Questions about official cryptographic standards and their implementation.
4
votes
2answers
276 views
Are there any standards of multi-prime RSA key generation?
FIPS 186-3 specifies a method to generate DSA parameters.
Is there anything similar (official standard or widely-accepted recommendation) that shows how to generate the primes for multi-prime RSA?
3
votes
2answers
309 views
How does one calculate the cryptoperiod?
NIST Special Publication 800-57 defines a cryptoperiod as
the time span during which a specific key is authorized for use by legitimate entities, or the keys for a given system will remain in ...
2
votes
2answers
462 views
Is RSASSA-PKCS1-v1_5 a good signature scheme for new systems?
Is RSASSA-PKCS1-v1_5 a good signature scheme to recommend that people use in new systems? Is it believed to be secure and represent the state-of-the-art in RSA-based signatures?
I understand that ...
2
votes
2answers
125 views
How long does it take to extract a key from a FIPS-140 Level 2 device?
How long does it take to extract a key from a FIPS-140 Level 2 device? What records are there of successful extraction? How much did the first extraction from a given device cost? How much would a ...
2
votes
0answers
40 views
Which version(s) of SRP are in ISO/IEC 11770-4:2006?
I am on the impression that SRP emerges as the least uncommon and best analyzed protocol for authentication and key agreement based on a short password.
This states that SRP is part of IEC 11770-4, ...
1
vote
2answers
806 views
Secure private key storage
I'm developing application in Java that has to store RSA keys in software for foreseeable future (that is, at least 10 years).
The two most common standards of storing private keys are PKCS12 and JKS ...
1
vote
0answers
79 views
Code-breaking software [closed]
Is there any (free?) software available to check for standard encryptions such as Caesar? Advanced encryptions such as RSA, DES, AES, are not necessary.
1
vote
1answer
81 views
WebcryptoAPI - secure or not [closed]
This is about the new W3 WebcryptoAPI draft standard.
Here is a post by one of it's authors
https://plus.google.com/u/0/105761279104103278252/posts/CSwVZ1RUijo
It says its in part trying to change ...
