X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=doc%2FSECURITY2;h=9b375c2f6cfe1c7ac6e1fc55491e41238a002dc9;hp=11a9ed2a658dc358ca75ef23cd3ffbba03744130;hb=1dcbdf48eb4a642e4d70a9e67aaca78deacf352d;hpb=bf3a11898898c0618cd1b2e7a792b7d7fe56aecb diff --git a/doc/SECURITY2 b/doc/SECURITY2 index 11a9ed2a..9b375c2f 100644 --- a/doc/SECURITY2 +++ b/doc/SECURITY2 @@ -12,7 +12,7 @@ This is the security documentation for tinc, a Virtual Private Network daemon. provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one. - $Id: SECURITY2,v 1.1.2.3 2002/06/21 10:11:10 guus Exp $ + $Id: SECURITY2,v 1.1.2.4 2002/09/15 22:19:37 guus Exp $ Proposed new authentication scheme ---------------------------------- @@ -66,17 +66,15 @@ server CHAL_REPLY 928ffe After the correct challenge replies are recieved, both ends have proved their identity. Further information is exchanged. -client ACK 655 12.23.34.45 123 0 - | | | +-> options - | | +----> estimated weight - | +------------> IP address of server as seen by client - +--------------------> UDP port of client - -server ACK 655 21.32.43.54 321 0 - | | | +-> options - | | +----> estimated weight - | +------------> IP address of client as seen by server - +--------------------> UDP port of server +client ACK 655 123 0 + | | +-> options + | +----> estimated weight + +--------> listening port of client + +server ACK 655 321 0 + | | +-> options + | +----> estimated weight + +--------> listening port of server -------------------------------------------------------------------------- This new scheme has several improvements, both in efficiency and security.