Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Diffie-Hellman for the encryption #69

Open
kylernocturnalnerd opened this issue Aug 26, 2022 · 2 comments
Open

Diffie-Hellman for the encryption #69

kylernocturnalnerd opened this issue Aug 26, 2022 · 2 comments

Comments

@kylernocturnalnerd
Copy link

kylernocturnalnerd commented Aug 26, 2022

Just as mentioned in my original reddit comment

Ideally the way I think it should be implemented is with an "Expert mode" option. This way non-technical users won't struggle with it.

  1. Alice creates a link and this generates a key pair

  2. Alice sends the link (which contains the public key) to bob

  3. Bob opens the link, and a key pair is created for bob

  4. Bob is prompted to send the public key he has to alice using that same unencrypted channel. Meanwhile the shared key is created and put into a cookie using bobs private key and Alices public key

  5. Alice puts bobs key in the link they generated. This creates the shared key on Alices end.

  6. Alice then puts the secret data they want to send to bob. The Shared key encrypts the data being sent.

  7. Bob then see's the information is available, and decrypts the note because their browser has the shared secret in a cookie.

@bjarneo
Copy link
Member

bjarneo commented Aug 26, 2022

Awesome. Thank you for this issue. Expert mode seems like the way to go.

@bjarneo
Copy link
Member

bjarneo commented Sep 6, 2022

Here is the explanation of this for tweetnacl (which is the library used): https://tweetnacl.js.org/#/box (if I understood this correctly)

@bjarneo bjarneo mentioned this issue Sep 20, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants