Hot answers tagged

7

Let me try to sum up what the landscape of end-to-end encrypted messaging protocols for group chat looks like: Protocols like PGP have been around for some time and offer "group messaging" by simply encrypting the content with a randomly generated symmetric key and then encrypting that key asymmetrically with the public keys of each of the recipients. ...


4

I sneakily edit a sneaky MITM attacker into your image: The problem with this protocol is that Bob does not authenticate with Alice. That means a man-in-the-middle attacker who can manipulate the data-flow between Alice and Bob can intercept the initial connection attempt from Alice and respond with their own certificate. Alice will then communicate ...


3

Thanks to comments from @Anders (thx!), I'm unsure if the password generator is a shared service or a personal authentication token like digipass or SecureID. Password generator is a shared service In this situation, Alice can only get the signed response H(R,K) by proving to the password generator that she is Alice by presenting her PIN. If Alice knew K, ...


1

Such a thing doesn't exist, because the protocols and the encryption suites are largely orthogonal. For the most part, any encryption can be used with any protocol.


1

For third query, Since ssl session establishment use lengthy cryptography keys, so its consume more resources. Once session established one should use lighter process. So using Connection and Session logic, https become better in performance.



Only top voted, non community-wiki answers of a minimum length are eligible