Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

$2-$way Authentication using $RSA$ algorithm(public key cryptography)

I have from this website(Mutual Authentication using Public Keys section) that Mutual authentication can also be implemented using public keys.To proceed with this method, both user $X$ and user $Y$ ...
1
vote
1answer
43 views

Why RLWE is hard or even has a solution?

I was thinking about why and how the RLWE problem is hard at all. I know that it's hard because it can be reduced to the shortest vector problem, but I'm thinking about how does it even have a ...
0
votes
1answer
77 views

RSA private key leak possible?

Is it possible to leak private key data if attacker control signing request ? Everyone know N and E because they are public. My server is designed to decrypt incoming request which is encrypted with ...
1
vote
0answers
49 views

Can a PKE scheme be turned into a signature scheme?

Recently, I have been wondering whether you can turn any PKE scheme into a signature scheme and, if so, how (is there a general construction, or is this scheme-specific?). I have found several posts ...
-5
votes
2answers
60 views

RSA impossible to be factorized?

If the RSA numbers are odd, how can they be factorized by two primes, since a prime is only divisible by itself and 1?
0
votes
1answer
30 views

Does CPA model the challenge plaintext are the same

For a CPA-secure encryption scheme, suppose that there is an adversary who can find that the two ciphertexts are encrypted from the same plaintext. Is this encryption scheme still CPA secure? Or, CPA ...
1
vote
0answers
25 views

Private Key from Extended Private Key and Public Address [closed]

Is it possible to generate a private key from a public address and an extended private key? For context: I am using C# and NBitcoin. The public address is generated from the outside via an extended ...
1
vote
1answer
90 views

How to find integer point of a ec curve in a given range?

I was looking inside the basics of ecc and found the examples from Internet either uses continuous domain curve or use a very small prime number p like 17 in a ...
1
vote
2answers
975 views

What is a good and bulletproof private key for ECC curves?

I am quite new to cryptography low-level mathematic details, though had worked in the crypto area for 2.5 years before. So if I am wrong about any of below part, please correct me without a facepalm ...
0
votes
0answers
23 views

User key management scheme: BYOK vs. client only keys vs. a mix of both

We are designing a web app where users can share documents with each other. The ultimate goal is to achieve zero trust needed by the users, i.e. client-side encryption makes sure that the servers (or ...
0
votes
0answers
34 views

Use Diffie Hellman to share a secret

I was trying to use Diffie Hellman to first agree on a key and then use that key to symmetrically share a secret. The python3 code using cryptography library look like ...
0
votes
1answer
31 views

Can I use a certificate authority with Elgamal encryption?

Can I use a certificate authority with Elgamal encryption? Is this type of keys in CA?
0
votes
1answer
29 views

Congruence in the Schnorr identification scheme

I have been looking at the Cryptography: Theory and Practice book by Stinson and Paterson and when I came to the Schnorr identification scheme, I read the sentence that goes something like this: ...
0
votes
0answers
24 views

Authentication between two servers using PKA

I've run into an small issue regarding authentication between 2 services (One way communication) using public and private key authentication (Elliptic Curve, secp256k1). The services will communicate ...
0
votes
3answers
106 views

Asymmetric cryptosystems based on curves besides elliptic curves

Elliptic curve cryptography (ECC) has been gaining a lot of popularity recently because of its security. I tend to find the process of encoding plaintext using ECC particularly interesting so I was ...
1
vote
1answer
19 views

Asymmetric Encryption Using Existing Secret Key

I'm using Python to build a system in which users (accounts on a blockchain: defined by a public key and a secret key) need to communicate with each other securely and I think asymmetric encryption is ...
2
votes
0answers
25 views

MuSig: could the rogue key attack be mitigated by using commitments instead of key transformations?

Background MuSig is an extension of/derivation from Schnorr signatures using cyclic groups on elliptic curves. In the original paper, the authors point out that naive multi-Schnorr is vulnerable to a ...
0
votes
1answer
46 views

Question on double-asymmetric encryption and split knowledge

Moin moin, Let‘s assume there are two keypairs (d1,e1) and (d2,e2), where d1 and ...
0
votes
1answer
29 views

(Non)security of algebraically derived EC keys

I recently had a situation where I needed to derive a secondary Curve25519 private key from an existing one programmatically. The obvious solution was to use a KDF, but I wondered at the time about ...
7
votes
4answers
2k views

Can we pick which key is private or public in asymmetric encryption? Do the keys actually encrypt and decrypt a cipher text?

Could you help me better understand how the key-pair works in Asymmetric encryption? I'm studying cryptography at the surface level first. While reading multiple texts and talking with colleagues I'm ...
5
votes
3answers
397 views

Can an arbitrary physical image be a key?

Assume an arbitrary secret physical image¹, such as a privately made chemical Polaroid™ similar to this Is there a feasible and secure way that this physical image could be used as cryptographic key, ...
0
votes
0answers
46 views

Saving highly sensitive data in US cloud - what encryption would you use?

We have a cloud-based application running on AWS servers and are looking for a way to store highly sensitive user data there without giving AWS the possibility of exposing our data to the US ...
1
vote
1answer
76 views

Proof that someone has access to a private key whose public key is part of a known group

I'm a crypto newbie and hoping to get pointed in the right direction. I've seen some related questions like this but none that satisfy my requirements. Let's say Jane's Forum is a large community, and ...
3
votes
1answer
100 views

Asymmetric encryption scheme with the shortest output for encrypting 1 byte of information

Imagine that one needs to periodically encrypt very short messages (i.e., a boolean Yes/No, a single byte, or 3-4 bytes in the worst case). We assume that there is no session, and we just need to ...
0
votes
0answers
45 views

How many keys are used in symmetric, asymmetric, and hybrid encryption?

There are 8 people in total working on a project. Each one of them will send information to the rest of the team individually 2 times a day. They use 6 days in total for this project. Cryptosystem 1: ...
7
votes
1answer
2k views

Why are NIST curves still used?

I'm relatively new to the world of crypto (But as far as the math goes, I am familiar with the inner workings. I used to rarely use it for privacy, but now I use it for many things). Anyway, I was ...
0
votes
1answer
27 views

Related Key Attack on Schnorr Signature - Why does the challenge include $\psi = g^x$, not $y$?

The original Schnorr signature scheme suffers from a Related Key Attack (RKA) as described by Morita et al. The authors of this paper then suggest a modification to the signature algorithm to prevent ...
0
votes
1answer
32 views

How to do the WOTS checksum

As far as I understand, the Winternitz one-time signature is made by: Making an array of private keys. Making an array of public keys by hashing each private key X times, X being the number of ...
3
votes
1answer
65 views

Why is an ephemeral key required to prove possession of a static private key in Key-Establishment Schemes

In the NIST 800-56A rev3 "Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography" in section 5.6.2.2.3.2 "Recipient Obtains Assurance [of the ...
0
votes
1answer
35 views

What information is needed to be stored for RSA private key for decryption

I am using rsa module in Python. I use the following line to generate public and private key: ...
3
votes
1answer
89 views

Proof that a message is signed by a member of a group

I'm a newbie at cryptography. Here is my question: Alice makes a list of people: Bob, Carol and Dan; Alice gives a unique secret key to every member on the list, so they can uniquely sign messages; ...
0
votes
0answers
23 views

Generating public/private key pair without a trusted dealer

I want to make an Ethereum wallet where I can prove no one has the private keys in one place. Basically, I was wondering whether the ECDSA signatures could be generated by multiparty computation like ...
1
vote
1answer
72 views

How to determine whether a point is greater than n/2?

How can we determine if a private key associated with a point, on an EC, is less than or greater than 1/2 $n$, where $n$ is the order?
6
votes
1answer
677 views

How to determine if a point is just a point or a valid public key?

In ECC, specifically over finite fields, in my mind there must be other points that exist that still yield $y^2 \bmod p=x^3 + ax + b \bmod p$ to be true but are never used because the Generator Point (...
2
votes
1answer
83 views

What's the use of storing R^2 with a public key?

I think I have successfully reverse engineered a Samsung RSA public key here. However, the public key mainly seems to consist of the modulus, but it also contains a 32 bit integer ...
1
vote
1answer
185 views

Decrypt RSA with known public key and modulus and the range of dp

How to decrypt RSA while given $e$,$n$ and the range of $dp$ ? ...
2
votes
1answer
253 views

How many Bits/Bytes is a public key, given its encoding

I am struggling to understand what the "bit/byte" size of a public key is, how you can work it out, and even what it means. An example of a RSA public key is: AAAAB3NzaC1yc2EAAAABJQAAAQB/...
0
votes
2answers
509 views

Counterfeit EU Green Passes

In the EU, a person will soon be able to perform certain activities (going to concerts, to sports events, etc.) only if they can present a valid Green Pass that certifies that the bearer has been ...
1
vote
0answers
16 views

What is the security implication of non-full-rank systematic matrix in McEliece cryptosystem?

The Classic McEliece cryptosystem has the following key generation procedure: Choose a field $\mathbb{F}_{2^m}$, an irreducible polynomial $g(x)$ of degree $t$, and $n$ field elements $\alpha_1, \...
5
votes
1answer
98 views

What uses are there (if any) for asymmetric message encryption?

What uses are there (if any) for asymmetric encryption of a message, instead of hybrid encryption? Specifically, I'm not considering asymmetric encryption of a symmetric key (eg old TLS RSA key ...
-2
votes
1answer
51 views

How to hack pass-protected private RSA key

I know nothing about cryptography. I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
2
votes
1answer
75 views

Can CPA secure scheme be converted to CCA secure?

I would like to know if there are some methods or techniques that can convert a public key encryption scheme from CPA secure to CCA secure?
2
votes
1answer
43 views

Coding gain and minimum determinant in cryptography

In coding theory, the notions of coding gain and minimum determinant of a code have been defined as follows: let $\mathcal{X}$ be a (full diversity) code and $X,X^\prime\in\mathcal{X}$. Then the $\...
2
votes
2answers
159 views

Zero knowledge RSA public key

Suppose Bob has $k>1$ RSA public keys $(e_i, n_i)$ without any knowledge of their corresponding private keys. Alice also has all the public keys, but also has a private key for only one of them, ...
0
votes
1answer
41 views

The security level of secret share compared to homomorphic encryption

I want to compare additive secret share to Paillier encryption. However, I haven't found out how to set the parameters in such a way that the security level is consistent. Additive secret share (...
2
votes
1answer
50 views

Is the relationship between private and public keys an example of bijection between two sets?

Just want to make sure that my understanding is correct whether there is only one public key for any private key, and vice versa. I know that there are many algorithms, and this may not be a property ...
2
votes
1answer
51 views

How much much data can be verified by an electronic signature?

I’m trying to get a good understanding of how data encryption and signing work. I imagine these vary a bit depending on the software being used. In particular, I am wondering about this: how much data ...
0
votes
0answers
28 views

Combining WireGuard keys

I suspect the answer is "no", but still: In WireGuard [1], there's a concept of private and public keys for peers; public key derives from a private one and connection between two parties ...
1
vote
0answers
23 views

Can one prove that a particular public key is part of an aggregated (MuSig) public key?

The MuSig paper (2018) describes a Schnorr signature key aggregation scheme which lets a set of individual public keys to be merged into a single, "aggregated" public key. In the protocol ...
0
votes
1answer
78 views

Public key size for different elliptic curves

Let's say I want a certain level of security (eg 128 bits) when using ECIES but I also want to minimise communication, does the elliptic curve used matter on the size of the public key? If it does ...

1
2 3 4 5
39