[Cryptography] Is it time for a revolution to replace TLS?

James A. Donald jamesd at echeque.com
Sat May 17 22:56:48 EDT 2014


     --
On 2014-05-14 20:47, Jerry Leichter wrote:
 > I've argued here before that the solution to many asymmetric
 > cryptosystem/PKI problems is *not to use asymmetric
 > cryptosystems/PKI's*.  Yes, there are use cases where you need them.
 > But there are plenty where you don't.  VPN's are a great example:
 > Just how often do you need to connect to a VPN without having a
 > trust relationship with whatever is behind that VPN and the
 > opportunity to safely pre-share keys?

If you want to pre-share keys of reasonable size, need to use Zero 
Knowledge Password Protocol, which is technically asymmetric encryption, 
though probably not in the sense that you intended.




More information about the cryptography mailing list