There are numerous explanations of the common public-private key system available online, explaining how large primes are used to encrypt messages. Is there any similar guide to the mathematics of OAuth 1.0a? Searching for mathematical basis of oauth only gives mostly explanations of the OAuth login workflow, or random pages about security and OAuth.
5
-
$\begingroup$ Can you be more specific, what part of the specification this question refers to? $\endgroup$– Hagen von EitzenFeb 3, 2013 at 21:33
-
$\begingroup$ @HagenvonEitzen Most of what's on the internet is either too technical like that specification, or a basic broad overview of what OAuth is. RSA for example has many mathematical explanations similar to this: sagemath.org/doc/thematic_tutorials/numtheory_rsa.html Is the reason there is no similar explanation of OAuth because it is too complicated, or because the protocol is relatively new? $\endgroup$– NoBugsFeb 3, 2013 at 21:45
-
$\begingroup$ An authentication protocol can (and should) be verified mathematically, but it isn't easy to do. For examples look at Anderson's "Security engineering" <cl.cam.ac.uk/~rja14/book.html> $\endgroup$– vonbrandFeb 4, 2013 at 2:45
-
$\begingroup$ Does that book have a section on OAuth? $\endgroup$– NoBugsFeb 4, 2013 at 2:49
-
$\begingroup$ @vonbrand that page is not found. $\endgroup$– NoBugsJan 26, 2014 at 2:26
Add a comment
|