Tag Info

New answers tagged

2

It is, to put it bluntly, a steaming pile of bullshit. The SSL certificate has no bearing on which SSL or TLS cipher suites are negotiated. The two parts of the protocol are separate.


1

DH (be it with elliptic curves or not) results in a shared secret. That secret is a numerical value with some algebraic properties; however, all the secrecy is contained in it. You just need to distill it, the same way you turn potatoes into vodka. Suppose that you are using a 256-bit elliptic curve, e.g. NIST's standard P-256 curve. The elements sent over ...



Top 50 recent answers are included