Reputation
356
Top tag
Next privilege 500 Rep.
Cast close & reopen votes
Badges
2 5
Newest
 Necromancer
Impact
~25k people reached

  • 0 posts edited
  • 0 helpful flags
  • 4 votes cast
Jul
13
comment How can SSL secure a two-way communication with only one key-pair?
both client and server contribute to the generation of the master secret key, from which encryption and authentication keys are derived. The client's contribution to the MSK is encrypted using the server's public key, the server's is sent in cleat. The server needs to have a certified public key but needs not to prove he knows the associated secret key. This is achieved implicitly by showing that he can decrypt the client's contribution.