[aerogear-dev] Encrypted Data and IVs

[Summers Pittman]

Checking my thoughts (and hopefully spurring some discussion)

A key (and thus salt) is unique per user.
A IV is unique per encrypted message.

In an key pair, the public key is transmitted to your recipients. The 
private key is kept by the user.
With a symmetric key, both parties have the key or know how to generate 
the key.
The same IV has to be present for a message to be reliably encrypted and 
decrypted.

Now some questions:

How is a PBKDF2 key transmitted so a message can be decrypted?
In the case of client server how should the IV be generated/transmitted?