what is the best method to transmit a public private key pair when the recipients initially have neither? -


what best method transmit public private key pair when recipients have neither, diffie-hellman 1 such method susceptable man in middle attacks other methods available? information appears suggest parties have secret key

public key / private key encryption designed deal problem.

both parties can freely exchange public keys other encrypt outgoing messages with.

man in middle attacks can occur in sense 3rd party can generate messages either party can decrypt neither (as need private keys).

a complete secure exchange eliminate man in middle might go this:

  1. both parties exchange public keys
  2. party sends message random number contained within it
  3. party b decrypts random number , replies same number encrypted party a.
  4. when party gets same number back, can sure no man in middle attack has occurred.
  5. all messages continue use number proof of message came from.

tls uses more complicated version of scheme it's handshake: https://en.wikipedia.org/wiki/transport_layer_security#tls_handshake


Comments

Popular posts from this blog

dns - How To Use Custom Nameserver On Free Cloudflare? -

python - Pygame screen.blit not working -

c# - Web API response xml language -