Skip to content

New Authentication Protocol #2

@joe0x04

Description

@joe0x04

OpenSSL deprecated all sorts of functions in version 3, so the authentication protocol needs to change.

New protocol:

  1. Client generates challenge data, encrypts with server's public key, sends it
  2. Server decrypts with private key, hashes challenge, encrypts with client's public key.
  3. Server generates another challenge, encrypts with client's public key, sends both
  4. Client validates Server by decrypting hash, hashing original challenge, compares them
  5. Client hashes Server's challenge, encrypts with server's public key, sends
  6. Server decrypts hash with private key, hashes its challenge compares them.
  7. If both hashes match on client and server, they are mutually authenticated and should trust each other.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions