Basic Key Transport and Exchange Methods
MIKEY supports five different methods to set up a Common Secret (to be used as e.g. a session key or a session KEK):
- Pre-Shared Key (PSK): This is the most efficient way to handle the transport of the Common Secret, since only symmetric encryption is used and only a small amount of data has to be exchanged. However, an individual key has to be shared with every single peer, which leads to scalability problems for larger user groups.
- Public-Key: The Common Secret is exchanged with the help of public key encryption. In larger systems, this requires a PKI to handle the secure distribution of public keys.
- Diffie-Hellman: A Diffie-Hellman key exchange is used to set up the Common Secret. This method has a higher resource consumption (both computation time and bandwidth) than the previous ones, but has the advantage of providing perfect forward secrecy. Also, it can be used without any PKI.
- DH-HMAC (HMAC-Authenticated Diffie-Hellman): This is a light-weight version of Diffie-Hellman MIKEY: instead of certificates and RSA signatures it uses HMAC to authenticate the two parts to one another. DH-HMAC is defined in RFC 4650.
- RSA-R (Reverse RSA): The Common Secret is exchanged with the help of public key encryption in a way that doesn't require any PKI: the initiator sends its public RSA key to the responder, which responds by selecting the Common Secret and then send it back to the initiator encrypted with the initiator's public key. RSA-R is defined in RFC 4738.
Read more about this topic: Mikey
Famous quotes containing the words basic, key, transport, exchange and/or methods:
“We can’t nourish our children if we don’t nourish ourselves.... Parents who manage to stay married, sane, and connected to each other share one basic characteristic: The ability to protect even small amounts of time together no matter what else is going on in their lives.”
—Ron Taffel (20th century)
“Power, in Case’s world, meant corporate power. The zaibatsus, the multinationals ..., had ... attained a kind of immortality. You couldn’t kill a zaibatsu by assassinating a dozen key executives; there were others waiting to step up the ladder; assume the vacated position, access the vast banks of corporate memory.”
—William Gibson (b. 1948)
“One may disavow and disclaim vices that surprise us, and whereto our passions transport us; but those which by long habits are rooted in a strong and ... powerful will are not subject to contradiction. Repentance is but a denying of our will, and an opposition of our fantasies.”
—Michel de Montaigne (1533–1592)
“So long as the law considers all these human beings, with beating hearts and living affections, only as so many things belonging to the master—so long as the failure, or misfortune, or imprudence, or death of the kindest owner, may cause them any day to exchange a life of kind protection and indulgence for one of hopeless misery and toil—so long it is impossible to make anything beautiful or desirable in the best-regulated administration of slavery.”
—Harriet Beecher Stowe (1811–1896)
“The reading public is intellectually adolescent at best, and it is obvious that what is called “significant literature” will only be sold to this public by exactly the same methods as are used to sell it toothpaste, cathartics and automobiles.”
—Raymond Chandler (1888–1959)