You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While the concepts are later clarified using the passport example, the initial definitions of verification and authentication remain somewhat ambiguous.
The example provided under the definition of verification also aligns with the provided definition of authentication. It would be more effective to illustrate verification with an example that does not simultaneously constitute authentication. For example, verifying a digital signature exemplifies verification alone: using a public key, one can verify that the signature is valid (in cryptographic terms, ensuring the signature was produced by the private key related to the public key used for verification). However, this process does not reveal the identity of the signer if the link between the public key and the individual (which constitutes authentication) is absent.
I find the NIST's definition of authentication as identity verification (in SP 800-63-3) convincing.
Furthermore, what do you mean with "formal" in Authentication is a specific, formal verification type?
The text was updated successfully, but these errors were encountered:
While the concepts are later clarified using the passport example, the initial definitions of verification and authentication remain somewhat ambiguous.
The example provided under the definition of verification also aligns with the provided definition of authentication. It would be more effective to illustrate verification with an example that does not simultaneously constitute authentication. For example, verifying a digital signature exemplifies verification alone: using a public key, one can verify that the signature is valid (in cryptographic terms, ensuring the signature was produced by the private key related to the public key used for verification). However, this process does not reveal the identity of the signer if the link between the public key and the individual (which constitutes authentication) is absent.
I find the NIST's definition of authentication as identity verification (in SP 800-63-3) convincing.
Furthermore, what do you mean with "formal" in
Authentication is a specific, formal verification type
?The text was updated successfully, but these errors were encountered: