Questions tagged [diffie-hellman]
The Diffie–Hellman key agreement is an anonymous, non-authenticated key-agreement protocol.
266
questions
2
votes
1
answer
46
views
TLSv1: should DHE be enabled?
I want my web server to be as compatible as possible with old clients, even clients without TLSv1.2 and ECDHE support.
What ciphers should be supported for legacy clients, and in what order should ...
- 141
-2
votes
0
answers
47
views
SSL, how does it work? [closed]
My book suggested the following protocol to replace SSL:
A lot of the terms are familiar to me from the Original SSL, like ChangeCipherSpec message which means from now on the messages I send will be ...
- 9
0
votes
0
answers
38
views
IIS Crypto 3.2 not getting rid of Diffie-Hellman algorithms of less than 2048-bits
I'm trying to stop a server using Diffie Hellman key exchanges of less than 2048 bits, but I'm getting confusing results.
I've run
Get-TlsCipherSuite | Format-Table Name, Exchange, Cipher, Hash, ...
- 1
1
vote
1
answer
74
views
Tor: How does entry nodes communicate with middle nodes? How does middle nodes communicate with exit nodes?
In Tor, when a client communicates with an entry node, they exchange the parameters such as the prime number and the generator with each other through DH.
What about when an entry node communicating ...
- 71
1
vote
2
answers
93
views
Which type of Diffie-Hellman does Tor use?
Does Tor use Ephemeral DH, Static DH or Anonymous DH? I have heard that the latter two are not secure so I am worried if Tor uses them.
- 71
1
vote
0
answers
47
views
Diffie Hellman with server public key embedded on the client
First, I realize trying to come up with your own crypto schemes is not a good idea. I'm a relatively new member of a team of developers utilizing such a custom scheme and I'm trying to come up with ...
- 1,027
0
votes
1
answer
421
views
TLS 1.3 RSA key exchange
I have some confusion between the different public and private keys that are used in a TLS 1.3 connection. When a client makes a request to a server, I've always thought that a server's TLS x509 ...
- 103
1
vote
1
answer
145
views
If Tor does Diffie-Hellman with each node how do they all not know the sender
I'm a bit confused by something regarding Tor. As per what I have read and confirmed in this answer Tor: Is a Diffie-Hellman key exchange being done over recipient of traffic? the client does a DH key ...
- 13
0
votes
0
answers
85
views
Question about Diffie-Hellman key exchange
It is known that a man-in-the-middle attack on the Diffie-Hellman key exchange protocol in which the adversary generates two public-private key pairs for the attack. Could the same attack be ...
- 1
0
votes
0
answers
169
views
Bluetooth keys for QR code pairing
Lets suppose we have two devices A and B that want to connect over BLE using OOB pairing with QR codes.
I am asking myself whether the transmitted DH keys are static. At least the information provided ...
- 31
1
vote
3
answers
253
views
I don't understand TLS 1.3 allowing PSK
TLS 1.3 removes the use of non-ephemeral Diffie-Hellman, which is great! But it still allows PSK.
I'm not as familiar with PSK configuration but wouldn't that mean TLS 1.3 still is allowing the use of ...
0
votes
0
answers
33
views
How does the inclusion of a subprime q value affect the Diffie Hellman equation for key exchange? [duplicate]
This is a follow on from this question:
"Diffie-Hellman Key Exchange" in plain English
In the answer to that question, the standard Diffie Hellman key exchange equation is derived:
(g^a mod ...
- 1
0
votes
1
answer
115
views
Is this scenario of static ECDH public key exchange right?
I'm thinking about the way to build encryption mechanism for 'peer-2-peer' communication. This is a mechanism I had a thought of:
Alice wants to communicate with Bob
First of all, Alice and Bob must ...
- 3
1
vote
0
answers
128
views
Key generation between Tiny-C-ECDH and cryptography.hazmat.primitives.asymmetric.ec [closed]
I have two systems, one running a C environment on a RTOS and another a python program running on a Pi.
I need to generate an encryption key using ECDH between these two systems for symmetric ...
- 11
0
votes
0
answers
236
views
ESP32: Secure WiFi credentials via WebCrypto?
Background information:
I am not a computer scientist. However, in a research project I am currently building a ESP32-based sensor. Multiple sensors of this type are going to be used by multiple users....
- 101
0
votes
1
answer
170
views
In Diffie-Hellman, why is the shared secret guaranteed to be the same? [duplicate]
In general, I understand the principle of Diffie-Hellman key exchange. What I don't understand is what is so fundamental about primitive roots modulo p that guarantees that the shared secret is the ...
- 111
1
vote
2
answers
667
views
Cracking diffie-hellman public key to obtain shared key
I'm given 2 prime numbers, g and n, as well 2 public keys, ga mod n and gb mod n, as part of a leaked Diffie hellman key exchange. I need to derive the shared key gab mod n using the given information....
- 11
1
vote
1
answer
1k
views
Explain the three versions of Diffie-Hellman used in SSL/TLS
I understand how Diffie-Hellman algorithm can be used to agree on a common key between a client and server.
I am struggling to understand the three variations of Diffie_Hellman - Anonymous Diffie-...
- 113
0
votes
1
answer
1k
views
Diffie–Hellman key exchange in TLS 1.3
I am reading about the Diffie–Hellman key exchange in TLS 1.3. So the first step here is that the two parts Alice and Bob t agree on a large prime p and a nonzero integer g modulo p. Then Alice and ...
- 41
0
votes
0
answers
184
views
symmetric key generation in TLS 1.3
Am trying to understand the phase where the symmetric key is getting generating. From what I am understanding Diffie-Hellman is used to derive the symmetric key in TLS1.3
I am reading this tls ...
- 41
0
votes
1
answer
247
views
How to generate ffdhe from rfc7919
Everyone recommends to use the pre-defined ffdhe groups from https://www.rfc-editor.org/rfc/rfc7919
There are multiple sources (for example mozilla) where I can download the DH PARAMETERS file but how ...
- 3
2
votes
0
answers
234
views
What will be the key size for rsa, ecdhe and ecdsa from the cipher suite given?
From the cipher suites tls_rsa_with_aes_128_cbc_sha256 and tls_ecdhe_ecdsa_with_aes_128_cbc_sha256 how do I know what will be the RSA , ECDHE, and ECDSA key support in IBM cloud Watson?
here is the ...
0
votes
1
answer
97
views
How to use another SSL certificate for DHE-RSA while I already have one with domain?
I'm working in IOT team to build a web based IOT system.
I'm using Dataplicity's Wormhole to host my nodeJS app on raspberry pi. I want to use DHE-RSA symmetric key encryption channel for sending/...
0
votes
0
answers
96
views
Can a secure key-exchange algorithm replace hashing for password authentication?
Over the weekend I was thinking about the problem of scaling various web services. One common practice to scale authorization is to use cryptographically signed tokens. This way when a request comes ...
- 101
0
votes
0
answers
107
views
how to encrypt and decrypt messages with more than one sender and more than one receiver?
I am creating a chat app. This app contains private messages and channels. These channels include more than one user.
I want to encrypt messages using AES and to transfer the AES key to users of this ...
- 41
3
votes
2
answers
2k
views
RSA key exchange
I want to create a message exchange program. These messages are encrypted with the AES key, and this key is encrypted using the RSA algorithm. When I send a message from User 1 to User 2, I need to ...
- 41
0
votes
1
answer
373
views
Diffie Hellman implementation- NodeJS
Diffie Hellman is a key exchange algorithm where client and server both generate public and private key, exchange their public key and combine this key with his own private key to generate same secret ...
0
votes
3
answers
552
views
Why can't we encrypt the message with sender's private key and receiver's public key in case of sending messages through a server?
I read that why do we need E2EE and can't rely only on HTTPS for sending messages through a messaging app. The reason which i understood is when sender sends the message to the server, the TLS ...
- 103
0
votes
1
answer
775
views
Performance comparison between ed25519 vs AES
I found that AES has dedicated hardware on most machines. The question is can we use ed25519 to replace AES? Instead of using RSA to encrypt the AES key and then encrypt the data with AES, can we just ...
- 111
0
votes
0
answers
224
views
how to send prime and generator of diffie hell-men to client over network node js?
I am using crypto module of node js for exchanging key using diffie-hellman algorithm.
server.js
const crypto = require("crypto");
const alice = crypto.createDiffieHellman(512);
const aliceKey = ...
0
votes
1
answer
105
views
Intercepting messeges in attacks on authentication protocols
I've recently read about Diffie-Hellman Man-in-the-Middle attack when a third party can intercept messages and thus construt two different symetric keys with both sides. However I still don't ...
- 3
1
vote
2
answers
141
views
Which algorithm is used to combine a key between client and server?
I read a lot of Q&A here, and read a lot of articles about RSA and Diffie-Hellman, but it seems like they are all saying opposite things about the question:
When I start an HTTPS session in a ...
- 11
0
votes
1
answer
2k
views
How to decrypt Diffie-Hellman in wireshark?
How can i decrypt Diffie-hellman TCP packets?
I'm trying to make a tool that shows cleartext response from a server that uses this encryption.
However when i look online people all seem to say it's ...
- 339
0
votes
3
answers
418
views
Do I need an ECDSA SSL certificate to use Diffie–Hellman key exchange method?
I cannot quite understand the role of Diffie–Hellman key exchange.
Does RSA SSL certificate work with the Diffie–Hellman key exchange or is it only used with an ECDSA certificate?
When is Diffie–...
- 117
1
vote
1
answer
697
views
ECDH_SHA2_NISTP256 (KEX) Algorithm in SSH - Vulnerabilities?
My organization within my company uses this KEX Algorithm in our SSH Implementation.
Another organization within my company won't connect to our servers as long as this algorithm is implemented as ...
- 67
0
votes
0
answers
112
views
In which sense is Perfect Forward Secrecy perfect? [duplicate]
Wikipedia states that Perfect Forward Secrecy "is a feature of specific key agreement protocols that gives assurances that session keys will not be compromised even if the private key of the server is ...
- 103
2
votes
1
answer
367
views
When does chrome generate the prime number for TLS communication?
In a TLS handshake using DH to negotiate a session key, a prime number on both sides must exist. Calculating a prime number large enough to be secure takes a litte computational time.
When does ...
- 123
2
votes
2
answers
342
views
Using Diffie-Hellman exchange on low power IoT devices
I have almost 0 knowledge of IoT, their protocols and usual device constraints. I had a discussion today with someone that has a fair amount of IoT experience and we were discussing some security ...
- 123
-1
votes
1
answer
416
views
DH cipher suites and DH OpenSSL Generated
I need a openssl generated diffie-hellman params for work with ECDHE or DHE cipher suites on TLSv1.2 nginx server?
0
votes
1
answer
453
views
Why is the Diffie-Hellman exchange not enough to authenticate the communication partners in IKE_SA_INIT?
The IKE_SA_INIT does create a key seed SKEYSEED from the Diffie-Hellman values and nonces. Since the exchange does sharing the secret between the communication partners, I do not understand why it is ...
0
votes
2
answers
291
views
Command to check a website is vulnerable to Logjam
I am referring this post https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/ and trying to see a website is vulnerable to Logjam or not.
I try with www.google.com:443 but I am ...
- 101
0
votes
2
answers
159
views
Is there any way to send data securely from multiple As to B in the presence of eavesdropper, without losing anonymity like in a public key exchange?
Suppose I have n subordinates at work. Any subordinate should be able to submit his or her report anonymously to me via digital means.
Also suppose that I have no means of broadcasting any form of ...
2
votes
1
answer
613
views
Is there a benefit to Diffie-Hellman parameter rotation?
When setting up a web server with TLS support I've generated my dhparams with openssl dhparam -C 2048 some.pem. I understand that the output in some.pem are the parameters by which DH key exchange ...
- 135
2
votes
0
answers
162
views
ECDSA ECDH Man In The Middle Attack
We have a long-term key used for signing/verifying the ephemeral keys. The problem is we have to first share the long term public key with the other party. Is it possible to avoid a man in the middle ...
- 21
0
votes
0
answers
122
views
Is client-side password hashing still useful when using TLS? Is TLS crackable? What about PFS? [duplicate]
Is client-side password hashing still necessary / useful when using TLS? What about TLS protocols with PFS (perfect forward secrecy) like Diffie-Hellman?
Let’s say that I’m running a web application ...
- 113
2
votes
1
answer
822
views
Why do predefined FFDHE parameters containt '///////////'?
Recently, Mozilla published a new and excellent version of its SSL Configuration Generator. One of the changes compared to previous versions was to use predefined FFDHE (Finite Field Diffie-Hellman ...
- 385
1
vote
1
answer
374
views
Diffie–Hellman key exchange questions [closed]
at the moment I am working on a chat application, where more than two clients can communicate at the same time.
I just got started with the encryption so please be bear with me.
My goal is to ...
- 111
1
vote
1
answer
196
views
how are symmetric keys generated in TLS [duplicate]
My confusion stems from reading that TLS handshake uses some kind of Diffie-Hellman, when I was certain that the symmetric key was generated by a digest of earlier packets encrypted with clients ...
- 113
5
votes
1
answer
1k
views
How to decrypt Diffie-Hellman encryption in WebRTC?
I have installed a WebRTC server application, which is designed for Contact Center solutions: communicates with internal PCs in pure RTP (agents), and with external PCs (customers) using encrypted ...
- 151
1
vote
1
answer
1k
views
TLS-Handshake, Server Key Exchange, Diffie-Hellman: Where does key length come from?
Where does the key length come from?
In this example it is 2048 bits long:
Secure Sockets Layer
TLSv1.2 Record Layer: Handshake Protocol: Server Key Exchange
Content Type: Handshake (22)...
- 135