On Mon, Feb 16, 2009, Maxim Masiutin wrote: > > I have a hardware token that uses static-static DH with elliptic curves (I > cannot change anything in this token and cannot force it to use Elgamal). > The mode of operation of this token is very similar to X9.42 DH, so I wanted > to implement all possible DH implementations, since they are very similar: > in addition to a recipient's public key you also need your private key to > encrypt a message; and you need to use common parameters. > >
One other note. Static-static DH IIRC has an unfortunate side effect: the sender can be traced because they have made use of their private key. Other algorithms such as RSA or ephemeral-static DH don't have this property. This issue was discussed in the S/MIME mailing list at the time. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
