Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pki]

PKI is short for Public Key Infrastructure. The foundation of a PKI is the certificate authority (CA), which issues digital certificates that authenticate the identity of organizations and individuals over a public system such as the Internet.

3
votes
1answer
31 views

What is the RFC order of peer certificate verification, trust chain or expiry first?

If a certificate received from a peer: Is expired, has a valid signature, but from an untrusted root CA What error should be thrown? Untrusted certificate or expired certificate? I can't seem to ...
2
votes
1answer
51 views

HMAC computation using AES key

I want to compute an HMAC value of a data set using CKM_SHA256_HMAC mechanism with AES key. I have the error code CKR_KEY_TYPE_INCONSISTENT because it seems that I need to use a key of key_type ...
-1
votes
1answer
425 views

Creating multiple “public” keys from one private key

Is it possible to create a public key out of a private key, then create another public key from the first public key. And treat the first public key as a private key (So you have two levels of private ...
1
vote
0answers
11 views

Asymmetrical encryption with multiple sufficient key-pairs [duplicate]

I have the following requirement: There are N public/private RSA key pairs. The encrypted data must be decryptable by any of the private keys alone, but not by any other key. For encryption, the ...
2
votes
0answers
17 views

Authenticating to wireless with EAP-TLS in separate forests with the same trusted root CA

I'm looking at a scenario of having a standalone offline root CA sign a subordinate CA in two separate active directory forests on different campuses. If I then set up EAP-TLS on each site, will I be ...
2
votes
1answer
79 views

Can root and intermediate CAs use different asymmetric ciphers and key sizes?

For example, could a root CA use RSA-4096, one intermediate CA use RSA-2048, and another use ECDSA-256 (DH19)?
0
votes
2answers
49 views

PKI Validation - Usefulness of the public key with the identity certificate

I have some understanding of how PKI works, similar to this: - https://knowledge.digicert.com/solution/SO16297.html - https://security.stackexchange.com/questions/59566/ssl-certificate-chain-...
1
vote
1answer
470 views

What happens when a root CA loses its private key?

Certificate Authorities normally keep their private keys inside dedicated Hardware Security Modules (HSMs). What happens when such a device is lost (fire, electronic fault, stolen, etc)? How would ...
1
vote
1answer
327 views

How to sign a CRL file if I have offline keys?

I am generating a CA for internal use. When generating a CA, the best practice I have observed is to keep the root CA offline and emit an intermediate CA certificate that will in turn emit the end-...
2
votes
1answer
553 views

Does maximum length of CN in a x509 cert include the length of the OIDs?

This is a CN from a x509 certificate (I have done some substitutions just to mask the data but the length is not changed) CN=Alex Perry/pseudonym=88b2e76beE0e4e4b94b502020202262E/x500UniqueIdentifier=...
-3
votes
2answers
406 views

How does registration authority verify entity's identity for SSL? [closed]

In the answer here: Verification of identity by certification authority, it states that for European eIdentity you must provide your passport or ID card, but that this practice is quite different ...
3
votes
2answers
197 views

Encryption in a Distributed PKI?

Given a PKI infrastructure with a root node that signs CSR's for nodes Alice, Bob, and Carol. Is it possible for Alice to encrypt some information, store it publicly somewhere, then later Bob or ...
15
votes
1answer
578 views

Who issued the first SSL certificate?

When SSL was introduced in ~1996, there was only a few CAs issuing certificates for that specific use and a few sites which actually used SSL. Which Certification Authority issued the first SSL ...
1
vote
1answer
262 views

sign data and append certificate VS sign data and certificate

I am currently writing my masters thesis in which I need to develop a licensing module for an application. The license itself is a JSON Web Token which is signed using a RSA private key. Since we ...
2
votes
3answers
2k views

Why do we need a digital signature?

First of all, I want to say that I'm totally new to cryptography. I searched on crypto stackexchange but couldn't find the answer to the following question.(probably because it's easy, but I still don'...
0
votes
2answers
67 views

How to configure a client browser cert to be authenticated by a server?

I currently am being asked to partake in a strange authentication format while working with a client, and was hoping for clarification. The client is using HTTPS with client certificate ...
1
vote
1answer
166 views

identity based cryptography (IBE) without key escrow

I am trying to find a method of implementing identity based cryptography to generate key pairs without the use of a trusted PKG that holds the private keys. Has there been any solutions to overcoming ...
0
votes
1answer
436 views

How can I verify a client's identity by requesting a digital certificate?

So I am registering users and I need to know they really are who they say they are. More importantly that they represent the company they say they represent. I was told I can ask them to send me a ...
8
votes
1answer
310 views

Is HIMMO For Real?

I've come across something out of Philips Research called HIMMO Key Pre-Distribution Scheme (https://eprint.iacr.org/2016/410.pdf and https://www.ietf.org/proceedings/96/slides/slides-96-cfrg-2.pdf) ...
4
votes
1answer
782 views

Blockchain use in record management

From my understanding of blockchain, I feel the main use of blockchain is to do something in a decentralised way as compared to the traditional centralised way which involves a middle man. Usually, ...
1
vote
1answer
54 views

What is the exact meaning of revocationWarning and revocationNotification in RFC 3161?

The RFC 3161 (Internet X.509 Public Key Infrastructure Time-Stamp Protocol) specifies that a time-stamping response has a PKIStatusInfo and, optionally, a timeStampToken. In turn, the PKIStatusInfo ...
3
votes
0answers
1k views

Cryptography behind the Turing Imitation Key (TIK)

When browsing the internet I found out about this amazing phone. Well, it would be amazing if it was actually obtainable. It's called the Turing Phone, and it is supposed to come with as good as ...
1
vote
0answers
104 views

What are the most appropriate PKI based cryptographic protocols for peer to peer communicaton?

I've been trying to find out which is the most appropriate PKI based cryptographic protocol for peer to peer communication. I do understand that they vary with respect to the peer to peer architecture ...
6
votes
2answers
12k views

Finding Private key in RSA with public key, cipher text and plain text

Is there a known 'non-brute force' method of determining a private key in an RSA system when all other parameters are know? I found the values of a ciphertext ($C$), its corresponding plaintext ($P$) ...
2
votes
1answer
188 views

CRL number generation sequence: can I use a time stamp?

RFC 5280 states that the CRL number should monotonically increase. I have seen this common practice of incrementing the CRL number by 1, every time a new CRL is generated. But can I use a Unix (epoch ...
6
votes
2answers
1k views

What is the threat to a PKI when the root CA certificate is generated using SHA1?

We have thousands of servers that have been issued certificates signed by our CA using SHA256 but the our root CAs own certificate was generated using SHA1. Assuming SHA1 is no longer secure for our ...
3
votes
1answer
108 views

X509 certificates: Two Algorithm Identifiers?

I'm wondering why there are two Algorithm Identifiers in a X509 certificate. One is in the "to be signed" part and the other one is at the end right before the actual signature. Are they used for the ...
8
votes
2answers
253 views

Must root certificates be self signed?

Root certificates are normally self-signed. What is the reason behind that convention? I mean, one must trust the root certificate in a non cryptographic way anyhow.
1
vote
0answers
57 views

If you were to design a PKI from scratch, what would you do? [closed]

In what ways would you simplify? What would be changed to be more modern or extensible? Suppose you have no requirement to adapt to previous protocols. Links to proposed designs, existing protocols,...
2
votes
1answer
43 views

Is it not secure if we use weak passwords to protect exported PKCS #12 files with private keys?

Consider a practical scenario as described in Microsoft's Expand Export a Certificate with the Private Key. We can see a certificate with private key can be exported as a PKCS #12 file, where the ...
1
vote
1answer
2k views

How to determine the RSA Private key size from the Public.key file?

Question: How to determine the RSA Private key size from the Public.key file? Just roughly, how big it could be? ...
3
votes
2answers
1k views

TLS Handshake : Server authentication or only Server ‘s Certificate authentication?

I have some difficulty understanding the way in which the Server is really authenticated by Client in TLS handshake (in case of using RSA key exchange). When Client receives Server ‘s Certificate and ...
2
votes
1answer
671 views

Is there a standard for public key encrypting and signing short messages?

Some systems, that operate over flaky bearers, need to send signed, encrypted messages that are entirely self contained - i.e. send a single 300 byte UDP rather than have a 10Kb, two-way, certificate ...
2
votes
1answer
153 views

Certificate for the public key

I am new to Network Security and learning about various security features like Diffie-Helmann and others. I understand that the Public key send by the server to the client needs to certified that it ...
2
votes
2answers
2k views

TLS encryption with a self-signed PKI and Python’s asyncio module

I want to enable TLS encryption with a custom / self-signed PKI for a self-contained distributed system built with Python 3’s asyncio. I’ve read Python’s ssl docs as well as several tutorials: http:...
2
votes
0answers
53 views

Compromised Issuing CA [closed]

I'm configuring a PKI infrastructure with an offline root CA and several issuing CAs. Among other topics, I'm struggling to decide how the revokation of an Issuing CA certificate works. My Root CA ...
1
vote
0answers
76 views

Why is public key cryptography not widely used in governments? [closed]

Are there any practical limitations? Govt driving license, passport, SSN could be digitally signed making it easy for anyone to validate. They can have a qr code in them which can be easily validated ...
0
votes
1answer
251 views

SSL certificate / SSL configuration - FIPS-197 compliance

What does it mean when we talk about FIPS-197 compliance in the context of SSL certificates, their deployment and usage ? I am almost certain that the FIPS-197 compliance in the context of SSL ...
9
votes
2answers
6k views

How does a certificate authority issue a digital certificate?

I am new to cryptography and I want to know the details of how a Certificate Authority issues a digital certificate. From what I know (please correct me if I'm wrong at any parts of my explanation): ...
1
vote
3answers
388 views

DH and PKI for KeyExchange

My question is fairly simple. I have more than two nodes which needs to communicate very efficiently from computational point of view. One of the nodes can become a coordinator between the nodes. ...
1
vote
1answer
133 views

PKI Infrastructure

I've got a very simple but for me a difficult question. I analyzed the public key cryptography and understand the process. But I didn't understand why is only the receiver able to decrypt to message. ...
1
vote
1answer
406 views

Unique assignment of X.509 certificate to each client

I'm trying to implement a short scale electronic voting application in a domain comprised of no more than 100 clients. System administrator is able to create new election instances and each client is ...
3
votes
4answers
129 views

Possible to use an accumulator to “license” or restrict the qty of certificates being used?

Suppose in a future version of x509 PKI, it is possible to limit the quantity of certificates being used, what would that look like? Here is a concept that won't work in the real world, but ...
4
votes
2answers
689 views

Smart Card - Entropy during on-board public key generation

I know that some (advanced) smart cards or tokens allow generating key pair directly on the device, but I wonder how the card can gather entropy during the process. Any idea ?
5
votes
1answer
118 views

Build set with PKI from reliable broadcast / random beacon

I am trying to build a protocol (or find an existing one) for creating a set $S_2$ with PKI from a set of parties $S_1$ that initially does not know anything about the other parties. We assume end-to-...
1
vote
0answers
119 views

Corporate PKI - SHA1 deprecation [closed]

Here is the context. Suppose you have a corporate PKI with : AC_Root (offline in safe store - SHA1 signature) SubRootA ans SubrootB (offline in safe store - SHA1 signature) SubSubRootC, SubSubRootD, ...
0
votes
2answers
211 views

Cryptosystems used to generate public key certificate

Where can we find the cryptosystems used to generate public key certificate? Are the cryptosystems under the signature algorithm and signature hash algorithm? Do I need to analyze the packets ...
2
votes
2answers
680 views

ECDH anonymous key exchange to avoid PKI

I want to use TLS to encrypt the communication between peers in a P2P network. Each peer has a well known 256bit peer identifier (the public key of a 256bit elliptic curve keypair). Both peers need ...
1
vote
1answer
81 views

How is an X.509 public key used for TLS?

Wikipedia's TLS article says: The client responds with a ClientKeyExchange message, which may contain a PreMasterSecret, public key, or nothing. (Again, this depends on the selected cipher.) This ...
2
votes
1answer
122 views

x509 CA trust question

I'm trying to understand the logic of CAs, trust and client certificates. I have a general understanding but am having a tough time bridging some gaps. In a hypothetical situation a software system ...