316 reputation
15
bio website
location Salerno, Italy
age
visits member for 3 years, 3 months
seen Sep 30 at 16:29

Jul
13
comment How can SSL secure a two-way communication with only one key-pair?
both client and server contribute to the generation of the master secret key, from which encryption and authentication keys are derived. The client's contribution to the MSK is encrypted using the server's public key, the server's is sent in cleat. The server needs to have a certified public key but needs not to prove he knows the associated secret key. This is achieved implicitly by showing that he can decrypt the client's contribution.