[Ach] Improving Applied Crypto Hardening Draft

[ianG]

On 10/01/14 22:03 PM, Kurt Roeckx wrote:
> On Fri, Jan 10, 2014 at 07:30:01PM +0300, ianG wrote:
>> On 10/01/14 16:32 PM, Manuel Kraus wrote:
>>
>>> Well, the naming scheme seems to be quite inconsistent anyways. DHE vs. EDH, for example, meaning the same.
>>
>>
>> I think (not 100% sure) that it is this:
>>
>> DHE == Diffie-Hellman (key) Exchange
>> EDH == Ephemeral Diffie-Hellman (key exchange)
>> ADH == Anonymous Diffie-Hellman (key exchange)
>
> As far as I understand it, all 3 of those are actually ephemeral
> variants, as opposed to the "ECDH" and "DH" versions where there
> is no key exchange but the public key is in the certificate
> itself.  But then I think nobody uses certificates like that.


Yes, I think I agree... especially, it's messy.

iang