2 ms·
Attacks like the one you mentioned are prevented cryptographically. One of the simplest methods is CRAM, Challenge-Response Authentication Mechanism. Here's an
by worstspotgain 2y ago
Attacks like the one you mentioned are prevented cryptographically. One of the simplest methods is CRAM, Challenge-Response Authentication Mechanism. Here's an example exchange:
Client: I have the password and I'd like to authenticate
Server: OK, your challenge is 814443143674234562341567675
<client computes DigestFunction(password, 814443143674234562341567675)>
Client: OK, the response is 762451345361652354523412123
The challenge issued by the server is a large random number. The C = DigestFunction(A, B) function is one-way. It has the property that if you're trying to figure out A, knowing B and C doesn't really help.