Questions tagged [certificates]
A certificate consists of a public key and information about the owner (e. g. the name of a person or server).
191
questions
0
votes
0answers
29 views
what is the difference between self issued and an intermediate certificate
Hashicorp vault has an API they call Sign Self-Issued. The use case is for rotating root CAs. A user creates a new root self signed CA and then passes it to this API and what is returned is roughly ...
1
vote
1answer
32 views
What does (06) in “CRL Signing (06)” mean?
In "Certificate details -> key usage -> CRL Signing (06)", what does "(06)" in "CRL Signing (06)" mean?
3
votes
0answers
44 views
Do people sign my subkey?
So, I've generated my GPG key pair. Created a subkey for signing and a subkey for encryption. Exported the whole thing, removed my master key pair to a secure place, re-imported only the subkeys. Now, ...
1
vote
1answer
41 views
How are certificate status obtained on browsers?
There are two ways of checking the status of a digital certificate:-
Offline Authentication (CRL)
Online Authentication (OCSP, SCVP)
Several browsers (like Mozilla Firefox) have given up the use of ...
0
votes
2answers
36 views
How are CRL implemented?
The source from where I learn states:-
CRL (Certificate Revocation List) is the primary means of checking status of certificates offline.
But I can't seem to understand how is it possible for a ...
0
votes
0answers
26 views
Pitfalls of wildcard certificates with unique key pairs?
I am having difficulty finding information regarding using wildcard certificates with unique key pairs. I understand if you duplicate key pairs across multiple servers and one becomes compromised, an ...
4
votes
2answers
105 views
What is cryptographic sealing?
While revising my CAdES library I encountered some "sealing issue" in digital signatures.
The Win SDK signtool.exe has a /seal ...
1
vote
1answer
28 views
How is Cross-Certification implemented?
I am currently learning about Certificates in Public Key Infrastructure.
Cross-Certification exists as an alternative because the concept of a single monolithic CA certifying every possible user in ...
1
vote
1answer
39 views
CSR signature using elliptic curve [closed]
We've been asked to generate a certificate signing request using elliptic curve and we can't use any third-party library as it's an embedded application with very limited resources).
We are used to ...
2
votes
0answers
52 views
What security is provided by a certificate? [closed]
I've been working on the topic of certificates for a little while, and here is what I understand:
A certificate is basically a public key + some data about the owner of the certificate + a signature ...
0
votes
1answer
46 views
Windows certreq full response file [closed]
I'm using the Windows certreq command line tool to submit a CSR for signing to a Windows Server CA.
...
1
vote
0answers
24 views
Include TSA Certificate in Timestamp Request
Im currently working on Timestamping and stumbled upon a parameter fRequestCerts/requestSignerCertificates/certReq that according to the documentations tells a TSA to include the certificate that was ...
1
vote
1answer
57 views
How are public keys securely and reliably obtained across the internet?
I've just decided to start learning all about PKIs, and I have come across what seems like a paradox.
When fetching a public key from either a server or a CA, how can we be sure that the public key ...
0
votes
1answer
59 views
Understanding hybrid cryptography's concepts: signing and CA
After learning about symmetric encryption, public-key encryption, one-way hash, digital signature and digital certificate, I was tasked to think of an imaginary hybrid cryptosystem. I was thinking ...
3
votes
1answer
47 views
What is the RFC order of peer certificate verification, trust chain or expiry first?
If a certificate received from a peer:
Is expired,
has a valid signature, but from an untrusted root CA
What error should be thrown? Untrusted certificate or expired certificate? I can't seem to ...
2
votes
1answer
75 views
What key is used to encrypt the certificate and certificate verify message in TLS1.3?
Which key is used to encrypt certificate and certificate verify message in TLS1.3?
I could not figure out which one it is reading section 4.4.2 of RFC 8846 and I only saw a vague mention on page 11.
0
votes
1answer
99 views
How can I verify certificate signature algorithm in TLS 1.3 using PSS?
I've read this post but I'm still unable to understand some things.
I'm trying to verify that the signature algorithm used in the certificate matches the proposed list from the client. (As it's ...
2
votes
1answer
303 views
How to identify RSASSA-PSS from rsaEncryption OID?
Following the RFC 8446 it states that:
RSASSA-PSS RSAE algorithms: Indicates a signature algorithm using
RSASSA-PSS [RFC8017] with mask generation function 1. The digest
used in ...
2
votes
1answer
220 views
Find hash and signature algorithms used in an X.509 certificate signed with RSASSA-PSS
I'm trying to understand the new PSS scheme, but having trouble figuring out how to parse it properly.
When receiving a certificate with OID of RSASSA-PSS, how can I know which hash and signing ...
0
votes
0answers
53 views
Understanding TLS certificate
I'm newbie in the word of TLS, and need some verification about my picture.
I can use TLS with 3 or 2 participants:
3 participants: Client, server, CA (certification authority). The CA is where the ...
2
votes
1answer
105 views
How to generate a certificate/PEM from specific plain text keys?
Is there a way to generate a certificate with a pre-stablished public/private plaint text keys?
Explaning: I generated some keys on a web site for development propurses, but now one of the parties ...
0
votes
1answer
43 views
Why CA does not have to be online?
I'm learning publick key infrastructure and certificate authority.
But I cannot understand below conecepts.
Unlike KDC or public key authority, CA does not have to be online to
provide keys to ...
0
votes
1answer
38 views
When a program using openssl library is using a certificate, does the server check if the issuer(s) are still valid
If I have a program acting as TLS server with a certificate signed by a CA, if one of the issuers in the chain becomes invalidated or the date expires, then how does the program using the certificate ...
1
vote
0answers
14 views
GlobalSign cert in Trusted root for Google Services shows Sha1. Security postures
"GlobalSign" certificate in Trusted Root Certification Authorities for Google Services shows Sha1. Security postures are different than just 2-3 yr ago. At my home, router bought 2016, networked; ...
0
votes
2answers
2k views
Why does curl need both root and intermediate certificates in order to securely connect to an HTTP server?
I have created a root certificate, an intermediate certificate, and a server certificate:
...
0
votes
1answer
74 views
Is the only use for the private key of a root certificate signing certificates issued by it?
A root certificate can be used to issue intermediate certificates.
The private key of the root certificate is needed in order to sign any intermediate certificates.
However, after that, we only need ...
1
vote
0answers
98 views
TPM 2.0 Reissued EK Cert
Unlike the TPM 1.2 module, the TPM 2.0 specification allows the platform user to create own ...
2
votes
1answer
67 views
How does a receiver treat X.509 self-certificate with unknown the Signature Algorithm ID?
As I know X.509 self-certificate is a mechanism that the host generates public and private keys, the public key will insert to a certification and the private key will be used to sign the ...
2
votes
1answer
145 views
Revoke a GPG key using previously generated revoke certificate after renewd (change expiration date)
I have few sub-questions
Do secret keys get expired, or just the public key gets expired?
Do I have to back up the master sec key each time I renew it?
For an ...
0
votes
1answer
86 views
-1
votes
1answer
44 views
I am new to digital certificate 509V3 concept. can some one please clarify the below points [closed]
I am using RSA 2048 with SHA 256 primitive in certificate:
How to verify the user certificate n + 1 with Root certificate n?
why it is required to perform Certificate chain verification?
How to ...
0
votes
1answer
475 views
Which algorithm should be used to replace SHA512withRSA? [closed]
We are working on the web application that is basically generating a self-signed certificate during the installation. It's a Java based app and for generation of the certificate we are using ...
34
votes
3answers
4k views
Does “Shattered” actually show SHA-1-signed certificates are “unsafe”?
Note: I am not advocating anyone continues using SHA1-signed certificates: they are dead as far as security is concerned and should no longer be used. I'm just trying to clarify my understanding of ...
1
vote
2answers
389 views
What exactly is the contents of the LDAP userSMIMECertificate attribute?
I'm trying to setup an LDAP with user certificates. I have already learned that certificates can be stored in either the userCertificate attribute in DER format, or ...
0
votes
0answers
46 views
Derive anonymous dsa key-pair from two certificate authorities
Is it possible to derive a dsa key-pair based on two private keys from different/independent "Certificate Authorities" (ca1 and ca2) to sign s.th. which then verifies only that the signature is a ...
1
vote
1answer
44 views
Key derivation with implicit certificates
The big advantage of implicit certificate is their small size and fast processing. This article presents a way how to compute implicit certificates.
In the end Alice is able to derive both her ...
0
votes
2answers
61 views
Self signed certificate for mobile app and backend from same company
My company's product is Android and iOS mobile app which connects to our own backend. All interactions of the mobile app are with backend developed by our own company.
In such a situation, can the ...
2
votes
1answer
650 views
How can Bob validate Alice’s certificate?
Suppose that Alice has a certificate CA1 << Alice >> issued by the certification authority CA1, and Bob has a ...
2
votes
1answer
38 views
Secure scheme to share symmetric key using asymmetric keys and certificates with N parties
I need to distribute symmetric AES key into number of end points which will use it to decrypt data. The AES key will be the same on all end points, it is not possible to generate unique on every end ...
1
vote
1answer
194 views
Secure Design and CRL?
I was at my College Security Lesson, the professor said that Certificate Revocation Lists (CRLs) violate some of the Secure Design principles.
Secure Design Principles:
Fail-Safe Defaults
Economy of ...
0
votes
1answer
618 views
RSA certificate needed in CVC format
I had a client requirement asking me to provide an existing base64 encoded certificate in a CVC format. Could someone point me in the right direction here to understand what this format is? How can I ...
2
votes
1answer
114 views
X.509 strong authentication protocols
Is there also a protocol definition in X.509? In "Handbook of Applied Cryptography" by A. Menezes there is a reference to X.509 strong authentication protocol, nevertheless, I could not find the ...
1
vote
0answers
41 views
Benefits of using SSL certificate over a raw key pair for non-browser use?
For applications not involving CA signed certificates – or web browsers for that matter – it would seem to be easier to use a raw key pair if possible, rather than deal with potential formatting ...
0
votes
1answer
82 views
Link between openssl 'req' command and 'unable to get local issuer certificate'?
I was using the following command to build a self-signed certificate after creating a private key:
...
2
votes
1answer
72 views
CAs are pre-loaded on the system, but how is it able to get intermediate certs?
I have the following X509 certificate:
...
1
vote
2answers
574 views
Why is the signature field in X.509 a BIT STRING, despite there being ASN.1 (DER) data inside?
As can be seen from the following ASN.1 definition of an X.509 certificate, the Signature field is a BIT STRING.
...
0
votes
2answers
62 views
Should Bob trust a certificate issued by delegated party?
Consider this scenario:
Alice sends a message signed under her public key to Bob.
Bob has never exchanged a keys with Alice.
Alice's key is signed by a certain X.
X's key is signed by Y, an entity ...
1
vote
1answer
614 views
What happens when a root CA loses its private key?
Certificate Authorities normally keep their private keys inside dedicated Hardware Security Modules (HSMs).
What happens when such a device is lost (fire, electronic fault, stolen, etc)?
How would ...
1
vote
1answer
230 views
how to avoid attack on Certificate Revocation List by the owner of the private key?
suppose A owns the private key, and its correspondent certificate locates in site of CA.
B request for A's certificate from CA for verifying the signature sent to him/her.
There is an attack ...
4
votes
2answers
869 views
Why is the signatureAlgorithm field in X.509 certificates redundant?
See the ASN.1 description of an X.509 certificate below:
...
