12.04.2015127 Authentication: secure storage, with errors attack: S Hash(R) Guess R or B B' = S  E(R') = B  E(R)  E(R') or S H T = [B  E(R)] H T = B' H T Enrollment:  S = B  E(R) random R Condition: given S and Hash(R) it is hard to estimate B, R store S Hash(R) R B E(R)
{}