Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [key-exchange]

For questions relating to protocols for distributing public keys, and / or establishing session keys with another party. Examples of key exchange protocols include Diffie-Hellman and IKE.

0
votes
0answers
27 views

Two message key agreement and mutual authentication protocol?

I am looking for, but not finding, a published protocol that does something similar to TLS 1.3 mutual authentication, but simplified by using assumptions to reduce the chattiness of TLS. If we assume ...
-1
votes
0answers
44 views

Key-Exchange in Steganography [closed]

I know there are key-exchange methods in Cryptography. But in case of Secret-key Steganography: What does actually a stego-key mean? How can we use the key? Once the key is used how can we exchange ...
1
vote
0answers
63 views

Is this Key Exchange secure?

There is a key exchange process which I am having a look at. I am aware of key exchange algorithms such as Diffie-Hellman and the like, however as there is a method to provide an initial key out-of-...
0
votes
1answer
84 views

Two-party symmetric key establishment protocol

Update: original problem description I am developing a client-server system for configuration updates. The system handles update tasks. An update task is initiated on a server; multiple clients then ...
0
votes
1answer
115 views

IKE Phase 1 /w PSK resource?

I can't seem to find a sufficiently detailed resource that describes the IKE phase 1 PSK identity authentication process. They seem to focus on differences between aggressive and main mode while ...
4
votes
1answer
66 views

Can password strength be enforced with PAKE protocols?

Can a password strength policy i.e.: must contain at-least 8 chars must contain one uppercase letter must contain one lowercase letter must contain one number Be enforced if a PAKE protocol is used, ...
2
votes
1answer
40 views

ECDH and static key encryption

It's been a while and I'm still trying to figure out if my understanding of ECC crypto is correct. Basically from what I understood a purely asymmetric encryption is never used. Usually the ...
1
vote
1answer
191 views

GPG: Is 'pubring.kbx' safe to share?

This public keyring pubring.kbx (as I merely guess from the name) must be safe to share publicly or is it not? Does it contain any sensitive information with respect to private keys? I want to back ...
1
vote
0answers
53 views

Advantage Of ECDH-RSA over RSA Ciphersuites In TLS

If ECDH-RSA is used for key exchange, this is what happens: The server has its public ECDH parameter embedded within its certificate. The client generates its public ECDH parameter, extracts the ...
2
votes
2answers
80 views

Can be used ECDH with static public key and parameters?

I have protocol required for privacy. Thus, I want to use hybrid cryptography. Base on my knowledge, ECDH is fast and secure. My system consists of 3 main components a trusted-server, client, and ...
0
votes
1answer
65 views

Key distribution from a central server [closed]

I have a system composed by different computers that must communicate in a real-time context. All the communications must be encrypted and this system is not connected to Internet, it's just a bunch ...
2
votes
2answers
167 views

TLS protocol, session key for secure connection

In Wikipedia, as part of handshaking between a client and a server, the server send a public encryption key as part of the digital certificate. Then the client uses Diffie–Hellman key exchange to ...
2
votes
1answer
92 views

Secure Key Storage

We have a security solution that is deployed on premise to companies with big technical infrastructures. We do real time vulnerability/configuration assessment of all critical assets in the network. ...
1
vote
1answer
34 views

What is this scheme called and how should it work exactly?

So I was thinking about client-server communication and how to keep this private, especially from man-in-the-middle attacks. I came up with a scheme that I'm sure exists already, but I could not find ...
1
vote
1answer
84 views

Available alternatives for exchanging public keys for emailing

What alternatives exist for exchanging public keys with another person for sending email, except the obvious way of manually pasting the public key into an email saying, "Here is my public key"? Do ...
0
votes
3answers
111 views

Sending Encryption/Decryption keys over HTTPS

I am a newbie to the cryptographic world so bear with me. Thinking of a strategy (for securing P2P data) in which server is generating a key which should be used for AES encryption between clients ...
0
votes
0answers
37 views

Any facts that users’ secret key is stolen on some group?

I am wondering whether some severe accidents due to sharing a secret key exist in real world. A group of users or a company typically share a secret key to decrypt some shared encrypted data possibly ...
1
vote
4answers
3k views

Can we trust onetimesecret?

Alice: I need the file Bob: Sure, and I want to encrypt it first. Please put the strong PGP symmetric key with the copy&paste method to https://onetimesecret.com/ and send me the link. Alice. ...
1
vote
0answers
156 views

How to perform a MITM attack on SSH exploiting the Diffie Hellman key exchange

I have an open-ended project for a class and I picked to make a tool/use existing tools and applications to exploit the Diffie-Hellman key exchange to be able to inject, modify and delete messages ...
0
votes
0answers
332 views

Why RSA is used in TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 ciphersuite [duplicate]

I try to understand where the signature is used in TLS 1.2. The ciphersuite of google.com is TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256. However, if I look at the certificate, I can find an ECDSA key ...
2
votes
0answers
251 views

computing the exchange hash for ecdsa-sha2-nistp256

I am writing code for an SSH server and can not get past the Elliptic Curve Diffie-Hellman Key Exchange Reply part of the connection. The client also closes the connection and says "Host Key does not ...
2
votes
1answer
311 views

Tor: Is a diffie-helman key exchange being done over reciepient of traffic?

As I was looking over Tor specifications and I noticed that when a circuit is generated then on each circuit's node a Diffie-Hellman key exchange is being done over an encrypted path on each Node as ...
2
votes
3answers
118 views

How secure is using Saving Session Feature on WinSCP?

I ssh to my AWS instances via WinSCP and it has public-private key authentication, password authentication is disabled. All the sessions are saved on WinSCP, so I click on the IP of the machine and I ...
9
votes
1answer
545 views

Why does TLS 1.3 deprecate custom DHE groups?

According to the second draft of the TLS 1.3 specification, custom DH groups have been deprecated. As we all know, hardcoded DH groups are vulnerable to a precomputation attack that allows retroactive ...
2
votes
0answers
106 views

Is it safe to retrieve GnuPG public/secret key with fs in Node.js?

So there is a Node.js package openpgp which is available for signing documents with GPG, but it requires public/secret key. We all know putting key right into the file is dangerous and not recommend ...
6
votes
1answer
348 views

Forward secrecy with GnuPG

I'd like to know how to implement forward secrecy using GnuPG, and I presume I need some kind of authenticated key exchange. Assuming that I have the following working already: Alice and Bob have ...
2
votes
2answers
156 views

SSH key based login is not vulenerable to MiTM attack. Is it true?

I read somewhere that when using key based login instead of a password based login, it is not possible for a Man-in-the-Middle attack to happen. This question is not about what is being more secure: ...
1
vote
0answers
46 views

Why would be an attacker interested in whether a cryptographic key exchange protocol succeeded or not? [closed]

Why would an attacker want to know if a key exchange between two parties succeeded or failed? What are some motivations for wanting to know this?
1
vote
1answer
414 views

TLS key exchange algorithm = Certificate signing algorithm?

My bachelor thesis is about TLS and I have a basic question about the algorithms used there. If I use e.g. a sha1WithRSAEncryption signing algorithm (RFC3279) for my certificate, that means that the ...
1
vote
1answer
62 views

Is There a Whitepaper or Explanation of ECDSA somewhere? [closed]

Let's say I wanted to write an implementation of ECDSA from scratch to better understand it. I can't find a raw, non-abstract explanation anywhere. I tried tracking down the sources on the wiki ...
2
votes
1answer
328 views

Limit on modulus lines in OpenSSH /etc/ssh/moduli file?

I understand that OpenSSH server looks in /etc/ssh/moduli and picks a modulus at random for each Diffie-Hellman group exchange. What I am wondering is whether there is a practical limit on how many ...
0
votes
1answer
431 views

Possible MITM attacks on ECDH-RSA or ECDHE-RSA prevents

As I understood a simplified ECDH-RSA key exchange protocol works like below Alice request Bob for its ECDH public key Bob generates ECDH parameters and sign them with a CA provided RSA certificate. ...
1
vote
1answer
164 views

CECPQ1 key exchange functionality

CECPQ1 (combined elliptic Curve and Post-Quantum Cryptography Key Exchange) is a new key exhange developed by google, which combine X25519 with NewHope (elliptic Curve KE + Post-quantum KE). Google ...
-4
votes
2answers
90 views

Under what circumstances is there any real security benefit in verifying public keys in signal or WhatsApp? [closed]

Encryption is good, sure. But disclosures have revealed that both iOS and Android are so owned by intelligence services that endpoint security on all supported platforms is a joke, anyway. What ...
3
votes
1answer
741 views

What's the purpose of anonymous Diffie-Hellman key exchange + verification?

I attended a lecture where a procedure for solving the problem of passive attackers being able to gain knowledge about the identities of communication partners using an authenticated Diffie-Hellman ...
2
votes
1answer
526 views

Can you identify whether a string is a RSA public key?

I am generating RSA keys with the openssl library. I have heard that it is possible to recognise the method used to encrypt a string with AES or DES but is it possible to identify whether a string is ...
1
vote
1answer
403 views

Can an OpenPGP primary key revoke a subkey of a subkey?

I would like to have the following setup: a main Key, saved in a hardware wallet or paper wallet. Let's call this level 1. The idea is to never have to use this key again, as a sort of last resort. ...
0
votes
1answer
330 views

Is IKE aggressive mode really less secure than main mode?

This guy argues it is not: https://www.youtube.com/watch?v=DuowFgNKAIg I really confused about this. According to him, the only purpose of main mode is to make the peers anonymous, but in order to ...
4
votes
1answer
142 views

GPG key handling with Server

I'm using a VPS as a development machine and need gpg a) for signing git commits or e-mails (using mutt on the server) and b) for decrypting f.e. encrypted dotfiles and other files. But I don't feel ...
1
vote
0answers
66 views

What is a KEA certificate and how it is used?

I'm currently studying IKE and IPsec in the context of VPN applications and I know that a X.509 certificate is used to provide server's public key to the client (and vice-versa in case of mutual ...
1
vote
1answer
33 views

Secure application data

I have a private client/server application that trying to secure the data transmitted through public network. The encryption/decryption method is private too. Client and server uses DH key exchange ...
1
vote
2answers
2k views

SSL / TLS Ciphersuites [closed]

There's a large list of ciphersuites inside SSL / TLS. It seems like that these ciphersuites can be categorized in terms of their underlying mechanism with following categories: RSA Key Exchange (e.g....
0
votes
0answers
29 views

How to find whether HTTPS application/ website use DHE for key exchange? [duplicate]

I am not getting the result I am expecting from the above link. while executing following command openssl s_client -host www.gmail.com -port 80 output : Cipher : 0000 while executing following ...
1
vote
0answers
34 views

Are all categories of assymetric key generation applicable to all categories of assymetric key exchange? [closed]

Context assumption and aim: Using asymmetric crypto to help Alice and Bob (members belonging to the same basketball club. The club has its own servers) to communicate together without the ...
3
votes
2answers
187 views

ssl - Can the attacker generate his own symmetric key if ClientHello and ServerHello are intercepted?

After reading this awesome explanation of how SSL works, I now have a confusion. The answer states that the first messages of SSL are ClientHello and ServerHello(in response to ClientHello). Both of ...
4
votes
2answers
2k views

Role of the chosen ciphersuite in an SSL/TLS connection

When it comes to a secure TLS configuration (e.g. for HTTPS), the topic is prominently about the supported cipher suites. I want to fully understand which part of the cipher suite has which role in a ...
4
votes
2answers
357 views

Is a certificate with more bits than its parent more secure?

Let's Encrypt currently issues 4096 bit RSA certificates if requested (default, however, is 2048). But its parents, intermediate "Let's Encrypt Authority X3" and root "DST Root CA X3", are both 2048 ...
1
vote
1answer
62 views

Is it safe to learn new keyfob by its normal open code (rolling-code)?

Part of a wireless door opener, the receiver Doorhan DHRE-2 works, according to description, with the rolling code. It looks like the receiver can register a new keyfob by listening to its normal ...
1
vote
2answers
94 views

Terms for differentiating between key-exchange and public-key cryptosystem

The RSA and Diffie-Hellman protocols are part of asymmetric cryptography. But is there a word to distinguish between cryptosystem like RSA (i.e. there are two keys, one for encryption and another for ...
1
vote
2answers
616 views

PMK is what prevent to generate the PTK and decrypt the traffic?

I'm trying to establish a connection to an encrypted SSID, using scapy. My intent was basically to sniff the frames of the handshake from the victim, acting as a proxy (MITM), and redirect the frames ...