Skip to main content
replaced http://crypto.stackexchange.com/ with https://crypto.stackexchange.com/
Source Link

In addition to the other answerother answer.

The "Steps of Hybrid Encryption" in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

In addition to the other answer.

The "Steps of Hybrid Encryption" in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

In addition to the other answer.

The "Steps of Hybrid Encryption" in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

less use of italic, which I'm told is offensive to some
Source Link
fgrieu
  • 145.5k
  • 12
  • 319
  • 611

In addition to the other answer.

The Steps"Steps of Hybrid EncryptionEncryption" in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecyforward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

In addition to the other answer.

The Steps of Hybrid Encryption in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

In addition to the other answer.

The "Steps of Hybrid Encryption" in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

Clarify I'm considering Hybrid Encryption as the term is used in protocols
Source Link
fgrieu
  • 145.5k
  • 12
  • 319
  • 611

In addition to the other answer.

The Steps of Hybrid Encryption in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchangeDiffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecyforward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

In addition to the other answer.

The Steps of Hybrid Encryption in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption, including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

In addition to the other answer.

The Steps of Hybrid Encryption in the question really are steps of one form of hybrid encryption, built on top of asymmetric encryption.

There are other forms of hybrid encryption (at least for the meaning of that in protocols), including some

  • resistant to passive eavesdropping (attacks where the adversary can't send or modify any message) including if private key(s) have leaked; the most primitive form of that arguably being Diffie-Hellman key exchange followed by use of that symmetric key with symmetric encryption (which is invulnerable to leak of private keys, since there is none!);
  • with forward secrecy, that is resistance (including to active attacks) should private key(s) leak, assuming the leak is after the interception; combining the aforementioned Diffie-Hellman key exchange with RSA signature (into DHE-RSA or ECDHE-RSA) is one of several ways to reach that goal (as well as the previous, weakest one).

These properties, offered by some modern TLS cryptosuites, leave the cryptosystem vulnerable only to active attacks with contemporaneous knowledge of the private key (which is hard to mount), or compromise of one of the endpoint.

These are important potential superiorities of hybrid encryption, relevant to the question's "Why is Hybrid Encryption superior?", even though it does not apply to the breed considered in the question.

Some info on how the supplementatry properties are obtained
Source Link
fgrieu
  • 145.5k
  • 12
  • 319
  • 611
Loading
Source Link
fgrieu
  • 145.5k
  • 12
  • 319
  • 611
Loading