Public key cryptography describes all cryptographic algorithms which have a pair of keys, one key that performs encryption and one key that performs decryption. One of these keys is made available publicly, allowing anyone to send messages that only the holder of the private key can read. You should ...
2
votes
1answer
107 views
Why is RSA usually limited to messages up to 1 block
I'm wondering why RSA encryption usually is only used for messages that fit into one block.
For larger messages hybrid encryption in combination with symmetric ciphers like AES seem to be the solution ...
3
votes
6answers
311 views
Is there an authenticated encryption scheme where the recipient can attribute the message to a single sender?
With a standard authenticated encryption scheme (or MAC), Alice and Bob share a symmetric key. When Alice sends something to Bob, Bob can check that it is authentic. At that point, Bob can deduce ...
1
vote
2answers
364 views
Why is asymmetric cryptography bad for huge data?
I've been told that asymmetric cryptography requires that the message to be encrypted be smaller than its key length.
Why is this?
I know about hybrid encryption, which uses symmetric encryption to ...
2
votes
2answers
196 views
Do known-plaintext attacks exist for public key encryption?
In asymmetric ciphers we publish the public key for anyone, which means an attacker can encrypt any message they want and compare the ciphertext and plaintext without communicating with the owner of ...
2
votes
1answer
77 views
What's the strategy for future directions in cryptography? Bigger numbers/faster searching, or new methods, say, of factoring?
I'm taking a course in cryptography, and I would value any comments. This is not too technical a question, but more about directions or strategy in cryptography. My question is, is public key ...
1
vote
0answers
84 views
Determining the algorithm used to generate a digital signature
I have a string "abcd pqrs". This string is digitally signed with an X.509 certificate (with its private key) and it produces a signature.
From the signed string, is it possible to find out what ...
3
votes
2answers
338 views
Difference between symmetric and asymmetric hash function?
The Linux kernel supports symmetric and asymmetric hash functions. E.g. sha1, sha256, ...
See tcrypt.c and search for test_hash_speed and ...
1
vote
3answers
115 views
Public keys and their protocols
I'm having difficulties understanding exactly what this protocol means:
$S \to D : \{N_S , S\}K_D$
$D \to S : \{N_S , N_D \}K_S$
$S \to D : \{N_D \}K_D$
"where $S$ represents the supervisor’s ...
4
votes
4answers
414 views
Why is it important that phi(n) is kept a secret, in RSA?
Why is it important that $\phi(n)$ is kept a secret, in RSA?
0
votes
1answer
120 views
What would the Internet be like without public-key cryptography?
The functioning of the Internet as we know it nowadays depends very heavily on public-key cryptography, including several key root systems that depend on its asymmetric properties.
But what would it ...
0
votes
1answer
287 views
Why the following attack in common modulus RSA works?
Suppose that i share a common modulus $N$ with two users $u_1$ and $u_2$ with public, secret keys ($e_a,d_a$), ($e_b,d_b$).
Why then $gcd(V,e_b)=1$ where $V=d_a*e_a-1/$W and $W=gcd(e_b,d_a*e_a-1)$ ...
2
votes
1answer
84 views
How to generate a public key from a private ECDSA key?
Having some specific ECDSA curve and a private key, how does one calculate the public key? I am having a hard time finding the algorithm and equations for it.
2
votes
1answer
226 views
How much extra information is in an RSA public key?
I'm trying to calculate the size of an RSA public key in Ruby. I've retrieved the key in PEM format, and once I've decoded the base64 part from the PEM format, I get the size in bytes. What I find is ...
3
votes
2answers
142 views
Can one have an authentic, but repudiable, message without a previously shared secret?
Bob wants to send a message to Alice, such that Alice can be sure that the message came from Bob, but can't prove it to anyone else.
If I understand right, this means that the same message could have ...
1
vote
2answers
90 views
Polynomials and efficient computability
In public key crypto, the popular definitions of security (CPA, CCA1,2) depend on PPT adversaries. I'm trying to understand why adversaries should be PPT.
It's clear that adversaries should be at ...
5
votes
1answer
146 views
What are the benefits of lattice based cryptography?
Previously we visited the benefits of elliptic curves for cryptography. Lattice based cryptography is starting to become quite popular in academia. The primary benefit of lattice based crypto is the ...
17
votes
2answers
823 views
How are primes generated for RSA?
As I understand it, the RSA algorithm is based on finding two large primes (p and q) and multiplying them. The security aspect is based on the fact that it's difficult to factor it back into p and q. ...
1
vote
1answer
132 views
using Post-quantum asymmetric ciphers instead of RSA
We can't trust RSA to encrypt our Emails so what is best post-quantum cryptography system as alternative for RSA which provide good security and don't be breakable? because McEliece cryptosystem looks ...
2
votes
2answers
124 views
Public key cryptography - public key encrypts and cannot decrypt?
I understand the basics behind public key cryptography, in that each party has two keys - the public one encrypts, and the private one decrypts. What I cannot figure out is, How does the public key ...
2
votes
1answer
106 views
RSA Key generation Public exponent too big
I'm currently writing a paper about RSA (a self-chosen subject).
I'm writing about the key-generation in RSA, and I have problem finding the public exponent e.
I have chosen p = 61 and q = 53.
Then ...
1
vote
1answer
95 views
Does RSA-OEAP have integrity and authenticity properties?
RSA-OAEP is IND-CCA2 secure (indistinguishable under an adaptive chosen ciphertext attack). Does it also have the INT-CTXT (integrity of ciphertext) and INT-PTXT (integrity of plaintext) properties?
...
3
votes
1answer
248 views
Get RSA PlainText without Knowing Private Key
If I have an algorithm,RSA-Crack(), that, for a given RSA public key (n,e), is able to decrypt 1% of the messages encrypted with that key (without knowledge of the corresponding private key).Can there ...
4
votes
1answer
143 views
In RSA encryption, does the value of e need to be random?
I am a novice programmer and am just finishing up an RSA encryption program that I am writing for practice. Currently I have the program generate a relatively small random value for the public key e. ...
2
votes
3answers
134 views
Safety of DSA key parameters sharing
I'm looking for a solution to use in a context where I need to be able to generate new asymmetric key pairs quickly (using a widely recognized algorithm, and EC-DSA is not applicable). It sounds like ...
9
votes
2answers
301 views
How should one implement a delegated shared trust protocol?
Consider the following (probably naive) scenario.
Alice, who is very limited in her knowledge of security in general (clueless about securing a private key for example), wishes to delegate certain ...
1
vote
0answers
63 views
In S/MIME, are the same certificates always used to sign and encrypt messages?
My assumption is that S/MIME almost always utilizes certificates as follows:
My certificate can be used to allow people to encrypt messages and send them to me.
My certificate (the same ...
2
votes
0answers
100 views
Ring Signature - paper/code difference in trying to solve inverse trap door function?
there is a paper on ring signatures and a python implementation of it here.
The Step 4 in the paper describes $y_s = v =C_k,_v(y_1, y_2, ... y_r)$ for all $1 \leq i \leq r$ where $i \neq s$. The ...
0
votes
2answers
119 views
Breaking RSA, given a special kind of oracle that decrypts related ciphertexts for us
Let $c=E^{RSA}_{e}(w)$ be the ciphertext belonging to the plaintext $w$ if an $RSA$ system is used. Assume that the public exponent $e$ satisfies $e \le 10$. Furthermore, assume there is an oracle ...
0
votes
0answers
69 views
Cryptograpy library for Python [closed]
I was searching for libraries/modules for encryption of data and found a few such as M2Crypto and GNUTLS but both of them don't support CMAC which is what I wanted to use for authentication. Anyone ...
0
votes
1answer
156 views
How does a client verify a server certificate?
As far as I know,
when I request a certificate from Verisign (for example), and after they approved that me is me, they create a certificate (for me) which contains the digital signature and public ...
0
votes
1answer
140 views
What is a trapdoor permutation?
Can anyone explain to me what a trapdoor one-way permutation is? Is RSA a trapdoor one-way permutation?
Context: I was reading about ring signatures. On page 560, it describes steps to ...
1
vote
1answer
192 views
implications of SSH server key compromission when authenticating users against a public key
Friday we had a disagreement with a colleague of mine about the implications of SSH server key compromission
The question was stated as this :
What could a hacker do while provided with the SSH ...
1
vote
1answer
137 views
How can I prove in zero knowldege that an ElGamal shuffle is correct for a special setting? [closed]
In a special ElGamal encryption scheme, every user has an ElGamal encryption key-pair using the same cyclic group $G$ and generator $g$.
The system has a special function :
$$ ...
2
votes
1answer
194 views
Can ElGamal encryption and ElGamal signatures be used together sharing the same key-pairs?
I'm working on a encryption system where each party can store exactly a single ElGamal private key in a device. This is a hardware limit. The system must be expanded to support signatures and ...
8
votes
2answers
764 views
Can two different pairs of RSA key have the same modulus?
Can $n=pq$ be part of two different pairs of RSA keys?
If such keys exist, say $(e_1,n)$ and $(e_2,n)$, how are they related?
What will be the security concerns for the two users?
1
vote
2answers
88 views
When is each key used when encrypting an email using OpenPGP?
When you send an email using PGP to encrypt emails, is the recipients public key used to encrypt the email, or is your private key used? Are they both used?
At what points do each of the four keys ...
2
votes
0answers
190 views
How do I encrypt with the private key? [duplicate]
Possible Duplicate:
RSA encryption with private key and decryption with a public key
This wording is creeping everywhere (e.g. there): "I encrypt with the private key" and even sometimes, ...
4
votes
3answers
211 views
Is there a public key semantically secure cryptosystem for which one can prove in zero knowledge the equivalence of two plaintexts?
If Alice encrypts two messages $a$ and $b$, such that $x=E(a)$, $y=E(b)$. Can Alice prove (without revealing $a$, $b$ or the private key) that $a = b$?
Obviously the proof must not be too long and it ...
2
votes
2answers
142 views
Can I save space for short messages by using encryption with private key instead of a signature?
Let's say I have a message, a Private Key and a Public Key.
Normally if you want to see if the message is unaltered and is from the sender you would have the message part + signature part, which you ...
3
votes
1answer
168 views
What's the main difference between Pohlig-Hellman and RSA?
Both Pohlig-Hellman and RSA perform encryption and decryption by exponentiation modulo some integer ($p$ prime for PH, $n$ composite for RSA). They both use a key $e$ as the exponent to encrypt a ...
5
votes
5answers
450 views
Applications of Group Ciphers
I've been reading a paper [1], and I've ran across something called a "Group Cipher", which is similar to homomorphic encryption, with an important difference.
In homomorphic encryption we have an ...
4
votes
1answer
101 views
Correct method to encrypt data so that it can be decrypted only by Alice and Bob
I need to build a system that stores encrypted transactions. Transaction involves always two parties. Payer and payee. Both must be able to download encrypted transaction from server and decrypt it ...
6
votes
2answers
2k views
What's the fundamental difference between Diffie-Hellman and RSA?
What is the difference in the purpose of DH and RSA? Aren't they both public-key encryption?
2
votes
1answer
154 views
What is the strength of unpadded RSA?
I would like to use unpadded RSA for homomorphic encryption in a toy P2P game, for things like fair coin flips and shuffling.
How many bits of security does unpadded RSA have, in relation to its key ...
3
votes
3answers
222 views
How to avoid a chicken and egg scenario with encrypting passwords?
I am working on application that allows users to upload files containing company data and then share those files with a list of other users that have specific roles within the system.
I want to ...
5
votes
1answer
268 views
GPG/PGP Verification of Revocation
How does one verify a key revocation?
After revoking a key and sending the revocation to MIT's keyserver, I noticed that the key is listed as such:
...
2
votes
1answer
268 views
What is the harm if I publish an encrypted RSA private key publicly?
What is the harm if I publish an encrypted RSA private key publicly? Or in this case, what is the harm if I publish many thousands or millions of them?
Assuming that the private key is encrypted ...
2
votes
3answers
328 views
Is it possible to pick your Ed25519 public key?
Is it possible to generate an Ed25519 keypair that has a very similar public key as another keypair (fooling a casual visual comparison) or is this as hard as solving one of SHA-512 or the discrete ...
3
votes
4answers
907 views
How are timestamps verified?
You put an input and the hash value comes as an output then when someone puts the input the hash function it is applied to see if it is the same hash original value is stored in some database , that ...
1
vote
1answer
241 views
How to jusify {e,n} is a valid RSA public key?
I have a two set of key {36,77} and {50,117},
How can validate if it is a valid RSA public keys?
Is there any simple method?
