RSA is a fragile cryptosystem

Re:RSA is a fragile cryptosystem by tptacek on Monday July 08, 2019 @12:21PM (#20383994)

DH by itself protects against passive attackers, but most "snoopers" aren't passive. To securely exchange keys over an untrusted network, you usually want an authenticated key exchange, which is more complicated than DH.

[ Parent | on HN ]

Re:RSA is a fragile cryptosystem by tabletopneedle on Monday July 08, 2019 @12:52PM (#20384340)

With DH both public keys have effect on the randomness of the shared secret. If the app on the client generates a random DH key-pair for every session, and it uses a public DH value of the server pinned to it, the encryption is authenticated and secure to use.

If there are no public keys pinned to clients (say secure messaging apps like Signal where each user generates their own keys), users need to check the public key fingerprints to make sure there's no MITM attack taking place.

[ Parent | on HN ]

Re:RSA is a fragile cryptosystem by lvh on Monday July 08, 2019 @01:46PM (#20384959)

The public key fingerprints that need checking are important because they get introduced in 3DH, which is an AKE. Like 'tptacek mentioned.

[ Parent | on HN ]