Re: Securing small UDP transmissions

2004-03-24 Thread Lukasz Wójcicki
> > > Here's a simple thing: when your "agents" connect to the server, have > > > the server create a symmetric key (e.g., 3DES) and send it back to the > > > client. > > > That isn't good example. First, there is one additional connection between > > server and client. Second, attacker could be ge

Re: Securing small UDP transmissions

2004-03-24 Thread Rich Salz
> > Here's a simple thing: when your "agents" connect to the server, have > > the server create a symmetric key (e.g., 3DES) and send it back to the > > client. > That isn't good example. First, there is one additional connection between > server and client. Second, attacker could be get a key bec

Re: Securing small UDP transmissions

2004-03-24 Thread Lukasz Wójcicki
> > how can I properly secure small anonymous UDP transmissions? > > I don't know what you mean by this. Are you sure you mean anonymous? > > Here's a simple thing: when your "agents" connect to the server, have > the server create a symmetric key (e.g., 3DES) and send it back to the > client. Whe

Re: Securing small UDP transmissions

2004-03-23 Thread Rich Salz
> Well, what I meant by anonymous was that they're connection-less, and > with the nature of UDP, the tracker can't be quite sure that they are > who they claim to be. Anonymous has nothing to do with connection-less or not. If the server is going to decode the packets that the client encrypts, t

Re: Securing small UDP transmissions

2004-03-23 Thread Axel Andersson
On Mar 23, 2004, at 16:10, Rich Salz wrote: how can I properly secure small anonymous UDP transmissions? I don't know what you mean by this. Are you sure you mean anonymous? Well, what I meant by anonymous was that they're connection-less, and with the nature of UDP, the tracker can't be quite s