Broadcast Authentication Protocol
The full name of the Broadcast Authentication Protocol is the TESLA Broadcast Authentication Protocol. TESLA stands for "Timed Efficient Stream Loss-tolerant Authentication." It covers the transmission of digital broadcasts by satellite, radio and IP multicast.
-
Purpose
-
The TESLA Broadcast Authentication Protocol attempts to address a security weakness in broadcast transmissions. This is the possibility that a third party might copy the format of the transmitted data packets and insert his own data (voice or video). This type of attack is called packet injection. Authentication procedures can verify that all packets received were actually sent be the intended transmitter.
Function
-
The TESLA method recommends encrypting data but not transmitting the encryption key until all data has been received. This means that anyone intercepting the transmission will be unable to copy the encryption key until it is too late.
-
Weakness
-
TESLA requires received data to be buffered until all data has arrived. This means that it cannot be used for real time, or interactive transmissions such as video streaming, or IP telephony. It does not prevent "man in the middle attack" where an intruder impersonates the receiver, receives all data, alters it and then retransmits to the receiver, impersonating the sender.
-
References
- Photo Credit Observatorio astrologico image by CarlosNeto from Fotolia.com