Im making a project that consist of a client/server system that requires TLS without PKI..
The client MUST authenticate that it's communicating with 'THE' server
The server MUST authendicate that it's communicating with 'A' client
The communication MUST be confidential
The confidentiality of a session MUST NOT relay on the confidentiality of a previouse session (aka forward secrecy)
And the integrity of the transmited data MUST be verified
Im thinking of using DHE for PFS, SRP(or alternativly PSK) for authendication with AES/CBC cipher and SHA for integrity.
My questions are..
Is this protocol stack possible?
Is AES 256 CBC reliable for confidentiality?
Will all the requirements be met by this design?
And if the SRP/PSK password of a client is obtained by a third party will he be able to evasdrop on other clients?
ps: i'm aming for the highest security option possible
Thanks in advance for any feedback and sorry for any confussion caused, i just starter learning about crypto..