Hello,
> > I have a cipher suit :
> > TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
> >
> > What is It meant "TLS_DHE_RSA" ???? Combine between RSA with
> > Diffie-Hellman ?? RSA is key transport. DH is key agreement. How do they
> > use together ?? Please help.
> >
> When we use Ephemeral DH, we need to use a (RSA or DSS) certificate. So
> the DHE is for key establishment, and RSA signature is to authenticate
> the DHE key to avoid man in the middle attack.
Yes, and is calculated as (with some simplification):
DH_parameters = p, g, Y
data = client_hello + server_hello + DH_parameters
sign = RSA_sign(MD5(data)+SHA1(data)), for RSA
sign = DSA_sign(SHA1(data)), for DSA
Best regards,
--
Marek Marcola <[EMAIL PROTECTED]>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
