Statement Regarding Temporary Hiatus on U.S. Dollar Withdrawals

Re:Statement Regarding Temporary Hiatus on U.S. Dollar Withd... by tlrobinson on Thursday June 20, 2013 @03:52PM (#5914487)

By "forge" I meant using the private keys (obtained through FISA, or possibly cracked) to either decrypt or MITM SSL sessions, not using one of their own CAs to create a valid but obviously fake certificate, which I assume is what you thought I meant.

Maybe "forge" was the wrong word.

[ Parent | on HN ]

Re:Statement Regarding Temporary Hiatus on U.S. Dollar Withd... by Robin_Message on Friday June 21, 2013 @05:40AM (#5917271)

I think (not an expert) that with elliptic curve Diffie-Hellman (which e.g. Google uses), even with the private key and the whole session, you still can't decrypt the session (Diffie-Hellman provides a secure channel, public/private proves the server is who it says it is).

[ Parent | on HN ]

Re:Statement Regarding Temporary Hiatus on U.S. Dollar Withd... by sneak on Friday June 21, 2013 @11:01PM (#5922391)

That is correct. These are referred to as ECDHE, or DHE for the non-ECC variant (vanilla DH). The last e is "ephemeral", referring to the lifetime of the session key.

The property that this provides is known as "forward secrecy".

[ Parent | on HN ]