New answers tagged key-exchange
It is, to put it bluntly, a steaming pile of bullshit. The SSL certificate has no bearing on which SSL or TLS cipher suites are negotiated. The two parts of the protocol are separate.
DH (be it with elliptic curves or not) results in a shared secret. That secret is a numerical value with some algebraic properties; however, all the secrecy is contained in it. You just need to distill it, the same way you turn potatoes into vodka. Suppose that you are using a 256-bit elliptic curve, e.g. NIST's standard P-256 curve. The elements sent over ...
Top 50 recent answers are included