Re: Separate keys for sending and receiving?



On Dec 27, 10:05 pm, Paul Rubin <http://phr...@xxxxxxxxxxxxxx> wrote:
What are you trying to do, anyway?

I'm trying to improve the security of an existing protocol. It's for
an embedded system with limited resources so a full TLS implementation
is too large. I've reduced SRP down to the bare minimum and it's
pretty small, but now I just need to use the shared secret it
generates for AES keys. I'm basically just adapting a protocol, which
previously used Diffie-Hellman for key generation, to use SRP for key
generation (to prevent man-in-the-middle attacks and add secure
authentication).
.


Quantcast