Key exchange protocols

learn more… | top users | synonyms

2
votes
3answers
292 views

Secure device pairing protocol

I need to implement secure pairing between two devices based on a short shared PIN code with no trusted third party. If you think about the way bluetooth devices pair you won't be far off -- my ...
2
votes
1answer
111 views

Mutual Anonymity in key exchange

If Alice (sender) sends a private message embedded with public key of the Bob(recipient) through onion network, so in this key exchange, does Bob remains anonymous to Alice as Alice knows about the ...
2
votes
3answers
624 views

Establish a secure channel with mutual authentication given pre-shared public keys

Suppose I have a system whereby parties are identified by their public key (with some pre-selected asymmetric key algorithm). Suppose I have a party PUB1 which wants to establish a secure channel with ...
2
votes
2answers
56 views

Preventing a Computational DoS Attack in Public Key Cryptosystems

I'm designing a server which accepts anonymous messages using ECIES: as in, anonymous users send the server an ephemeral EC public key, and the server uses ECDH to derive a shared secret, and some KDF ...
2
votes
1answer
1k views

How do I share my S/MIME public key?

I have setup S/MIME encryption for my email address, and I'd like to allow people to download the public key from my website, rather than having to first receive an email from me. I want the public ...
2
votes
2answers
260 views

Key distribution and key exchange for simple secure FTP implementation

I'm developing a simple secure file transfer protocol for a University project using openssl. I have a Client (let be C) and a Server (let be S). C will send to S messages like get, put, cd, … and S ...
2
votes
3answers
84 views

Is it a good practice to include a download URL of my GPG public key in my email signature?

I was wondering if I can put a download URL for my recipients to get my GPG public key easily in my email signature. Is this a good practice? If not, what's a good alternative?
2
votes
1answer
111 views

Picking exponents for Diffie-Hellman

I'm taking a class on Cryptography and the professor mentioned that given mod N and base g with a certain order, you should pick powers m and n such that they create a certain property with the order ...
2
votes
1answer
57 views

How to establish a random OTR remote party as a specific individual?

In reading Glenn Greenwald's 2014 book No place to hide, one thing stood out to me as a bit odd. Greenwald details how Edward Snowden was insistent that Greenwald install PGP in order to communicate ...
2
votes
0answers
77 views

Main difference between Yahalom and Needham-Schroeder key exchange protocols

I am just wondering what is the main difference between the Yahalom and Needham-Schroeder key exchange protocols? Which protocol uses less computational power?
1
vote
3answers
164 views

Cryptography key gathering tool

I am wondering if there exist a tools which can return the value of the one of the private key if the following are known: 1) Encryption Algorithm 2) Public key 3) Plain text 4) Cipher text Or may be ...
1
vote
1answer
137 views

Is there a known vetted alternative to this key-exchange protocol?

I have three participants: A client A in possession of the public key Kpub A login server S in possession of the private key Kpriv Game servers B (B1, B2 etc) S and all B may share a finite number ...
1
vote
2answers
62 views

Client-server encryption technique explanation (TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, 128 bit keys)

I opened a web page using https. When I looked at the page info provided by my browser (Firefox) I saw following: Connection encrypted: High-grade Encryption ...
1
vote
2answers
213 views

SSL/TLS : Authentication mechanism

I have these doubts regarding authentication in SSL/TLS : Will there be an authentication involved for all SSL connections ? For eg. when I browse the internet, using the most up-to-date browser, ...
1
vote
1answer
679 views

ECC Brainpool Standard Curves and Curve Generation with Bouncy Castle which seed to use?

I want to implement a ECC Key Agreement with a Brainpool curve brainpoolP512r1 or brainpoolP512t1. I'm not clear about whichseed value to use (and how). In this document ...
1
vote
2answers
212 views

How to treat/hash ECDH shared secret to use as keys for AES?

I'm doing some studies/development for a security system that would use ECDH with ephemeral keys. In my code I'm currently using a 256-bit EC, so when the two parts compute the shared secret, I get a ...
1
vote
1answer
319 views

Can manual hash verification defend against a DH MITM attack?

I understand how DH key exchange is vulnerable to a MITM attack. When Alice sends Bob g, p and her public key, if she also sent a value H that was a hashing of the values g,p, and public key all ...
1
vote
0answers
62 views

SSH using pre-existing session (symmetric) keys

Is there at present a way to open a SSH connection using pre-existing symmetric session keys? In other words, if I create a list of symmetric keys can I send that list to the recipient on a CD or USB ...
1
vote
2answers
259 views

GSM A5/1 encryption: Key management

I'm currently studying the A5/1 algorithm used for GSM encryption. I understood how thanks to the symmetric private Key and a public counter frame one can encrypt the communication between A and B. ...
1
vote
0answers
100 views

Does Diffie-Hellmann (DH) key exchange protocol lower Off-The-Record protocol (OTR) security level?

Off-the-Record protocol employes Diffie-Hellman key exchange protocol (DH). DH protocol does not provide authentication of the communicating parties and, according to many sources, is vulnerable to ...
1
vote
0answers
51 views

Any Suggestion Exchanging shared key between process via port in untrusted machine (infected my malware)?

I am trying to get shared key between Firefox extension and a java program running in same machine. I am communicating both application via socket. My assumption is that malware is running in ...
1
vote
1answer
3k views

The request was aborted: Could not create SSL/TLS secure channel Exception

Let me explain my situation. I created a self-signed certificate and installed it in the Trusted Root Certification Authorities section in MMC. I then created two certificates using the self-signed ...
1
vote
1answer
192 views

Secure Encrypted Chat Protocol [duplicate]

Possible Duplicate: Is there a way to negotiate a secret between 2 parties with no prior knowledge? Imagine two clients who want to establish a secure connection over a server. Both clients ...
1
vote
2answers
139 views

Is a Diffie Hellman Ephemeral key good material for being used as a symmetric cipher algorithm key?

I am designing a secure protocol (for academic/learning purposes) and I am at the point where I need to (re)design the key exchange step. In my previous implementation, I used to rely on RSA to ...
0
votes
2answers
744 views

Diffie-Hellman key-exchange: securing prime and base

As we know DH algorithm based upon 2 large prime numbers, which are used to be called as prime and base I am writing app which implements DH key exchange algorithm. From security point of view should ...
0
votes
3answers
922 views

Are there flaws in this simple key exchange?

I'm reviewing for a computer security exam. Here is a simple scenario: Suppose that someone suggests the following way to confirm that the two of you are both in possession of the same secret key. ...
0
votes
1answer
42 views

MITM protection, key distribution

I want to make sure each of my apps users only get their own data, and that nobody tampers with it or sniffs it in a MITM fashion. Encryption of everything should be the solution, right? But how do I ...
0
votes
2answers
64 views

Is it safe to use a ECDSA public key as a password seed for GCM/AES?

Two peers already exchanged their ECDSA (curve secp256k1) public keys using a secure channel. They want to establish an authenticated encrypted channel between them. They will use CCM mode and with ...
0
votes
1answer
43 views

Evaluation of cryptosystem for authentication and keyexchange

I'm a masters student in computer science who works part time with my own company as a consultant. My lastest project is based on my bachelor thesis which handles everything except the security. The ...
0
votes
2answers
79 views

does a public key work with all encrypted programs

let us say, I use program "x" for my e-mail security. through them I have a public key and a private key. My friend uses program "y" for their e-mail security and consequentially have a public key ...
0
votes
1answer
106 views

Purpose of key confirmation

Among the requirements for a secure key exchange is the key confirmation. I wonder why is this step required. Even if the other party hasn't computed a correct value for the shared secret, it doesn't ...
0
votes
1answer
936 views

Why Qualys SSL Server Test is giving me 80 and not 100 in Key Exchange?

My openssl ciphers -v 'CIPHER' output is the following: ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA ...
0
votes
2answers
65 views

What are the alternatives to ECDSA for an authentication protocol?

In an authentication protocol, S has a public/private key pair known to C, and S and C have established a secure channel (for example, using DH or ECDH, or any other key exchange protocol). C wishes ...
0
votes
1answer
397 views

Which is better in “DH-group14-sha1 with hmac-sha2-256” and “DH-group-exchange-sha256 with hmac-sha2-256” from performance and security perspective?

In our product (embedded system), so far we were using diffie-hellman-group1-sha1 with hmac-sha1. But due to security concern we are planning to use diffie-hellman-group14 for key exchange and ...
0
votes
1answer
86 views

Key-Exchange Algorithms VS Local Key Generation?

I was wondering the difference in term of Security, Computational cost and Network overhead between the use of : A Key-Exchange Algorithm (e.g. Diffie–Hellman) to set up a symmetric key. The ...
0
votes
1answer
82 views

Key Exchange algorithm to be used for REST framework

I was required to create key exchange module for custom Rest framework which supports document level security in REST requests. Framework has its own security module which allows to encrypt parameter ...
0
votes
3answers
166 views

What are the MitM implications of a stolen client-side private key?

Many VoIP handsets support client-side SSL authentication for auto-provisioning. Unfortunately, some devices must be programmed with their client-side keys. (Keys generated on low-entropy devices are ...
0
votes
2answers
158 views

How do key servers resolve conflicts?

According to the PGP network FAQ While a number of key servers exist, it is only necessary to send your key to one of them. The key server will take care of the job of sending your key to all ...
0
votes
0answers
63 views

How can I generate some public and private keys on both sides with low overhead?

We have an Authority Center (CA) generating some public and private keys for each client (more than one pair for each client). One method for sending keys to client is sharing a secret key between CA ...
0
votes
1answer
52 views

In IKE protocol; what is the PRF? [duplicate]

In IKE protocol; what is the PRF ? What is "the generation of a key based on modeled random oracle hash functions"?
0
votes
1answer
165 views

Is the Station-to-Station protocol secure?

After I've read a lot about key exchange many sources state that the Station-to-Station is secure, since it also verifies the entity on the other side. Well how is that true, if an active Man in the ...
-1
votes
1answer
640 views

GPG advantages / disadvantages, is it useful or secure? [closed]

I thinking about GPG, is very widely used, but is secure? Why and where we using GPG? I found an article from 2002, but is very old.
-1
votes
1answer
165 views

Theorical question on encryption methods [duplicate]

Possible Duplicate: Encryption strategies for multi users access in production systems I would like to develop a service on wich clients would connect and retrieve informations. These ...
-2
votes
2answers
136 views

Understanding a key establishment protocol

I'm studying a one-pass key establishment protocol. Let be A client and B the Server. A sends to B: E_w(t,b,k) where t is a timestamp requested for freshness, k is the ephemeral key that will be ...