|
Man-in-the-middle attack:
Eavesdropping on different conversations. Using digital signatures during the session-key exchange can circumvent the attack.
Dictionary attacks:
Takes a password file with on-way function values and then takes the most commonly used passwords and run them through the same one-way function. These files are then compared.
Replay attack:
An attacker copies a ticket and breaks the encryption and then tries to impersonate the client and resubmit the ticket at a later time to gain unauthorized access to a resource.
|
