Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

What is the most secure way to let Alice "input" her private key, transfer it to the server and decrypt the message? (Then destroy the private key on the server)

Every connection is using SSL.

Exmeple:

Alice log on the website. She have a new "email" from Bob. (Everything is stored in a database, it's not an actual email)

To read it, she needs her private key. How can she do that ? Upload it? Copy the key in a textbox and click submit? (May not be pratical for Alice) Store it on the server (Hugh security issue) ?

(And is it possible to suggest me some keywords please? I'm not used to Crypto.Stackexchange Thank you)

share|improve this question
add comment

1 Answer 1

up vote 2 down vote accepted

What you really want to do is never have any unencrypted data leave the server in the first place. What should be happening is that the server is sending the encrypted message to Alice, who then decrypts it locally.

share|improve this answer
    
Thank you Joe :) (the obvious is hidding from me) –  Jeremy Dicaire Jan 24 '13 at 22:14
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.