For the Module Three assignment, students will be provided multiple scenarios that contain hypothetical situations pertaining to authentication and security protocols. Each of these situations will require the student to critically assess the situation and propose appropriate actions to be taken. This allows students to make practical application of the knowledge gained pertaining to authentication protocols, which will assist in the development of statements of policy for the information assurance plan.
Prompt: Explain the threat in each of the following types of authentication and provide a solution for each scenario below:
• Alice sends a password, and Bob compares it against a database of passwords.
• Alice sends a password, and Bob hashes it and compares it against a database of hashed passwords.
• Alice computes the hash of a password and uses it as secret key in challenge/response protocol.
• Alice computes the hash of a password and sends it to Bob, who hashes it and compares it against a database of doubly-hashed passwords.