Diffie-Hellman is a method for establishing a shared secret that can be used as a cryptographic key.
0
votes
1answer
23 views
Which is better in “DH-group14-sha1 with hmac-sha2-256” and “DH-group-exchange-sha256 with hmac-sha2-256” from performance and security perspective?
In our product (embedded system), so far we were using diffie-hellman-group1-sha1 with hmac-sha1. But due to security concern we are planning to use diffie-hellman-group14 for key exchange and ...
1
vote
2answers
42 views
Is it safe to use Diffie-Hellman public keys as nonces to protect against replay attacks?
I have an interesting case regarding protection against replay attacks. Under the assumption that Alice and Bob have used Diffie-Hellman key exchange to establish a secure temporary session, would it ...
0
votes
0answers
35 views
How secure is Samy Kamkar's Anti-MITMA Diffie-Hellman Key Exchange Technique?
I'm currently using Diffie-Hellman to encrypt data sent across an arbitrary link (can be ethernet, Wi-Fi, USB, bluetooth, etc), and I'm not a huge fan of the potential that DH is vulnerable to an ...
0
votes
1answer
51 views
Is a Diffie Hellman Ephemeral key good material for being used as a symmetric cipher algorithm key?
I am designing a secure protocol (for academic/learning purposes) and I am at the point where I need to (re)design the key exchange step.
In my previous implementation, I used to rely on RSA to ...
0
votes
0answers
24 views
How to treat/hash ECDH shared secret to use as keys for AES?
I'm doing some studies/development for a security system that would use ECDH with ephemeral keys.
In my code I'm currently using a 256-bit EC, so when the two parts compute the shared secret, I get a ...
0
votes
0answers
23 views
How to generate DSA keypair for browserID
As a bit of a learning exercise, I'm trying to understand and implement a client for the Firefox Accounts Browser sync API.
I'm up to the point where I'm trying to ask the server to give me a ...
0
votes
0answers
5 views
Burmester-Desmedt (BD) key agreement protocols [migrated]
How do you perform the Burmester-Desmedt key exchange Protocol, in Diffie-Hellmann
extension protocol ?
I've been searching high and low, but couldn't locate an example on how to prove if all the party ...
0
votes
1answer
37 views
How much harm can an attacker do on the Diffie-Hellman exchange?
I'm looking at a system that uses an unprotected Diffie-Hellman exchange to negotiate a key for the session encryption.
That Diffie-Hellman is not secure against man-in-the-middle attacks is textbook ...
0
votes
2answers
34 views
DHE Verification
I'm just struggling to get my head around this.
In certificate signing with static Diffie Hellman the public key and certificate information is sent to the CA who verifies the certificate ...
3
votes
1answer
72 views
Can we build a key exchange protocol without certificates?
Assume that the server and the client both has some secret key K. Is it possible to have a key exchange protocol with authentication between them such that MITM attack cannot hold and if the key is ...
2
votes
2answers
133 views
Why should the dh keylength match rsa length in tls?
A few sources state that the DH keylength (bits of the prime) should match the keylength of rsa for TLS. For example SSL_set_tmp_dh(3) from openssl has example code on how to match the dh parameters ...
5
votes
1answer
83 views
DH parameters recommended size?
I'm setting up EAP-TLS on my wireless router, and am currently generating DH parameters for FreeRADIUS.
First, what do these parameters do? Also, what size should they be?
I've been generating the ...
4
votes
2answers
112 views
What is the difference between DHE and ECDH?
I learned that perfect forward secrecy is implemented through DHE and ECDH but what is the difference between these 2 key exchanges?
Also can someone explain how perfect forward secrecy works? I've ...
2
votes
2answers
123 views
For DHE_RSA_.. Cipher Suites what is RSA used for?
In addition to achieving PFS with DHE, we want as little as possible to be revealed when the server's private key is revealed. So, what is RSA used for in DHE_RSA cipher suites? What does the server ...
0
votes
0answers
42 views
Any Suggestion Exchanging shared key between process via port in untrusted machine (infected my malware)?
I am trying to get shared key between Firefox extension and a java program running in same machine. I am communicating both application via socket.
My assumption is that malware is running in ...
2
votes
1answer
175 views
Using Diffie–Hellman key protocol to create a safe secret key
Let's say, I have a friend far from me and I want to send some secret messages to him. I have to say, I'm pretty newbie in security. That's why I'm wondering, does the Diffie–Hellman key exchange ...
1
vote
1answer
188 views
What are the implications of using the same DH parameters in a TLS server?
For a DHE cipher, nginx hard-codes the Diffie-Hellman parameters to use base 2 and a fixed 1024-bit prime (modulus) if no custom DH parameters are configured.
These parameters are public (sent in ...
5
votes
2answers
807 views
1024-bit DHE vs 2048-bit RSA
Currently with apache/mod_ssl, if DHE is enabled then a 1024-bit ephemeral key will be used. I found the following quote in Adam Langley's blog:
Ideally the DH group would match or exceed the RSA ...
2
votes
2answers
460 views
Is there a key length definition for DH or DHE?
I found this in wiki
The Finite Field Diffie-Hellman algorithm has roughly the same key strength as RSA for the same key sizes. The work factor for breaking Diffie-Hellman is based on the discrete ...
2
votes
1answer
740 views
OpenVPN dhparam
One of the steps for setting up OpenVPN is running the command openssl dhparam -out dh1024.pem 1024. The man page tells me this 1024 value refers to the number of bits.
Why is the value 1024 ...
1
vote
1answer
415 views
ECC Brainpool Standard Curves and Curve Generation with Bouncy Castle which seed to use?
I want to implement a ECC Key Agreement with a Brainpool curve brainpoolP512r1 or brainpoolP512t1.
I'm not clear about whichseed value to use (and how).
In this document ...
1
vote
1answer
233 views
OpenSSL DH modp size
If OpenSSL is configured to use a DH for key exchange, e.g. TLS_DHE_RSA_WITH_AES_128_CBC_SHA, where does it take the size for modp (or even modp itself) from?
The following is a screenshot from ...
1
vote
3answers
2k views
Diffie-Hellman and its TLS/SSL usage
I'm struggling to understand the (non-)use of Diffie-Hellman (DH) in TLS.
DH has been around for a long time now, why does almost nobody use it, yet?
DH is only being used for "key sharing", why ...
1
vote
1answer
237 views
Can manual hash verification defend against a DH MITM attack?
I understand how DH key exchange is vulnerable to a MITM attack.
When Alice sends Bob g, p and her public key, if she also sent a value H that was a hashing of the values g,p, and public key all ...
3
votes
1answer
100 views
How to reduce the size of a key established with Diffie-Hellman?
When I generate a key with the a Diffie Hellman method (DH), the established shared key will be of the same size as the prime which is used.
As far as I have read this should be at least 2000 bits for ...
6
votes
1answer
446 views
What's the hash for in ECDHE-RSA-AES-GCM-SHA?
Presumably the SHA is for deriving the AES key from the shared secret. Where else is the hash used?
ECDH just does ECC (no hashing). RSA does masking and padding but this doesn't involve the ...
2
votes
3answers
980 views
Javascript Diffie-Hellman and AES protocols
I am using the BigInteger Javascript library to create a symmetric key using Diffie-Hellman protocol. I want to create 128,160 or 192-bit keys. After some research, I have found out that I should use ...
6
votes
2answers
171 views
Should I test my SSL certificate for “RSA Shared Primes” before using it?
There are several papers from 2012 that say it's possible to factor several moduli by factoring shared primes. The link above includes python sourcecode to verify and test for this fact.
Given this ...
5
votes
3answers
2k views
Can someone explain a little better what exactly is accomplished by generation of DH parameters?
I'm setting up a node.js server:
https.createServer({
...
ciphers: 'ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH',
honorCipherOrder: true
}, app).listen(443);
...
14
votes
2answers
1k views
How does non-ephemeral Diffie-Hellman key exchange become compromised in SSL when the RSA private key is leaked?
From my understanding, one of the major reasons we recommend Diffie-Hellman Ephemeral (e.g. DHE or ECDHE) over non-ephemeral DH, for SSL / TLS, is that compromise of the RSA private key (i.e. private ...
7
votes
2answers
2k views
Decrypting TLS in Wireshark when using DHE_RSA ciphersuites
How can I decrypt TLS messages when an ephemeral Diffie-Hellman ciphersuite is used? I am able to expose the premaster secret and master secret from the SSL Client. Using that, how to decrypt the ...
26
votes
3answers
6k views
Is there any particular reason to use Diffie-Hellman over RSA for key exchange?
I often see RSA being recommended as a method of key exchange. However, the Diffie-Hellman key exchange method appears to be secure as well.
Is there any considerations one should take into account ...
