How to use Diffie-Hellman key exchange to secure data transfer between a client and server?

Question

I am a beginner programmer. I have been asked to secure data transfer between a client and a server by using a Diffie-Hellman key exchange. I have searched a lot on this issue, but I have just found some example codes that find big integers p and g.

The problem is I don't know how to use these numbers to secure a transfer of information. I would like to transfer "strings" over the connection between the client and the server, not integers. How can these numbers be useful to me? I'm approaching the deadline for this project for the course I`m taking and could really use some help.

I suggest you have a look at http://www.bouncycastle.org/java.html — Miquel, Jan 25 '13 at 22:19
Look at the Java [KeyAgreement](http://docs.oracle.com/javase/6/docs/api/javax/crypto/KeyAgreement.html) class. — President James K. Polk, Jan 26 '13 at 04:21

score 0 · Answer 1 · answered Jan 25 '13 at 22:23

I'd suggest reading and undertanding this: http://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange

And here is a PHP code snippet that will help...

GENERATOR=2 and PRIME (300 digit prime) are constants

        // generate server secret
        $privateKey = 0;

        for ($i=0; $i<100; $i++) {
            if ($i==0) {
                $privateKey = mt_rand(1, 9);
            } else {
                $privateKey .= mt_rand(0, 9);
            }
        }

        // output server public key
        echo gmp_strval(gmp_powm(GENERATOR, $privateKey, PRIME));

        // calculate server secret key
        $secretKey = md5(
            gmp_strval(
                gmp_powm($_POST['public_key'], $privateKey, PRIME)
            )
        );

I have a project in which i have to implement a diffie hellman key exchange in a chat program ... i have to use the key exchange whenever the client interacts with the server or the client interacts with another client ...Actually i really don't know the exact code to use in the program .. i just found one on the web.... — pardis, Jan 26 '13 at 10:17

How to use Diffie-Hellman key exchange to secure data transfer between a client and server?

1 Answers1