Diffie-hellman

Also known as the exponential key exchange, Diffie-Hellman uses digits raised in power to produce special decryption keys based on components that are not directly transmitted. Diffie Hellman must be communicated over a secure, private channel. In order for it to be employed successfully, the two end users need to agree on positive whole numbers: one that acts as the prime number, and one that acts as the generator. Once the end users have reached an agreement in private, they choose a personal key that is less than the prime number. The personal key is to be kept secure and away from intruders. From there the end users create public keys based on the formula used to compute their personal keys. Using Diffie-Hellman in it’s basic form has proven to be a vulnerable method of authentication. To get the best results, this encryption method should be combined with more proven forms of authentication such as digital signatures. A combination such as this is a more reliable way to verify the identities of users communicating over a public medium.