From: Francis Cianfrocca <garbagecat10@...>
Date: 2006-08-11T21:30:47+09:00
Subject: Re: nonce

------=_Part_119128_10467346.1155299444078
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 8/11/06, Austin Ziegler <halostatue@gmail.com> wrote:
>
>  It's actually a relatively common term in cryptographic references,
> IIRC. The cryptographic nonce is some (random?) string that is used
> once and only once (it doesn't repeat and it isn't typically
> predictable) and typically in a challenge/response identification
> protocol.



"Nonces" are used in authentication protocols to  inhibit replay attacks,
especially when verifying shared secrets. ("Don't send me a SHA1 hash of
your password, because you might have snooped it or guessed it. Send me a
SHA1 hash of your password concatenated to this unique nonce I'm about to
send you.")

------=_Part_119128_10467346.1155299444078--