Diffie–Hellman key exchange

Why mixing paint is a one-way street

Some actions are easy to do but hard to undo. Mixing yellow and blue paint takes seconds, but given the green result, you can't work out exactly how much of each color went in.

This trick, called a key exchange, uses a math version of that idea. Both people start with the same public color, each stirs in their own private secret color, and they swap the mixed results in full view of anyone listening.

Each person stirs their own secret into the mix they got back. The maths works out so both land on the exact same final color, a shared secret only they know, even though every step happened in public.

Diffie–Hellman key exchange

The lock icon that appears before you type your password

Every time you open your bank's website or send a message on an encrypted chat app, your phone and the other side quietly run this secret-sharing dance first, before a single real message is sent.

Anyone watching the network traffic, like someone on the same public wifi, sees every bit of that exchange. They just can't use what they see to figure out the private secret your phone ends up holding.

Diffie–Hellman key exchange

Easy to mix, hard to unmix, the trick that makes it work

The security comes from a one-way street: combining numbers in this particular way is quick for a computer, but working backwards from the public results to the private secrets would take far longer than is practical with today's computers.

That gap between easy-to-do and hard-to-undo is what lets two strangers land on an identical shared secret while a spy, watching the entire exchange, is left holding pieces that are useless on their own.