Re:Statement Regarding Temporary Hiatus on U.S. Dollar Withd...
by Robin_Message on Friday June 21, 2013 @05:40AM
(#5917271)
I think (not an expert) that with elliptic curve Diffie-Hellman (which e.g. Google uses), even with the private key and the whole session, you still can't decrypt the session (Diffie-Hellman provides a secure channel, public/private proves the server is who it says it is).
[ Parent
| on HN ]
Re:Statement Regarding Temporary Hiatus on U.S. Dollar Withd...
by sneak on Friday June 21, 2013 @11:01PM
(#5922391)
That is correct. These are referred to as ECDHE, or DHE for the non-ECC variant (vanilla DH). The last e is "ephemeral", referring to the lifetime of the session key.
The property that this provides is known as "forward secrecy".