distribute private key with application?

Question

I'm building an application and want it to securely transfer data to a server. Thinking to use public/private keys for initial handshake to encrypt a key with which to encrypt subsequent data.

Is it reasonable to have the private key integrated in the executable which will be distributed out in the wild for anyone to reverse-engineer? I also thought of using three-pass protocol, but read about some of its weaknesses and it probably won't work for me

Answer 1

I followed Martin's advice and posted to security exchange ( https://security.stackexchange.com/questions/158650/distribute-private-key-with-application ). There I received an answer that I accepted, by user Serverfrog:

Generate the Private/Public Keypair on the client, encrypt this with a password (maybe choose from the User itself).

The send the Public Key encrypted via Server Public Key to the Server and you have your entire Public/Private Stack.