partners would share profits equally and When the horses failed to perform as expected
Who trades with whom when sale is in standardized form : Modeling what is a Market. In modern usage, a commodity is anything of use that is available for purchase and sale in standardized form. Participants: Who trades with whom
Calculate equilibrium real interest rate : Suppose that the officials in Ecoland have compiled the following data about their economy for last year:
Is protocol secure for sharing secrets on server computer : Suppose that Alice shares secret with her company's server computer. When Alice is on trip, she tries to store important message in CEO's account directory. Is this protocol secure? If not, how do you feel it could be modified to make it so?
What about breakdown of existing agreements : This assumption implies that armed conflict can be a necessary prelude to a negotiated settlement of a newly arisen dispute. What about breakdown of existing agreements to settle territorial disputes peacefully.
Can a conflict of interest affect ethical decision-making : What three concepts or techniques from this course might affect your current or future career in public administration and show one of these concepts in detail
Why is it that grazing land was not protected by families : This grazing land was for whole town and families could allow their flock of sheep to graze free of charge. Why is it that grazing land was not protected by individual families.
Explain pay for performance is just as important : Explain Pay for performance is just as important in non-for-profit organizations and Assume you are founder of a non-profit public charity of your choice.

Reviews

Write a Review

 

Computer Network Security Questions & Answers

  An overview of wireless lan security - term paper

Computer Science or Information Technology deals with Wireless LAN Security. Wireless LAN Security is gaining importance in the recent times. This report talks about how vulnerable are wireless LAN networks without any security measures and also talk..

  Computer networks and security against hackers

This case study about a company named Magna International, a Canada based global supplier of automotive components, modules and systems. Along with the company analysis have been made in this assignment.

  New attack models

The Internet evolution is and is very fast and the Internet exposes the connected computers to attacks and the subsequent losses are in rise.

  Islamic Calligraphy

Islamic calligraphy or Arabic calligraphy is a primary form of art for Islamic visual expression and creativity.

  A comprehensive study about web-based email implementation

Conduct a comprehensive study about web-based email implementation in gmail. Optionally, you may use sniffer like wireshark or your choice to analyze the communication traffic.

  Retention policy and litigation hold notices

The purpose of this project is to provide you with an opportunity to create a document retention policy. You will also learn how to serve a litigation hold notice for an educational institute.

  Tools to enhance password protection

A report on Tools to enhance Password Protection.

  Analyse security procedures

Analyse security procedures

  Write a report on denial of service

Write a report on DENIAL OF SERVICE (DoS).

  Phising email

Phising email It is multipart, what are the two parts? The HTML part, is it inviting the recepient to click somewhere? What is the email proporting to do when the link is clicked?

  Express the shannon-hartley capacity theorem

Express the Shannon-Hartley capacity theorem in terms of where is the Energy/bit and is the psd of white noise.

  Modern symmetric encryption schemes

Pseudo-random generators, pseudo-random functions and pseudo-random permutations

Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd