Collaborate Disseminate
Is their a recommended RFC standard way to sign an ECDH certificate?
Given that the ECDH Private Key is not intended for digitalSignatures it seems wrong to sign a CSR with it’s own Private Key.
It would seem logical that another trusted c… Continue reading ECDH Certificate Signing
I am struggling to understand the value of ECIES in a offline message encryption scheme with shared static ECDH keys.
So if Bob and Alice each have a static public ECDH key stored in a directory.
Each time Alice wants to send Bob a message… Continue reading Value of ECDH with ECIES
As Whatsapp uses Diffie-Hellman algorithm for a key exchange and SSL certification ensures the authenticity of its server for the end user like me.
As per my understanding, messages first has to go to whataspp server and then it sends to o… Continue reading Can the WhatsApp servers really not read our messages?
I have asked this already on Stack Overflow, but got a suggestion to ask in this community too.
I’m working on implementing an XML encrypting / decrypting application in .NET with support for ECDH-ES because clients will use EC key pairs t… Continue reading Is XML Encryption 1.1 Key Agreement test cases decryption possible in .NET? [closed]
I’m using python-mbedtls library – https://github.com/Synss/python-mbedtls/tree/master
my goal is to create handshake with different cipher suites,
I’ve managed to do so with the given server and client files in the library – https://githu… Continue reading Define DH parametes in python-mbedtls
I´m currently building a protocol, in which two parties establish a connection via ECDH Key Establishment. The shared secret after ECDH is used to derivate Keys (with HKDF) for symmetric encryption.
In this stage, the protocol is still vul… Continue reading Mutual Authentication after ECDH Exchange with pre-shared secrets
I’m implementing an authenticated communication channel that uses Diffie-Hellman to have messages contain HMACs over the agreed secret, but currently I’m generating my own parameters which is painfully slow and unfit for use with weak IoT … Continue reading Where to get precomputed DH parameter sets? [closed]
As I was listening to an interview yesterday, the journalist claimed that his Signal communications were being spied on by the NSA. Whether to believe him or not is subjective. Still, it is an objective truth that nation-states can break i… Continue reading Minimizing trust assumptions in Messaging Protocols
Let’s assume that authentication with certificates has been well performed, next step is to generate short-term private&public ECC keys for ECDH shared key computation.
Alice: Generates keyA with RNG and calculates pubkeyA, shares pub… Continue reading Why do you need random number for ECDH shared key computation
The Subject Public Key Info field can have a value like ECDSA_P256 or ECDH_P256 when ECC is used.
Why is it not sufficient to specify "ECC_P256"? In other words, why is it not enough to specify just the curve parameters (like pri… Continue reading Why does the Public Key Info field in an X509 certificate for EC indicate the algorithm