SHARE
SPREAD
HELP

The Tradition of Sharing

Help your friends and juniors by posting answers to the questions that you know. Also post questions that are not available.


To start with, Sr2Jr’s first step is to reduce the expenses related to education. To achieve this goal Sr2Jr organized the textbook’s question and answers. Sr2Jr is community based and need your support to fill the question and answers. The question and answers posted will be available free of cost to all.

 

#
Authors:
James F. Kurose, Keith W. Ross
Chapter:
Security In Computer Networks
Exercise:
Review
Question:15 | ISBN:9780132856201 | Edition: 6

Question

Suppose Alice has a message that she is ready to send to anyone who asks. Thousands of people want to obtain Alice’s message, but each wants to be sure of the integrity of the message. In this context, do you think a MAC-based or a digital-signature-based integrity scheme is more suitable? Why?

TextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbook

Answer

Thousands of people want to receive Alice’s message. They are concern about the integrity of the message.

In this case, it is better to use digital-signature-based integrity scheme works better than the Message Authentication Code (MAC) algorithm.

Reasons:

  • If Alice use the digital-signature-based integrity scheme, then it is enough to use same digital signature for all the receivers. If MAC algorithm scheme is used, then Alice has to maintain one shared key for each receiver, which is difficult to manage.
  • MAC doesn’t require complex encryption/decryption and takes less time. But digital-signature-based integrity scheme is better in terms of message integrity as it is verifiable and non-forgeable.

Therefore, digital-signature-based integrity scheme is better than MAC algorithm scheme in this case.

0 0

Discussions

Post the discussion to improve the above solution.