Diffie-Hellman Key Exchange

What Hacker News said

Strong rec zappo2938 · 2016-12 · on “Crypto 101 – Introductory course on cryptography”

For idiots like myself, I found this video, Public key cryptography - Diffie-Hellman Key Exchange (full version), to be completely enlightening using mixed colors to explain the most basic features of a cryptography algorithm.[0] [0] [this video]

Strong rec ndesaulniers · 2020-06 · on “Postbank to replace 12M bank cards after employees steal 'master key'”

Interesting, thanks for sharing (I too was curious). This is my favorite video on Diffie-Hellman key exchange which is a slightly different problem (sharing a secret, without the constraint of dividing the key): [this video] (oh, hey, same channel! Guess I'll need to check out more videos from here!)

Strong rec throw1234651234 · 2023-05 · on “Public Key Crypto Explained in 0 words”

This is the only video that ever explained it concisely and clearly, IF you don't care about trying to actually implement it: [this video]

Recommends jzl · 2016-11 · on “Ask HN: Is there a “ground-up” explanation of PGP/GnuPG?”

This is a great pair of videos that intuitively explain Diffie-Helman key exchange and then the RSA algorithm in a way that requires no previous knowledge of cryptography: "Public key cryptography - Diffie-Hellman Key Exchange" [this video] "Public Key Cryptography: RSA Encryption Algorithm" [LINK] Good coverage of the fundamentals before attempting a deeper understanding of PGP specifically.

Recommends tialaramex · 2017-06 · on “Ask HN: Want to study SSL, HTTPS, and the works. Where to start?”

I recommend beginning at the fundamentals. For example here's a video that walks through Diffie Hellman, so that anybody can follow, you can probably sprint through it, but by taking it slow they avoid accidentally forgetting anything important. [this video] Grasping the fundamentals means that when it comes to policy decisions (e.g. in the management of certificates) you can see what the consequences of a particular decision are, rather than just hoping that whoever proposed that policy knew what they were doing. For example, I think a lot of people today use Certificate Signing Request (CSR) files without understanding them at all. But once you have a grounding in the underlying elements you ca

Recommends ivanr · 2017-06 · on “How HTTPS Handshake Happens”

As others have already pointed out, this explanation focuses on the RSA key exchange, which has been deprecated. It's not recommended for use with the current line of protocols (TLS 1.2 and earlier) and it's been completely removed from TLS 1.3 (work in progress, but close to being finished). The key weakness of the RSA key exchange is that session encryption keys are transported over the network encrypted with the server's public key. When the server's private key is compromised in some way, the attacker can passively decrypt all traffic, they can also "go back in time" to decrypt all previous conversations they might have recorded and kept. For a more secure handshake approach, consider th

Recommends gregmac · 2017-10 · on “Practical Public Key Cryptography”

If you haven't seen it, there's a pretty neat video that outlines how public-key cryptography works using paint colors [1]. It's focused on Diffie-Hellman key exchange, but it's a great intro for beginners to be able to visualize the concepts, and I think helps provide some context before jumping right into the GPG command line. [1] [this video]

Recommends itsrajivshah · 2018-01 · on “Algorithms Explained: Diffie-Hellman”

Interesting explanation - thanks for sharing. I find it easier to visualise, through colours of paint, for a high-level metaphor of the DH key exchange process, which may be useful - [this video]