8 posts
Posted 08 January 2015 - 05:36 PM
Hello, i try to write a custom "secure" network API (yes for minecraft it's a little useless but….)
It's possible for the sender to modify/send a fake distance between the two computers on the modem message ?
cf :
http://computercraft...message_(event)"Returned Object 5 :The distance (in blocks) between the two computers." (i look if i can use it for certify messages)
thank you !
Edited on 08 January 2015 - 04:37 PM
756 posts
Posted 08 January 2015 - 05:43 PM
You can't.
Plus it wouldn't certify anything, since an attacker could figure out that fake distance and send something with the same fake distance.
It's easier to certify with the actual real distance since an attacker cannot easily guess the distance between two other computers.
Edited on 08 January 2015 - 04:45 PM
8 posts
Posted 08 January 2015 - 06:06 PM
You can't.
nice !
Plus it wouldn't certify anything, since an attacker could figure out that fake distance and send something with the same fake distance.
It's easier to certify with the actual real distance since an attacker cannot easily guess the distance between two other computers.
Sorry, it's hard for me because i don't speak english very good for a powerfull explain but i build a system like that :
PC1 - AESmsg = {hello}PC1 —-AESmsg——> PC2
"oh!, this receive msg is no safe" (
man in the middle possible)PC1 <——————– PC2
"your distance with me is 5.123"PC1 - AES msg = {hello, 5.123}PC1 —-AESmsg——> PC2
"if 5.123 == "modem_distance then it's "more" safe now" (
man in the middle hard without AES key for reforge distance in AESmsg (or must be at exacly the good distance)it's just one check but i have others (with time, local whitlist etc… :D/>)
Edited on 08 January 2015 - 05:15 PM
756 posts
Posted 08 January 2015 - 07:05 PM
Yes, your system should work great as long as you have that beginning "handshake" to establish the distance.