Tell me more ×
Mathematics Stack Exchange is a question and answer site for people studying math at any level and professionals in related fields. It's 100% free, no registration required.
up vote 1 down vote favorite

There are numerous explanations of the common public-private key system available online, explaining how large primes are used to encrypt messages. Is there any similar guide to the mathematics of OAuth 1.0a? Searching for mathematical basis of oauth only gives mostly explanations of the OAuth login workflow, or random pages about security and OAuth.

share|improve this question
Can you be more specific, what part of the specification this question refers to? – Hagen von Eitzen Feb 3 at 21:33
@HagenvonEitzen Most of what's on the internet is either too technical like that specification, or a basic broad overview of what OAuth is. RSA for example has many mathematical explanations similar to this: sagemath.org/doc/thematic_tutorials/numtheory_rsa.html Is the reason there is no similar explanation of OAuth because it is too complicated, or because the protocol is relatively new? – NoBugs Feb 3 at 21:45
An authentication protocol can (and should) be verified mathematically, but it isn't easy to do. For examples look at Anderson's "Security engineering" <cl.cam.ac.uk/~rja14/book.html>; – vonbrand Feb 4 at 2:45
Does that book have a section on OAuth? – NoBugs Feb 4 at 2:49

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.