Reproduce “Replay Attack Prevention in Kerberos Authentication Protocol Using Triple Password” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Gagan Dua, Nitin Gautam, Dharmendar Sharma, Ankit Arora
Researchers at [Please insert institution/lab if provided and notable, otherwise omit] propose a "Triple Password" scheme for Kerberos version 5 to prevent replay and password attacks. Their method distributes three distinct passwords across the Authentication Server, Ticket Granting Server, and Application Server, creating a multi-layered verification process throughout the authentication flow.
Key insights
- The multi-layered authentication scheme makes it significantly harder for an attacker to compromise full access by requiring multiple independent credentials at different stages.
- Distributing password verification responsibilities across the Authentication Server, Ticket Granting Server, and Application Server creates dependencies that prevent successful replay attacks.
- Using three distinct passwords for different encryption and verification stages enhances resistance to password attacks and limits the impact if one password is compromised.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.