New answers tagged key-exchange
8
The situation can be confused, so let's set things right.
RSA is two algorithms, one for asymmetric encryption, and one for digital signatures. These are two distinct beast; although they share the same core mathematical operation and format for keys, they do different things in different ways. Diffie-Hellman is a key exchange algorithm, which is yet ...
3
In the context of SSL Polynomial is right: (EC)DHE suites use ephemeral key-exchange using Diffie-Hellman. Since the server forgets the private key used for exchange soon after using it, a compromise of the server's long term key doesn't allow an attacker to decrypt all past communications, i.e. it provides Perfect forward secrecy.
I recommend using ...
12
DH ephemeral key exchange provides perfect forward secrecy, which RSA alone does not. This means that even if the long-term key is leaked at a later date, the session keys for individual connections are not compromised, even if the full data stream is captured.
0
X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine);
You're using the LocalMachine store. Either put your certificates are 'Machine Certificates' in mmc, (elevated MMC -> certificate snap-in -> Computer Account), or use the CurrentUser store.
Also this might be a better question for StackExchange since it's C#/Programming ...
Top 50 recent answers are included
