News for hackers. Stuff that matters.

A comment on Show HN: Diffie-Hellman exchange for the layman. Parent comment

Re:Show HN: Diffie-Hellman exchange for the layman by libeclipse on Thursday April 22, 2021 @10:11AM (#26902967)
tldr: preventing MITM attacks requires setting up an authentication workflow. Without this, you have no guarantees about who you're speaking to.

For example, TLS 1.3 does this by (after performing ephemeral DH key exchange) signing the conversation transcript with the server's long term identity key. After this the client is sure that they are speaking to the correct server, but the server has no authenticity guarantees about the client.

[ Parent | on HN ]
Re:Show HN: Diffie-Hellman exchange for the layman by boris1 on Sunday April 25, 2021 @07:24PM (#26937689)
The only way is to use another channel for the Short Authentication String (SAS) (check digits in my case). I recommend that people SMS them the check digits, and exchange the DH offers by email.
[ Parent | on HN ]