Given an one-key cipher such that: $E[k_1,E(k_2,m)]=E[k_2, E(k_1, m)]$ Is there any key distribution protocol that involves only two parties (Alice and Bob) without the key distribution center? The protocol should allow Alice to send a session key to Bob with confidentiality using the one-key cipher.
$\begingroup$
$\endgroup$
1
-
$\begingroup$ Hi Edward, this question apparently belongs to Crypto Stackexchange according to my opinion. I've informed a moderator to move it there. $\endgroup$– Sir MuffingtonMay 9, 2022 at 19:35
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
Is there any key distribution protocol that involves only two parties (Alice and Bob) without the key distribution center?
Yes, it's Shamir's Three Pass Protocol; it works exactly how you describe. It indeed provides confidentiality, assuming that the attacker cannot modify the messages, and assuming that the cipher it is based on is secure.
Now, it's not used in practice (at least, I've never seen it used); we generally use either a Diffie-Hellman exchange or public key encryption instead.
