> > how can I properly secure small anonymous UDP transmissions?
>
> I don't know what you mean by this.  Are you sure you mean anonymous?
>
> Here's a simple thing: when your "agents" connect to the server, have
> the server create a symmetric key (e.g., 3DES) and send it back to the
> client. When your clients send UDP packets, have them encrypt it first.
> Your server will have to keep a list of the keys, and map it to IP
> address or other plaintex identifier in the UDP message. That breaks
> anonymity.
>

That isn't good example. First, there is one additional connection between
server and client. Second, attacker could be get a key because in first
connection it is going to client as plain text.
I think, server have to get a key in other way.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to