[Help-gnutls] Signing multicast traffic with gnutls API ?
nmav at gnutls.org
Thu Oct 30 18:56:55 CET 2008
Nikos Mavrogiannopoulos wrote:
>> The easiest sollution seems to sign a hash value of every package
>> asymmetric public key and check this signature at the
> Actually you cannot use TLS as a protocol since you don't have peer to
> peer communication to perform a handshake. You could use
> gnutls_x509_privkey_sign_data() and verify_data().
However you must know that replay/reordering attacks and maybe others
are possible, so care must be taken to avoid those if they apply. It
might be better to check if there is already a protocol for signing
broadcasted data, and follow that.
More information about the Gnutls-help