336 reputation
bio website
location Salerno, Italy
visits member for 3 years, 8 months
seen Jan 5 at 17:32

comment How can SSL secure a two-way communication with only one key-pair?
both client and server contribute to the generation of the master secret key, from which encryption and authentication keys are derived. The client's contribution to the MSK is encrypted using the server's public key, the server's is sent in cleat. The server needs to have a certified public key but needs not to prove he knows the associated secret key. This is achieved implicitly by showing that he can decrypt the client's contribution.