# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Hive

# Developers Guide

15 October, 2014

- 1
- 2
…
- 13
- 14
- 15

SECRET//NOFORN
Hive Engineering Development Guide Overview
5 Encryption
The Hive implant communicates with the operator over an SSL-secured tunnel. After the implant is
triggered, it calls back to the LP and receives a server certificate and a certificate authority (CA)
certificate which it validates. Once the SSL tunnel is established, starting with Hive version 2.8, the
client and the implant perform a Diffie-Helllman key exchange to establish a shared secret key. This key
is used to create a second layer of encryption using the AES algorithm.
To generate a new my_dhm_P_String, found in /common./crypto/cryptoStrings.txt, use
polarssl/pkey/dh_genprime.
Use mygen.sh to generate and new server.crt and ca.crt files.
SECRET//NOFORN//20391015 9

- 1
- 2
…
- 13
- 14
- 15