136 reputation
7
bio website 2130706433
location California
age 35
visits member for 1 year, 11 months
seen Nov 13 at 15:35
while(1)
{
    share(knowledge);
}

Sep
29
awarded  Scholar
Sep
29
accepted What is the technical name for a public key container in DER format?
Sep
17
revised What is the technical name for a public key container in DER format?
added 5 characters in body
Sep
17
awarded  Teacher
Sep
16
answered What is the technical name for a public key container in DER format?
Sep
16
awarded  Informed
Sep
16
awarded  Student
Sep
15
comment What is the technical name for a public key container in DER format?
@HenrickHellström, bingo, that is exactly what this is. Thank you. If you make that an answer, I will accept it. (for what it's worth)
Sep
15
awarded  Editor
Sep
15
revised What is the technical name for a public key container in DER format?
edited title
Sep
15
comment What is the technical name for a public key container in DER format?
Just to be clear (and as I mentioned in a previous comment), you are correct that PKCS#1 specifies the contents of the BIT STRING shown in my example. But I'm asking what the name of the entire object is.
Sep
15
comment What is the technical name for a public key container in DER format?
@HenrickHellström, I have been doing pretty much exactly that, and I don't know what to call this code module. PKCS#1 certainly doesn't fit. This format can clearly be used for non-RSA key types.
Sep
15
comment What is the technical name for a public key container in DER format?
@HenrickHellström, the question of off/on topic aside, I don't necessarily agree. First, it's DER, not PEM. (the contents of the PEM header in my example are not relevant to the discussion.) Second, I checked RFC 3447 (PKCS#1 v2.1) and didn't see any mention of this particular format. To be specific, section A.1.1 mentions the public key syntax, but not the PKCS#8-like wrapping my example exhibits. (see the rsaEncryption OID in the asn1parse output.)
Sep
15
asked What is the technical name for a public key container in DER format?
Aug
25
comment Attacking unuauthenticated RSA
@HocusPocus, I agree with your answer completely, up to the point where you say "thinking it comes from Alice". Bob can't assume anything about the sender of the message, unless RSA is used in the context of a protocol (such as SSH or TLS, whereby you would validate the peer based on a mutual certificate, password, etc), PKI envelope, etc. I think it's useful to think about practical attacks against real systems that employ asymmetric crypto. Your attack is practical, but misses the part about why it would work. (that is, why the key is unauthentic and yet trusted anyway.)
Aug
25
answered Attacking unuauthenticated RSA
Aug
25
comment Attacking unuauthenticated RSA
This isn't how you'd go about attacking RSA. You don't encrypt a message using your own public key and send it to someone else. You encrypt it with their public key. The key question is "how do you know you can trust the other peer's public key?". Without authentication, you could be sending your message using the attacker's public key. (example: that's why the first time you SSH to a host, you are prompted to confirm that you trust the public key. If an attacker intercepted the communication using their unverified/unauthenticated key, they could intercept your session.)
Dec
16
awarded  Autobiographer
Dec
16
awarded  Supporter