Linked Questions
17 questions linked to/from Is the RSA signature attack from Desmedt and Odlyzko practical?
1
vote
0
answers
1k
views
Textbook RSA Signature attacks (without message padding) [duplicate]
I have been reading as much as possible, but I haven't so far found anything exactly like what I'm looking for. I have a couple of questions (given what I know below):
One, is it possible to find d?
...
16
votes
4
answers
5k
views
Is there a cryptographic algorithm that can make a "lottery ticket"?
With public-key cryptography, I know Alice can "seal" a message that only Bob can open. But in that case, Alice knows the message that she is sealing.
What if Alice wants to seal a random ...
- 263
6
votes
3
answers
2k
views
Do RSA signatures really need padding?
For encryption, we want identical plain-text's to encrypt to unique ciphers, also called Semantic Security.
For Signatures, the plain-text (i.e. message hash) is not a secret. The plain-text, if you ...
- 163
6
votes
1
answer
3k
views
RSA Signature using SHA-256 is secure?
Is following RSA signature scheme secure against forgery and prevents breaking text book RSA?
$$y = \operatorname{SHA-256}(m)$$
$$s = y^d\bmod N$$
where $m$ is message of arbitrary length, $y$ is the ...
- 2,397
5
votes
2
answers
955
views
RSA Signing - Existential forgery and message prefix question. It's a weird one
I'm new to this. Please be kind. I have a theoretical question that I would like sanity checked:
Bob and Alice are doing RSA signing without a hash function -- just putting a message in, and getting a ...
- 153
3
votes
2
answers
590
views
Does it make any sense to sign a GCM authentication tag with RSA?
To achieve double insurance for authentication, can we sign the GCM final tag with using RSA?
with RSA, no one is able to create his own tag since the private key is not known.
However, according to ...
- 83
6
votes
1
answer
722
views
Can RSA-PSS signing be made deterministic without loss of security?
Is it possible to make RSA-PSS signing deterministic without loss of security?
Specifically, I would use Blake2b of the key and message to generate the salt.
- 4,763
2
votes
2
answers
249
views
Signatures from asymmetric encryption
Let $(K_{enc},K_{dec})$ be an asymmetric key-pair. It seems to me that a signature scheme can be created by letting the public verification key be $K_{ver}=K_{dec}$ (the asymmetric decryption key) ...
- 327
2
votes
1
answer
2k
views
Is padding of the digest needed in SHA256 with RSA-2048 scheme?
For a signing scheme involving generating a $256$ bit digest using SHA256 followed by RSA with $2048$ bit modulus, the signature would always be 256 bit without padding even though signatures of up to ...
- 258
0
votes
3
answers
1k
views
Sign MD5 hash with RSA [duplicate]
I have to hash a message with MD5, digitally sign it, and then verify.
I have looked around, but I can't find a step-by-step example. I understand how RSA works when a message is given as number (not ...
1
vote
2
answers
655
views
Digital signature forgery
My understanding of digital signatures is as follows: Alice hashes a message with a one-way cryptographic hash function, the output of which is called the message digest. She then encrypts the digest ...
- 13
1
vote
1
answer
530
views
RSA security when using short messages
We know that a short message encrypted with RSA can easily be brute forced.
Lets say Bob encrypts a message containing just "Hi" and encrypts it with Alice's public key. Anyone can try ...
- 13
0
votes
2
answers
222
views
PKI Encrypted hash vs Signing
I have a confusion in a concept under cryptography context. What is the major difference between an encrypted hash and digital signed hash?
I have used PKI Encryption i.e. public / private key based ...
0
votes
2
answers
318
views
What does it mean if two files created by the same person shares the same SHA256 hash?
Okay so I've got an assignment for cyberlaw and this could be irrelevant to the question. But I have a situation where someone signed a a will using an advanced electronic signature, but this ...
- 3
1
vote
1
answer
219
views
PKCS RSA - Why do we need encoding [duplicate]
In the RSASSA-PKCS-v1_5 signature scheme, the first step is to perform an encoding on the hashed data. (0x00||0x01||PS||0x00||T).
Is this encoding important for security ? What happens if the hash is ...
- 47