2. cnp3-ebook
3. principles/security
4. English
5. Zen

100 ../../principles/security.rst:988
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — To safely use the Diffie-Hellman key exchange, Alice and Bob must use an `authenticated` exchange. Some of the information sent by Alice or Bob must be signed with a public key known by the other user. In practice, it is often important for Alice to authenticate Bob. If Bob has a certificated signed by Ted, the authenticated key exchange could be organized as follows. 370/10000 · 370
101 ../../principles/security.rst:995
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — Alice chooses a secret integer : :math:`a` and sends :math:`A= g^{a} \mod p` to Bob 83/10000 · 83
102 ../../principles/security.rst:997
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — Bob chooses a secret integer : :math:`b`, computes :math:`B= g^{b} \mod p` and sends :math:`Cert(Bob,Bob_{pub},Ted), E_p(Bob_{priv},B)` to Alice 144/10000 · 144
103 ../../principles/security.rst:1000
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — Alice checks the signature (with :math:`Bob_{pub}`) and the certificate and computes :math:`S_{A}=B^{a} \mod p` 111/10000 · 111
104 ../../principles/security.rst:1002
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — Bob computes :math:`S_{B}=A^{b} \mod p` 39/10000 · 39
105 ../../principles/security.rst:1006
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — This prevents the attack mentioned above since Mallory cannot create a fake certificate and cannot sign a value by using Bob's private key. Given the risk of man-in-the-middle attacks, the Diffie-Hellman key exchange mechanism should never be used without authentication. 271/10000 · 271
106 ../../principles/security.rst:1015
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — Footnotes 9/10000 · 9
107 ../../principles/security.rst:1016
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — The wikipedia page on passwords provides many of these references : https://en.wikipedia.org/wiki/Password_strength 115/10000 · 115
108 ../../principles/security.rst:1019
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — A detailed explanation of the operation of the RSA algorithm is outside the scope of this e-book. Various tutorials such as the `RSA page <https://en.wikipedia.org/wiki/RSA_(cryptosystem)>`_ on wikipedia provide examples and tutorial information. 246/10000 · 246
109 ../../principles/security.rst:1024
	English ↹ ↵ NBS … “ ” ‘ ’ ﹙-﹚ ‐ – — A detailed explanation of the ECC cryptosystems is outside the scope of this e-book. A simple introduction may be found on `Andrea Corbellini's blog <http://andrea.corbellini.name/2015/05/17/elliptic-curve-cryptography-a-gentle-introduction/>`_. There have been deployments of ECC recently because ECC schemes usually require shorter keys than RSA and consume less CPU. 369/10000 · 369
The translation has come to an end.