The plan is to do it like that:
- Every user will generate an asymmetric RSA key pair and share public key with every other user in the board.
- Board host will also generate a symmetric AES private key.
- Board host will use RSA encryption to send AES private key to every user in the board individually.
- AES key will then be used to encrypt and decrypt traffic between users of the board.
Why is RSA needed? - We need to share AES key without server ever seeing it.
Why not use RSA directly? - We would then need to share updates to every board user individually which would multiply the traffic between users.
The plan is to do it like that:
Why is RSA needed? - We need to share AES key without server ever seeing it.
Why not use RSA directly? - We would then need to share updates to every board user individually which would multiply the traffic between users.