From: Eugene Crosser Date: Sun, 8 Dec 2013 21:33:32 +0000 (+0400) Subject: make svg picture X-Git-Url: http://www.average.org/gitweb/?p=pam_pcsc_cr.git;a=commitdiff_plain;h=194a1c30bd4a0668debc82f40eefa49adfc11a8e;ds=sidebyside make svg picture --- diff --git a/README.md b/README.md index e152725..23aa837 100644 --- a/README.md +++ b/README.md @@ -73,6 +73,9 @@ period. The downside is that if the token is used against multiple hosts, and one of them leaks the secret to an adversary, all hosts are compromised. This is not the case with the first approach. +The particular data structure is outlined in the picture: +![](auth-data-structure.svg) + ## Module Operation Authentication file, containing nonce, encrypted shared secret, diff --git a/auth-data-structure.svg b/auth-data-structure.svg new file mode 100644 index 0000000..e3e1e3f --- /dev/null +++ b/auth-data-structure.svg @@ -0,0 +1,361 @@ + + + + + + + + + + + + image/svg+xml + + + + + + + tokenid + userid + nonce + + + + + AES128( + ) + + + Secret+Payload+SHA1(Secret+Payload) + + + HMAC-SHA1( + ) + Data + + Key + + + Data + + + + Key + + + + + + SHA1(userid+password+nonce) + + + Secret + + +