From 2ee202b1aead7deaab927e606ca6fbb44031d626 Mon Sep 17 00:00:00 2001 From: Cas Cremers Date: Fri, 23 Aug 2013 15:15:19 +0200 Subject: [PATCH] Updated Denning-Sacco-Lowe note. --- gui/Protocols/denning-sacco-lowe.spdl | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/gui/Protocols/denning-sacco-lowe.spdl b/gui/Protocols/denning-sacco-lowe.spdl index ddf245a..761c22b 100644 --- a/gui/Protocols/denning-sacco-lowe.spdl +++ b/gui/Protocols/denning-sacco-lowe.spdl @@ -4,8 +4,11 @@ # http://www.lsv.ens-cachan.fr/spore/denningSaccoLowe.html # # Note: -# According to SPORE there are no attacks on this protocol, scyther -# finds one however. This has to be investigated further. +# According to SPORE there are no attacks on this protocol. Scyther +# finds a straightforward pre-play attack on the first message, which +# violates synchronisation. However, this does not seem to be a +# practical attack unless consistency is required, e.g., for logging or +# auditing. usertype Key; usertype SessionKey;