Key Exchange 1.4

Question 1

What is the purpose of a KEY EXCHANGE?

Answer 1

• A central foundational element of a secure symmetric encryption system.
• Providing another entity a secured key

Question 2

How is a KEY EXCHANGE performed using the OUT-OF-BAND EXCHANGE method?

Answer 2

• Performed in person either through telephone, courier, or etc.
• Keys are not sent over the net.

Question 3

How is a KEY EXCHANGE performed using an IN-BAND KEY EXCHANGE method?

Answer 3

• Performed on the network.
• The keys are protected through additional encryption

Question 4

Describe a SESSION KEY

Answer 4

• Client encrypts a random (symmetric) key with a server’s public key.
• The server decrypts this shared key and uses it to encrypt data.
• These keys are ephemeral, or temporary