Skip to main content
Information Security

Return to Question

typos
Source Link
Bruno Rohée
Bruno Rohée
  • 5.5k
  • 30
  • 41

Recently, iI have been looking at PKI and certificates, and TLS 1.2 as part of my study of cryptography. I have the understanding that the public key included in the certificate of a website is the key that is used to establish a session key between two parties.

But on certain websites, when iI opened google chromesGoogle Chrome security overview by clicking on the green https padlock, chromeChrome informed me that the key exchange was done by ECDHE with P-256 (ElipticElliptic Curve Diffe HellmanDiffie-Hellman, curve P-256). But, upon opening the full certificate details for the website, the public key in the certificate was an RSA 2048 bit public key. But, this confused me, as iI thought it should be an ECDHE key and iI am not sure whether the key exchange is done by ECDHE, as chromeChrome says, or RSA, which is the public key in the certificate, which iI thought was used in the key establishment.

Any help would be appreciated.

Recently, i have been looking at PKI and certificates, and TLS 1.2 as part of my study of cryptography. I have the understanding that the public key included in the certificate of a website is the key that is used to establish a session key between two parties.

But on certain websites, when i opened google chromes security overview by clicking on the green https padlock, chrome informed me that the key exchange was done by ECDHE with P-256 (Eliptic Curve Diffe Hellman, curve P-256). But, upon opening the full certificate details for the website, the public key in the certificate was an RSA 2048 bit public key. But, this confused me, as i thought it should be an ECDHE key and i am not sure whether the key exchange is done by ECDHE, as chrome says, or RSA, which is the public key in the certificate, which i thought was used in the key establishment.

Any help would be appreciated.

Recently, I have been looking at PKI and certificates, and TLS 1.2 as part of my study of cryptography. I have the understanding that the public key included in the certificate of a website is the key that is used to establish a session key between two parties.

But on certain websites, when I opened Google Chrome security overview by clicking on the green https padlock, Chrome informed me that the key exchange was done by ECDHE with P-256 (Elliptic Curve Diffie-Hellman, curve P-256). But, upon opening the full certificate details for the website, the public key in the certificate was an RSA 2048 bit public key. But, this confused me, as I thought it should be an ECDHE key and I am not sure whether the key exchange is done by ECDHE, as Chrome says, or RSA, which is the public key in the certificate, which I thought was used in the key establishment.

Any help would be appreciated.

Bumped by Community user
Source Link
Sam Gregg
Sam Gregg
  • 51
  • 1
  • 4

RSA or ECDHE for key establishment?

Recently, i have been looking at PKI and certificates, and TLS 1.2 as part of my study of cryptography. I have the understanding that the public key included in the certificate of a website is the key that is used to establish a session key between two parties.

But on certain websites, when i opened google chromes security overview by clicking on the green https padlock, chrome informed me that the key exchange was done by ECDHE with P-256 (Eliptic Curve Diffe Hellman, curve P-256). But, upon opening the full certificate details for the website, the public key in the certificate was an RSA 2048 bit public key. But, this confused me, as i thought it should be an ECDHE key and i am not sure whether the key exchange is done by ECDHE, as chrome says, or RSA, which is the public key in the certificate, which i thought was used in the key establishment.

Any help would be appreciated.