Reputation
565
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
3 12
Newest
 Custodian
Impact
~9k people reached

Jan
26
comment Using e-ID Number for Encryption and Digital Signing
Your approach cannot work because of the basic concepts of pulbic/private key cryptography. Please look up how keys are generated. The input for key generation needs to be random numbers, otherwise the keys are predictable and thus insecure. If you mix in the card ID (or hash of the ID, that does not matter) with random data, you can leave out the ID as the result is still random data. So either you're not using the card ID, or you have insecure, predictable keys. Do you get the point now?
Jan
21
comment How to generate fingerprint for PGP public key
I put together the command line to calculate the fingerprint in an answer on Super User some time ago. It only discusses version 3 keys in detail though, and does not really take apart version 4 keys.
Jan
20
comment Using e-ID Number for Encryption and Digital Signing
Your proposal makes the generated keys equivalent to arbitrary random keys. There is no way to conclude from a public key to the ID, nor from the ID to a key. There cannot exist a system which bases any kind of trust only on a single, public identifier.
Jan
20
comment Using e-ID Number for Encryption and Digital Signing
So if you use a randomly salted hash, which ends up in a random result, why use the ID in first place? There's no gain any more, any no reason to do so.
Jan
20
comment Using e-ID Number for Encryption and Digital Signing
OpenPGP (RSA, ...) keys are only unique for different random seeds. If I understand your plan correctly, you want to use the ID as seed for generating the key pair (but now it is not random any more). You cannot use random numbers, otherwise others would not be able to reproduce the same keys to verify the key belongs to the ID card. But when using the (publicly known) ID as a seed, everybody else can also generate the keys. Am I getting you wrong anywhere?
Dec
11
comment Why does GPG ciphertext length differ with fixed plaintext length?
Please take use of the broad formatting capabilities, a dump of paragraphs intermixed with commands, output and lists is unreadable. The FAQ explains what is possible in-detail.
Dec
3
comment Why does GPG ciphertext length differ with fixed plaintext length?
This is not completely wrong, but can only enforce already existing size differences.
Dec
3
comment Why does GPG ciphertext length differ with fixed plaintext length?
Indeed. I was sure OpenPGP wouldn't prune the unencrypted session key to not weaken the key space (information on the most significant bits could have been revealed), but of course they can safely do for the encrypted session key.
Sep
6
comment OpenPGP Public-Key algorithm
The formula describes the encryption using RSA, for ECC look into RFC 6637.
Mar
28
comment Assemble RSA keys from components
There is no migration path. I flagged for moderator attention, let's see what happens.
Jul
21
comment PGP message integrity : How can receiver of an email check the integrity using the sender's public key?
Yes, for RSA any of the two keys can be used for encrypting, and the respective other key for decrypting.
Jun
8
comment Familiar key signing over video call
Are you really sure this is faster and/or easier at all than just reading out loud the fingerprints / key ids? ;)
Dec
13
comment How is a PRNG used in the PGP?
You asked three questions, I answered the first two of them. I don't know the mathematical background well enough to further explain the third one, other can do better.
Dec
10
comment How is a PRNG used in the PGP?
When not creating a new public-private key pair, it is only used for block ciphers. such a block is an arbitrary random number of a given size.
Jul
28
comment Is my identity exposed when publishing my public key or encrypting with PGP?
I answered the new question. Yes, I was talking about email headers which are not encrypted when using OpenPGP.
Jul
8
comment Is it possible to change PGP / GPG Key Size on an exisiting key?
If main parts of your answer aren't written by yourself, you should mark them as "Wiki Answer".
Jul
7
comment Is it possible to change PGP / GPG Key Size on an exisiting key?
Have a look at this answer I gave on SuperUser for a similar question.
Mar
5
comment GPG vs PGP vs OpenSSH and management of them
In the FAQ I'm reading "to security.SE if you want to know what you should do now" and this question seems all about what to do, not about "the internals" of the algorithms.
Mar
5
comment GPG vs PGP vs OpenSSH and management of them
Probably belongs to security stack exchange.