CPSC 42500 Homework 6: MACs, the Secure Channel

Name _________________________                                                            Score: ____ / 30

CPSC 42500 Homework 6: MACs, the Secure Channel

1. (2 points) The purpose of authentication protocols is to make _________________

   and __________________ detectable. (One word in each blank)

2. (5 points) Use the internet to answer the following questions about the SHA-2 family of hash functions.
3. What are the digest sizes supported by SHA-2 algorithms?
4. How many bits of collision resistance does SHA-384 provide?
5. How many rounds is the compression function for SHA-512?
6. (2 pts) What is the basic difference between SHA-224 and SHA-512/224?
7. (3 points) Using HMAC, even if an adversary can find a collision in the underlying hash function, why does this not necessarily mean that they can forge a message?
8. (4 points) You find out that your University is using an authenticated messaging system that is vulnerable to a length extension attack, because it uses an iterative hash function with the insecure MAC construction t = h(K || m). By eavesdropping on the network you intercept the following message m from your professor to the administration: “Set final course grade to A for J. Smith,” along with its tag t.

Give an example of a believable message that you could forge and send using a length-extension attack, and describe how the attack would work. Specify how you would use the hash function and what pieces of data you would send.

5. (2 points) A small company has 10 employees who all want to send authenticated messages to each other. It’s not enough to know that a message came from one of the 10 employees; it must be verifiable that a message is from one specific employee.

   To solve this problem using MACs, how many different secret keys would be needed in total? Explain your answer. You only need to consider one-to-one messages; don’t worry about messages sent to an entire group.

6. (3 pts) In our definition of a secure channel, what are the two things that an eavesdropper is “allowed” to learn? Why do we allow the eavesdropper to learn them?
7. (4 pts) You are placing an order with an online retailer. To complete a purchase, your web browser sends a single encrypted, authenticated message to the web site, consisting only of the following information: a) your credit card information, b) the item number and quantity being ordered.

1. Say an adversary is sitting between you and the retailer, with the ability to intercept traffic and send messages. Describe an attack the adversary could carry out to “max out” your credit card. What type of attack is this?
2. What could the retailer do to prevent this attack, simply by changing what data is sent in the single encrypted, authenticated message?

8. (3 pts) The use of session keys and message numbers both serve to prevent replay attacks. Then why do we need to use both to have a secure channel?
9. (4 pts) The following sentence describes steps that are used to generate a ciphertext c and authentication tag t.

   “The message number i is concatenated with the message and encrypted with key K_enc to produce the ciphertext. The key K_auth is concatenated with i and the message and hashed with SHA-256 to produce the tag.”

   Write the definitions of c and t as a formula, using the notation we use in class and the textbook.

Order any type of Service We Provide

We are the best assignment service that can satisfy student’s demands in different scientific fields. We perform tasks of any kind. Our specialists provide diverse custom assignment writing services to students from all over the world every day. You can contact us for assistance with:

• Essays of any type (application, scholarship, argumentative, personal, informative, persuasive, compare and contrast, narrative, analytical, cause and effect, critical, process, descriptive, expository essays);
• Homework,
• Assignments,
• Reviews of all types (for a book, an article, or a film),
• Reports,
• Annotated bibliography,
• Projects,
• Thesis,
• Term papers,
• Presentations,
• Lab works,
• Research papers,
• Speeches,
• Critical thinking,
• Capstone projects;
• plan;
• Coursework’s;
• Dissertations.

The list is far from complete!

Representatives of our student assignment service are connoisseurs of the peculiarities of presentation in regards to academics. Your college assignment will never turn out an untoward surprise! Whether you need research for high school, an undergraduate program, or a Master’s or Doctoral degree, you will get exactly what you are looking for to sound smart and well-informed.

If you are pressed for time, request our experts!

We are your academic saver. It is a perfect solution for people who need academic help but has no professionals nearby to provide it. Just redirect your home tasks to us and forget about any educational issues. With us, you will get 100% plagiarism-free content delivered on time by an experienced specialist in a particular field.

Main Advantages of Collaboration with Us

When you order professional assignments here, you will get:

Original custom papers. We value your academic reputation. Just as well, we value the years of thorough work on our reputation for reliability and never compromise the originality of delivered papers. We will never endanger both. Every custom assignment is written from zero – the only possible first stage of work on the order is research. We apply the latest plagiary checking tools on the final stage, so plagiarism has no chance to emerge in your college assignment writing.

Control over the order completion. To make the process of collaboration comfortable and efficient, we offer our clients to choose the writer themselves taking into account all the requirements and the budget. For you to save nerves, having entrusted your fateful task to some qualified “stranger”, we enable communication with the assigned writer in the process of order completion.

Affordable assistance. . help with college assignments. We are eager to help you start investing in your career growth today. That is why our service is so affordable. We don’t charge to pay for the latest marketing tricks or advertisements – we choose the best experts in the labor market who write great custom papers in any area, level of complexity, and time frame. Our client’s grateful feedback is a top advertising trick.

On-time delivery. The quality of a paper is only valued when it is delivered within the determined time frame – you will get your custom assignment writing service in time and have a couple of days to revise it and ask for changes in case they are needed. And you will still have time to learn the material.

Protection. We value your trust and take all measures needed to keep your private and banking details safe. We offer only well-tested payment methods. Due to the system of encryption and protected servers, no third party can have access to your data.

Custom support 24/7. We do our best to make the process of collaboration comfortable for the customer. Our “write my assignment” help is always here for you to provide a solution to your problems, give you a prompt answer to any question, and offer clarification as to any issue related to the services. Feel free to contact us anytime!

If you feel that your dissatisfaction with student life is growing every day and you just feel exhausted, don’t hesitate to change the situation for the better today. Order your first assignment from reliable custom assignment services today to evaluate the advantages.

Having seen the difference once, you won’t want to go back to your previous lifestyle. You deserve to find fulfilment in other spheres of your life, have hobbies, spend time with close people but continue making progress. It is possible when you have a professional helper. Don’t put off your life for someday after graduation!

Order your paper now!