Questions tagged [public-key]
An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.
1,785
questions
1
vote
2answers
64 views
What is the need for Diffie-Hellman key exchange when we have asymmetric encryption?
I am new to cryptography and I am having a hard time to understand what is the need for DHKE procedure. I think I fully understand the principle in which it happens and also the mathematics behind it ...
1
vote
1answer
22 views
Encode ASN.1 PKCS#8 Private Key with Public Key and attributes
I'm trying to encode an Ed25519 private key as a PEM file based on this document https://tools.ietf.org/html/rfc8410#page-7 .
I'm using an ASN.1 encoder written in Dart, and I can encode the private ...
11
votes
2answers
2k views
More than one private key for RSA
In an RSA-encryption scenario, Bob's public key pair $(n, e)$ is $(143, 43)$. An attacker Mallory tries brute-force and comes to $d = 7$ as the private key.
The value of $φ(143) = 120$ is not known to ...
2
votes
1answer
68 views
Decrypting message as MSB in regev scheme
I was watching this FHE video and it define Regev encryption scheme as fallow :
kyegen:
sk : choose $t = (1,s)^t \in \mathbb{Z}_q^{n+1}$
pk = $A \in \mathbb{Z}_q^{m*(n+1)}$ random except $[A * t]_q$ ...
0
votes
0answers
68 views
Is inverse polynomial in a finite field NP hard?
In ECC we have: if we know $G$ and $P=kG$, it is very difficult to find $k$. I wonder whether or not in NTRUEncrypt: if we know $h$ and $P=rh$, it is difficult to find $r$?
0
votes
1answer
272 views
Finding MSB in RSA
Scenario:
Alice and Bob send each other encrypted AES (128) messages.
In order to change key, Alice has a public RSA key (2049 bits).
Bob has Alice's public key.
Bob picks a random AES key, encrypts ...
-1
votes
0answers
32 views
Applications utilizing either $\mathsf{RSA}$ or Diffie-Hellman but not together
What are the applications which utilize
Only $\mathsf{RSA}$ but not Diffie-Hellman (applications which can be rendered useless by breaking $\mathsf{RSA}$ alone)?
Only Diffie-Hellman but not $\mathsf{...
1
vote
2answers
145 views
I need a pathway for studying Lattice-Based Cryptography
I realize that I need a study pathway for post quantum cryptography.
I started to study post quantum crypto by reading NIST PQC $3^{rd}$ round submissions of the lattice based schemes (saying lets ...
0
votes
1answer
97 views
Is there a problem with this specific RSA protocol?
So a protocol uses two random primes $P$ and $Q$ with the equivalent bit length of around 2048 bits, multiplies to form $N$. The encryption function in detail is:
$m^e \bmod\ N$
$(\text{512-bit-random-...
1
vote
0answers
52 views
Private key Proof of Ownership
Given 2 entities, A and B:
A has a public key( x ) and a private key( x* ).
B has a A's public key hash( let's call it h(x) ).
A has to prove ownership of x* to B.
How could this be achieved, ...
2
votes
1answer
63 views
What is the more accurate way of stating the correctness of a PK encryption scheme?
Is it more accurate to state that a public key encryption scheme is correct if for all $m \in M$ and $(pk, sk) \in \operatorname{Gen}(1^k)$
a. $\operatorname{Dec}_{sk}(\operatorname{Enc}_{pk}(m))=m\;$ ...
2
votes
3answers
118 views
I don't understand Digital Signature
Why did we call it digital signature if an attacker can pretend to be Bob?
Bob hashes his message, encrypts the hash with Alice's public key, and sends it to Alice with the original message. Alice ...
1
vote
1answer
60 views
Post-quantum asymmetric encryption algorithms
One could use Falcon-512 for establishing a private and public key for an asymmetric context. Whereas in a symmetric context, we could use firesaber/saber/variants in order to obtain a shared secret ...
1
vote
1answer
21 views
Encryption in SET protocol
I have a rough idea of what is symmetric and asymmetric encryption, but I can't apply the idea to the SET protocol (Secure Electronic Transaction
Specification), so how the symmetric and asymmetric ...
0
votes
1answer
31 views
How does one associate the actual identity of a person or organization with a decentralized id?
In SSI(Self-Sovereign Identity), anyone can generate their own DID(Decentralized ID). No authority or authorization is needed to create one. Since a public key pair is associated with DID, the person ...
1
vote
2answers
77 views
RSA algorithm implementation
$$m^{ed} \equiv m \bmod n$$
$n =pq$, so by Chinese Remainder Theorem it is equivalent to
$$m^{ed} \equiv m \bmod 𝑝, m^{ed} \equiv m \bmod q$$
where $n=p\cdot q$
So how did 2 come from 1 by the ...
0
votes
2answers
33 views
SSL Pinning security: can MitM generate the same public key?
This is a very newbie question.
SSL Pinning is "safe" in assumption that only the real server can decrypt the public key.
By design, it should be almost impossible to find the private key ...
2
votes
3answers
869 views
Can I base a public-key cryptosystem only on a hash algorithm?
Could I base a public and private key system on just using a hashing algorithm? For example:
privKey = sha256( randomGenerator() )
pubKey = sha256( privKey )
Why ...
2
votes
0answers
38 views
What grade of protection does a private key's passphrase provide at best?
Does a passphrase with high entropy provide the same level of security as the private key itself?
General scenario: An attacker has access to a private key file that is protected with a passphrase ...
0
votes
0answers
16 views
Zero knowledge proof of symmetric keys and encrypted texts resulting in the same text, if the symmetric keys are encrypted with asymmetric ones
Suppose I have:
text T,
symmetric keys X, Y
encrypted text T with symmetric keys X, Y = TX, TY accordingly
asymmetric key Z, used to encrypt X, Y to transmit them to a person. Let the encrypted ...
0
votes
0answers
29 views
Key and Message generated on Client, and validated by Server
(Sorry in advance for my blurry thinking on this: I'm a programmer, not a cryptography expert.)
I have a Client/Server web application. The Client needs to be able to alter the local state in ways ...
2
votes
1answer
68 views
Is it possible to retrieve the original hash of a digital signature using a public key?
I am running a server that is receiving packets. Each packet is signed with an RSA 512 SHA-256 digital signature. I have a public key and exponent that I use to verify the digital signatures.
I'm ...
0
votes
1answer
68 views
How many public keys and private keys are needed for RSA?
I am just learning about RSA encrytion and I am somewhat confused.
First two prime numbers $p$ and $q$ must be chosen and multiplied to get $n$. Then we compute Euler function $\varphi (n) = (p-1)(q-1)...
0
votes
1answer
70 views
Why in RSA do we use mod n rather than mod phi(p⋅q)?
When we pick $e$: $$e \in \{1,2,3,4,...,\phi(p\cdot q)-1\}$$
where $\gcd(e,\phi(p\cdot q))=1$. Similarly when computing $d$ which is the modular inverse of $e$ (the private key) we use the extended ...
0
votes
0answers
17 views
R, S, and Z values in a transaction using the Transaction ID
How can i get the R, S, and Z values and the Public Key using a transaction IDE i have?
I knew of a website called 2coin.org which provided these values but now the website is no more active and it ...
0
votes
0answers
36 views
How can JWE support an integrity check given that it uses a public key to encrypt the message?
As far as I know JWE (JSON Web Encryption) supports both integrity and confidentiality. I agree about the confedintiality because only the recepient with a private key can decrypt a message. What ...
6
votes
4answers
1k views
Using public key cryptography with multiple recipients
I have a message that I want to send to multiple recipients.
Can I encrypt the message separately with each of the recipient's public keys, then send the message thus encrypted to the respective ...
10
votes
2answers
2k views
Why is this not a viable key exchange algorithm? [duplicate]
I was just wondering why this kind of algorithm can't be used instead of, say, Diffie-Hellman to exchange keys:
Alice decides on a key she wishes to share with Bob.
Alice generates a stream of bytes ...
0
votes
1answer
62 views
What would be the most recommended AES && RSA Keys for production?
While I am a front-end developer and not a security expert programmer, I am worry about the keys I am using for my AES && RSA encryption. Please help me to understand:
Is the following keys ...
1
vote
2answers
54 views
Can the ECDSA still work without present of hashing function? [duplicate]
According to walkthrough steps for ECDSA topic from wikipedia as shown below, What if the impact if we don't apply the hashing function (highlighted in blue in the image) to the raw messages?
Although ...
1
vote
2answers
68 views
Using different hashing function with ECDSA
I came across an IC device configuration & security flow and the details are illustrated in image below.
I'm wondering must the ECDSA pair with the SHA Hashing function?
Alternatively, what if ...
2
votes
2answers
95 views
Prove that you have the data when hash is public
I am designing an online service where users can upload files (3d models) for processing. I want to speed up things when the same file is uploaded by many different users by allowing them to post a ...
0
votes
1answer
35 views
A secure public-key cryptosystem
Is there any public-key cryptosystem that is (possibly) secure against $NP\cap coNP$ adversary?
4
votes
1answer
84 views
Are there any public-key encryption schemes based on DLog?
There are public-key encryption schemes based on many different mathematical hardness assumptions, like the hardness of Decisional Diffie-Hellman problem, the hardness of the Factoring problem, the ...
2
votes
2answers
162 views
Can every signature scheme be transformed into a public-key encryption scheme? [duplicate]
I am reading about Signing vs. Public-Key encryption and a question pop up in mind that is it possible to transform any signature scheme to a public-key encryption scheme?
1
vote
1answer
70 views
How long to reestablish PKI if Diffie Hellman and Factoring are in classical $P$?
Supposing there is a classical (no need quantum) $O(\log N)$ algorithm to factor integers $N$ and supposing there is a classical (no need quantum) $O(\log p)$ algorithm to find $g^{xy}$ given $g^x$ ...
0
votes
0answers
33 views
Zero knowledge proof of Paillier cryptosystem
I have read the paper recently and I am curious about part 3. According to part 3, Bob sends a zero-knowledge proof such that $c_B=b\times_{E}c_A+_E E_A(\beta')$. Then Alice should first decrypt the ...
0
votes
0answers
19 views
testing for a curve25519 public key
The following suggest that it's possible to test 32 bytes mathematically to determine if they might constitute a Curve25519 public key: Bernstein, Hamburg, Krasnova and Lange 2013 https://safecurves....
0
votes
0answers
46 views
Can there be different representation of the same public PGP key?
I have two PGP public key files:
File1 was created with Kleopatra / Gpg4win.
File2 was created by the following procedure:
Import File1 as public key for EmailAccount1 into Thunderbird 78.4.0
Send ...
2
votes
1answer
77 views
Cryptographic limit to total accounts in secp256k1
Factoring in birth day attacks and all that, with 256-bit elliptic curve cryptography, lets take secp256k1 as example that Bitcoin uses, what is the maximum number of accounts that are secure? It isn'...
3
votes
1answer
64 views
Allowed key types in an SSL certificate
What are the valid key types which can get signed (or generated and signed) by a CA to constitute an SSL certificate?
For the keys used in TLS, the key types I have seen are RSA and EC. Anything else?
...
1
vote
1answer
68 views
Secret sharing by using just “private secrets”?
TLS is using 3 way handshake. Isn't that possible to use such 3 way handshake protocol to share a secret without using a public key scheme, for instance as follows: Let A, B be private secrets of ...
3
votes
1answer
104 views
Can Key-Encryption Key (KEK) be symmetric?
This from Cryptography course from Coursera:
Key wrapping or encapsulation using a KEK can be accomplished using
either symmetric or asymmetric cipher
For my information KEK solves the key ...
1
vote
2answers
75 views
Public Key Encryption for Message Confidentiality
In public-key encryption, if the decryption algorithm is
$$\text{Dec}(k_i,\text{Enc}(K_i,p))=p$$
where $k_i$ = receiver's private key and $K_i$ = receiver's public key
what would be the algorithm for ...
2
votes
1answer
70 views
what is a rigorous definition of “proof-of-possession”?
I cannot find a rigorous definition of what the "proof of possession" attribute means. Different webpages seem to give conflicting definitions:
Some of them say that it means, literally, ...
-1
votes
1answer
101 views
Are there alternative ways to decrypt the public key to the public address
I've read and I discovered that it's not possible to derive the public key from the public address because of the hashing algorithm.... But is/are there any alternate way/ways that it can be ...
0
votes
1answer
45 views
How can I prove ownership of hardware wallet?
I’m applying for a mortgage loan and I recently made a large deposit into my bank account from crypto stored on a ledger hardware wallet . I sent the funds to Coinbase where I converted to usd and ...
0
votes
0answers
51 views
Is any encryption system that changes keys for each session “forward secure”? [duplicate]
As far as i understand, a encryption system is forward secure if new session keys are generated for each session, which is also part of what wikipedia says about forward secrecy:
By generating a ...
0
votes
0answers
28 views
Chaining signatures of different parties
My question might be quite beginner, so please pardon my ignorance :)
So, assume there are 10 parties, each with their own keypairs. There is a message $M$ that is passed from one party to the next. ...
0
votes
1answer
151 views
Can I use ECC for encryption/decryption, just like RSA?
I'm familiar with RSA for asymmetric encryption. I also understand it's only supposed to encrypt small amounts of data (smaller than the key) so for encrypting arbitrary data I would typically ...
