How deeply does Software Security for Developers cover Diffie–Hellman key exchange?

Explains exchanged keys, private-key protection, equivalent computations, and the untransmitted shared secret, while deferring mathematical detail.

Diffie–Hellman key exchange

As explained in Software Security for Developers

Diffie-Hellman is a public-key key-agreement algorithm based on the computational difficulty of the discrete logarithm problem.

Diffie–Hellman (DH) creates a shared secret over an insecure network without transmitting that secret. Two systems exchange public keys and parameters, keep private keys secret, and independently compute the same result. section 7.1.2

The shared secret can become an AES key in a hybrid encryption scheme. DH underpins Elliptic Curve Diffie–Hellman (ECDH) and appears in TLS and SSH. section 7.1.2

Payment and warehouse services

In the ACME scenario, payment and warehouse services exchange public keys. Each combines its private key with the other service’s public key: sharedSecret = f(privateA, publicB) = f(privateB, publicA).

How Software Security for Developers covers it

Cover of Software Security for Developers

liveBook manning.com

Read Software Security for Developers on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Real-World CryptographyDiffie-Hellman key exchange is a public-key protocol that lets parties establish a shared secret over an insecure channel.
liveBook manning.com

Hacking CryptographyDiffie–Hellman key exchange is a key-agreement protocol in which participants derive a shared secret from exchanged public values and retained private exponents.
liveBook manning.com

Elliptic Curve Cryptography for DevelopersA public-key key-agreement protocol that lets parties establish a shared secret over an insecure network using private values and exchanged public values.

Compare how 4 books explain Diffie–Hellman key exchange →

Related concepts

X3DHused by · X3DH is a non-interactive key-exchange protocol that combines multiple Diffie-Hellman exchanges to establish shared keying material for asynchronous messaging.
API keyproduces · An API key is a credential used to identify or authorize a client accessing an application programming interface.
key exchangekind of · Key exchange is a cryptographic protocol by which communicating parties establish a shared secret over a communication channel without directly transmitting that secret.
elliptic-curve diffie-hellmanincludes · Elliptic-curve Diffie-Hellman is a public-key key-agreement method in which parties derive a shared secret through elliptic-curve point operations.
CPaceused by · CPace is a symmetric password-authenticated key-exchange algorithm in which parties derive a group generator from a shared password and use it for ephemeral Diffie-Hellman key exchange.

This explainer was generated by Manning's knowledge graph from the text of Software Security for Developers. The section links point to the parts of the book it draws on.