Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

Doesn't d6 to binary for 256-bit bitcoin private key generation produce biased results?

If the mapping table looks like: 1: 000 2: 001 3: 010 4: 011 5: 100 6: 101 Then you are guaranteed that your key will never have a chain of 4 or more 1s, much fewer chains of 3 ones than would ...
-2
votes
0answers
30 views

How can we convert public key system to private key? [closed]

I have a public key scheme (Gen,Enc,Dec) and I want to construct a secure private key scheme (Gen',Enc',Dec').
1
vote
1answer
33 views

What's the difference between threshold signatures and multisignatures?

I was wondering what's the difference between threshold signatures and multisignatures. In what respects do they differ? For example, is n-out-of-n threshold signature, just a multisignature?
0
votes
0answers
16 views

Lifting point to quadratic twisted curve

How to lift point to it’s quadratic twisted curve? I use secp256k1. Is the diiscrete log still same? Thanks before
-1
votes
0answers
30 views

How can I make a new public cryptosystem using given public and private key cryptosystem?

Given a Public key cryptosystem with (Gen1, Enc1, Dec1) and Private key cryptosystem with (Gen2, Enc2, Dec2) I want to construct a new Public key cryptosystem (Gen3, Enc3, Dec3)?
0
votes
0answers
18 views

Creating nested messages in OpenPGP

I need to create a nested message in OpenPGP (my understanding is that the protocol itself should support it). Let's say I have Payload ("Time in Lordran is ...
1
vote
1answer
53 views

Key Exchange vs Key Encapsulation

From what I understand, the steps of a key exchange protocol are Alice and Bob each encrypt something using their public key and private key and send the result to each other Alice and Bob each do ...
1
vote
0answers
24 views

Keeping a backup of asymmetric keys with the help of a certificate authority without losing the privacy

First I'll explain the problem, then I will also give a solution(it might be wrong) I've found for it, you let me know what you think about this solution and whether you have a better one. Assume a ...
1
vote
1answer
21 views

Proof possession of private key in libsodium

I would like to proof that I am in possession of private key sk for public key pk using ...
1
vote
0answers
43 views

Is there any encryption system where the sender cannot prove that a specific ciphertext belongs to a specific plaintext

I'm trying to create a message-transfer system where The encrypted messages are stored in a public database. It is possible to verify who is the sender of this message. The sender cannot prove to ...
0
votes
0answers
23 views

Computing PGP ed25519 and curve25519 keygrips?

There are public key algorithmic differences for how PGP computes fingerprints and keygrips. For the v4 protocol, fingerprints are not exclusively computed from public keys while keygrips are. RFC ...
3
votes
1answer
184 views

Relying on a private public key for authentication

I'm Alice, and I generate a public/private key pair. I securely & confidentially share my public key with Bob and Carol, who securely & confidentially share it with various other benevolent ...
1
vote
0answers
22 views

How to design a moderated, group for private messages?

I’m trying to figure out how I could create a private group that was P2P yet still allowed someone to moderate members (no public access to messages). I’m assuming standard hybrid encryption (RSA/EC + ...
-1
votes
0answers
34 views

Generate keys with Edwards25519 - Equivalence to Curve25519

I am trying to generate Ed25519 keys based on a 32-byte seed. According to RFC 8032, in order to create the public key, you have to take the private key, hash it with SHA-512, prune it, and then use ...
-1
votes
1answer
87 views

Is there a library that implements the “Mickey Mouse Version” of asymmetric cryptography?

Here is what I mean with "Mickey Mouse Version": CHARLIE makes a keypair key1 and key2 ...
0
votes
0answers
24 views

Asymmetric non-interactive proof of work scheme

I'm looking for a non-interactive proof of work scheme. I want for it to (1) be faster to find solutions to if you're in the possession of an arbitrary secret, like a private key, and (2) for the ...
1
vote
1answer
29 views

Difference between Verification and Public Key for Signature Schemes

This is a semantics Question. Typically, in many asymmetric schemes, for this question specifically, digital signatures, we see that designers describe the key given to the verifier as Public Key. ...
10
votes
3answers
6k views

Is 128-bit security still considered strong in 2020, within the context of both ECC Asym & Sym ciphers

Given that much of our ECC crypto primitives provide “only” 128-bit security when defined over a 256-bit curve due to pollard-rho, is it then still safe in 2020 to consider 128-bit security safe for ...
1
vote
2answers
65 views

Secure implementation of public key cryptography

Reading online I've found out that for example the RSA implementation that you usually find on textook is not secure. Where I can find some secure implementation of algorithm such as RSA, ECDH, ECDSA? ...
1
vote
1answer
88 views

Using RSA public key as private key and vice-versa

I am writing an application that involves checking to see if data has been created by me. I do this by encrypting the data with the private key on my server, and then decrypting it using the public ...
0
votes
0answers
48 views

I need two types of easily crackable asymmetric and symmetric encryption

I have a school project in which I'm comparing asymmetric and symmetric encryption. I need two different types of easily crackable encryption, one symmetric and one asymmetric. I am planning on ...
0
votes
0answers
92 views

Define a Decryption algorithm on a given group-based Cramer Shoup lite scheme

I am currently working on public key encryption schemes and I want some help to figure out how decryption algorithms work. Suppose we have a public key $pk = (G,p,g,e)$ with $e \in Z^*_p$ . (where $G$ ...
3
votes
2answers
77 views

Multiple (RSA) public key encryption how to verify others received the same information? Non-deterministic encryption

I have an RSA system between multiple parties. Alice takes the targets (Bob and Oliver) public keys and encrypts a message using them and sends it to them. All parties know each other's public keys ...
1
vote
1answer
32 views

Is there a LWE based public-key encryption scheme which is CCA1-secure?

Is there a lattice based PKE which is IND-CCA1 secure? Actually I am only familiar with LWE and SIS. So I want to know that what the IND-CCA1-secure LWE based PKE scheme looks like?
0
votes
1answer
65 views

ECC encryption in practice

I'd like to encrypt a message using PGP keys, and elliptic curve cryptography as the method. In practice, using the Erlang :crypto module, but first, I'd like to ...
0
votes
1answer
28 views

Is it possible to multiplex TLS connections by SNI metadata without knowing any keys?

Imagine the following communication diagram: C1-----\ /--B1 C2------P---B2 ...----/ \--... We have multiple C(lients), call them C1, C2, etc. They connect to a ...
3
votes
0answers
39 views

Generalized Benaloh cryptosystem with $r=2$

Benaloh cryptosystem requires $\gcd(r, (q-1))=1$ which is impossible if $q>2$ (since it needs to be a large prime) and $r=2$. This confuses me, since Benaloh is referred to as an "extension" or "...
1
vote
1answer
83 views

Assistance with parsing PGP PRIVATE KEY BLOCK's Secret-Key Packet (0x6) and Secret-Subkey Packet (0x7) using command lines and RFC 4880?

The throw away private keys below (master ed25519 & subkey curve 25519) were exported without being password encrypted. % cat skaht_0523F5B4_Secret.asc ...
2
votes
0answers
37 views

Is the first Nonce exchange between Alice and Bob in Needham-Schroder key exchange protocol redundant?

For the Needham-Schroder protocol, assuming Alice and Bob are both able to guarantee each other's public keys (e.g. through a Certificate authority), the protocol is 1) A sends to B: $E_{publicB} [...
1
vote
0answers
47 views

Verifying the ownership of curve25519 public keys

Let's say we have a group of users, authenticated by a server that providers the service, communicating on a secure channel (e.g. over HTTPS/TLS) and each user has a corresponding curve25519 key pair. ...
1
vote
0answers
27 views

Verify XML digital signature

I'm trying to figure out how to verify an XML digital signature. I have received a signed XML response (in string) in following format: ...
1
vote
1answer
77 views

Why aren't Diffie Hellman public keys used for authentication?

So I have been reading about Diffie Hellman and specifically the MitM attacks that it is vulnerable to. I am aware that these are solved currently in ssl for instance by using rsa signatures to ...
2
votes
1answer
55 views

Is it possible in PGP to provide verification/verify the ownership of a public key?

I am new to PGP/GPG and I am somewhat confused by the idea of the Web of Trust (WoT). Isn't signing a public key with its private key enough to prove the ownership of it? if it is so, why don't key ...
0
votes
0answers
18 views

How to intuitively realize the Diverse Group System in the Hash Proof System(HPS)?

In the paper Universal Hash Proofs and a Paradigm for Adaptive Chosen Ciphertext Secure Public-Key Encryption by Cramer & Shoup, projective hash family derived from group system can be easily ...
2
votes
1answer
91 views

Msieve & Yafu - RSA Exponents and bruteforcing

I am a layman in regards to the math behind RSA (and in general, relatively), and my goal is to bruteforce a large quantity of 512-bit RSA keys. Having searched around, I see that msieve, yafu, and an ...
0
votes
1answer
86 views

ECC public key encryption without symmetric cipher

Imagine the following scenario. A process is running in background and permanently encrypting some data. An adversary has full control of the process, e.g. it can dump the process memory any time and ...
2
votes
1answer
52 views

Is Googles Envelope Encryption the same as Hybrid Encryption?

Google is advertising the use of Envelope Encryption in their products with their KMS. By the description, it sounds very much like Hybrid Encryption. But since I could not find any reference to ...
-1
votes
2answers
132 views

Is it possible to encrypt something using literally only a public key?

Most basic explanations of asymmetric encryption proceed as follows: Bob wants to send encrypted message to Alice. Bob and Alice each generate public/private key pairs. Bob gets Alice's public key ...
2
votes
1answer
93 views

How is Diffle Hellman with RSA immune to man in the middle?

Alice and Bob want to exchange keys, Alice sends his half (the public key of the ephemeral key pair) signed with his private key and makes the public key available. Eve is bridging the connection so ...
3
votes
1answer
88 views

Requirements for RSA key parameters

Recently I'm working with a chinese vendor for POS devices and their devices use 2048bit RSA keys for signing binaries. I had to generate a public/private pair (so I can sign my own binaries) and I ...
2
votes
3answers
129 views

Is the role of public key/private key determined arbitrarily or mathematically?

I have read about conflicting information about the roles of public/private keys. In one article(Asymmetrical-key algorithms), it says: Simply put each party, say Alice, picks a private random ...
0
votes
0answers
24 views

Efficient receiver determination of public posted cipher

Assume there is a global message board, that people use to send messages to other people. Of course no one else but the receiver should know the content of the message, so senders use asymmetric ...
73
votes
12answers
14k views

Who verifies the trust of certificate authorities?

Background I am a novice in the field of cryptography and cyber-security, and while studying asymmetric-key encryption, I learned about the potential of a man-in-the-middle attack. To mitigate this ...
2
votes
1answer
144 views

Public Key generation for Ed25519 vs X25519

It is my understanding that EdDSA uses a slight variant of Curve25519 (typically used for ECDH), called Ed25519. Given the same private key, are the differences between the two algorithms enough to ...
0
votes
0answers
27 views

Symmetric key crypto secure communication infrastructure

Imagine that public-key crypto stops working. Are there any academic proposals out there that would explain how we could implement commercially viable secure communication based on the current ...
5
votes
1answer
1k views

Is there asymmetric encryption in SSH?

I've read in DigitalOcean article about SSH that in order for a server to authenticate a client: The server sends the client this encrypted message. If the client actually has the associated ...
1
vote
2answers
61 views

Understanding Montgomery's parameterization of elliptic curves

I'm having a bit of trouble understanding the translation of affine coordinates to projective coordinates in Montgomery curve ECM. Would be very thankful if someone could explain it by expanding the ...
1
vote
1answer
36 views

How can a public-key encryption scheme be used to construct a commitment scheme in the CRS model?

For a PKE scheme $(Gen, Enc, Dec)$, the most 'obvious' idea is to commit to an encryption of a bit and in the reveal phase maybe send $r_g$, $r_e$ where $r_g$ is the randomness of $Gen$ and $r_e$ is ...
5
votes
3answers
353 views

Why RSA-KEM is more secure than Textbook-RSA?

I am studying RSA-KEM but I can not see why it should be as secure as padding RSA messages (e.g with RSA-OAEP) when exchanging a key between two parties (say A and B). It is easy to see that Textbook-...
1
vote
0answers
50 views

Safest method for encrypting a file on a local machine

I am looking for a safe method to encrypt a local file on my machine. Let's say I have a file containing my logins and passwords -- how can I make sure that the encryption is reasonably sufficient in ...