A certificate consists of a public key and information about the owner (e. g. the name of a person or server).
0
votes
1answer
48 views
Certificate == signed public key
For primes p and q used to create a keypair, I understand that the following operation is used to create a signature :-
M ^ d (mod N)
where d and N have their usual meanings and M is the message. In ...
-1
votes
1answer
40 views
Determine the Identity of Caller [closed]
Let me explain my situation.
I have a provider which is made up of a registration page and a web service. Online vendors (clients) register with the provider by providing details such as username, ...
4
votes
1answer
98 views
Client and server using same SSL certificate - any issues?
I'm working on software where multiple components will communicate with each other using SSL.
There would be one central component acting as a server, which would also require the clients to present ...
1
vote
1answer
118 views
Generate an insecure public / private key pair
I am looking for a way to generate an "insecure" public key pair. and by insecure I actually mean a pair that is breakable using brute-force (or other encryption) methods.
As far as I know PGP ...
2
votes
0answers
123 views
Creating colliding x509 certificates: Crafting RSA moduli step
I am trying to generate 2 x509 certificates with the same signature but different values in the common name field, based on md5 collisions, as it was specified in this paper (page 7).
Now I have ...
0
votes
0answers
30 views
How to create a public-key certificate for RSA Web of trust?
How to create a public-key certificate for RSA Web of trust?
I have (for exemple) two public / private key pair (obviously).
They all need to sign each other certificate.
How to create the ...
0
votes
1answer
156 views
How does a client verify a server certificate?
As far as I know,
when I request a certificate from Verisign (for example), and after they approved that me is me, they create a certificate (for me) which contains the digital signature and public ...
2
votes
4answers
177 views
Signature and Timestamp for Long Term Document Archival Question
I have a PDF document intended for long-term (many years, maybe decades) archival which I would like to digitally sign with my personal certificate to ensure its integrity.
As far as I understand, I ...
0
votes
1answer
95 views
Digital Certificate Chain Verification
Does a certificate contain the complete chain of all certificates up to the trusted root certificate, or does the program that verifies certificates have to fetch each parent certificate individually ...
3
votes
2answers
728 views
How do digital certificates work, and why is it not possible to reverse engineer one from a signed file?
Digital certificates are used quite commonly these days, for signing files. They are used by various operating systems to ensure reliability and security. For example, Android requires that each of ...
0
votes
0answers
58 views
What is cross-certification [closed]
What does cross-certification mean? Can I program my app to accept all certificates that are cross-certified by a certain CA? How common practice is this?
3
votes
2answers
1k views
Difference between “Signature Algorithm” and “Signature Hash Algorithm” in X.509
What's the difference between the "Signature Algorithm" and the "Signature Hash Algorithm" found in an X.509 certificate? Why does it need a "Signature Hash Algorithm"?
Edit:
I'm creating the ...
4
votes
2answers
202 views
X.509 CSR: Why does CA remove signature?
I just read this article on Wikipedia: Certificate Signing Request
I'm not a PKI or Crypto expert. As I understand, a CSR (certification request) is always signed by the PKCS#10-Request creator.
...
1
vote
2answers
214 views
Is Common Name encoded in the certificate?
When I make a certificate like so
cd /etc/openvpn/easy-rsa/2.0/
source ./vars
. /etc/openvpn/easy-rsa/2.0/build-key client1
Then ...
6
votes
1answer
638 views
Why does the PKCS1 RSA private key structure contain more than just exponent and modulus?
The ASN.1 spec for the PKCS1 RSA private key format is as follows:
...
7
votes
2answers
905 views
Unpredictability of X.509 serial numbers
About X.509 certificates serial numbers the RFC 5280 says:
The serial number MUST be a positive integer assigned by the CA to each certificate. It MUST be unique for each certificate issued by a ...
6
votes
1answer
1k views
How do other, non-RSA algorithms, compare to the PKCS #1 standard?
Arguably the PKCS suite of standards have a profit-oriented bias as they are promoted by RSA and promote their algorithms over others in the form of RFCs and other means.
I'm considering the ...
3
votes
1answer
180 views
Need an introduction to SPKI (or “SPKI for dummies”)
I am familiar with concepts such as the following:
PKI and CAs
ID based cryptography
Certificateless cryptography
PGP web of trust
more or less anything in basic Crypto that is taught in a college ...
