Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
0 votes
0 answers
40 views

Why do we need more security than the private key distribution?

I'm new to cryptography and have question about private key distribution. If we are able to send private keys to the encoder, then it means that we are able to send private keys to someone, which ...
P.A.M's user avatar
  • 101
0 votes
1 answer
32 views

Protecting a message with two private keys

I'm looking for a strategy that allows a user to encrypt a secret, which can only be decrypted by the joint effort of two independent custodians. A custodian can not unilaterally decrypt the secret. ...
Trent Gm's user avatar
  • 101
-2 votes
0 answers
43 views

Minimum Viable Product for Cryptography App [closed]

I am working on an app and I would really love to get your valuable feedback on it! I will not disclose the app name or website or anything unless asked as this isn't the intention. My pure intention ...
Greg Simon's user avatar
0 votes
0 answers
41 views

Does unlimited signing oracle leak the private key?

I am writing a PC software that uses a type of USB dongle as licensing key. The dongle functions as a signing oracle and does nothing more: Given any message $M$, it first pads $M$ to $PadM$, then ...
zwhconst's user avatar
  • 101
1 vote
2 answers
293 views

P, Q, and G values in a public key

I came across a certificate that contains values $P,Q$, and $G$ besides the public key. Obviously, $P$ and $Q$ here are primes, but not the two secret primes. I am curious are those values ...
Jaka's user avatar
  • 113
0 votes
1 answer
60 views

Getting the slope of a public key given its x and y coordinates

Is it possible to get the slope of a public key given its $x$ and $y$ coordinates? Since all the ECC calculations come from geometry, I thought this calculation might be possible.
Dev Tenji's user avatar
0 votes
0 answers
43 views

I'm curious on what the downsides of the public-key encryption method from my research project could be

As part of my final BS degree research project, I had to work with an encryption method based on research done in my university. What surprised me, is that while the method is very simple, I can't ...
H-a-y-K's user avatar
  • 113
2 votes
2 answers
134 views

Short software license keys with asymmetric verification

Would it be possible to implement a modern version of the old software license key scheme that uses an asymmetric signing approach, while keeping the length of the key short, say 40 chars of base64? ...
Larsp's user avatar
  • 23
1 vote
0 answers
46 views

Can the ability to sign arbitrary messages expose the private key?

Consider a system that consists of a black box (some abstraction layer with perfect sandboxing). The black box contains a private key that cannot be extracted by request, but the black box exposes an ...
The Quantum Physicist's user avatar
0 votes
1 answer
78 views

Question about error-Correction Code on Paper titled 'A New Public-Key Cryptosystem via Mersenne Number"

I've been implementing a cryptosystem outlined here, which relies on Mersenne Numbers, as part of my coursework in a Cryptography class. In this cryptosystem, both encryption and decryption require ...
Nuno Marques's user avatar
0 votes
1 answer
68 views

Asymmetric encryption of the AES key made available along with the ciphertext

I know there are much more sophisticated encryption schemes than this one that achieve the same goal but I would like to understand any weaknesses in this basic, and probably typical, process: ...
blockmined's user avatar
1 vote
1 answer
77 views

Shannon's Perfect Security for Asymmetric Encryption

I have the following definition of Shannon's Perfect Security. Assuming messages and keys are drawn randomly from some distribution then: The probability of guessing plaintext m is not enhanced by ...
revision's user avatar
1 vote
1 answer
41 views

Can proxy re-encrypted cyphertext be identical to encrypted text by the target?

I have the following basic set-up for my question, I am getting to learn about proxy re-encryption and so far what I have looked at in more detail is this re-encryption algorithm from IronCore Labs ...
Robert Lica's user avatar
1 vote
1 answer
47 views

Effects of and prevention of leaking a private key in an public key encryption scheme

Suppose we have a public key encryption scheme and the private key of the client is stored locally as to never leave the client. But this makes me wonder what would happen when the device of the ...
H-a-y-K's user avatar
  • 113
0 votes
1 answer
43 views

Skitel's noncommutative algebra based algorithm variation question

In Cryptanalysing variants of_Stickel's key agreement_scheme original attack against Stikel's key agreement and of some variants are presented. The method is to find matrices $X$,$Y$ such that $XA=AX$,...
daniel's user avatar
  • 565
0 votes
0 answers
27 views

i want to verify the following p2pkh transaction

I know to veify the p2pkh transaction we have to place the unlocking script and locking script in a stack and than evalute the stack. In such cases the the scriptpubkey_asm is of the form <OP_DUP ...
Code's user avatar
  • 1
0 votes
1 answer
74 views

In SSL/TLS, why do we need 2 public keys? [closed]

Server adds its public key in SSL Certificate and send it to client. However, Client already has the public key. If it already has a public key, then it does not need to have server's public key which ...
Han Jang's user avatar
0 votes
0 answers
41 views

Is integrity guaranteed by sending plain text with public key encrypted JWT and hash?

I am currently developing an RPC system that does not require message encryption, but does need client authentication and verification of message integrity. I want the RPC server to minimize its state ...
pilaoda's user avatar
3 votes
2 answers
317 views

The advantages of using KEM compared to applying traditional PKE approach

I am studying a thesis on the design of a key encapsulation mechanism (KEM). In section 2.6 (page 18) of this thesis, the following explanation is given about the difference between KEM and common ...
User0258's user avatar
0 votes
0 answers
19 views

[MS-WCCE]: Windows Client Certificate Enrollment Protocol - Null Signature

MS ADCS is using Windows Client Certificate Enrollment Protocol for issuing and renewing certificates. In the [MS-WCCE]: Windows Client Certificate Enrollment Protocol document, there is a chapter 2.2....
user1563721's user avatar
1 vote
1 answer
70 views

Is it possible to use Diffie-Hellman protocol for symmetric group?

I was asked this question during one of my first cryptography classes, and I'm not sure if I understand it correctly. To begin, I know that after using the Diffie-Hellman protocol (which itself is ...
karolajoj_PL's user avatar
2 votes
2 answers
156 views

Key Exhaustion Risks in Symmetric and Asymmetric Cryptography

For the symetric keys it is recommend that the same key should not be used to encrypt large number(2^32) of cipher blocks to avoid the key-exhaustion risk. Curious to know whether the asymmetric key ...
Bhuvan's user avatar
  • 123
1 vote
1 answer
75 views

Is it possible to homomorphically evaluate an encryption circuit?

I know that it is possible to homomorphically evaluate a decryption circuit as it is the main idea behind bootstrapping, but I was wondering if it was possible to evaluate an encryption circuit ...
ProfCornDog's user avatar
0 votes
0 answers
32 views

Sending public key trough untrusted server

I am developing end-to-end encrypted chat system (which is open-source). When I want to give other client my public key, I need to send it trough server, right? I want to make sure no one can edit the ...
ENGO_150's user avatar
0 votes
1 answer
140 views

How to know if an ECC public key is y or -y

I'm a beginner still learning how ecc works... And i think I understand that in secp256k1 public keys there is something called addictive and negative inverse for example private key:- ...
Melwyn's user avatar
  • 1
2 votes
0 answers
74 views

Can you sign messages using Wireguard's keys?

I was wondering if I could use Wireguard's keys to sign messages, and prove authenticity of a node that runs Wireguard with its known public key from other nodes, so that I can use it in a system to ...
Alex's user avatar
  • 121
2 votes
1 answer
54 views

Is it possible to generate an elliptic curve (with the hard discrete logarithm problem) by iterating only a finite field, but not its $j$-invariant?

Let me ask one question. Maybe, you know an answer. Thanks in advance for any response. Let's fix an elliptic curve $E$ over the field $\mathbb{Q}$ of rationals without complex multiplication, i.e., ...
Dimitri Koshelev's user avatar
0 votes
0 answers
28 views

Obfuscation scheme wanted

I'd like to know if there's any cryptographic scheme that implements something similar to what I'm summarizing here below. Thanks a lot for reading and for any hint or question. Intro-Scenery: There's ...
Lorenzo's user avatar
  • 101
0 votes
0 answers
32 views

Does Qrypt's BLAST protocol based on "Doubly-Affine Extractors" use public-key or symmetric-key cryptography?

The company Qrypt states that "Key distribution based on asymmetric algorithms is a weak link for cryptography" and claims to "enable encryption without distributing encryption keys&...
Very Tiny Brain's user avatar
1 vote
1 answer
115 views

Is concatenation of secure encryptions secure?

If I have $n$ secure assymetric encryption schemes, is their concatenation $Enc_{k_1,...,k_n}(m)=Enc_{k_1}(m)||...||Enc_{k_n}(m)$ secure? My intuition is that the concatenation is secure, but I can't ...
Amit Keinan's user avatar
0 votes
3 answers
96 views

What can I use for encrypting by one key, decrypting by another key?

I have case when I need take payload to client with key for decrypting. But client mustn't encrypt another payload by this key. After some research, as I understand it's case of asymmetric encryption. ...
Nikita Davidenko's user avatar
1 vote
1 answer
88 views

Using HPKE, if I generate my key pair can I derive the public key from the private key just in case I lose the public key?

Hypothetically, if I am using tink-java and I generate a keyset/keypair. If I lost my public key, can I get the public key from the private key?
c_idle's user avatar
  • 183
0 votes
1 answer
48 views

The proof of Claim 5.2 in the "On Lattices, Learning with Errors, Random Linear Codes, and Cryptography"

When I'm reading this paper "On lattices, learning with errors, random linear codes, and cryptography" by O. Regev. I have trouble understanding the proof of claim 5.2. "Hence, it is ...
Solaris's user avatar
0 votes
0 answers
13 views

in MA-ABE, what is the diference when prove a scheme is selective or static?

I have read [1]Decentralized Multi-authority ABE for NC1 from BDH, [2]Decentralizing Attribute-Based Encryption, [3]Fully Adaptive Decentralized Multi-Authority ABE, When I compare security proof in [...
Wang Xingwang's user avatar
4 votes
1 answer
111 views

Is there any cryptography-based assured data deletion technique currently as a standard?

I've recently read part of a book exploring secure data deletion techniques for many storage mediums. In particular, I read about assured data deletion techniques developed for data outsourced to the ...
Aljndrop's user avatar
2 votes
1 answer
76 views

Signature Chains: Ensuring Authenticity and Trust

I'm studying for an exam and came across this question: When an electronic signature of a message claimed to be produced by Alice is verified we typically verify (at least the first time): that the ...
user1's user avatar
  • 35
0 votes
1 answer
115 views

Clarifying terms for cipher, algorithm, rsa, asymmetric, openssl

I am a self taught front-end developer and I am just trying to get my cryptography terminologies straight. I will make some statements. Can someone correct my mistakes? Question 1 I read that cipher ...
learningtech's user avatar
0 votes
1 answer
41 views

Devising a system that allows for aggregate computations but does not hold the single values

First of all apologies if this is not the right place. I am not very knowledgeable in cryptography but I thought you can at least point me in the right direction of research. The following is a toy ...
Gianpiero Cea's user avatar
3 votes
1 answer
124 views

The weakening of PQC as a result of lack of KEX?

As far as I can tell we don't have any good key exchange post-quantum candidates. SIKE was broken some time ago. It is possible to reach an authenticated shared secret by having the public key holder ...
Squoomsquoom's user avatar
4 votes
1 answer
2k views

In Bitcoin, given half the 52-character private key in WIF format, is it possible to reconstruct the whole private key?

Given the following two preconditions: It is almost impossible to reconstruct a bitcoin private key if an attacker only has one half of the private key as well as the public key. It is almost ...
Ohumeronen's user avatar
0 votes
0 answers
29 views

P256 signature verification was succeed with 2 public key [duplicate]

I tried to recover public key from P256 signature. With 2 recovery id ( 0, 1 ), signature makes 2 public key. And I tried to verify signature with public key and verification was succeed all of 2 keys....
박해성's user avatar
2 votes
1 answer
110 views

Not understanding elliptic curve scalar multiplication to produce Ethereum address

This is the equation Public key = Private key * G Here, ...
Asif Iqbal's user avatar
1 vote
1 answer
85 views

How does the security of RSA compare to a symmetric cipher when both public and private keys are secret?

When RSA is used in a fashion where both the private key and the public key are both secret (for example, when the public key in a KEM is never leaked) could RSA be then evaluated as a symmetric ...
Jackie Lanhorn's user avatar
-1 votes
1 answer
98 views

Given and encrypted message, is it theoretically possible to decrypt a message without the key or guessing it? If so, what methods could be used?

Decrypting an AES-Encrypted Message Without the Key: A Cryptographic Challenge Summary: I am investigating the possibility of decrypting an AES-encrypted message when the encryption key is unknown ...
NeoX's user avatar
  • 1
2 votes
1 answer
103 views

Keygen with timelock encryption so that the secret key is hidden from everyone?

I'm wondering if the following scheme (or something similar) can exist: I want to encrypt a randomly generate a public key and secret key pair, $(pk, sk)$. I would like that $sk$ is encrypted some ...
user1936752's user avatar
1 vote
0 answers
180 views

In Symmetric encryption where Alice and Bob message each other, how can both decrypt the same data?

I first posted this question on StackOverflow but they told me it belongs here instead: https://stackoverflow.com/questions/77856486/in-symmetric-encryption-where-alice-and-bob-message-each-other-how-...
sudoExclamationExclamation's user avatar
6 votes
2 answers
360 views

RSA signatures without padding by using XOF output in range [1, n-1]

RSA signatures are implemented by encrypting the padded hash with the private key. Why not take the approach RSA-KEM is using by removing the padding entirely and replacing the hash with a XOF that ...
Jackie Lanhorn's user avatar
1 vote
0 answers
60 views

Semantically secure public-key encryption scheme

Suppose that $(\mathrm{Gen},\mathrm{Dec},\mathrm{Enc})$ is a semantically secure public-key encryption scheme. I define $E' = (E(e,m)\oplus m)\parallel (E(e,m)\oplus e)$. Clearly, this is now not ...
giochi's user avatar
  • 131
1 vote
0 answers
79 views

Ephemeral ECC refresh vs. simple hash ratchet

Some protocols employ ephemeral ECC key exchanges throughout the session. Such as the Noise framework. Is the rationale to do this simply because you can do it efficiently? To provide future secrecy ...
user avatar
2 votes
1 answer
152 views

Loop back or cyclic nature of secp256k1 curve

I am working with point addition and scalar multiplication on the secp256k1 curve for points $(x,y)$ or public keys to derive the next public key scalar k times further from it. Actually when I use a ...
Aflatoon's user avatar

1
2 3 4 5
47