Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 64

Key exchange protocols allow two parties to produce a secret session key over a public channel.

7 votes
Accepted

What is the post-quantum cryptography alternative to Diffie-Hellman?

For authenticated/mutually authenticated key exchange, you can use that piece of TLS. TLS requires public key encryption and a key derivation function for the key exchange (plus a signature algorithm …
PulpSpy's user avatar
  • 8,717
6 votes
Accepted

How does the wider cryptographic community view non-abelian group based cryptography?

In my experience, I never have found that cryptographers base their opinion of a cryptosystem on the properties of the underlying group. If its a braid group, abelian group, or finite field: that does …
PulpSpy's user avatar
  • 8,717
2 votes

Generalizing the conversion of Diffie-Hellman to El Gamal

The conversion of Diffie-Hellmen into Elgamal is assisted by a few factors that are not inherent to key exchange/agreement protocols in general, but a general conversion may be possible. The DH $\rig …
PulpSpy's user avatar
  • 8,717
3 votes
Accepted

Do Quantum Key Distribution and Physical Unclonable Functions combine, and how?

It seems difficult to combine the two. PUFs can provide authentication but they are based on the sender having first built up a small number of challenge/response pairs before handing the PUF over. So …
PulpSpy's user avatar
  • 8,717
4 votes
Accepted

Is it possible to ensure security with zero pre-shared information?

No. Consider using encryption to protect against a passive adversary. In this case, encryption needs to hold from the sender to the receiver. The sender can verify that the message leaves them encrypt …
PulpSpy's user avatar
  • 8,717
6 votes
Accepted

RSA-based authentication and key-agreement protocol

What you are looking for is authenticated key agreement with perfect forward secrecy based on certificates. First, to address @Paulo's comment, TLS/SSL does provide this functionality with any of the …
PulpSpy's user avatar
  • 8,717