# Tag Info

6

As far as I can tell, NIST has only one official document about entropy collection. SP-800-90B. The purpose of NIST Special Publication (SP) 800-90B is to specify the design and testing requirements for entropy sources that can be validated as approved entropy sources by NIST‘s CAVP and CMVP. It essentially defines a bunch of statistical tests to ...

4

I think you don't quite understand how RSA signatures work (and why they are the size they are). When generating an RSA signature, we follow a two-step process: We take that hash of the message we're signing, and convert (and pad) it into an integer $M$ which is between 0 and $N$ (where $N$ is a large integer that specified by the RSA key) We use the RSA ...

2

In 0.9.8 there is only PKCS5_PBKDF2_HMAC_SHA1. Sample C code: #include <openssl/evp.h> #include <openssl/sha.h> void PBKDF2_HMAC_SHA_1nat(const char* pass, const unsigned char* salt, int32_t iterations, uint32_t outputBytes, char* hexResult) { unsigned int i; unsigned char digest[outputBytes]; PKCS5_PBKDF2_HMAC_SHA1(pass, ...

2

Disclaimer: I am not familiar with Identity-Based Key Exchange, know only the most basic Identity-Based Encryption setup, and restrict to that. For other than trivialities, I refer to Ricky Demer's answer. The defining property of Identity-Based Encryption is: a user's ID and the KGC's public key is all it takes to encipher; and a user gets from a Key ...

2

There are plenty of papers on forward-secure IBE, one could just google that term. Here, I will focus on IBE with a property that I would call "key forgetting", and work toward a candidate construction for depth-O(1) HIBE with that property. One could apply either of the sections "Random Oracles, depth-O(1) adaptive-ID security, and (lack of) ...

1

For ordinary key exchange, leaking Alice's private key obviously allows the adversary to impersonate Alice to other people, but should not allow the adversary to (e.g.) impersonate Bob to Alice, or compromise sessions from the past. I am not familiar with identity-based key exchange, but I would expect something similar to apply. After the key has leaked, ...

1

Germany's BSI has produced AIS 31 that includes requirements on Physical True RNGs (PTRNGs). It is designed to fill a gap in the Common Criteria standard. Chapter 4 describes pre-defined classes for physical true, non-physical true, deterministic and hybrid random number generators. ... The basic concepts and evaluation criteria are illustrated by ...

Only top voted, non community-wiki answers of a minimum length are eligible