Template:Orphan
The Horton Principle is a design rule for cryptographic systems and can be expressed as "Authenticate what is being meant, not what is being said".[1] The principle is named after the character in Horton Hears a Who by Dr. Seuss.[1][2]
The Horton Principle becomes important when using Message Authentication Codes (or MACs) in a Cryptographic system. Suppose Alice wants send a message to Bob, and she uses a MAC to authenticate a message m that was made by concatenating three data fields, where m := a || b || c. Bob needs to know what rules Alice used to create the message in order to split m back into its components, but if he uses the wrong rules then he'll get the wrong values from an authenticated message.
The problem is that the MAC is only authenticating a string of bytes, while Alice and Bob need to authenticate the way the message was constructed as well. If not, then it may be possible for an attacker to substitute a message with a valid MAC but a different meaning.
Systems can manage this problem by adding metadata such as a protocol number or by formatting messages with an explicit structure, such as XML.
References[]
- ↑ 1.0 1.1 Ferguson, N., Schneier, B. (2003). "Practical Cryptography" page 108, Indianapolis, Indiana: Wiley Publishing, Inc.
- ↑ "Analysis of the SSL 3.0 Protocol", David Wagner and Bruce Schneier
Template:Crypto-stub