Questions tagged [shared-secret]

Shared key is a piece of data, known only to the parties involved, in a secure communication. The shared secret can be a password, a passphrase, a big number or an array of randomly chosen bytes.

In cryptography, a shared secret or shared key is a piece of data, known only to the parties involved, in a secure communication. The shared secret can be a password, a passphrase, a big number or an array of randomly chosen bytes.

The shared secret is either shared beforehand between the communicating parties, in which case it can also be called a pre-shared key, or it is created at the start of the communication session by using a key-agreement protocol, for instance using public-key cryptography such as Diffie-Hellman or using symmetric-key cryptography such as Kerberos.

The shared secret or shared key can be used for authentication (for instance when logging into a remote system) using methods such as challenge-response or it can be fed to a key derivation function to produce one or more keys to use for encryption and/or MACing of messages.

To make unique session and message keys the shared secret is usually combined with an initialization vector (IV). An example of this is the derived unique key per transaction method.

It is also often used as an authentication measure in APIs.

Source : wikipedia article

48 questions
0
votes
0 answers

In App purchase Auto renewable Subscription iOs

I am implementing In App Purchase and using Auto renewable Subscription type product, for the first time It is working fine. For other then first attempt I am getting 21004 in reciept's status (21004 showing error related to shared secret key ) How…
0
votes
2 answers

OpenSSL implementation of Shamir Secret Sharing

I'm attempting to implement Shamir Secret Sharing using OpenSSL. I'm having a lot of trouble getting the message to decrypt! I have tried several implementations for decryption, both this one:…
Chris C
  • 259
  • 2
  • 15
0
votes
1 answer

Security protocol for server-side shared secret generation

I am trying to implement a security system that has the following requirements: All clients share a password, which is not known to the server Each client has a unique client-id, which is known to the server All clients with knowledge of the…
Markus A.
  • 12,349
  • 8
  • 52
  • 116
1 2 3
4