Diffie-Hellman for the layman(borisreitman.medium.com)

borisreitman.medium.com

https://borisreitman.medium.com/diffie-hellman-for-the-layman-7df6095011d9

8 comments

Professor Diffie was the teacher of Taher Elgamal who helped create the Elgamal algorithm and SSL.

https://en.wikipedia.org/wiki/ElGamal_encryption

https://en.wikipedia.org/wiki/ElGamal_signature_scheme

https://en.wikipedia.org/wiki/Taher_Elgamal

loudouncodes5 anni fa

Um, he starts in 1976, then says ‘21 years later’ and he’s talking about today? He’s 20 years off in his opening premise...

boris15 anni fa

Thanks, gonna fix it.

boris15 anni fa

I've now implemented folder encryption. If you encrypt folder 'foo', you get the file 'foo.encrypted'. When you decrypt it using the same tool, you get file 'foo.zip' which you download and uncompress into a folder 'foo'.

davidhyde5 anni fa

> “ When WhatsApp was pressured to leave a backdoor into the encryption, it said “no” but instead agreed to log and report all dubious communication before it is encrypted. ”

Huh, I did not know that!

avmich5 anni fa

So this doesn't unfortunately work with a man in the middle?

That is, how email exchange can be guaranteed to work properly, and MITM won't insert his email in the middle of the process?

spekcular5 anni fa

Yes, exactly. This is why real-world systems additionally include some kind of authentication protocol.

Reference: https://en.wikipedia.org/wiki/Man-in-the-middle_attack#Authe...

boris15 anni fa

The check digits solve the MITM problem. You should compare them by another channel than email, such as text message. This is called "Short Authentication String" (SAS).