[Cisspstudy] Symmetric cryptography - Authentication

[Andrea Gatta]

Hi,
several sources include authentication - or better system or message
authentication - as one of the symmetric criptography security services (the
other is clearly confidentiality).

Clearly the authentication provided by symmetric key crypto cannot provide
non-repudiation since it uses one single key to encrypt/decrypt and which is
not tied to a uniquely identifiiable user.

As for the implementation of the above concept, I can think at the way
Kerberos authenticate principals - possession of the session key (other than
authenticator information).

Other than that an example of this could be CBC-MAC.

Can someone provide other explamples or better some place in which symmetric
key crypto and authentication are treated more systematically ?

Thanks
Andrea
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091010/49241913/attachment.html>