Basic Key Transport and Exchange Methods
MIKEY supports five different methods to set up a Common Secret (to be used as e.g. a session key or a session KEK):
- Pre-Shared Key (PSK): This is the most efficient way to handle the transport of the Common Secret, since only symmetric encryption is used and only a small amount of data has to be exchanged. However, an individual key has to be shared with every single peer, which leads to scalability problems for larger user groups.
- Public-Key: The Common Secret is exchanged with the help of public key encryption. In larger systems, this requires a PKI to handle the secure distribution of public keys.
- Diffie-Hellman: A Diffie-Hellman key exchange is used to set up the Common Secret. This method has a higher resource consumption (both computation time and bandwidth) than the previous ones, but has the advantage of providing perfect forward secrecy. Also, it can be used without any PKI.
- DH-HMAC (HMAC-Authenticated Diffie-Hellman): This is a light-weight version of Diffie-Hellman MIKEY: instead of certificates and RSA signatures it uses HMAC to authenticate the two parts to one another. DH-HMAC is defined in RFC 4650.
- RSA-R (Reverse RSA): The Common Secret is exchanged with the help of public key encryption in a way that doesn't require any PKI: the initiator sends its public RSA key to the responder, which responds by selecting the Common Secret and then send it back to the initiator encrypted with the initiator's public key. RSA-R is defined in RFC 4738.
Read more about this topic: Mikey
Famous quotes containing the words basic, key, transport, exchange and/or methods:
“Our basic ideas about how to parent are encrusted with deeply felt emotions and many myths. One of the myths of parenting is that it is always fun and games, joy and delight. Everyone who has been a parent will testify that it is also anxiety, strife, frustration, and even hostility. Thus most major parenting- education formats deal with parental emotions and attitudes and, to a greater or lesser extent, advocate that the emotional component is more important than the knowledge.”
—Bettye M. Caldwell (20th century)
“This is the Key of the Kingdom:
In that Kingdom is a city;”
—Unknown. This Is the Key (l. 12)
“One may disavow and disclaim vices that surprise us, and whereto our passions transport us; but those which by long habits are rooted in a strong and ... powerful will are not subject to contradiction. Repentance is but a denying of our will, and an opposition of our fantasies.”
—Michel de Montaigne (15331592)
“If mass communications blend together harmoniously, and often unnoticeably, art, politics, religion, and philosophy with commercials, they bring these realms of culture to their common denominatorthe commodity form. The music of the soul is also the music of salesmanship. Exchange value, not truth value, counts.”
—Herbert Marcuse (18981979)
“In inner-party politics, these methods lead, as we shall yet see, to this: the party organization substitutes itself for the party, the central committee substitutes itself for the organization, and, finally, a dictator substitutes himself for the central committee.”
—Leon Trotsky (18791940)