AES is a symmetric algorithm. How are the keys passed securely between the server and the user?
Symmetric and public/private keys are both used in the system. The content is encrypted with a symmetric key, but the other keys in the system (user, machine, and server) are RSA public/private keys. The symmetric content key is always encrypted in the various licenses — either to the RMS server RSA public key in the publishing license, or to the user’s RSA public key in the use license.
Related Questions
- Does the user need the GlobalSigns server root certificate to access information securely on secure server?
- Does a user need the Cybertrust root certificate to access information securely on a secure server?
- AES is a symmetric algorithm. How are the keys passed securely between the server and the user?
