113 reputation
4
bio website DasPulpo.com
location Madrid, Spain
age
visits member for 11 months
seen Apr 19 at 19:08

Seeking the lost thought...


Apr
19
awarded  Supporter
Oct
29
accepted How vulnerable is RSA when using it to encode ~1000s of datasets with 500bytes each? How easy can the private key passphrase be hacked?
Oct
29
awarded  Editor
Oct
29
revised How vulnerable is RSA when using it to encode ~1000s of datasets with 500bytes each? How easy can the private key passphrase be hacked?
added 2118 characters in body
Oct
21
comment How vulnerable is RSA when using it to encode ~1000s of datasets with 500bytes each? How easy can the private key passphrase be hacked?
Yes, i was actually wondering how to do that (make it slower to guess). I found an PHP implementation of the PBKDF2 algorithm and will use this on the passphrase the user supplied, before using the result to decrypt the privateKey. After i am done i will present my final solution here.
Oct
21
comment How vulnerable is RSA when using it to encode ~1000s of datasets with 500bytes each? How easy can the private key passphrase be hacked?
Wouldn't it be better for the second problem to create a completely new key and send this to the user via snail mail? so that there is no relation between them? Or am i not getting sth here? I wanted the user to choose their pass for the backend (must be strong) and then (after login) have them insert another key that i send them via snail mail, which is the passphrase for the privatekey.
Oct
21
comment How vulnerable is RSA when using it to encode ~1000s of datasets with 500bytes each? How easy can the private key passphrase be hacked?
Thank you for this detailed and exhaustive answer, as i have to create the passphrase for the privatekey anyhow, i will now also change the user account password setting to only allow long and difficult passwords. As for the padding, i am adding random characters between the substrings to always reach the same final string length. The substrings are separated by three distinctive characters. The padding scheme that is used by RSA i have to check.
Oct
21
awarded  Scholar
Oct
20
awarded  Student
Oct
20
asked How vulnerable is RSA when using it to encode ~1000s of datasets with 500bytes each? How easy can the private key passphrase be hacked?