Questions tagged [diffie-hellman]
Diffie-Hellman is a method for establishing a shared secret that can be used as a cryptographic key.
253
questions
0
votes
1answer
37 views
In Diffie-Hellman, why is the shared secret guaranteed to be the same? [duplicate]
In general, I understand the principle of Diffie-Hellman key exchange. What I don't understand is what is so fundamental about primitive roots modulo p that guarantees that the shared secret is the ...
1
vote
2answers
126 views
Cracking diffie-hellman public key to obtain shared key
I'm given 2 prime numbers, g and n, as well 2 public keys, ga mod n and gb mod n, as part of a leaked Diffie hellman key exchange. I need to derive the shared key gab mod n using the given information....
0
votes
0answers
28 views
How does the Client Random and Server Random work when they are public? [duplicate]
I have read this section and I am still a little confused, as well as read a few of the posts here:
https://www.acunetix.com/blog/articles/establishing-tls-ssl-connection-part-5/
So, the client sends ...
1
vote
1answer
123 views
Explain the three versions of Diffie-Hellman used in SSL/TLS
I understand how Diffie-Hellman algorithm can be used to agree on a common key between a client and server.
I am struggling to understand the three variations of Diffie_Hellman - Anonymous Diffie-...
1
vote
1answer
89 views
Diffie–Hellman key exchange in TLS 1.3
I am reading about the Diffie–Hellman key exchange in TLS 1.3. So the first step here is that the two parts Alice and Bob t agree on a large prime p and a nonzero integer g modulo p. Then Alice and ...
0
votes
0answers
71 views
symmetric key generation in TLS 1.3
Am trying to understand the phase where the symmetric key is getting generating. From what I am understanding Diffie-Hellman is used to derive the symmetric key in TLS1.3
I am reading this tls ...
0
votes
0answers
26 views
Does this seem like a secure way to transfer wireless data from a keyboard to a host?
I'm making an adapter to convert a wired keyboard I have into a wireless keyboard. I am going to use nRF2401 modules for wireless with some STM32 microcontrollers. I'm trying to come up with a method ...
0
votes
1answer
84 views
How to generate ffdhe from rfc7919
Everyone recommends to use the pre-defined ffdhe groups from https://tools.ietf.org/html/rfc7919
There are multiple sources (for example mozilla) where I can download the DH PARAMETERS file but how ...
2
votes
0answers
97 views
What will be the key size for rsa, ecdhe and ecdsa from the cipher suite given?
From the cipher suites tls_rsa_with_aes_128_cbc_sha256 and tls_ecdhe_ecdsa_with_aes_128_cbc_sha256 how do I know what will be the RSA , ECDHE, and ECDSA key support in IBM cloud Watson?
here is the ...
0
votes
1answer
48 views
How to use another SSL certificate for DHE-RSA while I already have one with domain?
I'm working in IOT team to build a web based IOT system.
I'm using Dataplicity's Wormhole to host my nodeJS app on raspberry pi. I want to use DHE-RSA symmetric key encryption channel for sending/...
0
votes
0answers
59 views
Can a secure key-exchange algorithm replace hashing for password authentication?
Over the weekend I was thinking about the problem of scaling various web services. One common practice to scale authorization is to use cryptographically signed tokens. This way when a request comes ...
0
votes
0answers
56 views
how to encrypt and decrypt messages with more than one sender and more than one receiver?
I am creating a chat app. This app contains private messages and channels. These channels include more than one user.
I want to encrypt messages using AES and to transfer the AES key to users of this ...
3
votes
2answers
1k views
RSA key exchange
I want to create a message exchange program. These messages are encrypted with the AES key, and this key is encrypted using the RSA algorithm. When I send a message from User 1 to User 2, I need to ...
0
votes
1answer
98 views
Diffie Hellman implementation- NodeJS
Diffie Hellman is a key exchange algorithm where client and server both generate public and private key, exchange their public key and combine this key with his own private key to generate same secret ...
0
votes
3answers
298 views
Why can't we encrypt the message with sender's private key and receiver's public key in case of sending messages through a server?
I read that why do we need E2EE and can't rely only on HTTPS for sending messages through a messaging app. The reason which i understood is when sender sends the message to the server, the TLS ...
0
votes
1answer
266 views
Performance comparison between ed25519 vs AES
I found that AES has dedicated hardware on most machines. The question is can we use ed25519 to replace AES? Instead of using RSA to encrypt the AES key and then encrypt the data with AES, can we just ...
0
votes
0answers
115 views
how to send prime and generator of diffie hell-men to client over network node js?
I am using crypto module of node js for exchanging key using diffie-hellman algorithm.
server.js
const crypto = require("crypto");
const alice = crypto.createDiffieHellman(512);
const aliceKey = ...
0
votes
1answer
66 views
Intercepting messeges in attacks on authentication protocols
I've recently read about Diffie-Hellman Man-in-the-Middle attack when a third party can intercept messages and thus construt two different symetric keys with both sides. However I still don't ...
1
vote
2answers
54 views
Which algorithm is used to combine a key between client and server?
I read a lot of Q&A here, and read a lot of articles about RSA and Diffie-Hellman, but it seems like they are all saying opposite things about the question:
When I start an HTTPS session in a ...
0
votes
1answer
876 views
How to decrypt Diffie-Hellman in wireshark?
How can i decrypt Diffie-hellman TCP packets?
I'm trying to make a tool that shows cleartext response from a server that uses this encryption.
However when i look online people all seem to say it's ...
0
votes
3answers
118 views
Do I need an ECDSA SSL certificate to use Diffie–Hellman key exchange method?
I cannot quite understand the role of Diffie–Hellman key exchange.
Does RSA SSL certificate work with the Diffie–Hellman key exchange or is it only used with an ECDSA certificate?
When is Diffie–...
1
vote
1answer
201 views
ECDH_SHA2_NISTP256 (KEX) Algorithm in SSH - Vulnerabilities?
My organization within my company uses this KEX Algorithm in our SSH Implementation.
Another organization within my company won't connect to our servers as long as this algorithm is implemented as ...
0
votes
0answers
57 views
In which sense is Perfect Forward Secrecy perfect? [duplicate]
Wikipedia states that Perfect Forward Secrecy "is a feature of specific key agreement protocols that gives assurances that session keys will not be compromised even if the private key of the server is ...
2
votes
1answer
228 views
When does chrome generate the prime number for TLS communication?
In a TLS handshake using DH to negotiate a session key, a prime number on both sides must exist. Calculating a prime number large enough to be secure takes a litte computational time.
When does ...
2
votes
2answers
212 views
Using Diffie-Hellman exchange on low power IoT devices
I have almost 0 knowledge of IoT, their protocols and usual device constraints. I had a discussion today with someone that has a fair amount of IoT experience and we were discussing some security ...
-1
votes
1answer
161 views
DH cipher suites and DH OpenSSL Generated
I need a openssl generated diffie-hellman params for work with ECDHE or DHE cipher suites on TLSv1.2 nginx server?
0
votes
1answer
226 views
Why is the Diffie-Hellmann exchange not enough to authenticate the communication partners in IKE_SA_INIT?
The IKE_SA_INIT does create a key seed SKEYSEED from the Diffie-Hellman values and nonces. Since the exchange does sharing the secret between the communication partners, I do not understand why it is ...
0
votes
2answers
123 views
Command to check a website is vulnerable to Logjam
I am referring this post https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/ and trying to see a website is vulnerable to Logjam or not.
I try with www.google.com:443 but I am ...
0
votes
2answers
121 views
Is there any way to send data securely from multiple As to B in the presence of eavesdropper, without losing anonymity like in a public key exchange?
Suppose I have n subordinates at work. Any subordinate should be able to submit his or her report anonymously to me via digital means.
Also suppose that I have no means of broadcasting any form of ...
2
votes
1answer
350 views
Is there a benefit to Diffie-Hellman parameter rotation?
When setting up a web server with TLS support I've generated my dhparams with openssl dhparam -C 2048 some.pem. I understand that the output in some.pem are the parameters by which DH key exchange ...
2
votes
0answers
84 views
ECDSA ECDH Man In The Middle Attack
We have a long-term key used for signing/verifying the ephemeral keys. The problem is we have to first share the long term public key with the other party. Is it possible to avoid a man in the middle ...
0
votes
0answers
71 views
Is client-side password hashing still useful when using TLS? Is TLS crackable? What about PFS? [duplicate]
Is client-side password hashing still necessary / useful when using TLS? What about TLS protocols with PFS (perfect forward secrecy) like Diffie-Hellman?
Let’s say that I’m running a web application ...
2
votes
1answer
525 views
Why do predefined FFDHE parameters containt '///////////'?
Recently, Mozilla published a new and excellent version of its SSL Configuration Generator. One of the changes compared to previous versions was to use predefined FFDHE (Finite Field Diffie-Hellman ...
1
vote
1answer
292 views
Diffie–Hellman key exchange questions [closed]
at the moment I am working on a chat application, where more than two clients can communicate at the same time.
I just got started with the encryption so please be bear with me.
My goal is to ...
1
vote
1answer
111 views
how are symmetric keys generated in TLS [duplicate]
My confusion stems from reading that TLS handshake uses some kind of Diffie Hellmann, when I was certain that the symmetric key was generated by a digest of earlier packets encrypted with clients ...
4
votes
1answer
936 views
How to decrypt Diffie-Hellman encryption in WebRTC?
I have installed a WebRTC server application, which is designed for Contact Center solutions: communicates with internal PCs in pure RTP (agents), and with external PCs (customers) using encrypted ...
1
vote
1answer
734 views
TLS-Handshake, Server Key Exchange, Diffie-Hellman: Where does key length come from?
Where does the key length come from?
In this example it is 2048 bits long:
Secure Sockets Layer
TLSv1.2 Record Layer: Handshake Protocol: Server Key Exchange
Content Type: Handshake (22)...
1
vote
1answer
118 views
Self-signed certificates and ephemeral Diffie–Hellman key exchange protocol
If we use a self-signed certificate, is ephemeral Diffie–Hellman key exchange protocol vulnerable to a man in the middle attack?
4
votes
2answers
1k views
Diffie-Hellman with non-prime modulus
When using the Diffie-Hellman key-exchange, it is said to be important to use a safe prime. However, if a non-prime modulus with sufficient bit-length is generated, is there an attack that can be used ...
0
votes
1answer
94 views
Public key encryption confusion
I'm learning Linux, and currently SSH. But there are details that I don't really understand.
I've seen and understood how Diffie-Hellman key exchanges work from a mathematical point of view, but what ...
0
votes
2answers
2k views
How to find the DH prime value (if 1024 or 2048) from Internet?
I have to ensure that the server when communicating on the Internet needs to have DH prime value of 2048 bits or greater.
I can find out the cipher suites that are used but cannot derive the DH ...
0
votes
1answer
641 views
OpenSSL - 2040 bit temporary key size, 2048 bit private key
Recently, I had an OpenVAS scan report that a TLS connection to Postfix used a temporary key size of 2040 bits, instead of the 2048 bits that I have set for my key size, and I have perfect forward ...
2
votes
1answer
413 views
Perfect forward secrecy in Instant Messaging with multiple devices
I have read multiple sites online about PFS and DH but I still have a few questions.
I understand that in order to have PFS you must use different keys to encrypt messages. So your IM client could be ...
3
votes
1answer
2k views
How to verify Diffie Hellman uses a “Safe” prime
I'm the developer for a web application that was recently pen tested. One of the vulnerabilities reported from the pen test is that our server uses an unsafe Diffie-Hellman prime in our key exchange. ...
5
votes
1answer
4k views
How does TLS work (RSA, Diffie-Hellman, PFS)?
I know "How TLS works" has been discussed numerous times here and crypto, but I am still somewhat confused and would like to summarize what I know so far 1 in this giant blob of text with the hope ...
0
votes
1answer
105 views
Usage of SSL_CTX_use_certificate
While building a context through openssl, if I do not provide a certificate by using the function SSL_CTX_use_certificate, would all the connections from that context default to anonymous diffie-...
0
votes
1answer
148 views
Can a DH param .pem file force the usage of only a single type of diffie-hellman exchange
Is it possible to create a diffie-hellman param .pem file to force the openssl ctx to use only a certain type of dh exchange. For example, I know that it can be used to set the length of the dh key, ...
1
vote
0answers
467 views
Understand DHE security in TLS
SSL Labs says that a website I control supports weak ciphersuites because they have DH 1024 bit, e.g. this one: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f).
I tried to connect to the website from my ...
4
votes
1answer
747 views
ECDH and static key encryption
It's been a while and I'm still trying to figure out if my understanding of ECC crypto is correct.
Basically from what I understood a purely asymmetric encryption is never used. Usually the ...
1
vote
2answers
504 views
How to optimize the diffie hellman key exchange algorithm
I am making a chat feature in my app where I want to encrypt it E2EE, but the problem is when I start to calculate the public key (public key = g^private % n) it takes a decade to get it done. I need ...
