# Tag Info

4

To answer this question, we must have a look at how TLS/SSL works. I guess you know that the aim of TLS/SSL is to authenticate communicating parties before setting up an encrypted connection through which application data will flow. And as you may already know, an SSL handshake/session will use asymmetric crypto for authentication and session setup and ...

4

If you use public key crypto in the correct way, then every user has it's own private key and corresponding public key (included in the certificate) and the keys of users are not related. Consequently, compromising the private key of one user does not affect any of the other users. So in the case of compromise of the private key of one user the remaining ...

0

We consider a server $S$ and a bunch of users $U_1, \dots, U_n$. What you want: Users should be able to send queries to the server and receive replies. The users should be able to register identities with the server. Any reply $m'$ that a user accepts as coming from the server in response to a query $m$ from that user, really came from the server in ...

2

Well, it has the obvious problem that if the UA has both $d_1H(r)^{k_1}$ (from the party) and $H(r)^{S-k_1}$ (from the UA), it can compute $d_1$ directly.

Top 50 recent answers are included