Questions tagged [public-key]
An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.
1,633
questions
0
votes
0answers
19 views
Unable to determine plaintext from ciphertext
Given the letter-number cipher: a=00, b=01, c=02, etc., encrypt the word 'hi' and decrypt its ciphertext using RSA. The public key is (5,35) and the private key is (29,35).
I know that 'hi' is ...
1
vote
1answer
30 views
Testing speed of symmetric vs asymmetric encryption and decryption using gpg
I'm aware that symmetric is faster than asymmetric.
I want to test this, but my (obviously incorrect) tests show the reverse.
Symmetric test:
...
1
vote
1answer
44 views
Encrypt symmetric session key with asymmetric or symmetric master key?
Every day, I must backup my server's files, encrypt the backup, and upload it to untrusted cloud storage (dropbox, s3, etc.)
I've spent time on security.stackexchange where I discovered the typical ...
-1
votes
0answers
23 views
Accidently deleted “~/.gnupg/pubring.kbx” , how to recover keys [migrated]
is there is any way to recover the encryption keys in this case, since they really important
1) the issue:
i've lost my gpg key identifiers by deleting ...
1
vote
1answer
35 views
Computationally expensive key derivation whose difficulty is asymmetric
I am looking for a primitive or a construction that meets the following requirements. Is such a construction (a) theoretically possible, and (b) in existence right now?
Given are:
a long secret $X$
...
0
votes
0answers
24 views
Encrypt and decrypt data accessible by two users on the web on multiple devices
I am currently building a website where a user will be able to upload a file to my server and another user will be able to download the file. Now i want to add encryption to this with the following ...
0
votes
2answers
60 views
How is asymmetric cryptography safe if one of the keys is public?
Let's suppose $A$ is sending a message $m$ to $B$ using asymmetric cryptography.
To guarantee the authenticity of a message, $A$ encrypts $m$ with $A$'s private key: $E(m, k_A) = m_A$.
Then, $A$ ...
0
votes
0answers
9 views
How to store private keys in browsers after Apple's decision to wipe script-writeable storage? [migrated]
We have a web application that puts a private key in LocalStorage, which enables users to sign off certain messages. It's been working fine until today we saw this announcement from Apple, https://...
1
vote
3answers
675 views
Is there a digital equivalent to the Great Seal of the United States?
Since antiquity (and, for ceremonial purposes, up to the present day) physical document have had seals affixed to them. In principle, these seals allow anyone, if he knows what he's looking for, to ...
0
votes
0answers
27 views
How does WhatsApp retain private key? [migrated]
Does anyone know how does WhatsApp retain private key? Based on what I know it looks like private keys are stored on the device. What happens when someone changes their device? How does the private ...
0
votes
2answers
65 views
Why is Multiplicative group used in RSA or Euler's theorem but not additive?
I am on the verge to understanding RSA, but suddenly a question popped into mind. When we are calculating $U(N)$ i.e $U(PQ)$, we are taking invertible elements that are co-prime to $N$. For example, $...
0
votes
1answer
32 views
Research topics related to cryptography and Hamiltonian cycles
I am very interested in pursuing a research where I can show an application of Hamiltonian cycles in Cayley graphs of some group such as reflection groups to the field of cryptography.
But currently ...
3
votes
1answer
78 views
is using secp256k1 curve for ECIES considered safe?
I read SafeCurves it indicates Secp256k1 is not SafeCurve by their standards but bitcoin and ETH use it in their blockchain.
I researched more and figured out that using Secp256k1 ECDSA(singing ...
2
votes
1answer
101 views
How to find the inverse of a polynomial in NTRU-PKCS
I am coding a java based implementation of the NTRU public-key cryptosystem. I can comprehend the majority of the algorithms involved in the encryption and decryption process well enough, but the key ...
-1
votes
1answer
46 views
Storing public key in cookie
I am encrypting my password before sending to my server with a public that i have stored as a cookie.
Is there any security risks storing my public key in the cookie?
Are there any better ...
1
vote
1answer
41 views
Classification of attacks against lattices
I'm interested about the cryptanalysis side of lattice-based cryptography, and was wondering whether there is a survey paper or something that gives some classification of attacks against lattices, ...
1
vote
2answers
83 views
Relationship between $N$ and $\phi(N)$ in the RSA algorithm
Recently I started learning how the RSA algorithm works and there is one single part of the computation which really confuses me and can't get over it.
Let's say I chose 2 prime numbers,
namely
$P ...
1
vote
1answer
33 views
Are the signcryption and the authenticated encryption same?
The signcryption and the authenticated encryption are both the combine of encryption and authentication with three natural composition (i.e., EtS, StE, E&S). I am not sure that if they are the ...
0
votes
0answers
15 views
Least knowledge ephemeral PKI?
I'm trying to build a PKI for document signing but only using 2nd party auth and no client persistence.
I'm assuming I'd need to use something like a SCrypt key of the user credentials for the user'...
0
votes
1answer
47 views
Is it secure to use ECDSA for any arbitrary point on the Elliptic Curve as the Generator point?
My question concerns the elliptic curve $E$ over a prime field $\mathbb F_p$. To the best of my understanding, ECDSA requires a Generator point $G$ of prime order $n$, and the $r$ and $s$ values of ...
0
votes
2answers
84 views
What is the use of a nonce in public-key encryption if it's meant to be shared?
I'm using PHP. The guys over at paragonie have made encryption easy for the PHP eco-system.
Now, on my computer, Alice, when I ...
1
vote
1answer
39 views
Why encrypt symmetric keys first with RSA and then the private-key with a PW?
In for example the Microsoft Encrypting File System, the SYM-Key is first encrypted with a RSA-Pub-key and its corresponding private-key is then encrypted using a users password. Why not encrypt the ...
0
votes
0answers
49 views
Fully Homomorphic cryptographic Scheme?
Given two FHE schemes FHE1 and FHE2 in which one of the two scheme is secure and other is not (we have no idea which is secure). Construct a FHE scheme which is secure using the given two scheme.
0
votes
1answer
96 views
Using SHA384 as an asymmetric cipher?
SHA384 is a hash function that can be (and is) used to verify data by checking it. Can it also be used as the background for a public-key crypto system? Here is what I mean:
A 48-byte string is ...
0
votes
0answers
21 views
Three Pass Protocol Question!
Alice and Bob have agreed to use the Three Pass Protocol.
p=1009
Alice chooses the encryption exponent
e_A = 101
Bob chooses the encryption exponent
e_B = 209
Now Alice and Bob send three ...
0
votes
0answers
11 views
XTZ Private Key
The BIP39/44 off-line tool does not contain XTZ coin. Therefore, I cannot derive (from my 24 words) my ledger nano s private key associated with my Public key for my Tezos account. Is there another ...
1
vote
1answer
49 views
Are there any algorithms for which generating any zero-knowledge proofs is not practical?
It is related to my earlier question:
Can zkSNARK or other zero-knowledge proofs be used to proof message authenticity without revealing private key?
Are there any algorithms for which generating ...
0
votes
1answer
52 views
Can zkSNARK or other zero-knowledge proofs be used to proof message authenticity without revealing private key?
The situation:
Alice and Bob are exchanging messages encrypted by some known asymmetric encryption protocol. All their encrypted messages, as well as public keys are intercepted by Charlie.
Can ...
0
votes
1answer
103 views
Factorization problem
Say, $X= a\cdot b$, where $(a, b) \in Z_q^*$ and $q$ is a large prime. If $X$ is given, then what is the complexity (or hardness) of finding $a$ and $b$?
Note that, either $a$ or $b$ can be reused to ...
1
vote
2answers
157 views
Why can't ransomware practically use RSA to encrypt all files?
I understand that a few ransomware have used an RSA public key to encrypt all files belonging to the victim. This is a bullet-proof system in terms of its security because the private key is always ...
0
votes
1answer
59 views
understanding LWE public key algorithm
I'm trying to understand this LWE public key system
say I use matrix A = [[44, 73, 20, 54],[92, 19, 78, 22],[31, 34, 94, 29],[82, 32, 70, 68]]
q = 97
bit = 1
and secret key s: [56, 90, 0, 46]
and ...
0
votes
0answers
28 views
Same ephemeral key for 2 uses
I am theorising an onion routing network, and I have a question about ephemeral keys.
This is the basics e2e connection encryption protocol.
...
1
vote
1answer
42 views
Forward Security of Symmetric Encryption Schemes with LFSR based PRNG
Forward security can be achieved using symmetric encryption schemes by combining with a pseudo-random number generator (PRNG). Does LFSR based PRNG provide forward security in this case?
1
vote
2answers
158 views
Advantages of encrypting a symmetric key with a public key vs using a fixed symmetric key
I am new to cryptography concepts.
I am trying to protect some firmware download.
Reading some Wikipedia pages, I understand that asymmetric cryptography is time consuming, so, if I want to protect ...
1
vote
1answer
63 views
Derived keys usable by threshold signatures
Suppose there are $n$ members in a $(t,n)$ threshold signature scheme. The global secret key $sk$ is not known to any single party, as the keys are generated distributed. The parties are able to ...
0
votes
0answers
40 views
Is it possible to generate a membership proof using an RSA accumulator without knowing all the accumulated values?
I am currently learning about RSA accumulators and this was just a question I had since in most available implementations I see in Github accumulated primes are stored in hash tables and they are ...
4
votes
0answers
57 views
Help with cryptanalysis of branching in schemes based on Multivariate Public Key Cryptography
I'm familiarized with the structure of branching found in Multivariate Cryptography, as it allows us to partition a $n$-tuple over $F_{q}$ into a $k$-tuple where the $i$-th element is in $F_{q^{\...
2
votes
2answers
74 views
Doesn't d6 to binary for 256-bit bitcoin private key generation produce biased results?
If the mapping table looks like:
1: 000
2: 001
3: 010
4: 011
5: 100
6: 101
Then you are guaranteed that your key will never have a chain of 4 or more 1s, much fewer chains of 3 ones than would ...
1
vote
1answer
50 views
What's the difference between threshold signatures and multisignatures?
I was wondering what's the difference between threshold signatures and multisignatures. In what respects do they differ? For example, is n-out-of-n threshold signature, just a multisignature?
0
votes
0answers
20 views
Lifting point to quadratic twisted curve
How to lift point to it’s quadratic twisted curve? I use secp256k1. Is the diiscrete log still same? Thanks before
1
vote
1answer
43 views
Creating nested messages in OpenPGP
I need to create a nested message in OpenPGP (my understanding is that the protocol itself should support it).
Let's say I have Payload ("Time in Lordran is ...
2
votes
1answer
84 views
Key Exchange vs Key Encapsulation
From what I understand, the steps of a key exchange protocol are
Alice and Bob each encrypt something using their public key and private key and send the result to each other
Alice and Bob each do ...
1
vote
0answers
28 views
Keeping a backup of asymmetric keys with the help of a certificate authority without losing the privacy
First I'll explain the problem, then I will also give a solution(it might be wrong) I've found for it, you let me know what you think about this solution and whether you have a better one.
Assume a ...
1
vote
1answer
34 views
Proof possession of private key in libsodium
I would like to proof that I am in possession of private key sk for public key pk using ...
1
vote
1answer
73 views
Is there any encryption system where the sender cannot prove that a specific ciphertext belongs to a specific plaintext
I'm trying to create a message-transfer system where
The encrypted messages are stored in a public database.
It is possible to verify who is the sender of this message.
The sender cannot prove to ...
0
votes
0answers
41 views
Computing PGP ed25519 and curve25519 keygrips?
There are public key algorithmic differences for how PGP computes fingerprints and keygrips. For the v4 protocol, fingerprints are not exclusively computed from public keys while keygrips are. RFC ...
3
votes
1answer
205 views
Relying on a private public key for authentication
I'm Alice, and I generate a public/private key pair. I securely & confidentially share my public key with Bob and Carol, who securely & confidentially share it with various other benevolent ...
1
vote
0answers
23 views
How to design a moderated, group for private messages?
I’m trying to figure out how I could create a private group that was P2P yet still allowed someone to moderate members (no public access to messages). I’m assuming standard hybrid encryption (RSA/EC + ...
-1
votes
1answer
91 views
Is there a library that implements the “Mickey Mouse Version” of asymmetric cryptography?
Here is what I mean with "Mickey Mouse Version":
CHARLIE makes a keypair key1 and key2
...
0
votes
0answers
25 views
Asymmetric non-interactive proof of work scheme
I'm looking for a non-interactive proof of work scheme. I want for it to (1) be faster to find solutions to if you're in the possession of an arbitrary secret, like a private key, and (2) for the ...
