It's just a short question, but I haven't find a clear answer yet...

It's in the frame of a TLS-ECDHE handshake.

Where does the specificity of the ECDHE, over the DHE, appears ?

At which point do we use the Elliptical Curves ?

To compute the PreMasterKey, or also before that ?


The key exchange algorithm is used to compute the "master secret", usually by way of computing another key known as the "pre-master secret" which is then expanded into the actual "master secret" with the PRF. DHE uses Diffie-Hellman as key exchange algorithm; ECDHE uses a variant of Diffie-Hellman that involves an elliptic curve.

In both cases, the server must send the "DH parameters" (the definition of the group in which the Diffie-Hellman will be performed -- in the case of ECDH or ECDHE, that group is an elliptic curve) and its "DH public key" (the server's half of the DH key exchange). When using DH or ECDH cipher suites, these information (group definition and server public key) are part of the server's certificate; when using DHE or ECDHE cipher suites, they are not part of the server's certificate, and are instead sent as a stand-alone ServerKeyExchange message.

In practice, DH and ECDH are very rarely used, because certificates with DH or ECDH keys are a rarity. Instead, DHE and ECDHE are used.

  • OK, thanks, it's clearer. And does the generation of the master key only involve the pre-master key, or does it include also the random numbers exchanged at the beginning of the handshake ? – 3isenHeim Sep 3 '15 at 15:40
  • See section 8.1: the master secret generation involves a call to the PRF that includes as parameters the client and server random values exchanged at the beginning of the handshake. – Tom Leek Sep 3 '15 at 15:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.