Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
0
votes
1answer
56 views

Combined scheme security proof

Let CS be a combined scheme of $n$ public key subschemes. CS is composed of two algorithms Setup and KeyGen, that all the subschemes share, plus all the other algorithms of each subscheme. Suppose ...
0
votes
0answers
14 views

Using same key pairs in several different encryption tools and version

can we use the same key pairs created by an encryption tool, for encryption decryption, in another encryption tool ? for ex, created by hypercrypt, but being used in cryptermite, or maybe within the ...
2
votes
1answer
206 views

Any ideas on login using Digital Signature PKCS

I am curious to know about possibility to login into web application just by identifying the user based on digital signature in usb token. any reference in this direction?
1
vote
1answer
126 views

Code used for McEliece cryptosystem

In the McEliece cryptosystem, is choice of the code known to the attacker? And if a structural attack succeeded and the attacker found the generator matrix of the code, how did the attacker decode the ...
0
votes
0answers
26 views

Initialization parameters in BN512 curve

I have to cryptograhy scheme need to run setup()--to get public parameters and master secret key(MSK) In the first one: ...
12
votes
3answers
18k views

How does a client verify a server certificate?

As far as I know, when I request a certificate from Verisign (for example), and after they approved that I is me, they create a certificate (for me) that contains the digital signature and public key. ...
0
votes
0answers
13 views

Java- Curve25519 public key is 309 bytes and private key is 587. Shouldn't it be 32 bytes? [migrated]

I am trying to implement curve25519 in my java program using bouncycastle, and this is the code I've come up with: ...
0
votes
0answers
41 views

Why if i change some characters of a Public key on authorizedKeys the login still works

This question is similar to: [1] Why does my SSH private key still work after changing some bytes in the file? But in this case (on Windows) after editing the authorized_keys file and changing some ...
1
vote
1answer
27 views

What is the NTRU parameter equivalent to security level 112, 128 and 192?

I came across this paper which mentions this table, which states that NTRU 347 is equivalent to 112 bit security level However, in this paper, Choosing parameters for NTRU mentions that NTRU-401 is ...
0
votes
0answers
29 views

Is the NTRU Challenge still ongoing?

In 2016, security innovation released the NTRU challenge. I understand that NTRU is now patent free and it seems like most of the documents related to the NTRU challenge on security innovation's ...
2
votes
3answers
123 views

Factoring Anderson's RSA backdoor

In 1993, Anderson [1] proposed a backdoor to the RSA key generation algorithm. This backdoor requires that a backdoor key (prime) $A$ be implanted within the key generation portion of the RSA ...
0
votes
1answer
40 views

One way shared key encryption with NaCl - is it safe to generate a throwaway keypair for the encrypting party

Libsodium seems to be a famous library so I'm not sure I need to introduce it but just incase: https://nacl.cr.yp.to/ (Edit: NaCl not Libsodium, oops!) So, I need users to be able to pass me ...
1
vote
1answer
27 views

How to prove correct decryption in Goldwasser-Micali cryptosystem

In How to prove correct decryption in Paillier cryptosystem, it was asked whether Alice (in sole possession of the secret key) can convince Bob that a given plaintext is the decryption of a ciphertext ...
1
vote
1answer
41 views

Attestation of private key deletion

I recently came across an article outlining a framework for a hypothetical cryptocurrency, the article is here if you care to read the whole thing. The relevant section is the "Digital Cash" ...
0
votes
1answer
239 views

Can I use ECC for encryption/decryption, just like RSA? [duplicate]

I'm familiar with RSA for asymmetric encryption. I also understand it's only supposed to encrypt small amounts of data (smaller than the key) so for encrypting arbitrary data I would typically ...
0
votes
1answer
76 views

Why would you want to keep the Initialization Vectors Public?

So I was researching Initialization Vectors (IV) and even took a look at this thread... What is the main difference between a key, an IV and a nonce? ,but I was hoping that I could get some clarity. ...
1
vote
1answer
83 views

Is there a way to use a one-way hash function for both sides to “ratchet” an asymmetric keypair?

Is there any way to derive a series of asymmetric keys, such as using a one-way hashing function, where both sides can predict the next in the sequence? Detailed Scenario: Imagine a chat application ...
5
votes
1answer
118 views

Can one tell private key entropy from a public key?

Given a weak entropy private key and its associated public key. Can we predict low entropy from the private key by examining the public key? In other words, is the low entropy from the private key in ...
0
votes
2answers
65 views

Wrong key length for EC public key

I have a problem with EC public key reading from smartcard using pkcs11 library. With the secp256r1 EC algorithm, I always get 65 or 67-byte length public key with different smartcards. But with the ...
1
vote
1answer
76 views

Creating nested messages in OpenPGP

I need to create a nested message in OpenPGP (my understanding is that the protocol itself should support it). Let's say I have Payload ("Time in Lordran is ...
1
vote
1answer
124 views

Can an altered RSA private key still work as the original?

I am interested in understanding public-key encryption using RSA. On the Khan Academy website, I noticed an anomaly when testing out the tutorial. I created the following public/private keys: ...
0
votes
1answer
32 views

IV in RSA Encrypted Private Key

I have been provided an RSA encrypted private key which was generated in NodeJS (crypto) using the following: ...
3
votes
2answers
250 views

Can you compress an elliptic curve private key in half?

According to this, an $n$-bit key offers about $n/2$ bits of security. That got me wondering, can you compress the key in half? At first blush, no, because the key is essentially a random number, and ...
1
vote
3answers
703 views

Is there a digital equivalent to the Great Seal of the United States?

Since antiquity (and, for ceremonial purposes, up to the present day), physical documents have had seals affixed. In principle, these seals enable anyone, if he knows what he's looking for, to judge ...
1
vote
1answer
117 views

Find Consecutive X-Coordinate algorithm

The question is as follows: Is there an algorithm to calculate a $(x,y)$ pair which is consecutive to an existing $x$-Coordinate on an elliptic curve? Background Information for the curve: Known ...
3
votes
2answers
372 views

Revoke a GPG key using previously generated revoke certificate after renewd (change expiration date)

I have few sub-questions Do secret keys get expired, or just the public key gets expired? Do I have to back up the master sec key each time I renew it? For an ...
19
votes
3answers
18k views

Are there practical upper limits of RSA key lengths?

Suppose one wanted to use RSA encryption for the sole purpose of sending key bits for use in symmetric crypto systems, a dedicated key exchange system so to speak. And say you didn't think that the ...
27
votes
7answers
23k views

Why does RSA need p and q to be prime numbers?

Despite having read What makes RSA secure by using prime numbers?, I seek a clarification because I am still struggling to really grasp the underlying concepts of RSA. Specifically, why can't we ...
0
votes
0answers
28 views

Is there a way of having a “temporary” decoding key?

I am pretty sure that what I am asking for is impossible, but on the off chance it might be possible, here is my question/problem statement : Is there any known algorithm/protocol or does it even ...
1
vote
0answers
72 views

Is there a public-key system that can chain?

Does there exist any asymmetric cryptosystem that has the following properties: If I know somebody's public key PBK_1 and my own key pair (PVK_2,PBK_2), I can construct a new public key PBK_3 such ...
2
votes
0answers
104 views

A proposal for randomization of Niederreiter cryptosystem

The Niederreiter cryptosystem is a public key cryptosystem using Goppa code. Unfortunately it it is insecure unless it is a binary code. So I thought I could insert random linear codes into randomly ...
2
votes
3answers
221 views

Explaining RSA to non-scientists

I am to give a small lecture on quantum computing in a months' time and I want to shortly give intuition to the fact that Shor's algorithm shows that quantum computers will break RSA. Ideally, I would ...
1
vote
1answer
41 views

How does one associate the actual identity of a person or organization with a decentralized ID?

In SSI (Self-Sovereign Identity), anyone can generate their own DID (Decentralized ID). No authority or authorization is needed to create one. Since a public key pair is associated with DID, the ...
7
votes
2answers
926 views

Is it possible to derive a public key from another public key without knowing a private key (Ed25519)?

I have a following use case: User has his master public (pk) - private (sk) key pair (Ed25519). In DB we store a public key. Is ...
2
votes
1answer
735 views

Shor's algorithm for elliptic curve discrete logarithm problem

Could someone write Shor's algorithm for solving the discrete logarithm problem and how it could apply to elliptic curves in a few, easy to understand steps? I have a basic understanding of quantum ...
2
votes
1answer
91 views

How do I multiply two points on an elliptic curve?

Tell me if there is a way to multiply two points on an elliptic curve? For example, as in secp256k1 ...
6
votes
2answers
2k views

Derive a secret from an RSA private key

What I want to do is deterministically derive a secure key from an RSA private key, such that the RSA private key cannot be derived from the secure key. The first approach that came to mind was ...
3
votes
1answer
767 views

Is email an example of public-key cryptography?

It seems like email is at least analogous to public-key cryptography, the public portion of the key being your email address, and the private portion of the key being the password to the email account....
-1
votes
1answer
73 views

How to find “k” in system of equations?

This is a $y^2=x^3+7$ elliptic curve points - $Q,G_1,G_2,G_3. k_1,k_2,k$? - secret exponents: $k_1*G_1( x_1,y_1) = Q(X,Y)$ $k_2*G_2( x_2,y_2) = Q(X,Y)$ $k*G_3( x_3,y_3) = Q(X,Y)$ How to find a $k$?...
1
vote
3answers
208 views

I need a pathway for studying Lattice-Based Cryptography

I realize that I need a study pathway for post-quantum cryptography. I started to study post-quantum crypto by reading NIST PQC 3rd-round submissions of the lattice-based schemes (let's start with the ...
1
vote
0answers
21 views

what is the probability for an adversary to find the new key after adding new entropy in a group where computational diffie hellman is hard?

Let's say I have an Elliptic curve group $E(\mathbb{F}_q)$ with base Point $G$ and large prime order $n$. Computational Diffie-Hellman is assumed to be hard in that group. $H: \{0,1\}^*\rightarrow \{...
0
votes
1answer
36 views

Generating and distributing a secret without trusting the source

I have multiple entities (servers) that all share a private secret already. Those servers need a rotating secret (TTL a few hours). All servers must have the same set of secrets at all times. I have ...
1
vote
1answer
59 views

What is the main difference between Anonymous HIBE and Anonymous Predicate Encryption?

What is the main difference between Anonymous HIBE and Anonymous Predicate Encryption? In my opinion, both work for the same concept in different ways.
4
votes
1answer
317 views

Does Elliptic Curve Integrated Encryption Scheme (ECIES) provide IND-CCA2 security?

I am looking for a faster alternative to RSA with OAEP as a IND-CCA2 public key scheme. Elliptic Curve Integrated Encryption Scheme might be a candidate, but I am not sure if it provides IND-CCA2 ...
0
votes
2answers
90 views

How is asymmetric cryptography safe if one of the keys is public?

Let's suppose $A$ is sending a message $m$ to $B$ using asymmetric cryptography. To guarantee the authenticity of a message, $A$ encrypts $m$ with $A$'s private key: $E(m, k_A) = m_A$. Then, $A$ ...
1
vote
1answer
28 views

Encrypting a broadcast message decryptable by a subset of receivers

I wasn't certain how to title this request/problem, but here goes: I'm A, and I want to send a message that is received by B, C, D. Each receiving entity here is part of some set of domains D1, D2, D3:...
1
vote
0answers
25 views

Signature algorithm for constrained environment, curve25512 already present for ECDH

I'm working in a very constrained (in code size/memory) microcontroller environment where I'll need public key signature verification. The algorithm to be used can be chosen, and there's no ...
0
votes
3answers
320 views

zero knowledge proof of encryption

Is there a way to prove that a ciphertext $c$ was encrypted under a given public key, $Pk$, without revealing the plain text message $m$?
1
vote
3answers
87 views

How to devise cryptographic system with data-sharing ability and password reset

I originally posted this in the security.stackexchange forums but then I was directed to this one which seems more befitting for my question. I am writing a C# .NET application. For my application the ...
1
vote
1answer
34 views

Static vs ephemeral diffie-hellman

I feverishly searched the web and couldn't find a clear explanation about what exactly is "Ephemeral diffie-hellman". Let's briefly recall how diffie-hellman basically works: Bob and Alice ...

1
2 3 4 5
37