Mathematics Stack Exchange is a question and answer site for people studying math at any level and professionals in related fields. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are numerous explanations of the common public-private key system available online, explaining how large primes are used to encrypt messages. Is there any similar guide to the mathematics of OAuth 1.0a? Searching for mathematical basis of oauth only gives mostly explanations of the OAuth login workflow, or random pages about security and OAuth.

share|cite|improve this question
Can you be more specific, what part of the specification this question refers to? – Hagen von Eitzen Feb 3 '13 at 21:33
@HagenvonEitzen Most of what's on the internet is either too technical like that specification, or a basic broad overview of what OAuth is. RSA for example has many mathematical explanations similar to this: Is the reason there is no similar explanation of OAuth because it is too complicated, or because the protocol is relatively new? – NoBugs Feb 3 '13 at 21:45
An authentication protocol can (and should) be verified mathematically, but it isn't easy to do. For examples look at Anderson's "Security engineering" <>; – vonbrand Feb 4 '13 at 2:45
Does that book have a section on OAuth? – NoBugs Feb 4 '13 at 2:49
@vonbrand that page is not found. – NoBugs Jan 26 '14 at 2:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.