Tag Info

New answers tagged

1

I have figured out a way to use TLS with only a EC key by using DSA instead of RSA. I had not realized you could do DSA with a EC key. My mistake was trying to use RSA to sign the certificate. Now I can generate my certificate and self-sign it only with the EC key. The peer will simply check to make sure the certificate was signed by the appropriate node ID ...


0

First, one point. Each peer has a well known 256bit peer identifier (the public key of a 256bit elliptic curve keypair). Therefore, you have PKI, even though "there is no PKI 'authority'". Is this a proper use of ECDH anon, and will a simple challenge/response scheme at the application level guarantee peer authentication? Yes, and No. An ...



Top 50 recent answers are included