Lightweight encryption key exchange protocol

Question

I have an embedded system posting data to a JSON REST service via HTTP. I\'m currently using HMAC-SHA1 for authentication, the same way that Amazon AWS does it.

I\'m now

Answer 1

SSL uses Diffie-Hellman (DH) for key exchange. I think you can implement it (DH) relatively easily in your code. The only question you need to think of is that DH itself doesn't stand against man-in-the-middle (MITM) attack. There are several options to solve this problem. The Wikipedia article mentions them so you have something to start with.