32
submitted 2 months ago by t0mri@lemmy.ml to c/security@lemmy.ml

There’s a server, a client, and a hacker in a network. For encryption, the client and the server need to share their private keys. Wouldn’t the hacker be able to grab those during their transmission and decrypt further messages as they please?

you are viewing a single comment's thread
view the rest of the comments
[-] RegalPotoo@lemmy.world 2 points 2 months ago

In RSA, the private key is a pair of big semi-primes, and the public key is derived from those numbers. I think you are confusing DHKE and RSA with your other points, the private key is never transmitted over the network. For TLS you typically use an asymmetric crypto system to validate identities and encrypt the key exchange to prevent person-in-the-middle, but the key that is agreed using that process is a symmetric key for AES or similar, but that is specific to TLS.

Also, there are other asymmetric systems that don't use primes at all - eliptic curve crypto is based on completely different math

[-] Turun@feddit.de 1 points 2 months ago

Oh, I may actually have confused that. Thanks for pointing it out.

this post was submitted on 28 Apr 2024
32 points (79.6% liked)

Security

4838 readers
2 users here now

Confidentiality Integrity Availability

founded 4 years ago
MODERATORS