iron.git

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

Server generates DH params

Server generates keypair and exposes public key 

/security/dh/generate
/security/dh/get

Server generates keypair 
Server uses private key to calculate secret
Server stores <secret>
Server uses <secret> to encrypt data symmetrically (AES)

Client gets dh params from: /security/dh/get
Client generates keypair 
Client uses private key to calculate secret
Client uses secret to encrypt/decrypt server to/from Server