Fast and Secure Protocol: Difference between revisions

Revision as of 01:40, 14 June 2019

Revision as of 12:11, 29 September 2019

Line 10:

==Security{{cn|date=July 2018}}==

FASP has built-in security mechanisms that do not affect the transmission speed. The [[encryption]] [[Algorithm|algorithms]] used are based exclusively on [[Open standard|open standards]]. Before the transfer, [[SSH]] is used for [[key exchange]] for [[authentication]]. These randomly generated, one-way keys are discarded at the end of the transmission.

The data is encrypted or decrypted immediately before sending and receiving with the [[Advanced Encryption Standard|AES-128]]. To counteract attacks by monitoring the encrypted information during long transfers, the AES is operated in [[cipher feedback mode]] with a secret [[initialization vector]] for each block. In addition, an integrity check of each [[Block (data storage)|data block]] takes place, in which case, for example, a [[man-in-the-middle attack]] would be noticed.