Linked Questions

1
vote
2answers
135 views

What's the actual difference between RSA encrypting and Descrypting and RSA Signing? [duplicate]

this question arised because I'm working with Windows' CNG library and it has 4 functions for RSA: BCryptEncrypt (private key, message) BCryptDecrypt (public key, message) BCryptSignHash (private key,...
1
vote
0answers
95 views

Is signing a message just encrypting it with private key? [duplicate]

I have a simple question, When I sign a message (in RSA) does the program encrypt the text with my private key? Because I can decrypt it with my public key. Yes or no. Is signing a message just ...
20
votes
2answers
10k views

Which attacks are possible against raw/textbook RSA?

The PKCS#1 standard defines multiple padding schemes for signature generation/verification (EMSA-PSS and EMSA-PKCS1-v1_5), and encryption/decryption (EME-OAEP and the less safe EME-PKCS1-v1_5). ...
8
votes
2answers
2k views

SHA-1 – Why is it hard to find a certificate collision?

Why is it it’s so much harder to execute a successful collision on certificates than it is on text data? I assume this has to do with the fact the certificate actually is a file that contains signed (...
2
votes
4answers
768 views

Is it more weak to encrypt with the private key RSA?

I have a simple question. Is it more weak to encrypt with the private key against the public key with RSA ? Like is it easier to "crack", "brake", "solve", "decrypt" when I encrypt with the private ...
4
votes
2answers
4k views

Certificate Authority RSA key expiration?

My understanding about SSL/TLS for HTTPS is that servers send their certificates to browsers and browser attempt to decrypt them using trusted CA public keys that are already presented in their store. ...
2
votes
1answer
7k views

Why should a signature use PSS padding in RSA?

Suppose I send a message using AES (private keys already negotiated securely) and I send a hash of this message using RSA (encrypted with private key) with OAEP to verify the authenticity and ...
2
votes
2answers
642 views

Can RSA signing be implemented on top of RSA encryption/decryption?

I need to use RSA-SHA256 signing. Unfortunately not all Microsoft CryptoAPI providers support that. It's possible that I might get a handle to a CryptoAPI provider that can just encrypt/decrypt with ...
3
votes
2answers
240 views

Is this toy RSA demonstration flawed?

I want to present the basics of how RSA works to an audience of beginners in cryptography. The problem is that I am lightyears from being an expert. After reading about how RSA works in wikipedia, ...
0
votes
2answers
823 views

Digital signature providing a proof of file authenticity

How can a digital signature provide proof the authenticity (not integrity!) of a file?
2
votes
1answer
1k views

How can Bob validate Alice’s certificate?

Suppose that Alice has a certificate CA1 << Alice >> issued by the certification authority CA1, and Bob has a ...
1
vote
2answers
668 views

Is it safe to include the public certificate in xml digital signatures?

My understanding of XML Digital Signatures: Let's use a SAML token as an example. Note - for the sake of simplicity I'm omitting some details like CanonicalizationMethod, base64 encoding, etc. In ...
1
vote
1answer
649 views

how hashing algorithm is shared in public key

I am reading about public key working at following linkenter link description here Here picture is provided My question is how hashing algorithm is shared between sender and receiver?
0
votes
1answer
451 views

Given a Message and Decryption Key, is it possible to find the Cipher in RSA?

This is a slight reversal from the norm but... Suppose Alice wants to ensure that everyone knows that a message will be from her. Instead of giving out the encryption key, she broadcasts the ...
1
vote
1answer
65 views

In PKI, with a hash-encrypted message (first hashed, then encrypted), how is the plaintext ever retrieved?

Consider a normal PKI encryption flow - hash the plaintext, then encrypt the hash with the private key of the sender and then encrypt it with the public key of the recipient. All this is good - and I ...

15 30 50 per page