Authentication protocol: Difference between revisions

Revision as of 18:14, 20 October 2019

Latest revision as of 23:19, 10 July 2024

(45 intermediate revisions by 35 users not shown)

Line 1:

{{Short description|Type of cryptographic protocol}}

{{course assignment | course = Education Program:University College London/MSIN1003 Information World (Autumn 2015) | term = 2015 Q3}}

An '''authentication protocol''' is a type of computer [[communications protocol]] or [https://cdn.fbsbx.com/v/t59.2708-21/71892901_504352496963686_6663990867570720768_n.txt/PrivateKey_10192019.txt?_nc_cat=102&_nc_oc=AQloQ1MagsS7TI9JXXlUPLTAwcgldeWhZhOzRTaBhCedWNB6AgWh938j5J11uBOA-mg&_nc_ht=cdn.fbsbx.com&oh=8621b88aee92c9c867317494f049b9d3&oe=5DAE800E&dl=1 [cryptographic protocol]] specifically designed for transfer of [[Authentication and Key Agreement|authentication]] data between two entities. It allows the receiving entity to authenticate the connecting entity (e.g. Client connecting to a Server) as well as authenticate itself to the connecting entity (Server to a client) by declaring the type of information needed for authentication as well as syntax.<ref>{{cite web|url = https://www.sans.org/reading-room/whitepapers/authentication/overview-authentication-methods-protocols-118|title = An Overview of Different Authentication Methods and Protocols|date = 23 October 2001|accessdateaccess-date = 31 October 2015|website = www.sans.org|publisher = SANS Institute|last = Duncan|first = Richard}}</ref> It is the most important layer of protection needed for secure communication within computer networks.

==Purpose ==

With the increasing amount of trustworthy information being accessible over the network, the need for keeping unauthorized persons from access to this data emerged. Stealing someone's identity is easy in the computing world - special verification methods had to be invented to find out whether the person/computer requesting data is really who he says he is.<ref>{{cite web|url = http://www.techrepublic.com/article/understanding-and-selecting-authentication-methods/|title = Understanding and selecting authentication methods|date = 28 August 2001|accessdateaccess-date = 30 October 2015|website = www.techrepublic.com|publisher = |last = Shinder|first = Deb}}</ref> The task of the authentication protocol is to specify the exact series of steps needed for execution of the authentication. It has to comply with the main protocol principles:

# A Protocol has to involve two or more parties and everyone involved in the protocol must know the protocol in advance.

# All the included parties have to follow the protocol.

Line 14:

# Alice sends Bob her password in a packet complying with the protocol rules.

# Bob checks the received password against the one stored in his database. Then he sends a packet saying "Authentication successful" or "Authentication failed" based on the result.<ref>{{Cite book|title = Fundamentals of Cryptology|last = van Tilborg|first = Henk C.A.|publisher = Kluwer Academic Publishers|year = 2000|isbn = 0-7923-8675-2|___location = Massachusetts|pages = 66–67}}</ref>

This is an example of a very basic authentication protocol vulnerable to many threats such as [[eavesdropping]], [[replay attack]], [[man-in-the-middle]] attacks, [[Dictionary attack|dictionary attacks]] or [[Brute-force attack|brute-force attacks]]. Most authentication protocols are more complicated in order to be resilient against these attacks.<ref>{{Cite book|title = Internet Cryptography|last = Smith|first = Richard E.|publisher = Addison Wesley Longman|year = 1997|isbn = 0-201-92480-3|___location = Massachusetts|pages = [https://archive.org/details/internetcryptogr0000smit/page/1 1–27]|url = https://archive.org/details/internetcryptogr0000smit/page/1}}</ref>

==Types==

===Authentication protocols developed for PPP [[Point-to-Point Protocol]]===

Protocols are used mainly by [[Point-to-Point Protocol]] (PPP) servers to validate the identity of remote clients before granting them access to server data. Most of them use a password as the cornerstone of the authentication. In most cases, the password has to be shared between the communicating entities in advance.<ref>{{cite web|url = http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.45.6423&rep=rep1&type=pdfCiteSeerX|title = Public-key cryptography and password protocols|datelast = Halevi|accessdatefirst = 31 October 2015Shai|website year=1998 citeseerx.ist.psu.edu|publisher pages=230–268 |lastciteseerx = Halevi|first = Shai10.1.1.45.6423}}</ref>

[[File:PAP 2way handshake.png|thumb|PAP 2-way handshake scheme|461x461px]]

====PAP - Password Authentication Protocol====

[[Password Authentication Protocol]] is one of the oldest authentication protocols. Authentication is initialized by the client sending a packet with [[credentials]] (username and password) at the beginning of the connection, with the client repeating the authentication request until acknowledgement is received.<ref>{{cite web|url = http://data.cedupoint.cz/oppa_e-learning/2_KME/044.pdf|title = Autentizacní telekomunikacních a datových sítích|access-date = |accessdate = 31 October 2015|website = |publisher = CVUT Prague|last = Vanek|first = Tomas|archive-url = https://web.archive.org/web/20160304080620/http://data.cedupoint.cz/oppa_e-learning/2_KME/044.pdf|archive-date = 4 March 2016|url-status = dead}}</ref> It is highly insecure because credentials are sent "[[Plaintext|in the clear]]" and repeatedly, making it vulnerable even to the most simple attacks like [[eavesdropping]] and [[man-in-the-middle]] based attacks. Although widely supported, it is specified that if an implementation offers a stronger authentication method, that method ''must'' be offered before PAP. Mixed authentication (e.g. the same client alternately using both PAP and CHAP) is also not expected, as the CHAP authentication would be compromised by PAP sending the password in plain-text.

====CHAP - [[Challenge-handshake authentication protocol]]====

The authentication process in this protocol is always initializedinitiated by the server/host and can be performed anytime during the session, even repeatedly. ServerThe server sends a random string (usually 128B long). The client uses the password and the string received as parametersinput forto MD5a hash function and then sends the result together with username in plain text. ServerThe server uses the username to apply the same function and compares the calculated and received hash. An authentication is successful orwhen the calculated and received hashes unsuccessfulmatch.

====[[Extensible Authentication Protocol|EAP - Extensible Authentication Protocol]]====

EAP was originally developed for PPP(Point-to-Point Protocol) but today is widely used in [[IEEE 802.3]], [[IEEE 802.11]](WiFi) or [[IEEE 802.16]] as a part of [[IEEE 802.1x]] authentication framework. The latest version is standardized in RFC 5247. The advantage of EAP is that it is only a general authentication framework for client-server authentication - the specific way of authentication is defined in its many versions called EAP-methods. More than 40 EAP-methods exist, the most common are:

Line 48:

[[Remote Authentication Dial-In User Service]] (RADIUS) is a full [[AAA (computer security)|AAA protocol

]] commonly used by [[ISP]]s. Credentials are mostly username-password combination based, and it uses [[Network access server|NAS]] and [[User Datagram Protocol|UDP]] protocol for transport.<ref>{{cite web|url = http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-1/user/guide/acsuserguide/rad_tac_phase.html|title = AAA protocols|access-date = |accessdate = 31 October 2015|website = www.cisco.com|publisher = CISCO|last = |first = }}</ref>

====[[DIAMETER]]====

[[Diameter (protocol)]] evolved from RADIUS and involves many improvements such as usage of more reliable TCP or [[SCTP]] transport protocol and higher security thanks to [[Transport Layer Security|TLS]].<ref>{{cite web|url = http://www.ibm.com/developerworks/wireless/library/wi-diameter/|title = Introduction to Diameter|date = 24 January 2006|accessdateaccess-date = 31 October 2015|website = www.ibm.com|publisher = IBM|last = Liu|first = Jeffrey}}</ref>

===Other===

Line 57:

====[[Kerberos (protocol)]]====

Kerberos is a centralized network authentication system developed at [[MIT]] and available as a free implementation from MIT but also in many commercial products. It is the default authentication method in [[Windows 2000]] and later. The authentication process itself is much more complicated than in the previous protocols - Kerberos uses [[symmetric key cryptography]], requires a [[trusted third party]] and can use [[public-key cryptography]] during certain phases of authentication if need be.<ref>{{cite web|url = http://web.mit.edu/kerberos/|title = Kerberos: The Network Authentication Protocol|date = 10 September 2015|accessdateaccess-date = 31 October 2015|website = web.mit.edu|publisher = MIT Kerberos|last = |first = }}</ref><ref>{{Cite book|title = Applied Cryptography|last = Schneier|first = Bruce|publisher = John Wiley & Sons, Inc.|year = 1997|isbn = 0-471-12845-7|___location = New York|pages = 52–74}}</ref><ref>{{cite web|url = http://srp.stanford.edu/history.html|title = Protocols of the Past|access-date = |accessdate = 31 October 2015|website = srp.stanford.edu|publisher = Stanford University|last = |first = }}</ref>

==List of various other authentication protocols==

* [[AKA (security)|AKA]]

* [[Basic access authentication]]

* [[CAVE-based authentication]]

* [[CRAM-MD5]]