Digital signatures have a potential weakness due to lazy users. In e-commercetransactions, a contract might be drawn up and the user asked to sign its SHA-1 hash.If the user does not actually verify that the contract and hash correspond, the user mayinadvertently sign a different contract. Suppose that the Mafia try to exploit thisweakness to make some money. They set up a pay Web site (e.g., pornography,gambling, etc.) and ask new customers for a credit card number. Then they send over acontract saying that the customer wishes to use their service and pay by credit cardand ask the customer to sign it, knowing that most of them will just sign withoutverifying that the contract and hash agree. Show how the Mafia can buy diamonds froma legitimate Internet jeweler and charge them to unsuspecting customers.

Summary Hashing can show that the data has not been altered in transit, but cannot by itself prove…

d ask new customers for a credit card number. Then at the customer wishes to use their service and pay mer to sign it, knowing that most of them will just sig contract and hash agree. Show how the Mafia can bu met jeweler and charge them to unsuspecting custom-

d ask new customers for a credit card number. Then at the customer wishes to use their service and pay mer to sign it, knowing that most of them will just sig contract and hash agree. Show how the Mafia can bu met jeweler and charge them to unsuspecting custom-

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Related questions

Q: Public key cryptography was developed to address two fundamental issues, the first of which is key…

A: The method of encryption known as public key cryptography requires using two separate keys, one of…

Q: The public key cryptography community had to face its first obstacle head-on when it came to the…

A: Definition: Public key cryptography needs two keys, one kept secret and one made public. Public-key…

Q: Public Key cryptography was created to solve two critical problems, the first of which is key…

A: I Have answered this question in step 2.

Q: Analyze each statement whether it is true of false. Choose the appropriate letter from the options…

A: Here, we have to choose options for the above ones.

Q: Why bother using authentication if it serves no purpose? Determine the pluses and minuses of each…

A: Given: Authentication is the process of establishing the identification of a certain process or…

Q: Since I'm naturally inquisitive, I'm interested in exploring options for multi-factor…

A: The Approach: Authorization is subject to a variety of conditions, like as The user must provide…

Q: Alice wants to send an email to Bob with digital signature. Assume Alice and Bob have each other's…

A: The Above question is answered in step 2:-

Q: If you're configuring PPP authentication, you have the option of using either PAP or CHAP. What…

A: The PPP authentication protocols are password authentication protocol (PAP) and challenge handshake…

Q: PAP or CHAP may be used to establish PPP authentication. Is one more secure than the other in this…

A: IntroYou may choose between PAP and CHAP authentication when setting PPP authentication. Which of…

Q: Our well-known Web surfers, Bob and Alice, have access to a public key system that makes their…

A: Our well-known Web surfers, Bob and Alice, have access to a public key system that makes their…

Q: If we were successful in obtaining authentication support, which of our goals would we have the most…

A: Solution: Create a list comparing the positive and negative aspects of the various authentication…

Q: What are the four types of chargebacks? Is one "fairer" than the other, in your opinion?

A: Establishment: A credit card chargeback is when the issuing bank reverses a credit transaction at…

Q: Our well-known Web surfers, Bob and Alice, have access to a public key system that makes their…

A: The Answer is

Q: With the help of authentication, what can we accomplish? Here, we'll take a look at the advantages…

A: Why Authentication is used and what we can accomplish: Authentication identifies users who access a…

Q: Then, imagine that a company utilizes Kerberos to authenticate its users. What would happen if…

A: Kerberos: Kerberos is a client/server network authentication protocol. For authentication, it…

Q: Where do you start when defining authentication's aims? Evaluate the different authentication…

A: Dear Student, The answer to your question is given below -

Q: Write a complete procedure where an organization will use public key cryptography also assure…

A: Public Key works in the below manner: It allows user to send their public key in an opened insecure…

Q: Public Key cryptography was developed to address two key issues including key distribution. Briefly…

A: Public Key cryptography was developed to address two key issues including key distribution. key…

Q: If we were able to get authentication backing, which of our objectives would have the best…

A: Everything hinges on how authentication is applied. The answer is "no" if we rely solely on it as a…

Q: difference between user authentication and message authentication. What are the mechanisms used to…

A: Consider the security aspect of authenticity. Explain the difference between user authentication and…

Q: When you say "authentication functions," I'm not sure what you mean. Learn how the various tactics…

A: Authentication mechanisms safeguard computer systems and sensitive data. These functions…

Q: Do you know your goals? Compare authentication methods' benefits and cons.

A: Finding out whether someone or something is really who or what it claims to be is the process of…

Q: When you say "authentication aims," I'm not sure what you mean. Investigate the benefits and…

A: Answer: Ecure when authentication mechanisms are used. Your data is no longer encrypted by the…

Q: How would authenticating benefit our goals? We'll compare some popular authentication techniques…

A: Authentication is a security process that verifies the identity of a user or entity before granting…

Q: thentication, is it possible to achieve anything? Clearly, there are several aspects to cons

A: Introduction: Authentication, whereas only 1 side of cybersecurity, is that the initial line of…

Q: Which of our goals could be possible with authentication's help? The good and bad points of…

A: Introduction Identification of a specific process or entity making an attempt to get into a secure…

Q: By which “Cryptographic Technique”

A: The objective of the confidentiality principle is to make sure that non-public information remains…

Q: Three people (Anders, Anna, and Lena) want to communicate safely. They want to use symmetric…

A: Encryption is a technique used to encrypt the plain text into other text(Cipher text) so that…

Q: Below is part of a student database for your reference. The primary keys are highlighted in bold.…

A: 10) FROM student s, enrollment r, course c 12) AND r.courseno=c.courseno 22) FETCH course_list into…

Q: Which of our objectives may become a reality if we were to get support from authentication? In this…

A: To-Do: Make a list of the advantages and disadvantages of various authentication methods.…

Q: If you're configuring PPP authentication, you have the option of using either PAP or CHAP. In which…

A: The answer is given below step.

Q: It's smart to employ asymmetric encryption techniques, such as those found in public-key…

A: Through the use of encryption, data can be transmitted and stored in a way that only those who are…

Q: Which of our aims has the most chance of becoming a reality if we get authentication help? The next…

A: Solution: Make a summary of the benefits and drawbacks of the various authentication methods.

Q: Do the two forms of user authentication really vary in how they allow users to log in from afar? If…

A: With each new assault, cybercriminals find ways to better their methods. This has resulted in a…

Q: Using authentication, is it possible to achieve anything? Clearly, there are several aspects to…

A: Authentication is the process of proving one's identity. Yes, authentication can be used to achieve…

Q: Explain each authentication method's risks and solve this problem?

A: Authentication methods can vary in terms of their risks and vulnerabilities. Here are explanations…

Q: Using authentication, can we accomplish any objectives? Clearly, there are many factors to consider…

A: The question you asked is about the objectives that can be accomplished through authentication and…

Question

Digital signatures have a potential weakness due to lazy users. In e-commerce
transactions, a contract might be drawn up and the user asked to sign its SHA-1 hash.
If the user does not actually verify that the contract and hash correspond, the user may
inadvertently sign a different contract. Suppose that the Mafia try to exploit this
weakness to make some money. They set up a pay Web site (e.g., pornography,
gambling, etc.) and ask new customers for a credit card number. Then they send over a
contract saying that the customer wishes to use their service and pay by credit card
and ask the customer to sign it, knowing that most of them will just sign without
verifying that the contract and hash agree. Show how the Mafia can buy diamonds from
a legitimate Internet jeweler and charge them to unsuspecting customers.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Step by step

Solved in 2 steps

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.

Similar questions

The distribution of keys was initially a problem that public key cryptography had to deal with.Make use of an example to quickly demonstrate how key distribution could be accomplished.
If we were successful in obtaining authentication support, which of our goals would we have the most chance of accomplishing? In the following sections, we will discuss the advantages as well as the disadvantages of using a variety of authentication methods.
When you say "authentication functions," I'm not sure what you mean. Learn how the various tactics in the market fare in comparison to one another.
Cryptography answer plz
With the aid of identification, how much progress can we expect to make?The pros and cons of various authentication schemes will be examined in this section and compared to one another.
For an international organisation that owns many branches around the world,combining the strengths of AES (symmetric) and RSA (asymmetric) encryptionis able to ensure a secret key be distributed to the intended recipients withoutrunning a huge risk of it being carelessly or deliberately compromisedsomewhere along the way. Describe how AES and RSA work together.
Which of our goals could become a reality if we seek help from authentication? In this part, we'll go through the benefits and drawbacks of employing various authentication techniques.
There are two types of false positives and negatives. it is possible to differentiate between biometric authentication attempts. The advantages of biometrics over passwords are explained. - Why? Can fraud be committed using biometric authentication? Describe it in your own words.
Can we achieve our aims by authenticating anything?We'll compare authentication methods in this section.
Choose between the Password Authentication Protocol (PAP) or the Challenge Handshake Authentication Protocol (CHAP) when setting up PPP authentication. If that's the case, then I'm safer from harm, right? Your response requires more background information. While setting up PPP authentication, you may use either PAP or CHAP. How come I feel safer then? Your response makes no sense out of context.
Convert the following CFG to CNF: P: S->ASA | aB, A->B|S, B->blE
In the beginning, the difficulty that public key cryptography had to deal with was the distribution of keys. Make use of an example to demonstrate quickly how key distribution could be carried out.