Timeline for What's the usage of the signature algorithm in TLS_DH_* cipher suites?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 13, 2017 at 15:34 | vote | accept | user120513 | ||
| Nov 7, 2017 at 23:29 | comment | added | user120513 | @dave_thompson_085: Thank you very much. That clears things altogether: "The names DH_DSS, DH_RSA, ECDH_ECDSA, and ECDH_RSA are historical" (RFC5246, 7.4.2). So, actually, DSS and RSA doesn't have a meaning in the (EC)DH-cipher suites. | |
| Nov 7, 2017 at 23:13 | answer | added | user120513 | timeline score: 1 | |
| Nov 7, 2017 at 23:05 | history | edited | user120513 | CC BY-SA 3.0 |
added 193 characters in body; edited title
|
| Nov 7, 2017 at 22:49 | comment | added | dave_thompson_085 | TLSv1.2 changes this; see the text on page 49 just after the itemized list in section 7.4.2 of rfc5246. Also it's spelled 'ephemeral'. And by convention in DH x is the private key for either party and y = g^x mod p is the corresponding publickey for that party. | |
| Nov 7, 2017 at 22:46 | comment | added | user120513 | @StackzOfZtuff: Thanks for the link. (1) The don't think it's a duplicate of the linked question because the context of the other question is in essence forward security while my question is more about the notation of the DH-cipher suites. (2) But the accepted answer in the linked question also answers my question: It links RFC2246 where it is specified that, e.g., DH_RSA means a DH certificate that is signed by RSA. | |
| Nov 7, 2017 at 22:08 | review | Close votes | |||
| Nov 8, 2017 at 21:39 | |||||
| Nov 7, 2017 at 21:52 | comment | added | StackzOfZtuff | Possible duplicate of How does non-ephemeral Diffie-Hellman key exchange become compromised in SSL when the RSA private key is leaked? | |
| Nov 7, 2017 at 21:42 | comment | added | StackzOfZtuff | Related: security.stackexchange.com/questions/37797/… | |
| Nov 7, 2017 at 19:30 | comment | added | user120513 | Just to add: I know that in practice on uses ephermal Diffie-Hellmann because of PFS. However, I want to understand if cipher suites like TLS_DH_RSA_WITH_* makes sense or should be rather TLS_DH_WITH_* (i.e. RSA, DSS omitted). | |
| Nov 7, 2017 at 19:14 | history | asked | user120513 | CC BY-SA 3.0 |