Linked Questions

1
vote
0answers
92 views

Is signing a message just encrypting it with private key? [duplicate]

I have a simple question, When I sign a message (in RSA) does the program encrypt the text with my private key? Because I can decrypt it with my public key. Yes or no. Is signing a message just ...
20
votes
2answers
9k views

Which attacks are possible against raw/textbook RSA?

The PKCS#1 standard defines multiple padding schemes for signature generation/verification (EMSA-PSS and EMSA-PKCS1-v1_5), and encryption/decryption (EME-OAEP and the less safe EME-PKCS1-v1_5). ...
7
votes
2answers
2k views

SHA-1 – Why is it hard to find a certificate collision?

Why is it it’s so much harder to execute a successful collision on certificates than it is on text data? I assume this has to do with the fact the certificate actually is a file that contains signed (...
4
votes
2answers
3k views

Certificate Authority RSA key expiration?

My understanding about SSL/TLS for HTTPS is that servers send their certificates to browsers and browser attempt to decrypt them using trusted CA public keys that are already presented in their store. ...
2
votes
1answer
6k views

Why should a signature use PSS padding in RSA?

Suppose I send a message using AES (private keys already negotiated securely) and I send a hash of this message using RSA (encrypted with private key) with OAEP to verify the authenticity and ...
2
votes
2answers
605 views

Can RSA signing be implemented on top of RSA encryption/decryption?

I need to use RSA-SHA256 signing. Unfortunately not all Microsoft CryptoAPI providers support that. It's possible that I might get a handle to a CryptoAPI provider that can just encrypt/decrypt with ...
3
votes
2answers
208 views

Is this toy RSA demonstration flawed?

I want to present the basics of how RSA works to an audience of beginners in cryptography. The problem is that I am lightyears from being an expert. After reading about how RSA works in wikipedia, ...
2
votes
1answer
840 views

How can Bob validate Alice’s certificate?

Suppose that Alice has a certificate CA1 << Alice >> issued by the certification authority CA1, and Bob has a ...
0
votes
2answers
556 views

Digital signature providing a proof of file authenticity

How can a digital signature provide proof the authenticity (not integrity!) of a file?
1
vote
2answers
553 views

Is it safe to include the public certificate in xml digital signatures?

My understanding of XML Digital Signatures: Let's use a SAML token as an example. Note - for the sake of simplicity I'm omitting some details like CanonicalizationMethod, base64 encoding, etc. In ...
1
vote
1answer
464 views

how hashing algorithm is shared in public key

I am reading about public key working at following linkenter link description here Here picture is provided My question is how hashing algorithm is shared between sender and receiver?
0
votes
1answer
411 views

Given a Message and Decryption Key, is it possible to find the Cipher in RSA?

This is a slight reversal from the norm but... Suppose Alice wants to ensure that everyone knows that a message will be from her. Instead of giving out the encryption key, she broadcasts the ...
1
vote
2answers
87 views

CSPRNG generation vs asymmetric encryption performance

It might sound like a weird comparison, but which one is faster, If I were to generate a CSPRNG every time or to sign(private encrypt) a data?
2
votes
1answer
129 views

Basic questions on how asymmetric keys “interact”

Have I understood this correctly? To use a key and lock analogy. With an asymmetric pair of keys (when used to encode) can either key be used to encode the message (close the lock) and only the "pair"...