Notes

Asymmetric Cipher

Asymmetric Ciphers

Asymmetric ciphers aka public key cryptography, is more complex than symmetric(in term of usage not cipher implementation), because instead of using the same key to encrypt and decrypt, asymmetric needs public and private key pair.

Common scenarios of asymmetric ciphers are:

  • Encrypt data by public key and decrypt by private key
  • Sign message(MAC) by private key and verify by public key
  • Exchange key between 2 parties publicly

Key Exchange

Key exchange usually happen when two parties want to establish a secure connection on a public channel, for example TLS Handshake.

  • Client and Server each has a key pair, only client has access to the private key
  • Server has a key pair, only server has access to the private key
  • (Client private key * Base) * Server public key = shared key = Client public key (Base * Server Private key)

Where private * base = public key * is a math irreversible operation that is associative, e.g. exponent of huge number