News for hackers. Stuff that matters.
Re:Diffie-Hellman for the layman by 1cvmask on Friday April 30, 2021 @11:24PM (#27002763)
Professor Diffie was the teacher of Taher Elgamal who helped create the Elgamal algorithm and SSL.

https://en.wikipedia.org/wiki/ElGamal_encryption

https://en.wikipedia.org/wiki/ElGamal_signature_scheme

https://en.wikipedia.org/wiki/Taher_Elgamal

Re:Diffie-Hellman for the layman by loudouncodes on Friday April 30, 2021 @11:50PM (#27002893)
Um, he starts in 1976, then says ‘21 years later’ and he’s talking about today? He’s 20 years off in his opening premise...
Re:Diffie-Hellman for the layman by boris1 on Sunday May 02, 2021 @02:16AM (#27012750)
Thanks, gonna fix it.
Re:Diffie-Hellman for the layman by boris1 on Friday May 07, 2021 @01:37PM (#27078569)
I've now implemented folder encryption. If you encrypt folder 'foo', you get the file 'foo.encrypted'. When you decrypt it using the same tool, you get file 'foo.zip' which you download and uncompress into a folder 'foo'.
Re:Diffie-Hellman for the layman by davidhyde on Saturday May 01, 2021 @05:29AM (#27004747)
> “ When WhatsApp was pressured to leave a backdoor into the encryption, it said “no” but instead agreed to log and report all dubious communication before it is encrypted. ”

Huh, I did not know that!

Re:Diffie-Hellman for the layman by avmich on Friday April 30, 2021 @10:48PM (#27002515)
So this doesn't unfortunately work with a man in the middle?

That is, how email exchange can be guaranteed to work properly, and MITM won't insert his email in the middle of the process?

Re:Diffie-Hellman for the layman by spekcular on Friday April 30, 2021 @11:14PM (#27002697)
Yes, exactly. This is why real-world systems additionally include some kind of authentication protocol.

Reference: https://en.wikipedia.org/wiki/Man-in-the-middle_attack#Authe...

Re:Diffie-Hellman for the layman by boris1 on Sunday May 02, 2021 @02:23AM (#27012775)
The check digits solve the MITM problem. You should compare them by another channel than email, such as text message. This is called "Short Authentication String" (SAS).