《Modern Cryptogrophy:Theory and practice》学习笔记之第二章 part II

下面是Attack 和Fix之间不断反复的例子（以认证的密钥建立协议为例  Protocols for Authenticated Key Establishment Using Encryption）

Prot2.1: Protocol “From Alice to Bob”

1. Alice generates K at random, creates {K}_KAT, and sends to Trent: Alice, Bob, {K}_KAT;
2. Trent finds keys K_AT, K_BT, decrypts {K}_KAT to reveal K, creates {K}_KBT and sends to Bob: Alice, Bob, {K}_KBT;
3. Bob decrypts {K}_KBT to reveal K, forms and sends to Alice: {Hello Alice, I'm Bob!}_K.

由于Alice所产生的K可能不够安全，不能取得Bob的信任，所以改为由Trent来生成K

Prot2.2: Protocol “Session Key from Trent”

1. Alice sends to Trent: Alice, Bob;
2. Trent finds keys K_AT, K_BT, generates K at random and sends to Alice: {K}_KAT, {K}_KBT;
3. Alice decrypts {K}_KAT, and sends to Bob: Trent, Alice, {K}_KBT;
4. Bob decrypts {K}_KBT to reveal K, forms and sends to Alice: {Hello, I'm Bob!}_K.

Attack2.2: An attack on Prot2.2

Alice -> Malice(“Trent”): Alice, Bob;

Malice(“Alice”)->Trent: Alice, Malice;

Trent finds K_AT, K_MT, generates K_AM, ->Alice: {K_AM}_KAT, {K_AM}_KMT;

Alice decrypts{K_AM}_KMT, ->Malice(“Bob”): Trent, Alice, {K_AM}_KMT;

Malice(“Bob”)->Alice : {Hello, Im Bob!}_KAM;