![]() ![]() B has to choose its value of b and g_b without knowing the true value of g_a, so that it cannot try different values of b to force the final key (g_a)^b to have any specific properties (such as fixed lower 32 bits of SHA256(key)). The idea here is that A commits to a specific value of a (and of g_a) without disclosing it to B. B : checks hash(g_a) = g_a_hash, then computes key (g_a)^b. ![]() A->B : (computes key (g_b)^a, then) sends g_a := g^a. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |