316 reputation
15
bio website
location Salerno, Italy
age
visits member for 3 years, 1 month
seen Aug 27 at 12:36

Jul
13
comment How can SSL secure a two-way communication with only one key-pair?
both client and server contribute to the generation of the master secret key, from which encryption and authentication keys are derived. The client's contribution to the MSK is encrypted using the server's public key, the server's is sent in cleat. The server needs to have a certified public key but needs not to prove he knows the associated secret key. This is achieved implicitly by showing that he can decrypt the client's contribution.