Questions tagged [ecdhe]

19 questions
3
votes
4 answers

Exporting shared secret as BYTE array from BCRYPT_SECRET_HANDLE

I'm implementing ECDHE using crypto next generation APIs (CNG). I generate public and private keys successfully. For pre-shared key, I use BCryptSecretAgreement API, which returns me the pre-shared key secret handle (BCRYPT_SECRET_HANDLE). How can…
3
votes
2 answers

How to serialize and consume ECDH parameters in Java

I am looking to perform ECDH between 2 platforms to derive a shared secret. I am planning to use a named curve (which curve not yet determined). The flow would look something like this: Alice picks a curve Alice generates a random key pair for her…
nak5ive
  • 1,963
  • 4
  • 15
  • 21
2
votes
0 answers

How to establish a TLS connection using cipher suite TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 in java?

My client(java 1.8) is trying to set up a TLS connection with a remote server using TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 as cipher suite. But throws an java.lang.IllegalStateException HashAlgorithm.sha256(4) is not being tracked The used crypto…
2
votes
1 answer

openssl 1.0.2j, how to force server to choose ECDH* ciphers

I have client server which uses opensl 1.0.2j, and using RSA:4096 key and certificate and want to force the server to use only the following…
Naga
  • 487
  • 2
  • 7
  • 23
2
votes
2 answers

Web Crypto API – ECDH - Possible to import private key with only the private key component, without the public key components?

Given a P-256 Elliptical Curve Diffie-Hellman Private Key (which is simply a random 256-bit integer): is it possible to import this private key into a CryptoKey object, using the window.crypto.subtle.importKey() method of the Web Crypto API –…
weaver
  • 151
  • 4
2
votes
1 answer

What is the format for sending curve parameters and the public key using ECDHE key exchange?

I attempting to use ECDHE key exchange with AES encryption using mbedtls library on client side.The keys are successfully being generated using the following program . Is there any standard format to attach the curve parameters and public key to…
aishwarya
  • 21
  • 1
1
vote
1 answer

Netty tcnative with OpenSSL and supported groups (elliptic curves)

I have a server using JRE8, netty 4.1.x and netty-tcnative 2.0.36. By default SslProvider.OPENSSL is configured. SslContextBuilder contextBuilder = SslContextBuilder.forServer(keyMngrFactory) .sslProvider(SslProvider.OPENSSL) …
ramtech
  • 757
  • 6
  • 15
1
vote
0 answers

DHE & ECDHE implementation in c

I am trying to compare the DHE & ECDHE implementation using OpenSSL, given below is the code which I tried to do the same but I need the client server demo program where client and server can exchange the public key and then generate the shared…
1
vote
2 answers

Using ECDHE TLS with Boost ASIO

The TL;DR version I'd like to know: Where does the specification for the use of ECDHE get defined (in a cert parameter or a server configuration of SSL contexts, or elsewhere)? In a non-home-rolled certificate setup, who's responsibility is it to…
Andrew Lipscomb
  • 936
  • 8
  • 19
1
vote
1 answer

ECDH shared secret doesn't match in loop, with Crypto++

CryptoPP::OID CURVE = CryptoPP::ASN1::secp256r1(); CryptoPP::AutoSeededRandomPool prng; std::vector KPVecRSU; (loop begin) kpStruct keyP; CryptoPP::ECDH < CryptoPP::ECP >::Domain dhA( CURVE ); CryptoPP::SecByteBlock…
1
vote
0 answers

How to generate ECPublic Key from given X component, Y component and curve in iOS?

I am getting X component, Y component and curve values from server. I want to derive server public key from that using openssl or common crypto. In iOS there is no straight forward API to generate Public Key with a given X,Y & Curve values. Any help…
Marmik
  • 459
  • 4
  • 10
1
vote
2 answers

How to do ECDHE handshake without exportable private key

I'm building an OpenSSL engine that implements ECDSA_METHOD, which includes signature creation and signature verification functions. Since the only usage of ECDHE private key is related to signature creation, having the key exported from the engine…
Oleg Gryb
  • 5,122
  • 1
  • 28
  • 40
0
votes
1 answer

ECDHE Curve25519 Key Exchange Signature and KeyValue Fields

I have an API where I need to pass the "KeyMaterial" which according to API Docs is for: Contains the cryptographic parameters that are required to perform End-to-End encryption for sharing the information between the producer and the consumer in a…
dg428
  • 413
  • 6
  • 14
0
votes
1 answer

openssl 1.0.2, how to force server to choose only set of ciphers

I have client server which uses opensl 1.0.2j, and want to force the server to use only the following…
Naga
  • 487
  • 2
  • 7
  • 23
0
votes
2 answers

Using ECDiffieHellmanCng to exchange keys

We plan to use ECDHE algorithm to exchange keys between client and server so that both can derive a common secret key to encrypt messages Based on what I have read, to use ECDHE algorithm both parties (client and server) should agree on a pair of…
bdotnet
  • 343
  • 1
  • 4
  • 16
1
2