0
$\begingroup$

I am a beginner to coding and encryption standards... I have this task assigned in a course I am following:

  • Design and implement a key exchange protocol. Include digital signatures in the protocol for authentication.

Does implementing the Diffie-Hellman algorithm covers both parts as in key exchange and digital signature or only the key exchange part? If so what should I do?

Is there any other approach on covering both parts?

$\endgroup$
  • $\begingroup$ Look into the "Station to Station" protocol -- it is an authenticated key agreement protocol. Basically, the messages are signed, which doesn't happen with "basic" D-H. $\endgroup$ – Dan Feb 15 '18 at 16:19
1
$\begingroup$

No, the Diffie-Hellman key exchange protocol by itself does not include any use of digital signatures.

However, Diffie-Hellman is also insecure against man-in-the-middle attacks, because the messages are not authenticated. This should give you a pointer what to do with the digital signatures.

|improve this answer|||||
$\endgroup$
  • $\begingroup$ Of course, there are protocols which replace signatures with special DH exchanges ;) $\endgroup$ – SEJPM Feb 15 '18 at 9:48
  • $\begingroup$ @SEJPM Which doesn't exactly help when you are specifically asked to use signatures now, does it? :D $\endgroup$ – Maeher Feb 15 '18 at 9:49
  • $\begingroup$ guys can anyone please explain what is to be done to solve this ? $\endgroup$ – Madushk Feb 15 '18 at 11:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.