We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

RSA exercises example

I have doubt about this question Consider the following textbook RSA example. Let be p = 7, q = 11 and e = 3. Give a general algorithm for calculating d and run such algorithm with the above ...
0
votes
0answers
10 views

What is the current state of the Conjugacy Search Problem in Matrix and Permutation Groups?

It results that I have come with a mathematical approach to solve the CSP (Conjugacy Search Problem) where the platform group $G$ is either a permutation group or a Matrix Group. From my part I ...
1
vote
2answers
33 views

Why use symmetric encryption with Public Key?

A. From what I heard (and I am beginner at a security/cryptography), if you have a payload that is very large, asymmetric is a no-go. B. Also, if you do have secret symmetric (e.g. AES) keys, you ...
0
votes
1answer
31 views

Is it possible to execute elliptic curve encryption on small sensor-tags CC2650?

I am working on a project wherein ECC needs to be implemented on small devices, namely, CC2650 sensor-tags for authentication. The ECC implementation should be on Contiki OS. I have read some articles ...
0
votes
1answer
54 views

What's the proper way of fitting hash digest to encryption scheme?

I would like to know what is the proper way of fitting the hash digest to the prime in which the encryption scheme operates. regardless if the bits of the hash digest is larger or smaller than the ...
0
votes
1answer
34 views

Securely derive AES and ED25519 keys from a ED25519 seed

Go's ed25519 package exposes a function which allows creating a private key from a 32 byte seed. See: https://godoc.org/golang.org/x/crypto/ed25519#NewKeyFromSeed The reason I want to use this is ...
0
votes
2answers
86 views

How does this formula work $(aG + bG) = (a + b) G$ in ECDSA?

Please explain how does this formula $(aG + bG) = (a + b) G$ work in ECDSA? According to the source: $a$ and $b$ are different private keys Suppose $a = 3$ $b = 4$ then the public key is $Q = aG$...
0
votes
0answers
17 views

How to prove that an API call was made (possibly using a third party) [closed]

I'm looking for a way to prove beyond any doubt that a REST API returned a certain response when a specific request was made at a specific time. So basically a service which would call a REST API for ...
3
votes
1answer
87 views

Is there another group structure that is suitable for RSA other than $U_{pq}$?

I know that calculating the cardinality of $U_{pq}$ is infeasible and therefore it is extremely hard to break a code using Lagrange's theorem. But later on my studies i realized main principle of RSA ...
2
votes
1answer
206 views

What happens when i sign a public key with its private key pair?

I am not a cryptologist, just a cryptography user, so not sure if this is safe. I want to sign a public key with its private key pair. Is it dangerous to share this signature result along with ...
-1
votes
0answers
40 views

Authenticating Public Keys Recieved On Blockchain PKI

I am trying to understand how a PKI could be stored on a blockchain so as to eliminate the need for centralised CAs. How does every node on the network who receives a new block containing an ...
2
votes
1answer
122 views

Transition to post-quantum cryptography

Classical asymmetric cryptography is commonly based on the Discrete Logarithm Problem and Integer Factorization, which are known to be solvable with a quantum computer if it has the ability to run ...
0
votes
0answers
70 views

RSA factorization [on hold]

I'm trying to factor the given modulus, to find $p$ and $q$ so I can calculate the totient and then use that to decipher a message, but so far most of my attempts have fallen flat. I did notice that ...
0
votes
1answer
48 views

Is it possible to construct dataset for only another party to consult?

Is it possible to construct a dataset made of some kind of probabilistic encrypted indexes such that anyone can update the information contained in the set but only the one with a secret key could be ...
2
votes
0answers
24 views

What are some examples of out of bound channels that work over the Internet in practice?

If I want to verify a public key (be it RSA, PGP, etc.) with another client over the Internet only, what are some viable out-of-bound channels for verification? Which channels have been used in ...
1
vote
1answer
67 views

RSA figuring out the recipient of a ciphertext

I have this question I am trying to figure out the answer about RSA. I'd be grateful if someone could actually help me understand how the procedure would work. I am new to cryptography and with all ...
0
votes
1answer
71 views

Hashing using asymmetric cryptography

Every now and then, we read that some hashing function has been weakened or broken, but we almost never hear this for asymmetric cryptosystems like RSA or ECC. That's because while asymmetric ...
1
vote
1answer
33 views

What happens after sharing the secret key in quantum cryptographic schemes to send the message bits?

As a person working on the physics perspective of quantum communication, I understand the process upto which the quantum key is shared securely. What happens after this process to send message bits? ...
0
votes
0answers
32 views

Resetting a shared private key

I have a scenario with a user that needs to operate on common data from multiple devices but the link to the server is often offline. Unfortunately in the environment, I trust anything not directly in ...
2
votes
0answers
54 views

Recursive RSA encryption

I have a ciphertext $C$ encrypted with public key $pub_C$, which contains ciphertext $B$ and $pub_B$, $$C= E_{pub_C}(B\mathbin\|pub_B)$$ Ciphertext $B$ is encrypted with $pub_B$ and contains $pub_A$ ...
1
vote
0answers
33 views

Zero-knowledge commitment verification

Assume everything takes place in a prime field. Given the following: $g$ - generator $s$ - secret $E(K, m)$ - a public-key encryption function using public key $K$ and plaintext $m$ The ...
0
votes
0answers
5 views

get bitcoin cash address from public key, using bitcoin-abc [migrated]

hey i am using https://github.com/Bitcoin-ABC/bitcoin-abc and trying to get bch adress form ecdsa public key. I have this compressed public key: ...
0
votes
0answers
30 views

End to end encrypted web chat app with stored messages in database

I am working on a web app with an integrated chat. All chats can only occur between two users - not more, not less. I am very concerned with security, so I would like to encrypt all chat messages with ...
1
vote
1answer
86 views

Determine the RSA private key from public key

I was told that you can determine the private key of an RSA encryption with the public key. I thought the point of a public key was to avoid letting people find the private key, but anyway, they said ...
3
votes
0answers
41 views

Encryption scheme that requires fewer keys for decryption than for encryption

I want to attempt creating a decentralized dead man's switch, so I'm looking for an asymmetric encryption scheme, with the following properties (ideally), or something close to them: There is a group ...
0
votes
1answer
36 views

Combine signature with encryption

I have some embedded device for which I want to sign and encrypt firmware files. Firmware updates are generated by me and may be installed by the customer. The encryption is supposed to protect the ...
0
votes
1answer
30 views

Vulnerability of low value generated key

I have read here that Elgamal is resistant to brute-force attack, because the group to where the key is selected is very large. But since the key generation is random, (i assume)there is a chance that ...
-1
votes
0answers
24 views

How to identify cryptocurrency used by the public key of the recipient?

I though that it would be an easy task, but I can't seem to find any online resource to help me with it. Say, if I have a cryptocurrency key of the recipient, how can I tell the name/type of the ...
1
vote
0answers
54 views

Homomorphic Public/Private Key Encryption Scheme for Floating Numbers

Is there any public/private homomorphic encryption scheme that directly works on floating numbers or vectors of floating numbers? In our application, we want to find out if $$v_1 \approx v_2, \qquad\...
1
vote
1answer
59 views

How do I interpret the CADO-NFS output for discrete logarithm calculation in GF(p)?

I'm using CADO-NFS to calculate discrete logarithm in a finite field GF(p). The problem is when I type ...
2
votes
1answer
96 views

Paillier Private $\mu$ and $\lambda$

The Paillier CryptoSystem has a public key that $(g,n)$ and the private key which can be exclusive to $\lambda$, where the decryption scheme is: $m = L(c^\lambda \bmod n^2)/L(g^\lambda \bmod n^2) \...
3
votes
1answer
111 views

Attacking any one in many public keys

The problem of finding private key from public key is typically studied in the one-key setup: what's the expected cost of breaking one key (e.g. by factoring a public modulus, or solving a discrete ...
2
votes
0answers
46 views

What are some use cases for white-box digital signatures?

There were 2 papers published in the last year, that describe 2 different white-box identity-based digital signature schemes: White-Box Implementation of the Identity-Based Signature Scheme in the ...
0
votes
0answers
24 views

Can hash functions be used for asymmetric encryption? [duplicate]

Snuffle uses hash functions but it is symmetric key encryption. Can a hash function be used to let a client encrypt without knowing the private key, and the server decrypt using a private key? https:/...
3
votes
2answers
124 views

Why is RSA encryption performed in mod n, but computation of inverse in $\bmod \varphi(n)$

I am studying the principles of RSA and have come across some unintuitive statements. Lets revisit the RSA algorithm: RSA Key Generation Output: public key: $k_{pub} = (n,e)$ and private key: $k_{pr}...
1
vote
1answer
52 views

Is it possible to calculate the random factor $r$ from a encrypted message and the private key in a Paillier cryptosystem?

I have already done my research and found various sources that state that it is possible but there are also a lot of them that says it is not possible to recover $r$. This Q/A on this site for example ...
8
votes
7answers
411 views

In search of a pedagogically simple example of asymmetric encryption routine?

(I am not a cryptography expert; I do write software) I am working with some youth (ages 11-13) and wanted to explore for an hour or so some basic cryptography. Doing symmetric ciphers is pretty ...
0
votes
0answers
18 views

Are the existence of secure IBE and secure PKE equivalence?

Of course, if there is a secure IBE (e.g. IND-ID-CPA), then there exist a secure PKE (e.g. IND-CPA). I want to know the inverse proposition is true or not.
0
votes
0answers
26 views

Do I need to use a matrix of size N x n for the public key in the BGV scheme when using Ring-LWE?

I'm going through the BGV paper and trying to make a toy implementation, but I just want to focus on Ring-LWE. In the paper, they set $N = \lceil{(2n + 1)\log_2(q)\rceil}$, and generate $A'$ uniformly ...
0
votes
0answers
25 views

Perfect secrecy public key scheme [duplicate]

Are there public key schemes that have perfect secrecy? The perfect secrecy notion is defined for symmetric key encryption. If P is a message and C the corresponding ciphertext then the cipher has ...
0
votes
1answer
44 views

How are blockchain keypair private keys hidden from miners, and how are they generated in the first place? [closed]

I don't know how blockchain keypairs are programmatically generated, and equally important - how they are able to verify their keypair using a private key to a remote server - while keeping their ...
2
votes
1answer
99 views

What is Reverse Trapdoor Function?

In wikipedia on Digital_signature: but rather, the message to be signed is first hashed to produce a short digest, that is then padded to larger width comparable to N, then signed with the ...
0
votes
0answers
56 views

The security level of double encryption

Let PKE $\Pi' = (Gen', Enc', Dec')$ and it is secure in the sense of $S'$. Let PKE $\Pi'' = (Gen'', Enc'', Dec'')$ and it is secure in the sense of $S''$. $S'$ and $S''$ may be separation which ...
0
votes
1answer
43 views

How are precision and security related in a Gaussian Noise Sampler for R-LWE?

My understanding is that the sampling precision in Gaussian Noise sampler is related to security. But not sure about why is that? I read that when the samples are floating-point numbers and precision ...
1
vote
0answers
19 views

asymmetric encryption with rekeying in an untrusted environment

Alice can retrieve asymmetric encrypted messages (let's call one of them C1 and the Message itself M) for her from an untrusted environment (let's call it Eve). She owns her private key K1 and has ...
4
votes
2answers
435 views

Is using different public keys for different peers safer than reusing the public key, beyond forward secrecy?

In X25519 (ECDH over Curve25519) Peer A and B exchange their Public Keys ...
-1
votes
1answer
44 views

Deterministic procedure for mapping an arbitrary value into a 𝑝,𝑞 pair for public key cryptography

I want public key cryptosystem to used for re-encryption as describe in Can Paillier ,RSA or any other schemes be used for universal re-encryption like elGamal? Now i have little solution for ...
2
votes
1answer
60 views

Can Paillier ,RSA or any other schemes be used for universal re-encryption like elGamal?

ElGamal, RSA, and Paillier cryptosystem have homomorphic property, and can be used fro re-encryption purposes. I want to use the encryption to re-encrypt ciphertext(as in proxy re-encryption but ...
0
votes
0answers
30 views

Can Paillier Encryption has independent decryption key?

As Pailliear cryptosystem secret key $\lambda$, depends on primes $p$ and $q$. As $\lambda = \operatorname{lcm}(p-1,q-1)$. I want decryption key to independent from $p$ and $q$. It can be possible ...
1
vote
1answer
53 views

How Paillier cryptosystem can be used practically to encrypt and decrypt big messages “m”?

I want to use the Paillier cryptosystem for encryption and decryption purposes in my research work. But i haven't found a way to encrypt big input messages; As i want to encrypt the message i,e m : <...