A new authentication procedure for client-server applications using HMAC. (4th July 2021)

• Record Type: Journal Article
• Authors: Shukla, Varun; Misra, Manoj Kumar; Chaturvedi, Atul
• Is Part Of: Journal of discrete mathematical sciences & cryptography. Volume 24:Number 5(2021)
• Page Start: 1241
• Page End: 1256
• Publication Date: 2021-07-04
• Subjects: Primary 93A30 -- Secondary 49K15; Hash based Message Authentication Codes -- Key agreement -- Man in the Middle Attack -- Secured Hash Algorithm -- Symmetric key; Computer science -- Mathematics -- Periodicals; Cryptography -- Periodicals; Computer science -- Mathematics; Cryptography; Periodicals; 004.0151
• DOI: 10.1080/09720529.2021.1932908
• Languages: English
• ISSNs: 0972-0529

Abstract

Abstract: Hash functions are used for data integrity and authentication but unfortunately they suffer with man in the middle attack problem. An intruder who has command over the communication channel can send an altered message along with its hash and pretends to be the authentic sender. Hash based authentication methods are subject to length based attacks also. So these problems are applicable to all those procedures which involve hash based authentication and routing protocols are one such example because routing protocols use MD5 authentication which is vulnerable in various aspects. So keeping these problems in mind, in this paper, we present a new HMAC implementation method which is a solution of these problems.