Re: Cryptography problem
From: Ken (s4010237_at_student.uq.edu.au)
Date: 06/23/04
- Next message: Mailman: "Re: Cryptography problem"
- Previous message: Dean Hallman: "Cryptography problem"
- In reply to: Dean Hallman: "Cryptography problem"
- Next in thread: Mailman: "Re: Cryptography problem"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 23 Jun 2004 10:47:19 +1000
Dean, random padding would help at the start, and or end of your packet
or, you could simply use SSL and get it to do authentication using
certificates or something like that.
Ken
"Dean Hallman" <deanh@sc.rr.com> wrote in message
news:us2Cc.65466$2o2.3732388@twister.southeast.rr.com...
> I have what I believe is a bit unique as cryptography problems go. I was
> hoping someone on this board might be able to offer some advice or
pointers
> to a suitable crypto solution.
>
> Basically, I have a web server that can process search strings, and
clients
> that submit search strings.
>
> However, the client software must be *my* software (rich clients). I
don't
> want imposters, masquerading as my software and sending search packets the
> server can't distinguish from my own
>
> So, I need to packetize and encrypt the search string in my rich clients
and
> send it across the internet to the server, without hackers figuring out
the
> packet format and encryption method.
>
> So, a search request would contain:
>
> [ UserName, password, "search string" ]
>
> So, a hacker can figure out the original data being encrypted. Doesn't
that
> compromise my encryption method? If you know the original data, can't you
> reverse engineer the encryption method?
>
> I know I could add less obvious stuff to the packet, but I don't think
that
> adds much security. People will still eventually guess the packet
contents
> and layout.
>
> So,
>
> Q: How can I keep the encryption method secure (non-reproducable), while
at
> the same time, exposing for all to see the payload being encrypted?
>
>
- Next message: Mailman: "Re: Cryptography problem"
- Previous message: Dean Hallman: "Cryptography problem"
- In reply to: Dean Hallman: "Cryptography problem"
- Next in thread: Mailman: "Re: Cryptography problem"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
