New answers tagged

0

The self-signature is rewritten whenever you change the settings of your public key. For example, you could change the preferred algorithm order (if you already set one and GnuPG does not apply "non-changing" updates, change the selection back and forth). Usually, only the newest self-signature is taken into account by OpenPGP implementations and key servers....


7

What's missing is the authentication of the entities. If you don't authenticate the entity then you don't know who you've established the master secret with. This means an attacker can pose as a man in the middle or the attacker can simply act as one of the entities. You can use static DH key pairs, but in that case the DH public keys must be trusted and ...


8

What does DH add? Perfect Forward Secrecy. That is, suppose you have a secure session with the server Bob, and then you close the session down. Then, someone steals the server (or serves a warrant to the owner). If you use RSA to transport the random session key, well, the server still has the RSA private key, and so they'll be able to decrypt your ...


6

Can exponent be random number just like it is now or it should be a prime too? There is no particular advantage to be gained in selecting only prime exponents. Is using dynamic modulus and generator better idea? Whether it makes sense to use dynamic modulii is currently under debate. There are known algorithms that make attacking multiple discrete ...


1

After some consideration of Lukas' comment, it seems I haven't thought this through. In fact, Eve will only entangle Bob's qubit with hers if Alice chooses the diagonal basis. However when Bob also measures the diagonal basis, a quick calculation shows he randomly measures 0 or one, with probability 1/2 each. So even though Eve learns which bits Bob measured,...


3

Exchanging full RSA keys can be very inconvenient, as they consist of very long numbers. In the OpenPGP ASCII-armored version, my public key (without any user IDs and certifications!) already is very long stream: mQQNBFDaK/sBIADm2gjnw7aPoNIoCy7gj85btwZU+zGkvtGonznlLrXELdU6zR3u VHNCn9vAl6OoU32r+suFvGdX+7MjiPbGKwJFOvICpAVh6bV55+hdqJbS02cpPmJH 1BrrUAmm6ZVEybGd+...



Top 50 recent answers are included