Tagged Questions
-1
votes
1answer
84 views
What length should the padding be when encrypting or signing with RSA?
Does it matter what length the padding is? If so - what length should it be?
(Another point: Should it be random?)
3
votes
1answer
137 views
Secure encrypt-then-sign with RSA
I understand that when you want to encrypt and sign data with RSA the generally recommended approach is sign-then-encrypt.
However, I have encrypted data that I need to sign, to prove the author of ...
-1
votes
0answers
25 views
Create groups of keys [closed]
I looking for a solution to encrypt, sign documents or email a key group and send to one customers. The group of keys are had already created user keys and I would like to use them.
Is not an option ...
0
votes
1answer
156 views
How does a client verify a server certificate?
As far as I know,
when I request a certificate from Verisign (for example), and after they approved that me is me, they create a certificate (for me) which contains the digital signature and public ...
2
votes
1answer
194 views
Can ElGamal encryption and ElGamal signatures be used together sharing the same key-pairs?
I'm working on a encryption system where each party can store exactly a single ElGamal private key in a device. This is a hardware limit. The system must be expanded to support signatures and ...
2
votes
2answers
142 views
Can I save space for short messages by using encryption with private key instead of a signature?
Let's say I have a message, a Private Key and a Public Key.
Normally if you want to see if the message is unaltered and is from the sender you would have the message part + signature part, which you ...
2
votes
0answers
190 views
How do I encrypt with the private key? [duplicate]
Possible Duplicate:
RSA encryption with private key and decryption with a public key
This wording is creeping everywhere (e.g. there): "I encrypt with the private key" and even sometimes, ...
2
votes
2answers
668 views
FIPS 140-2 Compliant Algorithms
Is there any reference to check the list of encryption & signing algorithms which are compliant to FIPS 140-2. After an exhaustive search I could find only "AES".
Any suggestions would be much ...
0
votes
1answer
118 views
RSA Signature - Multiple Use Weakness
I cite from Fundamentals of Computer Security (Chapter 7 on Digital Signature, Paragraph 7.3 on RSA Signatures, page 289):
Multiple uses of the RSA Signature scheme tend to weaken it. The way out ...
1
vote
0answers
63 views
In S/MIME, are the same certificates always used to sign and encrypt messages?
My assumption is that S/MIME almost always utilizes certificates as follows:
My certificate can be used to allow people to encrypt messages and send them to me.
My certificate (the same ...
3
votes
1answer
124 views
Safely use CryptSignAndEncryptMessage?
I am developing an application that sends messages which I want to encrypt and sign. The CryptoApi offers a function called CryptSignAndEncryptMessage.
The description says, what this function ...
2
votes
1answer
426 views
How to sign a message using RSA?
Assuming I already have a D, P, Q, etc of an RSA key: How do I now sign a message? If it matters – the message is around 100 bits.
I don't know much about cryptography, but I can get these numbers ...
6
votes
1answer
1k views
How do other, non-RSA algorithms, compare to the PKCS #1 standard?
Arguably the PKCS suite of standards have a profit-oriented bias as they are promoted by RSA and promote their algorithms over others in the form of RFCs and other means.
I'm considering the ...
8
votes
5answers
265 views
Reduction from signatures to encryption?
Is it possible to construct an (asymmetric) encryption scheme from a signature scheme?
If the signature scheme is deterministic and allows existential forgery (e.g. RSA), then the answer is yes ...
