Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
1
vote
2answers
64 views

What is the need for Diffie-Hellman key exchange when we have asymmetric encryption?

I am new to cryptography and I am having a hard time to understand what is the need for DHKE procedure. I think I fully understand the principle in which it happens and also the mathematics behind it ...
1
vote
1answer
22 views

Encode ASN.1 PKCS#8 Private Key with Public Key and attributes

I'm trying to encode an Ed25519 private key as a PEM file based on this document https://tools.ietf.org/html/rfc8410#page-7 . I'm using an ASN.1 encoder written in Dart, and I can encode the private ...
11
votes
2answers
2k views

More than one private key for RSA

In an RSA-encryption scenario, Bob's public key pair $(n, e)$ is $(143, 43)$. An attacker Mallory tries brute-force and comes to $d = 7$ as the private key. The value of $φ(143) = 120$ is not known to ...
2
votes
1answer
68 views

Decrypting message as MSB in regev scheme

I was watching this FHE video and it define Regev encryption scheme as fallow : kyegen: sk : choose $t = (1,s)^t \in \mathbb{Z}_q^{n+1}$ pk = $A \in \mathbb{Z}_q^{m*(n+1)}$ random except $[A * t]_q$ ...
0
votes
0answers
68 views

Is inverse polynomial in a finite field NP hard?

In ECC we have: if we know $G$ and $P=kG$, it is very difficult to find $k$. I wonder whether or not in NTRUEncrypt: if we know $h$ and $P=rh$, it is difficult to find $r$?
0
votes
1answer
272 views

Finding MSB in RSA

Scenario: Alice and Bob send each other encrypted AES (128) messages. In order to change key, Alice has a public RSA key (2049 bits). Bob has Alice's public key. Bob picks a random AES key, encrypts ...
-1
votes
0answers
32 views

Applications utilizing either $\mathsf{RSA}$ or Diffie-Hellman but not together

What are the applications which utilize Only $\mathsf{RSA}$ but not Diffie-Hellman (applications which can be rendered useless by breaking $\mathsf{RSA}$ alone)? Only Diffie-Hellman but not $\mathsf{...
1
vote
2answers
145 views

I need a pathway for studying Lattice-Based Cryptography

I realize that I need a study pathway for post quantum cryptography. I started to study post quantum crypto by reading NIST PQC $3^{rd}$ round submissions of the lattice based schemes (saying lets ...
0
votes
1answer
97 views

Is there a problem with this specific RSA protocol?

So a protocol uses two random primes $P$ and $Q$ with the equivalent bit length of around 2048 bits, multiplies to form $N$. The encryption function in detail is: $m^e \bmod\ N$ $(\text{512-bit-random-...
1
vote
0answers
52 views

Private key Proof of Ownership

Given 2 entities, A and B: A has a public key( x ) and a private key( x* ). B has a A's public key hash( let's call it h(x) ). A has to prove ownership of x* to B. How could this be achieved, ...
2
votes
1answer
63 views

What is the more accurate way of stating the correctness of a PK encryption scheme?

Is it more accurate to state that a public key encryption scheme is correct if for all $m \in M$ and $(pk, sk) \in \operatorname{Gen}(1^k)$ a. $\operatorname{Dec}_{sk}(\operatorname{Enc}_{pk}(m))=m\;$ ...
2
votes
3answers
118 views

I don't understand Digital Signature

Why did we call it digital signature if an attacker can pretend to be Bob? Bob hashes his message, encrypts the hash with Alice's public key, and sends it to Alice with the original message. Alice ...
1
vote
1answer
60 views

Post-quantum asymmetric encryption algorithms

One could use Falcon-512 for establishing a private and public key for an asymmetric context. Whereas in a symmetric context, we could use firesaber/saber/variants in order to obtain a shared secret ...
1
vote
1answer
21 views

Encryption in SET protocol

I have a rough idea of what is symmetric and asymmetric encryption, but I can't apply the idea to the SET protocol (Secure Electronic Transaction Specification), so how the symmetric and asymmetric ...
0
votes
1answer
31 views

How does one associate the actual identity of a person or organization with a decentralized id?

In SSI(Self-Sovereign Identity), anyone can generate their own DID(Decentralized ID). No authority or authorization is needed to create one. Since a public key pair is associated with DID, the person ...
1
vote
2answers
77 views

RSA algorithm implementation

$$m^{ed} \equiv m \bmod n$$ $n =pq$, so by Chinese Remainder Theorem it is equivalent to $$m^{ed} \equiv m \bmod 𝑝, m^{ed} \equiv m \bmod q$$ where $n=p\cdot q$ So how did 2 come from 1 by the ...
0
votes
2answers
33 views

SSL Pinning security: can MitM generate the same public key?

This is a very newbie question. SSL Pinning is "safe" in assumption that only the real server can decrypt the public key. By design, it should be almost impossible to find the private key ...
2
votes
3answers
869 views

Can I base a public-key cryptosystem only on a hash algorithm?

Could I base a public and private key system on just using a hashing algorithm? For example: privKey = sha256( randomGenerator() ) pubKey = sha256( privKey ) Why ...
2
votes
0answers
38 views

What grade of protection does a private key's passphrase provide at best?

Does a passphrase with high entropy provide the same level of security as the private key itself? General scenario: An attacker has access to a private key file that is protected with a passphrase ...
0
votes
0answers
16 views

Zero knowledge proof of symmetric keys and encrypted texts resulting in the same text, if the symmetric keys are encrypted with asymmetric ones

Suppose I have: text T, symmetric keys X, Y encrypted text T with symmetric keys X, Y = TX, TY accordingly asymmetric key Z, used to encrypt X, Y to transmit them to a person. Let the encrypted ...
0
votes
0answers
29 views

Key and Message generated on Client, and validated by Server

(Sorry in advance for my blurry thinking on this: I'm a programmer, not a cryptography expert.) I have a Client/Server web application. The Client needs to be able to alter the local state in ways ...
2
votes
1answer
68 views

Is it possible to retrieve the original hash of a digital signature using a public key?

I am running a server that is receiving packets. Each packet is signed with an RSA 512 SHA-256 digital signature. I have a public key and exponent that I use to verify the digital signatures. I'm ...
0
votes
1answer
68 views

How many public keys and private keys are needed for RSA?

I am just learning about RSA encrytion and I am somewhat confused. First two prime numbers $p$ and $q$ must be chosen and multiplied to get $n$. Then we compute Euler function $\varphi (n) = (p-1)(q-1)...
0
votes
1answer
70 views

Why in RSA do we use mod n rather than mod phi(p⋅q)?

When we pick $e$: $$e \in \{1,2,3,4,...,\phi(p\cdot q)-1\}$$ where $\gcd(e,\phi(p\cdot q))=1$. Similarly when computing $d$ which is the modular inverse of $e$ (the private key) we use the extended ...
0
votes
0answers
17 views

R, S, and Z values in a transaction using the Transaction ID

How can i get the R, S, and Z values and the Public Key using a transaction IDE i have? I knew of a website called 2coin.org which provided these values but now the website is no more active and it ...
0
votes
0answers
36 views

How can JWE support an integrity check given that it uses a public key to encrypt the message?

As far as I know JWE (JSON Web Encryption) supports both integrity and confidentiality. I agree about the confedintiality because only the recepient with a private key can decrypt a message. What ...
6
votes
4answers
1k views

Using public key cryptography with multiple recipients

I have a message that I want to send to multiple recipients. Can I encrypt the message separately with each of the recipient's public keys, then send the message thus encrypted to the respective ...
10
votes
2answers
2k views

Why is this not a viable key exchange algorithm? [duplicate]

I was just wondering why this kind of algorithm can't be used instead of, say, Diffie-Hellman to exchange keys: Alice decides on a key she wishes to share with Bob. Alice generates a stream of bytes ...
0
votes
1answer
62 views

What would be the most recommended AES && RSA Keys for production?

While I am a front-end developer and not a security expert programmer, I am worry about the keys I am using for my AES && RSA encryption. Please help me to understand: Is the following keys ...
1
vote
2answers
54 views

Can the ECDSA still work without present of hashing function? [duplicate]

According to walkthrough steps for ECDSA topic from wikipedia as shown below, What if the impact if we don't apply the hashing function (highlighted in blue in the image) to the raw messages? Although ...
1
vote
2answers
68 views

Using different hashing function with ECDSA

I came across an IC device configuration & security flow and the details are illustrated in image below. I'm wondering must the ECDSA pair with the SHA Hashing function? Alternatively, what if ...
2
votes
2answers
95 views

Prove that you have the data when hash is public

I am designing an online service where users can upload files (3d models) for processing. I want to speed up things when the same file is uploaded by many different users by allowing them to post a ...
0
votes
1answer
35 views

A secure public-key cryptosystem

Is there any public-key cryptosystem that is (possibly) secure against $NP\cap coNP$ adversary?
4
votes
1answer
84 views

Are there any public-key encryption schemes based on DLog?

There are public-key encryption schemes based on many different mathematical hardness assumptions, like the hardness of Decisional Diffie-Hellman problem, the hardness of the Factoring problem, the ...
2
votes
2answers
162 views

Can every signature scheme be transformed into a public-key encryption scheme? [duplicate]

I am reading about Signing vs. Public-Key encryption and a question pop up in mind that is it possible to transform any signature scheme to a public-key encryption scheme?
1
vote
1answer
70 views

How long to reestablish PKI if Diffie Hellman and Factoring are in classical $P$?

Supposing there is a classical (no need quantum) $O(\log N)$ algorithm to factor integers $N$ and supposing there is a classical (no need quantum) $O(\log p)$ algorithm to find $g^{xy}$ given $g^x$ ...
0
votes
0answers
33 views

Zero knowledge proof of Paillier cryptosystem

I have read the paper recently and I am curious about part 3. According to part 3, Bob sends a zero-knowledge proof such that $c_B=b\times_{E}c_A+_E E_A(\beta')$. Then Alice should first decrypt the ...
0
votes
0answers
19 views

testing for a curve25519 public key

The following suggest that it's possible to test 32 bytes mathematically to determine if they might constitute a Curve25519 public key: Bernstein, Hamburg, Krasnova and Lange 2013 https://safecurves....
0
votes
0answers
46 views

Can there be different representation of the same public PGP key?

I have two PGP public key files: File1 was created with Kleopatra / Gpg4win. File2 was created by the following procedure: Import File1 as public key for EmailAccount1 into Thunderbird 78.4.0 Send ...
2
votes
1answer
77 views

Cryptographic limit to total accounts in secp256k1

Factoring in birth day attacks and all that, with 256-bit elliptic curve cryptography, lets take secp256k1 as example that Bitcoin uses, what is the maximum number of accounts that are secure? It isn'...
3
votes
1answer
64 views

Allowed key types in an SSL certificate

What are the valid key types which can get signed (or generated and signed) by a CA to constitute an SSL certificate? For the keys used in TLS, the key types I have seen are RSA and EC. Anything else? ...
1
vote
1answer
68 views

Secret sharing by using just “private secrets”?

TLS is using 3 way handshake. Isn't that possible to use such 3 way handshake protocol to share a secret without using a public key scheme, for instance as follows: Let A, B be private secrets of ...
3
votes
1answer
104 views

Can Key-Encryption Key (KEK) be symmetric?

This from Cryptography course from Coursera: Key wrapping or encapsulation using a KEK can be accomplished using either symmetric or asymmetric cipher For my information KEK solves the key ...
1
vote
2answers
75 views

Public Key Encryption for Message Confidentiality

In public-key encryption, if the decryption algorithm is $$\text{Dec}(k_i,\text{Enc}(K_i,p))=p$$ where $k_i$ = receiver's private key and $K_i$ = receiver's public key what would be the algorithm for ...
2
votes
1answer
70 views

what is a rigorous definition of “proof-of-possession”?

I cannot find a rigorous definition of what the "proof of possession" attribute means. Different webpages seem to give conflicting definitions: Some of them say that it means, literally, ...
-1
votes
1answer
101 views

Are there alternative ways to decrypt the public key to the public address

I've read and I discovered that it's not possible to derive the public key from the public address because of the hashing algorithm.... But is/are there any alternate way/ways that it can be ...
0
votes
1answer
45 views

How can I prove ownership of hardware wallet?

I’m applying for a mortgage loan and I recently made a large deposit into my bank account from crypto stored on a ledger hardware wallet . I sent the funds to Coinbase where I converted to usd and ...
0
votes
0answers
51 views

Is any encryption system that changes keys for each session “forward secure”? [duplicate]

As far as i understand, a encryption system is forward secure if new session keys are generated for each session, which is also part of what wikipedia says about forward secrecy: By generating a ...
0
votes
0answers
28 views

Chaining signatures of different parties

My question might be quite beginner, so please pardon my ignorance :) So, assume there are 10 parties, each with their own keypairs. There is a message $M$ that is passed from one party to the next. ...
0
votes
1answer
151 views

Can I use ECC for encryption/decryption, just like RSA?

I'm familiar with RSA for asymmetric encryption. I also understand it's only supposed to encrypt small amounts of data (smaller than the key) so for encrypting arbitrary data I would typically ...

1
2 3 4 5
36