New answers tagged

1

For forward secrecy without a synchronous handshake, you want something like the "ratcheting" protocol that Signal uses. It's a quite clever system, really: Each party generates an asymmetric key pair, and gives the public key to anybody who wants it. Each party generates and stores some number of [EC]DH parameters - one set for everybody you expect to need ...


0

If I understand you correctly you want to make sure, that the CA can verify that a public key submitted from some party actually belongs to this claimed party, i.e. it wants to be sure of the submitter's identity. This is not possible without having already some kind of direct or indirect trust relationship between CA and the party and your question does not ...


Top 50 recent answers are included