Digital signatures have a potential weakness due to lazy users. In e-commercetransactions, a contract might be drawn up and the user asked to sign its SHA-1 hash.If the user does not actually verify that the contract and hash correspond, the user mayinadvertently sign a different contract. Suppose that the Mafia try to exploit thisweakness to make some money. They set up a pay Web site (e.g., pornography,gambling, etc.) and ask new customers for a credit card number. Then they send over acontract saying that the customer wishes to use their service and pay by credit cardand ask the customer to sign it, knowing that most of them will just sign withoutverifying that the contract and hash agree. Show how the Mafia can buy diamonds froma legitimate Internet jeweler and charge them to unsuspecting customers.

Summary Hashing can show that the data has not been altered in transit, but cannot by itself prove…

d ask new customers for a credit card number. Then at the customer wishes to use their service and pay mer to sign it, knowing that most of them will just sig contract and hash agree. Show how the Mafia can bu met jeweler and charge them to unsuspecting custom-

d ask new customers for a credit card number. Then at the customer wishes to use their service and pay mer to sign it, knowing that most of them will just sig contract and hash agree. Show how the Mafia can bu met jeweler and charge them to unsuspecting custom-

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

blockchain is a collection ofrecords (called blocks), where each block links to the previous block using cryptography. Eachblock contains cryptographic hash, timestamp and data relevant to its application. Think ofit as a distributed ledger where instead of information being stored in a database it is storedon the blockchain. Some examples of solutions that use a blockchain at its core are:1. Cryptocurrencies (however, for this project you may NOT do a cryptocurrency)2. Smart contracts3. Trading4. Supply chain management5. Anti-counterfeiting6. Healthcare7. Domain names8. Proof of existence9. Voting10. and many others! Programming Language: Java The use of third-party libraries for primary functionally is strictly prohibited, however, third party libraries can be used for other functionality such as communications and visualisation (such as normal JavaFX, JFreeChart, GraphStream, JGraphT, Yworks, JUNG or JMonkey). The use of other data structures for auxiliary operations is…
Look up the following properties of a cryptographic hash function on the internet or elsewhere: Collision resistance, hiding, and puzzle friendliness. Give a careful formal definition. This could be copied, if so, make it clear where it is from. Then in your own words explain what each of the properties means and why it is an important property to ensure security.
A one-way hash algorithm is one sort of cryptographic algorithm. Extensively describe it and its attributes.
The cryptographic hash property that implies the other two is Choose one: Preimage resistance Collision resistance Second preimage resistance
A cryptographic hash function is most like a Choose one: Private random function Public random permutation Private random permutation Public random function
What about encrypting an AES key with a secret password? Make a case for why your answer is correct.Look at the keyed hash function as an alternative to the hash function. Check out a sample hash function with a single key.
Cryptography is the practice of encryption. Information Security uses cryptography techniques to encrypt and decrypt data. A simple encryption method might take plaintext and mix up the letters using some predetermined pattern and then use that pattern to decrypt the data for reading. Ciphers are the algorithms used to put the data into its secret pattern and then systematically decrypt it for reading. This script is going to use a famous simple cipher called the Caesar Cipher. It is a substitution cipher where each letter in the text is 'shifted' in a certain number of places. It uses the alphabet as the primary pattern and then based on the shift number, it would shift all the letters and replace the alphabet with our pattern. For example, if our shift number was 3, then A would be replaced with D, if we performed a right shift. As an example: Text = "THE CAT IS VISIBLE AT MIDNIGHT" Ciphertext = "WKH FDW LV YLVLEOH DW PLGQLIJKW" The keys to decrypt this message are the shift number…
Cryptography is the practice of encryption. Information Security uses cryptography techniques to encrypt and decrypt data. A simple encryption method might take plaintext and mix up the letters using some predetermined pattern and then use that pattern to decrypt the data for reading. Ciphers are the algorithms used to put the data into its secret pattern and then systematically decrypt it for reading. This script is going to use a famous simple cipher called the Caesar Cipher. It is a substitution cipher where each letter in the text is 'shifted' in a certain number of places. It uses the alphabet as the primary pattern and then based on the shift number, it would shift all the letters and replace the alphabet with our pattern. For example, if our shift number was 3, then A would be replaced with D, if we performed a right shift. As an example: Text = "THE CAT IS VISIBLE AT MIDNIGHT" Ciphertext = "WKH FDW LV YLVLEOH DW PLGQLIJKW" The keys to decrypt this message are the shift number…
Determine the security flaws that are present in each method of authentication, then provide a solution to the problem that is described below:Bob makes a hash of a password, and then he checks it against a database of previously hashed passwords.Bob runs a password via a hashing algorithm and then checks it against a database of passwords that have been hashed twice.
The Caesar Cipher Algorithm was introduced in Week #1. Encryption is the act of encoding a message with the intent of allowing only authorized people the knowledge of how to read that message. An encrypted message can be decoded, allowing the secured content to be read after decryption. Recall that the Caesar Cipher uses alphabets as the primary source of information but shifted a certain number of letters to the left or right as a key to create the encrypted data. The Caesar Cipher is easily hacked because of the simple technique used to build the key that encrypts and decrypts the data. In this lab, the key is the number of alphabets shifted, and the direction is always toward the increasing alphabetical order. This provides 26 ways of encrypting a message and therefore makes it easier to be hacked by guessing the key within the range of 0 - 25. Write the function caesar_hack( ) that takes three parameters: a Caesar Cipher encrypted message, an alphabet list, and the original…
The Caesar Cipher Algorithm was introduced in Week #1. Encryption is the act of encoding a message with the intent of allowing only authorized people the knowledge of how to read that message. An encrypted message can be decoded, allowing the secured content to be read after decryption. Recall that the Caesar Cipher uses alphabets as the primary source of information but shifted a certain number of letters to the left or right as a key to create the encrypted data. The Caesar Cipher is easily hacked because of the simple technique used to build the key that encrypts and decrypts the data. In this lab, the key is the number of alphabets shifted, and the direction is always toward the increasing alphabetical order. This provides 26 ways of encrypting a message and therefore makes it easier to be hacked by guessing the key within the range of 0 - 25. Write the function caesar_hack( ) that takes three parameters: a Caesar Cipher encrypted message, an alphabet list, and the original…
Suppose Alice used a Hash function HA to encrypted her sensitive data. Everyone in the public can access her encrypted data. Group of answer choices She must keep HA secret and should not share it with others. She can share HA with other users. She must keep HA secret but can share it with others after encryption. None of the above.