Diffie–Hellman key exchange

E5655

Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.


Statements (49)

Predicate Object
instanceOf cryptographic protocol
key exchange protocol
public-key cryptography scheme
basedOn discrete logarithm problem
canBeCombinedWith digital signatures
pre-shared public keys
public key certificates
canProvide perfect forward secrecy when used with ephemeral keys
enables agreement on a shared secret between two parties
secure key establishment over an insecure channel
field cryptography
information security
hasStep computation of a shared secret by each party
computation of public values by exponentiation
exchange of public values
generation of private keys by each party
selection of a generator of a multiplicative group
selection of a large prime modulus
hasVariant Elliptic-curve Diffie–Hellman
ephemeral Diffie–Hellman
Diffie–Hellman key exchange self-linksurface differs
surface form: finite-field Diffie–Hellman

static Diffie–Hellman
influenced design of key agreement protocols
modern public-key cryptography
introducedBy Martin Hellman
Whitfield Diffie
mathematicalStructure elliptic curve group
multiplicative group modulo a prime
notSecureAgainst active man-in-the-middle without authentication
property security relies on hardness of computing discrete logarithms
symmetric shared secret is never transmitted directly
vulnerable to man-in-the-middle attacks without authentication
publicationYear 1976
publishedIn New Directions in Cryptography
requires authentication mechanism for protection against active attackers
standardizedIn NIST SP 800-56A
RFC 3526
RFC 7919
threatModel passive eavesdroppers
usedFor establishing symmetric encryption keys
forward secrecy in secure communication protocols
usedIn IPsec
PGP
SSH
surface form: Secure Shell

TLS
surface form: Transport Layer Security
uses cyclic group arithmetic
modular exponentiation
private exponents
public parameters

Referenced by (22)

Full triples — surface form annotated when it differs from this entity's canonical label.

Bailey coInvented Diffie–Hellman key exchange
subject surface form: Bailey Whitfield Diffie
Martin Hellman coInvented Diffie–Hellman key exchange
Hellman coInvented Diffie–Hellman key exchange
subject surface form: Martin Hellman
Whitfield Diffie coInvented Diffie–Hellman key exchange
Diffie–Hellman key exchange hasVariant Diffie–Hellman key exchange self-linksurface differs
this entity surface form: finite-field Diffie–Hellman
Elliptic Curve Cryptography includesScheme Diffie–Hellman key exchange
this entity surface form: Elliptic Curve Diffie–Hellman
New Directions in Cryptography influenced Diffie–Hellman key exchange
Martin Hellman knownFor Diffie–Hellman key exchange
Hellman knownFor Diffie–Hellman key exchange
subject surface form: Martin Hellman
Whitfield Diffie notableWork Diffie–Hellman key exchange
New Directions in Cryptography relatedTo Diffie–Hellman key exchange
RFC 7919 relatedTo Diffie–Hellman key exchange
RFC 3526 relatesToConcept Diffie–Hellman key exchange
this entity surface form: Diffie-Hellman key exchange
SSL 3.0 supports Diffie–Hellman key exchange
TLS 1.1 supports Diffie–Hellman key exchange
TLS supportsAlgorithmFamily Diffie–Hellman key exchange
this entity surface form: Diffie–Hellman
TLS supportsAlgorithmFamily Diffie–Hellman key exchange
this entity surface form: Elliptic Curve Diffie–Hellman
TLS 1.0 supportsCipherSuite Diffie–Hellman key exchange
RFC 2419 title Diffie–Hellman key exchange
this entity surface form: Key Exchange Algorithm for the Secure Shell (SSH) Transport Layer Protocol
Noise protocol framework uses Diffie–Hellman key exchange
RFC 7919 usesAlgorithm Diffie–Hellman key exchange
this entity surface form: finite-field Diffie-Hellman
RFC 7919 usesAlgorithm Diffie–Hellman key exchange
this entity surface form: ephemeral Diffie-Hellman