0
$\begingroup$

I am a beginner to coding and encryption standards... I have this task assigned in a course I am following:

  • Design and implement a key exchange protocol. Include digital signatures in the protocol for authentication.

Does implementing the Diffie-Hellman algorithm covers both parts as in key exchange and digital signature or only the key exchange part? If so what should I do?

Is there any other approach on covering both parts?

Improve this question
$\endgroup$
1
  • $\begingroup$ Look into the "Station to Station" protocol -- it is an authenticated key agreement protocol. Basically, the messages are signed, which doesn't happen with "basic" D-H. $\endgroup$
    – Dan
    Commented Feb 15, 2018 at 16:19

1 Answer 1

Reset to default
1
$\begingroup$

No, the Diffie-Hellman key exchange protocol by itself does not include any use of digital signatures.

However, Diffie-Hellman is also insecure against man-in-the-middle attacks, because the messages are not authenticated. This should give you a pointer what to do with the digital signatures.

Improve this answer
$\endgroup$
3
  • $\begingroup$ Of course, there are protocols which replace signatures with special DH exchanges ;) $\endgroup$
    – SEJPM
    Commented Feb 15, 2018 at 9:48
  • $\begingroup$ @SEJPM Which doesn't exactly help when you are specifically asked to use signatures now, does it? :D $\endgroup$
    – Maeher
    Commented Feb 15, 2018 at 9:49
  • $\begingroup$ guys can anyone please explain what is to be done to solve this ? $\endgroup$
    – Madushk
    Commented Feb 15, 2018 at 11:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.