The actual submission for Phase IV. Previous commit is garbage. Latest feature is audit log.
The actual submission for Phase IV. Previous commit is garbage. Latest feature is audit log.
Fixed identity=fail bug.
change the cipher suites

The original TLS_RSA_WITH_AES_256_CBC_SHA256 is not supported by mac
version of java 1.7. So I changed the AES to be 128 bits
Added 1s delay for login attempts. Fixed timing channel vulnerability where missing usernames and incorrect passwords were handled differently.
Refactored the model authentication functions.
The authentication functionality now resides in UserAuthenticator.java. Otherwise, the remaining functionality us unchanged and has been tested completely. Similar refactorizations with file storage and auditing will follow.
Removed *.dat files from the repository and the history.
I also added them to the .gitignore so they should not be tracked in future commits.