Linked Questions
11 questions linked to/from How does non-ephemeral Diffie-Hellman key exchange become compromised in SSL when the RSA private key is leaked?
1
vote
0
answers
138
views
DTLS and Ephemeral Diffie-Hellman [duplicate]
In the DTLS handshake, the two parties involved in the communication must authenticate each other by means of certificates, and after that they perform an ephemeral Diffie-Hellman key exchange, with ...
- 11
1293
votes
3
answers
695k
views
How does SSL/TLS work?
How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering.
I'd like to see details in terms of:
A high level description of the protocol.
...
- 136k
134
votes
4
answers
118k
views
Is there any particular reason to use Diffie-Hellman over RSA for key exchange?
I often see RSA being recommended as a method of key exchange. However, the Diffie-Hellman key exchange method appears to be secure as well.
Is there any considerations one should take into account ...
user10211
50
votes
4
answers
8k
views
Why is key exchange necessary at all?
Let's say "Alice" and "Bob" want to communicate with each other over an insecure network.
Using Diffie–Hellman key exchange, they can get the same symmetric key at last. However, as I understand, ...
- 513
8
votes
2
answers
7k
views
Do you require a special type of certificate for using Diffie Hellman as the key exchange protocol in SSL?
In Diffie Hellman key exchange technique both the parties agree on a common parameter g then they generate their private parameters a and b . Then they exchange g^a and g^b. now they can calculate the ...
- 1,687
2
votes
2
answers
6k
views
ECDSA ciphers and forward secrecy question about key exchange
I have heard that with forward secrecy that the ECDSA ciphers generate different keys for "each session" because they are not dependent on the private key of the server. My question is how is "each ...
- 2,777
7
votes
1
answer
7k
views
Openssl ciphers list sorting and removing
I was playing with a ciphers app to create example list of suites.
Looking at the website (https://openssl.org/docs/manmaster/apps/ciphers.html) if I run one of the examples there:
openssl ciphers -v ...
- 173
3
votes
2
answers
2k
views
Is server public key and Diffie Hellman public are the same?
I am trying to understand the working of TLS. I understand that there are various way to generate the master secret used to encrypting the data. Such as DH (Ephemeral DHE) and RSA. I understand that, ...
- 1,472
-2
votes
1
answer
2k
views
What is encryption by RSA with AES? [duplicate]
By visiting some websites, like bank websites, we can see for example: TLS_DHE_RSA_WITH_AES_128_CBS_SHA, 128 bits, TLS 1.0
I would like to know:
What does mean CBC?
TLS 1.0 is an old version, is ...
- 29
5
votes
2
answers
638
views
OpenSSL vulnerability CVE-2015-0205
I can't seem to make any sense out of the following vulnerability in OpenSSL:
DH client certificates accepted without verification [Server] (CVE-2015-0205)
=============================================...
- 421
1
vote
1
answer
979
views
What's the usage of the signature algorithm in TLS_DH_* cipher suites?
According to RFC5246 A.5 there are cipher suites TLS_DH_RSA_* and TLS_DH_DSS_*.
How / where does the signature algorithm RSA resp. DSA from the cipher suite come into play when using (non-ephermal) ...
- 145