Questions tagged [public-key]
An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.
1,882
questions
-1
votes
1answer
34 views
How many Bits/Bytes is a public key?
I am struggling to understand what the "bit/byte" size of a public key is, how you can work it out, and even what it means.
An example of a RSA public key is:
AAAAB3NzaC1yc2EAAAABJQAAAQB/...
0
votes
0answers
30 views
How to change any symmetric algorithm to obtain hash of key and hash of data from encrypted output? [closed]
I want to know how I can change any symmetric algorithm like AES to obtain the hash of the key and the hash of the input from the encrypted output?
How can I change any asymmetric algorithm to get the ...
-1
votes
1answer
91 views
Counterfeit EU Green Passes
In the EU, a person will soon be able to perform certain activities (going to concerts, to sports events, etc.) only if they can present a valid Green Pass that certifies that the bearer has been ...
1
vote
0answers
14 views
What is the security implication of non-full-rank systematic matrix in McEliece cryptosystem?
The Classic McEliece cryptosystem has the following key generation procedure:
Choose a field $\mathbb{F}_{2^m}$, an irreducible polynomial $g(x)$ of degree $t$, and $n$ field elements $\alpha_1, \...
5
votes
1answer
68 views
What uses are there (if any) for asymmetric message encryption?
What uses are there (if any) for asymmetric encryption of a message, instead of hybrid encryption? Specifically, I'm not considering asymmetric encryption of a symmetric key (eg old TLS RSA key ...
-2
votes
1answer
43 views
How to hack pass-protected private RSA key
I know nothing about cryptography.
I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
2
votes
1answer
66 views
Can CPA secure scheme be converted to CCA secure?
I would like to know if there are some methods or techniques that can convert a public key encryption scheme from CPA secure to CCA secure?
2
votes
1answer
35 views
Coding gain and minimum determinant in cryptography
In coding theory, the notions of coding gain and minimum determinant of a code have been defined as follows: let $\mathcal{X}$ be a (full diversity) code and $X,X^\prime\in\mathcal{X}$.
Then the $\...
2
votes
2answers
133 views
Zero knowledge RSA public key
Suppose Bob has $k>1$ RSA public keys $(e_i, n_i)$ without any knowledge of their corresponding private keys. Alice also has all the public keys, but also has a private key for only one of them, ...
0
votes
1answer
33 views
The security level of secret share compared to homomorphic encryption
I want to compare additive secret share to Paillier encryption. However, I haven't found out how to set the parameters in such a way that the security level is consistent. Additive secret share (...
1
vote
1answer
41 views
Is the relationship between private and public keys an example of bijection between two sets?
Just want to make sure that my understanding is correct whether there is only one public key for any private key, and vice versa.
I know that there are many algorithms, and this may not be a property ...
2
votes
1answer
48 views
How much much data can be verified by an electronic signature?
I’m trying to get a good understanding of how data encryption and signing work. I imagine these vary a bit depending on the software being used.
In particular, I am wondering about this: how much data ...
0
votes
0answers
26 views
Combining WireGuard keys
I suspect the answer is "no", but still:
In WireGuard [1], there's a concept of private and public keys for peers; public key derives from a private one and connection between two parties ...
1
vote
0answers
19 views
Can one prove that a particular public key is part of an aggregated (MuSig) public key?
The MuSig paper (2018) describes a Schnorr signature key aggregation scheme which lets a set of individual public keys to be merged into a single, "aggregated" public key.
In the protocol ...
0
votes
1answer
59 views
Public key size for different elliptic curves
Let's say I want a certain level of security (eg 128 bits) when using ECIES but I also want to minimise communication, does the elliptic curve used matter on the size of the public key? If it does ...
0
votes
0answers
31 views
Algorithm to ensure m people signed off on a task out of a group of N
I have a task that needs M people to approve out of a group of N.
I can obviously implement it in software using a basic ECC signature mechanism. The code on the "server" can send request ...
15
votes
2answers
2k views
Is there an asymmetric encryption protocol which provides arbitrarily many seemingly unrelated public keys for a single private key?
I am looking for an encryption protocol with the following properties.
Alice has a private key $x$. Using this private key, she chooses public key $p$ corresponding to this private key. She let's Bob ...
0
votes
1answer
39 views
Prove data encrypted with different keys matches
Suppose user A encrypts some data using his public key and stores the data publicly. Later user A would like to transfer that same data to user B publicly by encrypting it using user B's public key.
...
1
vote
0answers
68 views
Can this kind of encryption scheme be useful in practice?
Recently, I have an idea to construct an public-key encryption scheme which contains five algorithms:
Setup($1^k$): generate public parameters $pp$ and a master key $mk$.
KeyGen($pp$): take $pp$ as ...
4
votes
1answer
179 views
Can modular exponentiation with a public index be considered a secure permutation?
Secure permutation can be used in Sponge and Duplex constructions to build hash functions and encryption. To potentially use them in public-key cryptography, some arithmetic properties is desired.
Can ...
1
vote
0answers
30 views
Is it possible to provably make cryptocurrency tokens inaccessible?
Would it be possible to generate an agreed upon public key that has no corresponding private key (maybe by using the latest few block hashes of a blockchain) and then send cryptocurrency to that ...
2
votes
1answer
58 views
How do I validate Curve448 public keys?
Performing an ECDH calculation with an invalid public key can leak information about your own private key. With Weierstrass curves, it's important to verify that the peer's public key is actually a ...
asked Jun 23 at 14:16
Gilles 'SO- stop being evil'
14.7k3 gold badges39 silver badges76 bronze badges
0
votes
1answer
36 views
Domain Keys Identified Mail (DKIM)
If a company uses Domain Keys Identified Mail ("sender adds a special signature which includes author name / date signed by RSA Private Key. Receiver verifies the signature by looking up the ...
1
vote
1answer
53 views
How feasible is it to guess the private key of libsodium by taking into account generation time?
So suppose you are doing this locally (so no network noise), and know the exact specifics of your processor too. Is it feasible to figure out the private key (while having access to the public-key) ...
0
votes
1answer
53 views
How to securly save ED25519 private key on hard drive
I am developing an application which stores user's private Identity key (ed 25519) on user's hard drive without any security.
What are the best practices / standards to save private key on hard drive, ...
1
vote
1answer
35 views
CrypTool RSA Features [duplicate]
I am attempting to manually encrypt a plaintext message (message = MI) using RSA.
I receive an answer of: 33,264 and 21,164.
When I enter the same plaintext into CrypTool to confirm that my ...
0
votes
0answers
60 views
Am I Doing RSA Correctly?
I am trying to figure out how to complete RSA manually. I am trying to encode a simple block message (Mi). I used CrypTool to determine the encryption. When I "manually" computed the ...
1
vote
1answer
36 views
Verify that x, y coordinates given as hex string are valid points on an Elliptic Curve [duplicate]
Given the following information:
"curve": "P-256",
"qx": "729C51D177EBE2079A0FB7B0B3C2145159CF81EC61960E642A1744719AA9F913",
"qy": "...
0
votes
0answers
32 views
Decrypt encryptedKey session key using - AES-128 - PKCS-1#rsaes-kem-kdf2-kw-aes128
I have basic knowledge about how encryption algorithms work such as RSA, AES and so on. I have an XML response encrypted with both AES and RSA.
I tried using OpenSSL to decrypt with several steps but ...
0
votes
0answers
29 views
How does the public-key generation work in the multivariate post-quantum digital signature GeMMS?
There are a few steps in the public-key generation of GeMSS that I am trying to understand. The first is the below equations (1).
What does "$\theta_i$ forms a basis for $\mathbb{F}_{2^n}$ over $\...
1
vote
1answer
32 views
Encrypted verifiable schema with hidden content
I'm having a problem with an encryption scheme.
There are two entities, $A$ and $B$. $A$ give a simple message $m \in [0,1]$ to $B$. $B$ should generate an encrypted message of $m$: $e=Enc_{pk}(m)$ ...
2
votes
1answer
51 views
Volume of an NTRU lattice
Let $K$ be a number field of degree $n$ and $\Lambda^q_h=\{(f,g)\in\mathcal{O}_K\text{ : }fh-g = 0\bmod q\mathcal{O}_K\}$, where $h$ is an NTRU public key. Then $\{(1,h),(0,q)\}$ generates a lattice. ...
0
votes
1answer
37 views
RSA encryption key conditions
I recently read the RSA cryptosystem but now I confused in key generation phase.
According to the Euler's Theorem, we have just one condition:
e.d = k.ϕ(N) + 1
where:
"e" is encryption ...
0
votes
0answers
110 views
Given $e$ and $d$, find $\phi(n)$
Let's say we have just RSA public and private exponents $e$ and $d$ but not the corresponding modulus $n$. Is there a method to find $\phi(n)$?
This is for a CTF challenge. I am not concerned about ...
0
votes
0answers
20 views
How to assert identity in a secure and non-copyable way?
Say I have the Mona Lisa, and I want to stick an RFID tag or similar mechanism on a back corner of the painting to verify this is the real Mona Lisa and any others are forgeries. What mechanism would ...
0
votes
0answers
15 views
What is the difference between openssl functions - d2i_PublicKey & d2i_PUBKEY and what scenarios decide which should be used?
What is the difference between openssl functions - d2i_PublicKey & d2i_PUBKEY and what scenarios decide which should be used?...
0
votes
0answers
29 views
How about, when using public key cryptography, one encrypts, signs, and encrypts again?
I suppose one reason for prepending the name would be that a malicious Bob could pose as Alice by encrypting the exact same message + Alice's signature using Charlie's public key, and trick Charlie ...
0
votes
2answers
88 views
What exactly is asymmetric about 'asymmetric cryptography'?
What exactly is asymmetric about 'asymmetric cryptography'?
https://www.sysadmins.lv/blog-en/digital-signatures.aspx says:
"In other words, anything that is encrypted by a public key can be ...
1
vote
0answers
44 views
TLS 1.3 Handshake - Usage of MAC and Digital Signature for CertificateVerify and Finished Message
I was wondering, why the TLS 1.3 handshake employs two different 'messages' that compute an authentication code over the whole handshake. As far as I understand, the CertificateVerify "message&...
1
vote
0answers
18 views
Proving the security of the public key BGV scheme
The security proof basically comes down to the following based on this paper.
We want to show that two distributions are statistically indistinguishable.
Say we have that $a,a′,x,x′$ are drawn from an ...
1
vote
0answers
25 views
Hashing Public Key of Lamport or Winternitz OTS
For the Lamport or Winternitz public keys, couldn't one just hash down the large public key to 256 bits in order to greatly reduce the public key size while still having basically the same security? ...
0
votes
0answers
34 views
Complete taxonomy of public-key cryptosystem primitives
This question is similar to “What primitives are needed to generically implement public-key cryptography?”, but with a more applied/contingent focus:
That question asked about what's theoretically ...
0
votes
0answers
26 views
How does a forward search attack work? [duplicate]
I just came across this term “forward search attack” while reading about Interchange key and Session key. The book mentioned that using session key helps to prevent attacks such as forward search ...
0
votes
0answers
48 views
How can I enhance the security level of my RSA code?
I am trying to enhance the security level of my RSA code that I implemented in Python. I tried to add blind operation, randomized algorithm to my RSA code (separately, not together), but I am not sure ...
0
votes
2answers
198 views
What is the name of this public key encryption cryptosystem?
I have been trying to find the name of a public key encryption cryptosystem that I learnt as an introduction to cryptography some years ago but the only scheme I could find was something similar but ...
0
votes
1answer
61 views
Is cypher.js secure for sensitive data? [closed]
Is this library secure? Link to github repo
Here's his explanation:
Cypher does not encrypt through allocation based on mapping patterns. Cypher encryption process is completely mathematical and ...
0
votes
1answer
61 views
Is this protocol secure?
Before anyone freaks out, this is purely speculative and I am not developing a cryptosystem!
I can't see anything wrong with this protocol, but my knowledge of cryptography is rather superficial:
...
6
votes
2answers
2k views
Do certificates need to be stored as encrypted?
The titles says most of what we're confused with. Here's some details:
On an embedded device, we have a microcontroller and external flash memory. This memory can be easily read and written to in ...
3
votes
1answer
102 views
What is the simplest post-quantum asymmetric cryptographic algorithm for key exchange?
This question has been burning in the back of my head for the past few days, and a quick Google search doesn't yield any usable results.
As the title suggests: What is the easiest-to-understand post-...
0
votes
1answer
100 views
Are zero knowledge proofs alternative private key encryption? [closed]
Are they the alternative to private keys. If I understand correctly, because of the increasing computational power in today's world, zero knowledge proofs are more safe than private keys ?
Are these ...
