Basic Key Transport and Exchange Methods
MIKEY supports five different methods to set up a Common Secret (to be used as e.g. a session key or a session KEK):
- Pre-Shared Key (PSK): This is the most efficient way to handle the transport of the Common Secret, since only symmetric encryption is used and only a small amount of data has to be exchanged. However, an individual key has to be shared with every single peer, which leads to scalability problems for larger user groups.
- Public-Key: The Common Secret is exchanged with the help of public key encryption. In larger systems, this requires a PKI to handle the secure distribution of public keys.
- Diffie-Hellman: A Diffie-Hellman key exchange is used to set up the Common Secret. This method has a higher resource consumption (both computation time and bandwidth) than the previous ones, but has the advantage of providing perfect forward secrecy. Also, it can be used without any PKI.
- DH-HMAC (HMAC-Authenticated Diffie-Hellman): This is a light-weight version of Diffie-Hellman MIKEY: instead of certificates and RSA signatures it uses HMAC to authenticate the two parts to one another. DH-HMAC is defined in RFC 4650.
- RSA-R (Reverse RSA): The Common Secret is exchanged with the help of public key encryption in a way that doesn't require any PKI: the initiator sends its public RSA key to the responder, which responds by selecting the Common Secret and then send it back to the initiator encrypted with the initiator's public key. RSA-R is defined in RFC 4738.
Read more about this topic: Mikey
Famous quotes containing the words basic, key, transport, exchange and/or methods:
“I fly in dreams, I know it is my privilege, I do not recall a single situation in dreams when I was unable to fly. To execute every sort of curve and angle with a light impulse, a flying mathematics—that is so distinct a happiness that it has permanently suffused my basic sense of happiness.”
—Friedrich Nietzsche (1844–1900)
“The safety of the republic being the supreme law, and Texas having offered us the key to the safety of our country from all foreign intrigues and diplomacy, I say accept the key ... and bolt the door at once.”
—Andrew Jackson (1767–1845)
“One may disavow and disclaim vices that surprise us, and whereto our passions transport us; but those which by long habits are rooted in a strong and ... powerful will are not subject to contradiction. Repentance is but a denying of our will, and an opposition of our fantasies.”
—Michel de Montaigne (1533–1592)
“... the subjective viewpoint is the only one to use regarding a library. Your true library is a collection of the books you want. You may have deplorably poor taste or bad judgment. Never mind. Correct those traits before you exchange your books.”
—Carolyn Wells (1862–1942)
“In inner-party politics, these methods lead, as we shall yet see, to this: the party organization substitutes itself for the party, the central committee substitutes itself for the organization, and, finally, a “dictator” substitutes himself for the central committee.”
—Leon Trotsky (1879–1940)