Petri wrote:
>
> You only need to exchange public keys with SSL, and because they are
> public, it doesn't matter if thousands of people can see them - they are
> still secure. Not so with secret-key systems.
>
> Hope you (and the other Arachnids) understand it better now =)
Hi Petri;
This Arachnid needs to understand the relationship between your "public" key
and your "private" key before the above will sound secure.
Are you saying that you can generate a public key from your private key and
any information encrypted with that public key is secure because it can only
be decrypted by YOUR private key ?
If someone has your public key AND the original material they intend to
encrypt AND the encrypted result plus an understanding of the encryption
process, do they not then have enough information to generate a copy of
your private key ?
Or, is that private key used ONLY ONCE ?
If the answer is yes to all three, then I guess I understand.
- Clarence Verge
--
- Help stamp out FATWARE. As a start visit: http://home.arachne.cz/
--