As I understood a simplified ECDH-RSA key exchange protocol works like below
- Alice request Bob for its ECDH public key
- Bob generates ECDH parameters and sign them with a CA provided RSA certificate. And Bob sends ECDH parameters and the signature.
- Alice verifies the signature and then share it's own public key
- Now both Alice and Bob have a common shared sceret key.
Could below scenario possible?
- Same as above
- Eve keeps a copy of Bob's public key. Eve doesn't modify the key so when Alice check the signature it is valid.
- When Bob share his public key, Eve keep Alice's public key and send his own public key to Bob.
Now there is a shared secret between Eve and Bob. But the shared secret Alice will compute will be different as Alice computes shared secret with Bob's Public Key and his own private key.
Eve has Alice's Public key, Bob's Public Key and his own private key. Is there any way Eve can generate the same secret key as alice? Or can Eve intercept the key in any other way for the above protocol?