|
From: Blat F. <pet...@ho...> - 2000-10-08 02:21:39
|
SNAKE is an authenticating key exchange algorithm I created some time ago, and is very much in the same vein as SPEKE or SRP-3, except that it is unpatented and in the public domain. Benjamin has kindly offered to host the SNAKE home page on http://www.kripto.org/snake This doesnt have much to do with Blocks other than the fact that Blocks borrowed some of the crypto and netcode from SNAKE, but I thought you guys might be interested anyway :) SNAKE can guarantee a secure network session based soley on a short password such as a single word like 'dog', 'cat' or 'secret'. This allows secure transactions without a PKI, and could even be used for things like anonymous payment schemes or the downloading on-the-fly of large private keys. To reiterate, the key length of the password is not directly relevant to security of the session. This goes against popular crypto teachings. There are no known attacks other than online guessing and that can be minimised using denial of service after a suitable number of failures. SNAKE is immune to dictionary attacks and all other offline attacks that I know of, and offers perfect forward secrecy and authentication. ttfn PG. _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. |