For questions relating to protocols for distributing public keys, and / or establishing session keys with another party. Examples of key exchange protocols include Diffie-Hellman and IKE.

learn more… | top users | synonyms

1
vote
1answer
22 views

Is there a secure method of distributing keys to network-booted diskless nodes?

I have a bit of an 'initial trust' issue. We are using CoreOS to run Kubernetes, and secure both the etcd API and the Kubernetes API servers using client certificates. We are using iPXE to boot ...
3
votes
1answer
39 views

OpenSSL's EVP functions, more specifically EVP_SealInit

Reference: https://wiki.openssl.org/index.php/Manual:EVP_SealInit%283%29 I want to securely share a symmetrical key between two endpoints using OpenSSL's EVP interface. Transferring the encrypted ...
1
vote
2answers
37 views

Why is random DH group recommended over a standard group?

I know in light of logjam there have been recommendations to generate your own DH group (https://weakdh.org/sysadmin.html). It seems to me that leaving this task up to the end user is much more likely ...
1
vote
1answer
51 views

How to test TLS handshake process?

I need to test the handshake process of TLS. I thought to use inter-process communication in Linux. Is it possible or not? If not, what simulator could be used for this purpose? If yes, what do I ...
1
vote
0answers
46 views

Key Hierarchy and key Encryption

If i have two 56-bit DES keys, and I use these two key to encrypt a 256-bit AES key. Like this: K_AT encrypts K_BT and K_BT encrypts K What is the effective security of key K? Is it 2 X 56 Bits?
1
vote
0answers
20 views

key hierarchy management and master key

Now, I have this equation, {{K_ab}K_bs}K_as. K_ab is encrypted by K_bs then whole packet is encrypted by K_as I think the key structure is K_as is the master key, K_bs is under K_as and K_ab is the ...
1
vote
1answer
21 views

SSH session_id in RFC 4253 (key exchange)

in RFC 4253 "SSH Transport Layer Protocol", section 7.2 specifies how session encryption and integrity keys (and IVs) are derived from the shared secret (K) and the exchange hash value (H). It uses, a ...
1
vote
0answers
27 views

Migration problem between different machines using TrouSerS TPM library

My question coincides with the question posted by Maximiliano Ezequiel. Below is a question. I could make migration process work in one single machine. I can: Export SRK public key. ...
2
votes
1answer
33 views

Can a user verify the quality/safety of pregenerated SSH moduli parameters?

Many tutorials about how to mitigate the Logjam recommend regenerating Diffie-Hellman moduli. This is a resource intensive operation, especially for high-bit groups. This made me think if it made ...
5
votes
2answers
82 views

Public key for SSH over the internet differs from a key for SSH over the LAN

I have a Raspberry Pi and can access it via SSH (authentication via user password) when my laptop is in the same network. Now I want to access it over the internet. I already set my router to forward ...
8
votes
2answers
3k views

How to secure API (private key) for mobile apps

I am building a web service that has to be only accessible for iOS apps. In the future I want to expand to a mobile web-site to make my service also available for other mobile operating systems. ...
3
votes
1answer
48 views

Is symmetric encryption with one time pre-shared key secure?

Suppose I have a secure channel between client and server, with proper certificate validation etc (actually, ssh session). I want to establish a secure connection between my own application on a ...
99
votes
6answers
66k views

“Diffie-Hellman Key Exchange” in plain English

Can someone explain to me what Diffie-Hellman Key Exchange is in plain English? I have read in a non-tech news page that Twitter has just implemented this technology which allows two persons to ...
3
votes
2answers
874 views

DEK, KEK and Master key - simple explanation

This article is intended to be a simplified explanation sans drill-down for people wanting to understand these concepts/terms. What are DEK, KEK and MEK/Master key?
2
votes
0answers
28 views

How rf remotes for “cloning” rolling code find matching codes?

I've been tinkering with a rf (garage door) remote control that has a scanner mode (google JMA SR-48 for details). This mode works for Mutancode and Erreka which I assume would be similar to KeeLoq. ...
5
votes
1answer
62 views

Is OpenSSL generating Diffie-Hellman parameters that are safe for use in TLS or SSH servers?

I would like to generate Diffie-Hellman parameters on a Debian GNU/Linux "Jessie" 8 with OpenSSL. Lets assume the system CSPRNG was seeded with some real random data. On such a system, is the result ...
-1
votes
2answers
1k views

How do certificates stop this man in the middle attack?

Alice and Bob are trying to set up a secure conversation, but unknown to them in the middle is Eve, who can intercept and modify all packets sent between them. The communication goes as follows: ...
1
vote
2answers
91 views

Best encryption mechanism for message storage/exchange in client/server application

So I am building a client/server system that is similar to email idea where clients exchange messages through the server with the following main requirements (note that the clients are pre-registered ...
4
votes
1answer
66 views

Infinite one time pads, brute force multiple pads?

So based on my understanding using the same key for encrypting two completely random plain texts when using an otp cipher will still retain perfectly secret. This is based on the answers on this ...
3
votes
1answer
108 views

Security of Web Game over WebSockets?

Project that I'm working on depends on WebSockets to communicate between the server and client browser for all interactions within the game. I'm attending university for Computer Security, but I'm ...
24
votes
1answer
24k views

What key exchange mechanism should be used in TLS?

There are many key exchange mechanisms that can be used in TLS. Among them are RSA, ECDH_ECDSA, ECDHE_ECDSA, ECDH_RSA, ECDHE_RSA and others. Which of these are more cryptographically secure and can be ...
3
votes
1answer
82 views

What is the best method for key exchange?

I have application working between server and client. All messages must be encrypted and decrypted. I use AES algorithm and I want method to hide the key. I found Diffie-Hellman algorithm, but my ...
4
votes
2answers
265 views

Purpose of key confirmation

Among the requirements for a secure key exchange is the key confirmation. I wonder why is this step required. Even if the other party hasn't computed a correct value for the shared secret, it doesn't ...
1
vote
1answer
44 views

Is there a PAKE algorithm where the passwords can be tested in the first round?

I want to use PAKE for key exchange between two parties (Alice and Bob) which share a low entropy secret (a password they exchanged on a piece of papers). Alice and Bob use a software on there ...
5
votes
1answer
98 views

Is this a safe way to verify public keys?

I want to verify a public key like this: Alice generates a public/private key pair for encryption Alice generates a public/private key pair for signing Alice signs a random 4-letter word + the ...
2
votes
0answers
39 views

Can SRP be implemented using libsodium

I am using libsodium for cryptography and I want to use SRP for key exchange. The wikipedia page lists a python example, but I am not sure if and how I could convert this to libsodium function calls. ...
3
votes
2answers
46 views

What is the message called someone sends to verify a key?

Suppose Alice wants to check if Bob has a certain keypair. Alice could send some random payload to Bob and let Bob sign that payload with his private key. Alice is now able to check if the signature ...
0
votes
1answer
70 views

OpenSSL ecparam generates same private key every time?

Currently I am trying to make my web server as secure as possible and I am testing different cipher suites on the server side, some of them using ECDHE key exchange. When generating private EC keys, ...
4
votes
3answers
94 views

How many keys are used in this specific TLS 1.2 connection?

That shows the mechanism of the connection. How many keys are being used in this connection? What are they? Who knows them? What is the purpose of each key?
3
votes
2answers
112 views

Encryption in peer to peer chat

For a homework assignment I'm developing a chat service that will be able to communicate within a single network. The communication channel should be encrypted with RSA. Should I generate keypairs ...
2
votes
3answers
248 views

Why do I have to use multiple keys for each direction and purpose?

I'm currently writing an examen about 'Lessons Learned in the IT-Security'. I already found some thing, which shouldn't be done. But right now I'm in trouble finding the reasons why not to do so. ...
42
votes
4answers
5k views

Why is key exchange necessary at all?

Let's say "Alice" and "Bob" want to communicate with each other over an insecure network. Using Diffie–Hellman key exchange, they can get the same symmetric key at last. However, as I understand, ...
3
votes
2answers
105 views

3rd party requires my server's public key for a secure connection?

I'm trying to integrate with a 3rd party service and they have requested our server's public key. I've sent it to them and they said they have configured it on their end. In order for me to make ...
0
votes
1answer
84 views

What's the algorithm to generate a modulus and a base for a Diffie-Hellman key exchange app?

I have a school project in which I have to write a java console application that can be used for key exchange between two people. All is fine and well, but finding good base and modulus seems to be a ...
3
votes
1answer
615 views

Encryption key exchange for Tor

I've been studying how Tor works - including the great QA "Why can a Tor exit node decrypt data, but not the entry node?". I understand the concept of onion routing and multiple layers of ...
4
votes
2answers
236 views

Unseen.is encryption claims revisited with their proprietary, patented “xAES” algorithm

I had asked last year about the encryption claims by the web service called https://unseen.is. The very same service that had claims of "beyond army level encryption", "4096 bit keys" etc. This is the ...
1
vote
1answer
2k views

Can you generate Diffie-Hellman parameters quickly [closed]

I am working on an android project for school and I am supposed to do a DHKE(Diffie Hellman Key Exchange). Everything works well, the problem is that it takes a lot of time (really a lot) to generate ...
0
votes
1answer
80 views

In Asymmetric cryptography, is the number of Private Keys limited?

My question is a bit of a leading question, because I assume that the number of Private Keys is a finite number. However, it is possible that the number is such a large number that it would ...
-3
votes
1answer
102 views

Hiding both public and private keys for private communication between 2 servers

I've been trying to learn about deeper info security past abstract words like "tunnels" and "networks", and would appreciate some enlightenment on the following scenario: 2 servers are set up to ...
5
votes
2answers
88 views

Using plain-text phrases as public/private pair?

I'm working on an application that'll be used by relatively non tech-savvy users, and while the machines will have internet access, the app can't have any sort of hosted intermediary. The app allows ...
1
vote
2answers
50 views

ssh/scp from server to server — set permissions (no root)

I have access as a regular user (not as root) to two servers. Server A is accessible via ssh with a username and password, Server B can only be accessed using a keycard and pin. I need to set up a ...
9
votes
3answers
980 views

What to do when you can’t protect mobile app secret keys?

We have a mobile app for iOS and Android available in the Apple and Google Play stores. The app communicates with our server’s Web Services over HTTPS. We have attackers able to spoof the app ...
5
votes
2answers
4k views

Are VPNS vulnerable to active man in the middle attacks?

I know that with SSL/TLS, man in the middle attacks are not possible. For example if Alice and Bob are trying to communicate and Trudy is trying to perform a man in the middle attack, then when Alice ...
4
votes
2answers
120 views

How to establish a random OTR remote party as a specific individual?

In reading Glenn Greenwald's 2014 book No place to hide, one thing stood out to me as a bit odd. Greenwald details how Edward Snowden was insistent that Greenwald install PGP in order to communicate ...
286
votes
13answers
36k views

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

I've often heard it said that if you're logging in to a website - a bank, GMail, whatever - via HTTPS, that the information you transmit is safe from snooping by 3rd parties. I've always been a little ...
1
vote
1answer
110 views

Why is brute forcing DH private key harder than calculating public key?

Assuming shared parameters: prime p base g Alice's private key is a and her public key is A, which is g ^ a mod p Calcuating A requires g * g * g... a times. Modulus is applied whenever necessary. ...
12
votes
6answers
5k views

Is (safe) encryption over compromised line impossible?

I realize something like this would be the holy grail of communications security and have never heard anything to suggest it has been done. Am just wondering. A lot of mathematicians and computer ...
3
votes
1answer
165 views

What public GPG key do I have to publish?

I just created a master key and two subkeys. The first subkey is used for encryption, the second one for signing. Now I am wondering what public key do I have to publish on my website. Does is ...
0
votes
1answer
362 views

Sharing Derived Unique Key Per Transaction (DUKPT) Base Derivation Key (BDK) with a partner

Assumptions: We have devices out in the field injected with keys derived from our one and only BDK. The devices encrypt data using the injected derived key. All our devices connect to our server ...
1
vote
2answers
63 views

Combinations of key exchange and signature algorithm in TLS

Let's say that one does not trust ECC a lot, and values confidentiality over authenticity (perhaps simply for the reason that MitM is more difficult than passive eavesdropping and decryption later ...