Questions tagged [ecdhe]
19 questions
3
votes
4 answers
Exporting shared secret as BYTE array from BCRYPT_SECRET_HANDLE
I'm implementing ECDHE using crypto next generation APIs (CNG). I generate public and private keys successfully. For pre-shared key, I use BCryptSecretAgreement API, which returns me the pre-shared key secret handle (BCRYPT_SECRET_HANDLE).
How can…

Ahsan Younis
- 41
- 5
3
votes
2 answers
How to serialize and consume ECDH parameters in Java
I am looking to perform ECDH between 2 platforms to derive a shared secret. I am planning to use a named curve (which curve not yet determined). The flow would look something like this:
Alice picks a curve
Alice generates a random key pair for her…

nak5ive
- 1,963
- 4
- 15
- 21
2
votes
0 answers
How to establish a TLS connection using cipher suite TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 in java?
My client(java 1.8) is trying to set up a TLS connection with a remote server using TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 as cipher suite.
But throws an java.lang.IllegalStateException
HashAlgorithm.sha256(4) is not being tracked
The used crypto…

Christoph Bröter
- 21
- 4
2
votes
1 answer
openssl 1.0.2j, how to force server to choose ECDH* ciphers
I have client server which uses opensl 1.0.2j, and using RSA:4096 key and certificate and want to force the server to use only the following…

Naga
- 487
- 2
- 7
- 23
2
votes
2 answers
Web Crypto API – ECDH - Possible to import private key with only the private key component, without the public key components?
Given a P-256 Elliptical Curve Diffie-Hellman Private Key (which is simply a random 256-bit integer): is it possible to import this private key into a CryptoKey object, using the window.crypto.subtle.importKey() method of the Web Crypto API –…

weaver
- 151
- 4
2
votes
1 answer
What is the format for sending curve parameters and the public key using ECDHE key exchange?
I attempting to use ECDHE key exchange with AES encryption using mbedtls library on client side.The keys are successfully being generated using the
following program .
Is there any standard format to attach the curve parameters and public key to…

aishwarya
- 21
- 1
1
vote
1 answer
Netty tcnative with OpenSSL and supported groups (elliptic curves)
I have a server using JRE8, netty 4.1.x and netty-tcnative 2.0.36. By default SslProvider.OPENSSL is configured.
SslContextBuilder contextBuilder = SslContextBuilder.forServer(keyMngrFactory)
.sslProvider(SslProvider.OPENSSL)
…

ramtech
- 757
- 6
- 15
1
vote
0 answers
DHE & ECDHE implementation in c
I am trying to compare the DHE & ECDHE implementation using OpenSSL, given below is the code which I tried to do the same but I need the client server demo program where client and server can exchange the public key and then generate the shared…

Ashish Durgapal
- 39
- 7
1
vote
2 answers
Using ECDHE TLS with Boost ASIO
The TL;DR version
I'd like to know:
Where does the specification for the use of ECDHE get defined (in a cert parameter or a server configuration of SSL contexts, or elsewhere)?
In a non-home-rolled certificate setup, who's responsibility is it to…

Andrew Lipscomb
- 936
- 8
- 19
1
vote
1 answer
ECDH shared secret doesn't match in loop, with Crypto++
CryptoPP::OID CURVE = CryptoPP::ASN1::secp256r1();
CryptoPP::AutoSeededRandomPool prng;
std::vector KPVecRSU;
(loop begin)
kpStruct keyP;
CryptoPP::ECDH < CryptoPP::ECP >::Domain dhA( CURVE );
CryptoPP::SecByteBlock…

henry townshend
- 23
- 4
1
vote
0 answers
How to generate ECPublic Key from given X component, Y component and curve in iOS?
I am getting X component, Y component and curve values from server. I want to derive server public key from that using openssl or common crypto.
In iOS there is no straight forward API to generate Public Key with a given X,Y & Curve values.
Any help…

Marmik
- 459
- 4
- 10
1
vote
2 answers
How to do ECDHE handshake without exportable private key
I'm building an OpenSSL engine that implements ECDSA_METHOD, which includes signature creation and signature verification functions. Since the only usage of ECDHE private key is related to signature creation, having the key exported from the engine…

Oleg Gryb
- 5,122
- 1
- 28
- 40
0
votes
1 answer
ECDHE Curve25519 Key Exchange Signature and KeyValue Fields
I have an API where I need to pass the "KeyMaterial" which according to API Docs is for:
Contains the cryptographic parameters that are required to perform End-to-End encryption for sharing the information between the producer and the consumer in a…

dg428
- 413
- 6
- 14
0
votes
1 answer
openssl 1.0.2, how to force server to choose only set of ciphers
I have client server which uses opensl 1.0.2j, and want to force the server to use only the following…

Naga
- 487
- 2
- 7
- 23
0
votes
2 answers
Using ECDiffieHellmanCng to exchange keys
We plan to use ECDHE algorithm to exchange keys between client and server so that both can derive a common secret key to encrypt messages
Based on what I have read, to use ECDHE algorithm both parties (client and server) should agree on a pair of…

bdotnet
- 343
- 1
- 4
- 16