From 194a1c30bd4a0668debc82f40eefa49adfc11a8e Mon Sep 17 00:00:00 2001 From: Eugene Crosser Date: Mon, 9 Dec 2013 01:33:32 +0400 Subject: [PATCH] make svg picture --- README.md | 3 + auth-data-structure.svg | 361 ++++++++++++++++++++++++++++++++++++++++ 2 files changed, 364 insertions(+) create mode 100644 auth-data-structure.svg diff --git a/README.md b/README.md index e152725..23aa837 100644 --- a/README.md +++ b/README.md @@ -73,6 +73,9 @@ period. The downside is that if the token is used against multiple hosts, and one of them leaks the secret to an adversary, all hosts are compromised. This is not the case with the first approach. +The particular data structure is outlined in the picture: +![](auth-data-structure.svg) + ## Module Operation Authentication file, containing nonce, encrypted shared secret, diff --git a/auth-data-structure.svg b/auth-data-structure.svg new file mode 100644 index 0000000..e3e1e3f --- /dev/null +++ b/auth-data-structure.svg @@ -0,0 +1,361 @@ + + + + + + + + + + + + image/svg+xml + + + + + + + tokenid + userid + nonce + + + + + AES128( + ) + + + Secret+Payload+SHA1(Secret+Payload) + + + HMAC-SHA1( + ) + Data + + Key + + + Data + + + + Key + + + + + + SHA1(userid+password+nonce) + + + Secret + + + -- 2.39.2