Reputation
346
Top tag
Next privilege 350 Rep.
Access review queues
Badges
2 5
Newest
 Necromancer
Impact
~22k people reached

Jul
13
comment How can SSL secure a two-way communication with only one key-pair?
both client and server contribute to the generation of the master secret key, from which encryption and authentication keys are derived. The client's contribution to the MSK is encrypted using the server's public key, the server's is sent in cleat. The server needs to have a certified public key but needs not to prove he knows the associated secret key. This is achieved implicitly by showing that he can decrypt the client's contribution.