Reputation
565
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
3 12
Newest
 Custodian
Impact
~8k people reached

Jan
26
comment Using e-ID Number for Encryption and Digital Signing
Your approach cannot work because of the basic concepts of pulbic/private key cryptography. Please look up how keys are generated. The input for key generation needs to be random numbers, otherwise the keys are predictable and thus insecure. If you mix in the card ID (or hash of the ID, that does not matter) with random data, you can leave out the ID as the result is still random data. So either you're not using the card ID, or you have insecure, predictable keys. Do you get the point now?
Jan
21
comment How to generate fingerprint for PGP public key
I put together the command line to calculate the fingerprint in an answer on Super User some time ago. It only discusses version 3 keys in detail though, and does not really take apart version 4 keys.
Jan
20
comment Using e-ID Number for Encryption and Digital Signing
Your proposal makes the generated keys equivalent to arbitrary random keys. There is no way to conclude from a public key to the ID, nor from the ID to a key. There cannot exist a system which bases any kind of trust only on a single, public identifier.
Jan
20
comment Using e-ID Number for Encryption and Digital Signing
So if you use a randomly salted hash, which ends up in a random result, why use the ID in first place? There's no gain any more, any no reason to do so.
Jan
20
comment Using e-ID Number for Encryption and Digital Signing
OpenPGP (RSA, ...) keys are only unique for different random seeds. If I understand your plan correctly, you want to use the ID as seed for generating the key pair (but now it is not random any more). You cannot use random numbers, otherwise others would not be able to reproduce the same keys to verify the key belongs to the ID card. But when using the (publicly known) ID as a seed, everybody else can also generate the keys. Am I getting you wrong anywhere?
Jan
19
answered Using e-ID Number for Encryption and Digital Signing
Dec
11
comment Why does GPG ciphertext length differ with fixed plaintext length?
Please take use of the broad formatting capabilities, a dump of paragraphs intermixed with commands, output and lists is unreadable. The FAQ explains what is possible in-detail.
Dec
3
comment Why does GPG ciphertext length differ with fixed plaintext length?
This is not completely wrong, but can only enforce already existing size differences.
Dec
3
revised Why does GPG ciphertext length differ with fixed plaintext length?
added 1052 characters in body
Dec
3
comment Why does GPG ciphertext length differ with fixed plaintext length?
Indeed. I was sure OpenPGP wouldn't prune the unencrypted session key to not weaken the key space (information on the most significant bits could have been revealed), but of course they can safely do for the encrypted session key.
Dec
2
answered Perfect Forward Secrecy in PGP/asynchronous email
Dec
2
answered Why does GPG ciphertext length differ with fixed plaintext length?
Sep
6
reviewed No Action Needed How can I use asymmetric encryption, such as RSA, to encrypt an arbitrary length of plaintext?
Sep
6
reviewed Reviewed Do Curtmola et al.'s IND-CKA1/2 security definitions protect against search pattern leakage?
Sep
6
reviewed No Action Needed How did G.H. Hardy's work contribute to today's public-key cryptography?
Sep
6
reviewed Reviewed Whats the point of an IV if public?
Sep
6
reviewed Close Block cipher to encrypt 8 bytes/64 bits - Use 64 or 128 bit cipher?
Sep
6
reviewed Leave Open Is it possible to have E=D and Ke <> Kd?
Sep
6
awarded  Custodian
Sep
6
reviewed Leave Open Whats the point of an IV if public?