Tag Info

New answers tagged

0

With RSA (or any asymmetric cryptography, for that matter), the key question is "how do you know you can trust the other peer's public key?". Without authentication, you could be sending your message using the attacker's public key. Example 1: the first time you SSH to a host, you are prompted to confirm that you trust the public key. That's because if an ...


5

The attack is even more simple with RSA than with symmetric keys, because the asymmetric encryption key is assumed to be public. Let me tell you a story involving Alice, Bob and Mallory :). Alice wants to send a message to Bob using RSA. Alice encrypts the message using Bob's public key and sends it Mallory performs a Man-In-The-Middle attack, and ...


-1

To be sure that the message is from A, A has to encrypt it with his private key. Anyone can decrypt it using A's public key. To be sure that the message is for B, A has to encrypt it with B's public key. Only B can decrypt it using his private key. If you use both methods combined, you can be sure that the message is from A and for B. But this does still ...


11

If Bob does NOT care to check signatures (as in the question), Eve can send ANY message she wants to Bob pretending to be Alice, including but not limited to messages Eve got from Alice; all Eve needs is Bob's public key (which, as the name implies, is assumed public knowledge thus known to Eve) and straight use of PGP. Therefore the right question is: Can ...



Top 50 recent answers are included