Bryan Mongeau wrote:
> Thanks for the detailed clarification. I can then extrapolate that Rijndael
> can be used as the block cipher in network encryption only if its symmetric key
> were to be encrypted with the intended recipient's public key. This seems to be
> undesirable practice since it offers no more security than public key
> encryption. I'm wondering, are there any alternatives to DH/RSA/DSA for
> sharing a cipher key over an insecure network? Why isn't AES more suited to
> PKI, seeing as they tout it as the "new business standard"?
In the case of "enveloped data" (one of the PKCS#7 types) yes. In
the case of Diffie-Hellman, it is usually encrypted with (a qty
derived from) the pairwise Master Secret. In the case of SSL, it's
a little more subtle. See the explanation of the Handshake step
of the protocol
http://home.netscape.com/eng/ssl3/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
