When we say "out-of-band exchange of symmetric keys", what does "out-of-band" mean?

  • It is answered here: crypto.stackexchange.com/a/10378/40437 – Limit Dec 17 '16 at 19:50
  • it just means not through the protocol. any method of communication other than the one described in the text. a pgp public key in a twitter DM. – Z.T. Dec 17 '16 at 21:48

From Wikipedia:

Out-of-band is activity outside a defined telecommunications frequency band, or, metaphorically, outside some other kind of activity.

It just means through another means of communication than the one you use to exchange the ciphertexts.

If you are sending the encrypted messages over the internet, calling up the other person on the phone and reading the key to them would be transmitting it "out of band". So would meeting the person IRL and giving them the key or sending it in an ordinary letter.

The point is that you have on (relatively) secure means of communication (where you don't think there is any eavesdropper). You can use this channel to transmit a symmetric key, that you can later use to communicate securely on an insecure channel (where there might be eavesdroppers).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.