Linked Questions

0
votes
2answers
146 views

Is an efficient integer factorisation algorithm a threat to security anymore?

Nowadays, private key systems like AES have replaced RSA. Even for digital signatures, people mostly use ECC, so even if an efficient integer factorization algorithm is made, would it be a threat to ...
0
votes
2answers
2k views

When was the RSA 64-bit key introduced into internet encryption?

When (if ever) was a key length of 64 bits used in "internet encryption" and when was that "cryptographic standard" first introduced? Following up, when did "internet encryption" key lengths change ...
0
votes
2answers
1k views

Practical Attack on RSA

Currently I am designing an RSA based application, and I am thinking of how long should the key be in order to be secure against attacks. I know that RSA 4096 bit key can be recovered using Sound ...
-1
votes
2answers
646 views

Rsa encryption security

What tool is used to measure the security of rsa encryption? If no, is there any tool to measure rsa encryption in terms of security. Or any idea how to measure security of rsa encryption?
21
votes
1answer
9k views

What is the history of recommended RSA key sizes?

One can find up to date recommended key sizes for RSA at NIST sp800-131A for example. In short, it suggests a key size of at least 2048 bits. Is it possible to find a history of recommended key sizes ...
21
votes
1answer
2k views

Security of RSA for paranoids with padding?

RSA for Paranoids (RSAP) (in CryptoBytes v1n3), also known as Unbalanced RSA, is a variant of RSA proposed in 1995 by Adi Shamir, as a mean to increase the RSA public modulus size while keeping ...
12
votes
1answer
26k views

How much stronger is RSA-2048 compared to RSA-1024?

How much stronger is RSA-2048 compared to RSA-1024? It is hard to imagine very big numbers. So what would be your way to explain the difference to someone who doesn't know much about cryptography?
7
votes
1answer
9k views

Should I use RSA encryption since RSA is said to be broken by NSA?

I am developing a simple web app that uses asymmetric encryption, but I am not sure whether to chose RSA for the reasons mentioned above. What are your suggestions? Also if I decided to go with RSA ...
4
votes
1answer
1k views

RSA time function

I am doing a paper on textbook RSA (highschool-level). I am explaining and proving the significance of the public key exponent in time and security. So far, I have encrypted a constant message with a ...
2
votes
1answer
133 views

How to factorize the group order in Pohlig-Hellman algorithm

The Pohlig-Hellman algorithm is for computing discrete logarithms in a group whose order is a smooth integer. This algorithm requires the factorization of the group order. However we know that ...
2
votes
1answer
175 views

Highest prime factor that is Safe for a particular scheme

My question is how many bits of prime number is secure so that it cannot be factored from very large number? Until today how large prime factor is found in large number? Quantum computing find ...
2
votes
1answer
612 views

Is Shoup's Practical Threshold Signatures considered secure?

I am planning to use threshold cryptography in a Java application. So far, I have only found ThresSig and a ECDSA implementation used in TwoFactorBtcWallet. However, ThresSig is based on a 15-years ...
2
votes
1answer
853 views

Small Encryption Exponent

I am trying to crack an unpadded RSA set up for a homework. I have public key (R,e) and encrypted message E. ...
1
vote
1answer
57 views

Is digital signature without schema possible?

In my application I want to use Rabin crypto system with short keys (like 128 bits) and MD5 for hashing. I found that schema like PKCS1-V1_5 or PPS does not allow you to have such small keys and ...
1
vote
1answer
85 views

Can we sign and encrypt with RSA keys of both sender and receiver?

By using RSA encryption, it is possible to "encrypt" sign with sender's private key and then with receiver's public key, and decrypt with receiver's private key and then with sender's public ...
1
vote
1answer
38 views

Paillier estimate attack costs on short keys

I was thinking about how to use the homeomorphic property of that cryptosystem to achieve not a "semantic security" but a less ambitous obfuscation of the source code (an ipotetical scenario ...
1
vote
1answer
80 views

Choosing a suitable prime for accumulators

I am trying to work out accumulators and generate $S = \{ e_1,e_2 \ldots, e_n \} $ from this (Section 3.4 - Choosing a Suitable Prime). For each element of $e_i$ compute its representation $x_i$.(This ...
1
vote
1answer
83 views

Which RSA keys are actually attacked In practice?

I understand that it is important to check how hard it is to attack RSA keys, but I assume at some key size attackers would not even try. Real attacks are carried out by exploiting mistakes in the ...
1
vote
1answer
462 views

80-bit security and attack time

Many designer claimed that their cryptography scheme has 80-bit security. So how to calculate the time of attcking this 80-bit security cryptography scheme, such as 80-bit security RSA using a kind of ...
1
vote
1answer
1k views

How should I address message size limits in RSA encryption?

I am making an end-to-end encryption software program in Java using RSA. I am using BigIntegers and its number theory methods. (I know this is a very slow approach, but I just want to learn to the ...
1
vote
1answer
850 views

RSA finding p and q integer with condition

I'm given $N=p\,q$ and told that $44\,p\approx 17\,q$ (with the value given for $N$ some 49-digit integer 8124642558124642555899928124642555899924479992447). In ...
1
vote
1answer
8k views

How long to bruteforce a RSA key [duplicate]

Suppose I have a 2048 bit RSA public key, and want to brute force the corresponding private key. I guess there are 2048^16 possible combinations? How long would this take me to brute force with an i7,...
0
votes
1answer
72 views

What would be the most recommended AES && RSA Keys for production?

While I am a front-end developer and not a security expert programmer, I am worry about the keys I am using for my AES && RSA encryption. Please help me to understand: Is the following keys ...
0
votes
1answer
112 views

Reducing a 64 digit integer to 10 digit

Situation:- I am using Python. I am using RSA and I am using two 64 bit keys. I am not an cryptographer . I can provide you the RSA code if needed but i am not posting it as it doesn't have to do ...
-1
votes
1answer
98 views

3 digit code at the end of a changing magstripe (maybe hash?) [closed]

Myself and some fellow students are doing some "Independent Security Research" on campus and trying to crack the campus paid parking system to better understand how it might work. The system works ...
1
vote
0answers
57 views

Will a list of all prime numbers upto certain number of bits compromise crytopgraphic algorithms based on prime factorization? [duplicate]

I understand that many cryptographic algorithms depend on the difficulty of large prime factorization. Will a list of all prime numbers upto certain number of bits make it easy for an attacker to ...
1
vote
0answers
82 views

How does RSA encrypt a message? Are the message packets chained together?

This question is quite related to this one, but I am looking for more details. I am writing a very basic implementation to demonstrate how RSA works. My current implementation generates key pairs ...
1
vote
0answers
239 views

Is a RSA 2048 bits public key secure [duplicate]

I realize servers such as Google, Yahoo, which use RSA has 2048 bits public key. After comparing those keys, I realize that the public keys share a common property, that is first 9 bytes and last 5 ...
1
vote
0answers
68 views

Minimum length of PKI key for signature [duplicate]

I am looking for data which shows how time it would take to brute force (or crack by any other method) different sizes of RSA/DSA keys used for a digital signature. I am looking to use as small a ...
0
votes
0answers
195 views

Parameters and key dimension for DH and RSA

I studied RSA and Diffie-Hellman key exchange from a quite old book (Discrete Mathematics by Berardi, Beutelspacher) and so I wonder if the recommended dimensions for the prime p and the secret ...

15 30 50 per page