Linked Questions

2
votes
1answer
175 views

How can one guarantee that a Diffie-Hellman initial key exchange is not stored? [duplicate]

I might have missed parts of the technicality when it comes to the initial state of the key exchange. However, If I'm not wrong, if the initial key exchange is done over an insecure channel, how can ...
-1
votes
1answer
68 views

How to communicate securely over a monitored network [duplicate]

Let's say we have Alice and Bob in a chatroom, trying to communicate. They're connected to the same network, but we have the network admin constantly monitoring all data being sent to servers (and ...
95
votes
6answers
22k views

Why can't I MitM a Diffie-Hellman key exchange?

After reading the selected answer of "Diffie-Hellman Key Exchange" in plain English 5 times I can't, for the life of me, understand how it protects me from a MitM attack. Given the ...
65
votes
2answers
42k views

Why OpenSSH deprecated DSA keys

There was a question RSA vs. DSA for SSH authentication keys asking which key is better. Basically all answers were more in a favour of RSA over DSA but didn't really tell that DSA would be somehow ...
2
votes
4answers
284 views

How could online encryption ever work? [duplicate]

I have recently read about the german enigma machine in WW2, It worked in a way that every day the machine configuration was sent per mail to the different operators. (I couldn't find official sources ...
1
vote
3answers
2k views

How do SSH keys work? [duplicate]

I'm just looking for a simplified explanation of the mechanics of SSH authorization. Basically, what makes it better then a really long password? And how does the public key play into things? I ...
1
vote
2answers
1k views

How to Perform Encryption after Diffie Hellman Key Exchange

This feels like a silly question, but a cursory look around the internet hasn't exactly helped. I'm implementing 1-out-of-2 oblivious transfer using DH key exchange in Python. I have successfully ...
3
votes
1answer
350 views

Where are the symmetric keys stored when using ssh?

The use case is this: Imagine you have two systems, A and B. If system A ssh's into system B and begins transferring over files back to A, I want to be able to decrypt the content of the message being ...
0
votes
1answer
469 views

Possible MITM attacks on ECDH-RSA or ECDHE-RSA prevents

As I understood a simplified ECDH-RSA key exchange protocol works like below Alice request Bob for its ECDH public key Bob generates ECDH parameters and sign them with a CA provided RSA certificate. ...
1
vote
2answers
132 views

What is the niche that Kerberos authentication fills called?

Keberos authentication is a bit of a top down concept. I'm working my way up to it from the bottom learning from the bottom up. It seems to me that Keberos authentication can be thought of as a glue ...
1
vote
0answers
338 views

SSL/TLS handshake potential vulnerabilities [duplicate]

After handshake one could be assure that data are encrypted and secure. But before that, handshake parameters are transferred via not secured channel. One could be MitM during the handshake procedure....
-1
votes
1answer
79 views

When is an RSA key used in TLS handshake?

Can someone explain the difference between RSA key agreement and DH key agreement as far as the use of the RSA key is concerned. For example, I have an RSA key and have agreed to use ...
1
vote
0answers
77 views

Understand DHE security in TLS

SSL Labs says that a website I control supports weak ciphersuites because they have DH 1024 bit, e.g. this one: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f). I tried to connect to the website from my ...