So as I understand it, when the client and relay node 2 exchange a key for packet encryption, the client sends his ephemeral key (g^x) to relay node 1 who forwards it to relay node 2. Relay node 2 generates an ephemeral key, creates the shared secret (g^x * g^y), and sends Signed(g^y) + Hash(g^x * g^y) to relay node 1 who forwards it to the client. The client receives it, verifies the signature, creates the shared secret, and then compares it against the hash that he received. But if the hash does't match, then what is the response of the client?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.