Geek asks and answers

Encryption and decryption using a randomly generated key?

I am a j2me programmer. My project involves sending data to the server using the HTTP method. I am encrypting the data on the j2me side using Bouncy Castle (Triple DES). I also support server side coding.

Then, on the server side, the received data is decrypted and stored in the database.

Here I assume the key is statically in the encoding itself. On server side and j2me side, I use the same key value.

But here is one problem based on the requirement: a key is randomly generated by an unknown user.

In this case, if in j2me the part encrypts the data using some key, then how does the server decrypt it without knowing the key?

Or there is some other mechanism, so please help solve the problems.

Thank you and welcome, Sivakumar.J

+3
source share
1 answer

There are several ways to achieve your goal.

One way to do this is to use some form of key exchange protocol / key agreement, for example. Diffie-Hellman-style key exchange (see http://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange ). Since you are in a J2ME environment, you probably want to use a recent implementation using elliptic curves, as they are softer in relation to your hardware requirements.

, , SSL/TLS, .

SSL ( " SSL" ), ( " SSL" ). - SSL.

, , TLS.

Diffie-Hellman , , (. http://csrc.nist.gov/publications/fips/fips186-3/fips_186-3.pdf), . , .

+1

More articles:


All Articles