On 6/15/2012 2:37 AM, KZK wrote:
 But Eve, who is listening in to the publicly
available noise, does not know which resistor was connected at each
end and cannot work it out either because the laws of thermodynamics
prevent the extraction of this information from this kind of signal.

So why isn't this susceptible to a simple man in the middle attack?:

Eve cuts the wire between Alice and Bob (AB line) and insert her own node that connects to Alice (AE line) and Bob (BE Line) individually. Alice can't tell the difference between the AB line or the AE Line and sets her resisters. Eve sets her resisters connected on the AE line to random and deciphers the sequence that Alice used. Eve then Uses that sequence on the BE Line. Bob can't tell the difference between the AB line and the BE line, sets his resisters randomly and decodes the message. (Eve can even send Bob a False message).

Seems like this method requires a 100% secure land line, which is impractical.

KZK--

I believe that Alice and Bob are doing the resistor thing for each bit simultaneously, and sharing their measurements over a separate open channel. (The paper says the voltage/current data on the noisy channel is "public".) Furthermore, they're tossing all the trials where those data show they both picked the "high" resistors or both picked the "low". So all Eve can usefully look at are data for essentially identical trials, each one with the noise characteristic of one high and one low resistor on the channel. Eve is free to relay noise between the two lines in your example, but that
won't help her.

If the land line is tapped in a useful manner, the claim is that Alice and Bob can detect that it is. So they'd need a land line, but wouldn't have to secure it.

            ---David


_______________________________________________
http://box535.bluehost.com/mailman/listinfo/brin-l_mccmedia.com

Reply via email to