Re: Searching for a special challenge&response algorithm
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


sci.crypt archive

Re: Searching for a special challenge&response algorithm

From: David Wagner <daw@taverner.cs.berkeley.edu>
Date: Sat Apr 29 2006 - 20:51:01 CEST

Jan Peter Stotz wrote:
>When a client connects to a server it has to authenticate itself against
>the server. For preventing brute force attacks against this authentication
>(systematic testing) with one client the server creates a challenge which
>has to be solved by the client. For solving the challenge the client needs
>a bit of CPU power which results in a delay of about a second. The server
>only allows an authentication by the client after successfully solving the
>challenge.

You'll find a lot of work on the literature on this subject.
Some key words to aid you in your literature search: "client puzzles",
"hashcash", "proofs of work".
Received on Mon May 1 02:06:11 2006