3 ms·
The point is doing without sharing the secret. I don't want to share my secret with you. You just throw a test at me that only I could possibly answer. The po
by hasenj 11y ago
The point is doing without sharing the secret.
I don't want to share my secret with you. You just throw a test at me that only I could possibly answer.
The point is, every time you should throw a completely different test at me.
Not only you can verify my identity, but anyone who's listening to the conversation can also verify my identity, and I don't have to share any secret.
- tptacek 11y agoThat's the point of Diffie Hellman. Look at the paint can diagram on the Wikipedia page; a lot of people find it helpful. Yes, once you've done a DH exchange, you can use the established key to relay a nonce to prove both sides have the same key.
- chongli 11y agoThe secret that's being shared with DH is thrown away and generated brand new every time you start a new session. Your private key is never shared with anyone. The term shared secret refers to material that is totally unrelated to a private key.