Public Key Deception

Impostor

“I am the True Person.”

“Here is TP’s public key.”

(Sends Impostor’s public key)

“Here is authentication

based on TP’s private key.”

(Really Impostor’s private key)

Decryption of message from Verifier

encrypted with Impostor’s public key,

so Impostor can decrypt it

Verifier

Must authenticate True Person.

Believes now has

TP’s public key

Believes True Person

is authenticated

based on Impostor’s public key

“True Person,

here is a message encrypted

with your public key.”

Critical

Deception

Previous slide

Next slide

Back to first slide

View graphic version