crypto/web impementation tradeoffs

2002-07-04 Thread John Saylor
Hi I'm passing some data through a web client [applet-like] and am planning on using some crypto to help ensure the data's integrity when the applet sends it back to me after it has been processed. The applet has the ability to encode data with several well known symmetric ciphers. The problem

Re: crypto/web impementation tradeoffs

2002-07-04 Thread Mike Brodhead
I'm passing some data through a web client [applet-like] and am planning on using some crypto to help ensure the data's integrity when the applet sends it back to me after it has been processed. Help us to understand your threat model. Do you trust the user and his/her machine, but are

Re: crypto/web impementation tradeoffs

2002-07-04 Thread bear
Without more knowledge of the parameters of the system (especially the threat model), it's hard to say -- however, this sounds like a case for the Diffie-Hellman key agreement protocol. Have the client and server each pick a random number, and then use those numbers to generate a key

Re: crypto/web impementation tradeoffs

2002-07-04 Thread Ben Laurie
John Saylor wrote: Hi I'm passing some data through a web client [applet-like] and am planning on using some crypto to help ensure the data's integrity when the applet sends it back to me after it has been processed. The applet has the ability to encode data with several well known