Assuming I have a server/client topology, currently I'm facing the problem that I want to generate some key on the client side and somehow make the remote server get it securely.
I'm using AES on both parts, so basically what I need is to generate a random IV and a random secret key, but how to share it with the server so it can afterward decrypt the messages?
The server side is an Apache/PHP web server, so the requests will be sent through
POST, and I'll be using a
SSL certificate for sure, but I'm not sure if this is enough to securely send the data to the other side.
I'd appreciate any approach/idea for this.
---- EDIT ----
This is actually an Android OS app. Instead of using direct
Sockets against the server, I use
HTTP POST requests from the client side to the server, and
Google Cloud Messages in the opposite way simulating a multicast behavior since the server will be sending new events to the subscribed users.
But these messages will be sent just to registered users, so prior to sending one I need to register the user and thus share the key between both server and client, that's the motivation of the question.