03 User Authentication - Mind Map

mindmap
  root((User Authentication))
    Principles
      identification
      verification
      not message authentication
    Four means
      knows: password, PIN
      possesses: token, smartcard
      is: fingerprint, retina
      does: voice, signature
    Passwords
      attacks
        offline dictionary
        specific account
        popular password
        single user guessing
        electronic monitoring
      hashing
        salt
        Crypt3 12-bit
        MD5 48-bit
        Bcrypt 128-bit
      cracking
        dictionary
        rainbow tables
      protection
        shadow file
        reactive checking
        proactive checking
    Tokens
      memory card
      smartcard
        static
        dynamic
        challenge-response
    Biometrics
      matching score
      false match
      false non-match
      iris application
    Remote
      challenge-response
      client attack
      host attack
      eavesdropping
      replay

flowchart LR
  A[User sends ID] --> B[Host sends random r]
  B --> C[User computes f r, h P]
  C --> D{Host compares}
  D -->|match| E[Authenticated]
  D -->|no match| F[Rejected]

Index: 03 User Authentication - Index · Cheat sheet: 03 User Authentication - Cheat Sheet