From: Eugene Crosser Date: Sun, 8 Dec 2013 21:33:32 +0000 (+0400) Subject: make svg picture X-Git-Url: http://www.average.org/gitweb/?p=pam_pcsc_cr.git;a=commitdiff_plain;h=194a1c30bd4a0668debc82f40eefa49adfc11a8e make svg picture --- diff --git a/README.md b/README.md index e152725..23aa837 100644 --- a/README.md +++ b/README.md @@ -73,6 +73,9 @@ period. The downside is that if the token is used against multiple hosts, and one of them leaks the secret to an adversary, all hosts are compromised. This is not the case with the first approach. +The particular data structure is outlined in the picture: +![](auth-data-structure.svg) + ## Module Operation Authentication file, containing nonce, encrypted shared secret, diff --git a/auth-data-structure.svg b/auth-data-structure.svg new file mode 100644 index 0000000..e3e1e3f --- /dev/null +++ b/auth-data-structure.svg @@ -0,0 +1,361 @@ + + + + + + + + + + + + image/svg+xml + + + + + + + tokenid + userid + nonce + + + + + AES128( + ) + + + Secret+Payload+SHA1(Secret+Payload) + + + HMAC-SHA1( + ) + Data + + Key + + + Data + + + + Key + + + + + + SHA1(userid+password+nonce) + + + Secret + + +