Let's say that I have a client and server connected over SSL\TLS. Once the handshake is done, both sides have a shared secret key that they will use to encrypt\decrypt the data.

Can I use this secure connection to pass symmetric keys for other usage? ( hardware based transmitter )

closed as unclear what you're asking by techraf, Serge Ballesta, schroeder Mar 30 '17 at 12:01

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • I'm a little confused. You have an encrypted channel and you want to pass sensitive and secret data over this channel? Yes, you can do this because that's what the encrypted channel is for: to communicate secret data. Are there threats that could break this channel? Yes. But I'm not sure if that's what you are asking about. – schroeder Mar 30 '17 at 6:59
  • Dev1 1 has a HW transmitter that encrypts the data with AES-256 symetric key before sending it. Dev2 has a HW receiver that decrypts the data using the same secret key , the enc\dec is pure hw, where the key needs to be rotated every few seconds. So : 1.use ECDH over public connection to exchange the key every few sec. 2. create ssl session and send the key over that connection 3. use ECDH over secure ssl connection to exchange the key every few sec. Since I will have an ssl connection between the devices anyway for Auth, I am looking at options 1 and 3. – user3087632 Mar 30 '17 at 9:54
  • I'm not sure your comment addresses my question at all. I think you have an X/Y problem here. – schroeder Mar 30 '17 at 12:00
  • You still haven't addressed my questions. You have a secure communication channel, and you want to use this channel to pass a key for another encryption process. Am I correct? If so, My original comment stands: secure, encrypted channels are created in order to pass secret information (like keys). – schroeder Apr 2 '17 at 9:20
  • You are correct , Thanks for the clear answer. Someone told me that is not secure to pass "symetric keys" even not over a secure connection. I didn't think so and wanted to confirm my opinion. – user3087632 Apr 4 '17 at 11:46

Browse other questions tagged or ask your own question.