Texas A&M University Anarchistic Key Authorization (AKA
David Safford, David K. Hess, and Douglas Lee Schales
Texas A&M University
Abstract
At the Fourth USENIX Security Conference, we presented a paper on SRA
Telnet, which was a simple Diffie-Hellman based system to defeat
standard password sniffing, without requiring externally validated
keys. Since that time, several projects, such as Secure Telnet (stel),
have worked to extend this simple Diffie-Hellman model to add data
encryption, larger keys, and resistance to man-in-the-middle
attack. Other projects, such as SSL and SSH use validated RSA keys for
full authentication. This project uses standard PGP keys as the basis
of unified authentication, authorization, and encryption, combining
both perfect forward secrecy and strong RSA authentication.
View the full text of this paper in
ASCII (31,233 Bytes) and
POSTSCRIPT (110,472 Bytes) form.
To Become a USENIX Member, please see our
Membership Information.
|