During the Diffie-Hellman key exchange, the server sends a Diffie-Hellman Key Exchange Reply (31)
message back to the client. This message contains the DH server f
but also two other pieces of information KEX DH host key
and KEX DH H signature
. Could anyone please explain their meaning and what they are good for ? Thank you.
Add a comment
|
1 Answer
DH server f
- the exchange value used to calculate a shared secret.
KEX DH H signature
- the signed exchange hash, which is used to authenticate the key exchange.
KEX DH host key
- the public key of the server, used to sign the exchange hash
See RFC 4253, Section 7.2 for more details.