If you get the ciphertext, can you use the ciphertext to get the data directly from the server without decrypting it?

take RSA as an example:

1. The server generates public and private key pairs, and the public key is sent to the client

2. The client uses the public key to encrypt the information, get the ciphertext S, and send it to the server

3. The server receives the ciphertext S, decrypts the information using the private key, and verifies whether the information is consistent

.

all I can find is expressed like this:

because the private key is stored on the server, even if the ciphertext is intercepted, the information cannot be cracked

but I wonder a little bit. I intercepted the ciphertext. Why do you want to crack the ciphertext? can you directly find a way to send the ciphertext to the server, and then you can get the data returned by the server?


I ignored a process, that is, when the client receives the information returned by the server, it also needs to be decrypted, and the information returned by the server is also encrypted, so the data returned by the server in the last step is also encrypted.

brief description! cursory!
first, the server sends a public key 1 to the client
the client encrypts a key with the public key 1 to the server
the server decrypts the information with the private key to get the information that key, needs to return using key encryption
the client gets the information, decrypts the returned information with key, and gets the information

the third party does not know the private key, so it does not know key, does not know key, and therefore does not know the returned information

in fact, the process of practical application is much more complicated, and there will be more protective measures.

personal understanding, wrong reply.


you can refer to the whole process of https and take a look at the content of forward encryption

.
Menu