Questions tagged [key-generation]
Key generation is the process of generating keys for cryptographic purposes.
107
questions
1
vote
1answer
43 views
How feasible is it to guess the private key of libsodium by taking into account generation time?
So suppose you are doing this locally (so no network noise), and know the exact specifics of your processor too. Is it feasible to figure out the private key (while having access to the public-key) ...
1
vote
0answers
18 views
Gennaro & Goldfeder Key Generation Protocol
As I am going through the “Fast Multiparty Threshold ECDSA with Fast Trustless Setup” paper by Gennaro & Goldfeder, 2018, I am stumbled by the key generation protocol (Sect. 4.1, p.10):
In Phase ...
0
votes
1answer
37 views
RSA encryption key conditions
I recently read the RSA cryptosystem but now I confused in key generation phase.
According to the Euler's Theorem, we have just one condition:
e.d = k.ϕ(N) + 1
where:
"e" is encryption ...
2
votes
0answers
491 views
What does it mean for “1^n”(i.e., the security parameter written in unary)? [duplicate]
As it is mentioned above, I am confused about “Gen takes as input $1^n$ and outputs a key“. Does it mean that the input of Gen is 1111....111 with length of n?
2
votes
0answers
52 views
Kleptographic attack of ECDSA key generation?
Kleptographic attacks can be designed for RSA key generation, Diffie–Hellman key exchange, DSA/ECDSA signing, etc. Is it also possible for ECDSA key generation?
More detailed: Is it possible for an ...
1
vote
0answers
26 views
Secret key generation in the BGV scheme in HElib
This question is about secret key generation, based on section 4.7 in the design document:
https://homenc.github.io/HElib/documentation/Design_Document/HElib-design.pdf
It seems that if $m$ is not a ...
2
votes
2answers
156 views
How many low-order bits of an RSA modulus can we safely fix to 1?
It's easy to generate an RSA modulus $n=p\,q$ of $k$ bits with $n\equiv-1\pmod{2^\ell}$, for $\ell$ up to about $k/2$: we can choose $p$ as usual, fix the $\ell$ low-order bits of $q$ to $-p^{-1}\...
0
votes
0answers
29 views
Symmetric and Asymmetric indistinguishabilty experiment
In each of those experiments, we have a function $Gen(x)$ who generates the key or a pair of keys respectively for symmetric or asymmetric algorithms. $x = 1^n$ : I read on other questions that is a $...
6
votes
1answer
120 views
Schnorr groups allowing fast modular reduction, vs GNFS
I'm looking for Schnorr groups allowing fast modular reduction. Say, using the notation in DSA, with 256-bit prime $q$ and 3072-bit prime $p$, and $p\equiv1\pmod q$.
Are there standards, RFC, or other ...
1
vote
1answer
109 views
NTRU Euclidean algorithm the inverse of f modulo p
I am very new to the world of cryptography and have just began my research in the post quantum cryptography sector. I have been reading and trying to understand NTRU key generation and am struggling ...
0
votes
2answers
151 views
Diffie-Hellman key generation
We all see X509 certificates with 2048/4096-bit RSA key pairs; however, it is difficult to understand how they work in the DH part of the TLS handshake.
At most, they authenticate and sign. DH 4096-...
0
votes
0answers
47 views
SHA3_512 as dynamic SBOX generator
I'm creating a substitution-permutation cipher (for learning purposes only of course) and I'd like to implement dynamic SBOXs. The cipher will have a block size of 128, and 32 rounds. These SBOXs will ...
0
votes
0answers
39 views
How to generate private SSH RSA key from given primes?
I have two primes and public exponent. How I can generate private key with this values?
1
vote
2answers
313 views
Recovery Passphrase Collission for BIP-39 and BIP-44
Referring to the standards of [BIP-39] and [BIP-44]: a 'master password' consisting of 12 words uniformly selected from a 2048-word dictionary corresponds to 128 bits of entropy, that is then used as ...
0
votes
1answer
51 views
How to correctly (good practice) generate gpg keys in batch mode (unattended) WITH a passphrase
I'm writing a web interface in PHP to generate keys. I'm familiar with gpg's command line options, particularly --batch. I'm also familiar with PHP's GnuPG API.
I can't find a way to safely pass the ...
-2
votes
1answer
128 views
An attempt at using AES as a stream cipher
You have a 2048 bit private key, which is 2,048 randomly generated bits. It is not an RSA or ECC key. It is the master key that is used for every message. You receive a message to encrypt and ...
2
votes
0answers
54 views
Threshold lower than $\dfrac{n}{2}$ in distributed key generation
While I was studying protocols for distributed key generation with malicious adversaries, Gennaro et al.$^{[1]}$ pointed out that the protocols that provide both secrecy and robustness should have a ...
3
votes
0answers
140 views
Criteria for public modulus of RSA accumulator
What are criteria for generation of an RSA public modulus used in an RSA accumulator, and their rationale? Are there special requirements in some sub-cases, like for «one-way» accumulators?
Josh ...
3
votes
2answers
265 views
Formula for bits of entropy per bit, when combining bits with XOR
Assume that bits $A$ and $B$ each have .5 bits of entropy per bit.
The two-bit result of the concatenation $A‖B$ has 1 bit of entropy total, and it retains the entropy density of .5 bits of entropy ...
4
votes
1answer
106 views
Consequence of $p\bmod e=2$ in RSA prime generation
When generating a prime $p$ for use in an RSA modulus with public exponent $e$, it is necessary that $\gcd(p-1,e)=1$. When $e=3$, and since $p$ is a large prime, that implies $p\bmod e=2$.
Assume an ...
0
votes
1answer
100 views
Symmetric key validity hypothesis?
Can I use something like Shannon entropy to determine the suitability of a symmetric key? I found a symmetric key which wasn't generated using a CSPRNG and it had a very low Shannon entropy.
I ran an ...
2
votes
2answers
137 views
When is a cryptosystem or its algorithm (like RSA) considered efficient?
When is a cryptosystem (like RSA) or its algorithm for keygeneration, encryption and decryption of messages considered efficient? Is there some bound in complexity which splits both efficient and not ...
2
votes
1answer
519 views
How to find the inverse of a polynomial in NTRU-PKCS
I am coding a java based implementation of the NTRU public-key cryptosystem. I can comprehend the majority of the algorithms involved in the encryption and decryption process well enough, but the key ...
0
votes
0answers
328 views
What are the safe primes for $p$ and $q$ used in ElGamal?
I need to generate a 2048 bit key for ElGamal and I was looking for the $p$ and $q$ for PGP but I couldn't find them. the only thing I could find was this RFC but those are not safe primes.
Does ...
1
vote
1answer
103 views
Proof that Niederreiter Cryptosystem is correct
I read about Niederreiter Cryptosystem. I understood the Key Generator, encryption and decryption of the cryptosystem, but if I want to prove that is a correct cryptosystem, what should I do?
1
vote
2answers
361 views
The importance of randomness in the creation of a key
Why does it matter what kind of random number generation is used during key generation?
E.g. this answer states ...
1
vote
1answer
65 views
Is there a way to generate a password from another but those 2 will have no relation?
For example I have the password X and I want to encrypt 2 different things. Even if one of them was stolen due to a keylogger, other will be completely safe. I wonder how safe something like this ...
1
vote
1answer
73 views
How should one handle the identity value and other “obviously” weak secret random values?
In RSA, ECDSA, ElGamal and quite a few other schemes, using a secret (random) value equal to 1 might not provide any form of security, while still being mathematically sound.
For RSA, ECDSA or ...
1
vote
1answer
130 views
Difference between Key Scheduling and Key Generation?
I am a little bit confused in the terms i.e Key Scheduling and Key Generation. What is the actual difference between these two terms? According to Wikipedia, the terms are described as:
Key ...
0
votes
1answer
39 views
Vulnerability of low value generated key
I have read here that Elgamal is resistant to brute-force attack, because the group to where the key is selected is very large. But since the key generation is random, (i assume)there is a chance that ...
1
vote
2answers
139 views
Concatenating “words,” is it possible to create a key that is indistinguishable from one made in a truly random manner?
By concatenating "words" and adding them Modulo 26, can we create a key that cannot be distinguished from one that was generated in a truly random manner?
For example, let's say we use three ...
2
votes
1answer
164 views
What is a randomly derived key?
It is a well-known fact that using the same key + nonce combination with a stream cipher twice breaks security. The NaCl library has different primitives for authenticated encryption (i.e., ...
2
votes
0answers
29 views
Is there a scheme to force a party to generate a fresh key?
Is there a way to force one party to generate a fresh key, such that another party can be convinced that the key was freshly generated, without that party also knowing the key?
I'm motivated by a ...
4
votes
1answer
5k views
curve25519 by openSSL
How can i generate ec curve25519 keys using openSSL?
When I run
openssl ecparam -name curve25519 -genkey -noout -out private.ec.key
I have this message
...
1
vote
2answers
471 views
Generate PGP keys very very fast
Is there a way to generate thousands of PGP keys at a very very fast rate?
I am generating thousands of 3072-bit PGP keys looking like part of a personal research project. Obviously, this is a very ...
2
votes
1answer
300 views
Generating a key pair using a signature generated by an existing key
I’ve built an app in which each user has a private/public key pair and I want to generate a second one for them, however I cannot store the second private key anywhere.
What would be the drawbacks ...
6
votes
1answer
725 views
Is forward secrecy overhyped or necessary?
Forward Secrecy, also perfect forward secrecy, gives assurance about session keys even the private key is compromised. This is achieved by generating a random key per session without using a ...
0
votes
1answer
420 views
Finding a secret key corresponding to a public key
As far as I know, a secret key corresponding to a given public key is not unique. So, for example, there are actually multiple secret keys that can produce the same digital signature under RSA ...
2
votes
0answers
88 views
Distributed key generation (for discrete-log based cryptosystems) with fake shares
Under the definition of Gennaro et al (link), a DKG protocol needs to satisfy “correctness” and “secrecy”. Correctness is divided into three sub-properties:
C1. All subsets of $t+1$ shares provided ...
1
vote
0answers
50 views
Why (N+1)sec's mDP Implementation does not check whether all the XORED received $z$ values are 0
In the original mDP protocol once all $z$ values received from each participant the following calculation is being done:
If either $XOR(z_1,z_2,...,z_n) = 0 $ or received invalid Signature then ...
1
vote
1answer
76 views
Why do general encryption key generators also take the algorithm as input?
To my understanding the key generation logic only needs a source of randomness and the length of the key to be generated as input. However, we still provide the algorithm (names) like AES, DES, ...
0
votes
1answer
92 views
Binary representation of the inverse of a big number [closed]
In one of the first FHE schemes by Gentry, the KeyGen algorithm is defined as follow:
For a security parameter $\lambda$, set $N = \lambda ^ 2, P = \lambda ^ 2, Q = \lambda ^ 5$.
KeyGen$(\lambda)$: ...
2
votes
0answers
87 views
General Private/Public key generation [closed]
I wanted to get an idea on how the whole cold-storage private/public key generation works for different cryptocurrencies. So I was playing around with BIP32 deriviation path on:
https://iancoleman.io/...
3
votes
1answer
520 views
How to generate a distributed private key?
Shamir's Secret Sharing scheme is really interesting but the pain point is that the secret is generated by one trusted party, then the shares are distributed to other peoples.
Is there any scheme ...
1
vote
1answer
123 views
Doubts regarding implementing AES-128 bit algorithm in my IOT system
I want to implement AES-128 in my IoT network which consists of a Master device which runs Linux on it and slave devices which are 8-bit micro-controllers that periodically transmit data packets to ...
2
votes
0answers
32 views
What are SNFS-safe limits for an RSA moduli optimized for simple modular reduction?
I consider $n$-bit RSA moduli $N$ having high-order bits starting by with $k$ bits at 1, then $k$ bits at 0, then $m-2k$ bits at ...
2
votes
2answers
103 views
Multiparty secret generation protocol
The goal is to create a secret S on a trusted server by having users A, B and C each send a private seed to the server, in such a way that any 2 of them can later recover S by resubmitting their ...
3
votes
2answers
338 views
Can the key-generation algorithm always be uniform?
Assume that the encryption uses $n$-bit keys to encrypt $l(n)$-length messages.
If a symmetric key encryption scheme is defined as $\Pi_{1} = ( \mathrm{Enc}, \mathrm{Dec} )$, then for every $x_{0}, ...
0
votes
1answer
615 views
Diffie Hellman vs Three Pass Exchange
Given an insecure channel, what are the pros and cons of using Diffie Hellman to generate a symmetric shared key and then send encrypted data with this key, or simply use Shamir's three-pass protocol ...
4
votes
1answer
4k views
Generating a NIST P-256 private key
From the Curve25519 spec I learned that it possible to take a random 32 bytes and with a few operations make it on the curve:
To generate a 32-byte Curve25519 secret key, start by generating 32 ...
