Internet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPsec protocol suite.
130
votes
9answers
8k views
How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
I've often heard it said that if you're logging in to a website - a bank, GMail, whatever - via HTTPS, that the information you transmit is safe from snooping by 3rd parties. I've always been a little ...
7
votes
2answers
323 views
Is there a way to negotiate a secret between 2 parties with no prior knowledge?
Is there a way for 2 parties to negotiate a shared secret (for example, a session key) without having a pre-shared knowledge?
SSL does this by using asymmetric encryption. Is there any other way to ...
8
votes
3answers
329 views
Which authentication at the end of the Secure Remote Password protocol?
For the the client and server to prove to each other that they have the same premaster shared key, the original author suggests this:
M = H(A | B | K) -->
<-- H(A | M | K)
...
6
votes
2answers
350 views
Implementing Secure Remote Password: Constructing the verifier
The SRP protocol as described in RFC 2945 generates the password verifier:
x = SHA(<salt> | SHA(<username> | ":" | <raw password>))`
v = g^x % N
I have three questions: why use ...
3
votes
2answers
117 views
What steps can you take to make offline cracking of SRP harder?
In the aftermath of the Blizzard hack, what steps can I take to make offline cracking of SRP more difficult?
My question assumes that your database is already gone and that you implemented SRP more ...
3
votes
3answers
169 views
Does the hash change the security of the Secure Remote Password protocol?
I'm implementing the Secure Remote Password protocol, and similar to this question, I'm wondering if I can use the SHA-512 hash function instead of SHA-1 currently being used. Would this help improve ...
2
votes
1answer
1k views
How to implement an API-Key-Mechanism
first of all: I am quite unsure about the questions title, so if you have a better idea, please feel free to tell (:
I would like to know about best-practise examples where services (like Twitter or ...
