4 ms·
True, but my point was that the actual key exchange (that is, the exchange of the symmetric keys used for the bulk of the encryption) is done using asymmetric-k
by brownleej 16y ago
True, but my point was that the actual key exchange (that is, the exchange of the symmetric keys used for the bulk of the encryption) is done using asymmetric-key encryption. Since this was in response to the question of how keys are exchanged, I thought it was the relevant phase to discuss.
- jacobolus 16y agoExcept, not necessarily, no. Sorry, my grandparent post should have been clearer that using a public-key method is only one of the ways to do authentication in SSL/TLS. Either way, some symmetric cipher is used for all the content. See: http://www.ipa.go.jp/security/rfc/RFC2246-AFEN.html http://www.ipa.go.jp/security/rfc/RFC2246-AFEN.html Search down for Diffie-Hellman. The Wikipedia article might also be useful: http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange