[an error occurred while processing this directive]

<center><h2>cs150: Notes 35</h2></center>

<h4>Schedule</h4>
<ul>
<li> <b>Now</b>: Problem Set 8 (out Friday, 6 April)
<li> <b>Friday, 20 April</b>: Exam 2 (out Monday, 16 April)
<li> <b>Monday, 30 April</b>: Project Presentations (Problem Set 9)
<li> <b>Monday, 7 May</b>: Last day to turn in Final Exam (out Monday,
 30 April)
</ul>

<center><b><font size="+1">Notes</font></b></center>
<p>
Ways to authenticate:
<ul>
<li> Something you know (password)
<li> Something you have (transparency)
<li> Something you are (fingerprint)
</ul>

<p>

<b>Cryptographic Hash Functions</b>
<p>
<b>One-way</b>: Given <em>h</em>, it is hard to find <em>x</em> such that
<em>H</em>(<em>x</em>) = <em>h</em>.
<br>
<b>Collision Resistent</b>: Given <em>x</em>, it is hard to find
<em>y</em> not equal to <em>x</em> such that <em>H</em>(<em>y</em>) = <em>H</em>(<em>x</em>).
<p>

<center><b><font size="+1">Links</font></b></center>
<ul>
<li> <a href="http://news.com.com/2009-1001-916719.html"><em>Passwords: The
Weakest Link?</em></a>, cNet News, 22 May 2002.<br>

<li> <a
href="http://pdos.csail.mit.edu/papers/webauth:sec10.pdf"><em>Dos and
Don'ts of Client Authentication on the Web</am>, Kevin Fu, Emil Sit,
Kendra Smith, Nick Feamster.  USENIX Security Symposium, 2001.
<li> <a
href="http://www.antsight.com/zsl/rainbowcrack/">RainbowCrack</a> (hash
cracker, use with caution)

<li> <a href="http://www.cs.virginia.edu/phprevent/">PHPrevent</a>:
Automatically Hardening Web Applications Using Precise Tainting

</ul>
<p>

[an error occurred while processing this directive]