Would PGP work as a method of sharing the AES key, as shown below, and what would be the flaws with this method of encryption?
- Server sends PGP public key
- Client generates (uses as AES key for networking) and encrypts random 128 byte key with PGP public key
- Server decrypts data with PGP private key and uses as AES key for networking
Obviously current standards such as SSL/TLS would work better, and the keys would need to be checked at some sort of CA (perhaps a public PGP key server)