Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
0
votes
1answer
37 views

How re-encryption can be done through RSA

Both RSA and Elgamal have homomorphic properties. So both can re-encrypt the ciphertext. Re-encryption with Elgamal works as seen here. How does re-encryption work using RSA? What modification / ...
31
votes
1answer
36k views

Can I remove newlines in a public key?

Can I remove new lines from the RSA public key file to get a one line string? So the question is if the key looks like this AAA BBB CCC or ...
0
votes
0answers
35 views

Backdoor Hash Streebog (?) [on hold]

There was a news that possibly has a backdoor hash Streebog. https://twitter.com/bascule/status/1094830326201835521 https://www.golem.de/news/kuznyechik-streebog-russische-...
0
votes
1answer
46 views

Why public key has two parts in my secure messaging client similar to signal

I am working on a Golang code similar to Signal protocol. I need to modify it. I am confused on tripartite Diffie-Hellman handshake part of code, i.e. why public key has two separate parts as compared ...
1
vote
0answers
17 views

How do I calculate key rotation schedules?

tl;dr: How do I formulaically determine key rotation schedules for different kinds of keys and use cases? The organization I'm a part of for utilizes both symmetric and public/private key encryption ...
4
votes
0answers
61 views

Is it possible to construct a hash-based public key encryption scheme?

I know hashes can be used to construct symmetric encryption schemes (HMAC running in counter mode), signature schemes (SPHINCS), pseudorandom generators, etc. One thing that's missing is public key ...
1
vote
1answer
67 views

Asymmetric Encryption - How is the Public Key Being Shared?

I've been reading up on the relationship between private keys and public keys (as well as hashing), and I watched a few videos, but I am still a bit confused. I don't have a programming background, ...
5
votes
1answer
123 views

Using nested signatures to trust public key of inner signatures

I have a scenario where entity $A$ has an unauthentic copy of the public key $P_B$ of $B$ and an authentic copy of $P_C$ of $C$, trusted by both $A$ and $B$. Now $A$ wants to establish trust in $P_B$...
3
votes
1answer
894 views

ElGamal encryption and signature using same keys

In ElGamal scheme we have message $M$; $p$, $g$ and $y=g^x \bmod p$ as public key where $x$ is unknown private key. Encrypted message $(c,d)$, where $c=g^k \bmod p$ and $d=M \cdot y^k \bmod p$. ...
0
votes
1answer
60 views

NaCl allows decryption with the same public key as for encryption

I followed the description here: Public-key authenticated encryption: crypto_box and created an example that encrypts a message with Bob's public key and signs it with Alice's secret key : ...
2
votes
0answers
67 views

Is it possible to verify attributes of encrypted content?

Let's say that Alice has this information about her, { "name": "Alice", "age": 25, "eyes": "brown" } which she encrypts with a key pair so that no one access ...
2
votes
1answer
113 views

Establish Trust By Signing Random Seed

I'm trying to get my server to establish trust with a client. Neither is on the Internet, so there are no certificate authorities. The typical way to establish trust in my domain is for a client to "...
0
votes
0answers
13 views

Differences between ssh-keygen private keys and libressl's? [migrated]

I generated a private key using libressl 3.0 using curve secp521r1. ...
1
vote
2answers
65 views

Using public-key signature instead of having API key

I am designing an application that will need an API key. At first I believed that generating a long, random token would be secure enough (say 32 chars string that includes 0-9, a-z and A-Z), and then ...
1
vote
1answer
49 views

Is there a zero knowledge proof to show an encrypted blob is the key for a given public key?

Let's say I have a private key x with a corresponding public key y. If I encrypt x as ...
-1
votes
1answer
62 views

Can't understand the magic of relationship between private an public key functions

To encrypt a message $$ P = 53, Q=59, n=PQ=3127, e =3 $$ let message M, for example, $ 89 $$ cipher = 89^{e}mod\quad n. $$ cipher = 1394 this is the encrypted message $$ \phi=(P-1)(Q-1)=3016 $$ $$...
1
vote
2answers
139 views

How to define a FHE scheme whose plaintext space is infinite using boolean circuits?

There are many kinds of fully homomorphic encryption scheme by using boolean circuits. And the plaintext space $\mathcal{P} = \{ 0,1 \}$. If there is a -bit FHE scheme, we can construct a FHE scheme ...
1
vote
1answer
102 views

Could public-key crypto be performed long ago if the idea had been discovered?

Public-key cryptography was not invented until the 1970's. Apart from the idea not existing earlier (as talked about here), is there any reason it could not have been used earlier? For example, are ...
-1
votes
1answer
61 views

P256 Key size and validation [duplicate]

Given a public key on the P-256 Curve is it correct to say that the public key is 64 bytes long ie. (x,y)? Secondly is the private key 32 bytes long? if so, how is the private key generated and why ...
2
votes
1answer
44 views

Where does signing/decrypting take place on a YubiKey 4/5 PIV private key?

I have a YubiKey 4 and want to use it to store a private key that should never enter a computer system's memory. After importing the key to the device I understand it never leaves it. Do the signing/...
0
votes
2answers
83 views

Discrete logarithms on elliptic curves

In many examples of attacks on public key cryptography, examples of the form $a ^ x = b$ are used, but I can not understand the correlation between this and the multiplication of the generator point ...
8
votes
1answer
1k views

What are the security risks in making a passphrase-encrypted private key public?

I have a 4096-bit GnuPG private key. It currently resides at ~/.gnupg/secring.gpg. The private key is passphrase protected. Is it necessary to keep this private ...
15
votes
5answers
3k views

Is there an intuitive explanation as to why only the private key can decrypt a message encrypted with the public key?

I have just learned about using PGP/GPG for email encryption and one thing bugs me: How is it possible that a message encrypted with somebody's public key can be decrypted only with that person's ...
0
votes
0answers
20 views

aspnet_regiis private key storage

I am using aspnet_regiis.exe to Encrypt a connectionStrings on an ASP.Net application. The application in productions runs on a <...
1
vote
1answer
160 views

Definition of Short Authentication String

I am studying for my cryptography final and I passed by the following term: short authentication string. Please, can anyone explain it to me, thank you very much.
11
votes
1answer
2k views

After ECDH with Curve25519, is it pointless to use anything stronger than AES128?

Is the following reasoning correct: After ECDH with Curve25519, the resulting shared secret will be an EC public key with a bit strength of 128 bits. This public key would then be hashed (let's say ...
2
votes
0answers
81 views

A proposal for randomization of Niederreiter cryptosystem

The Niederreiter cryptosystem is a public key cryptosystem using Goppa code. Unfortunately it it is insecure unless it is a binary code. So I thought I could insert random linear codes into randomly ...
1
vote
0answers
26 views

Asymetric encryption, multiple recipients, traitor must share private key

Is there an Asymetric encryption scheme, or public key encryption, where multiple recipients are able to access the data but in order for one of the recipients to leak the key to the data they would ...
4
votes
1answer
837 views

Does the public key and private key for WhatsApp only remain within a WhatsApp account

The world of cryptography is starting to really intrigue me admittedly. I initially hated it because it looked too hard Mathematically but now it looks cool :) Got a good question for the experts and ...
3
votes
2answers
86 views

Role of long-term asymmetric keys in a forward secrecy instant messaging protocol?

I am trying to understand how forward secrecy works in general, using a simple instant messaging protocol as an example. Tell me if I have this process right or not: 1) Alice and Bob each generate a ...
13
votes
2answers
569 views

Is it safe to reuse a ECDSA nonce for two signatures if the public keys are different?

We denote the s value of an ECDSA signature $(r, s)$ on a message $m$ as: $s=\frac{H(m)+xr}{k}$ Assume two ECDSA signatures sharing the same nonce $(r, s_1) , (r, s_2)$ on two messages $m_1, m_2$, ...
6
votes
1answer
115 views

Single Ciphertext which can decrypt with multiple keys

Say we have a public key system where we have 2 users, Alice, and Bob each has a public and private key. We also have a publicly available server which stores a message. I want to encrypt this ...
1
vote
0answers
26 views

Sign file (Client-Server) PKI-CA [closed]

I have a use case, the IoT system sending a signed file to the data center and I have an internal CA to read the corresponding public key to verify the signature on the signed file. I am not sure ...
6
votes
0answers
79 views

Why is recipient hashed in this Sign/Encrypt/Sign proposal?

Own research In my journey into trying to understand PGP, and public key singing and encryption as a whole, I came across this answer on CE. It is an answer to a question with the title: Should we ...
0
votes
1answer
57 views

Flexibility in $RSA$ and $DLOG$ standards?

Today's security is based on $RSA$ and $DLOG$ primarily. If both go down then it is hard to imagine a scenario where internet can be salvaged quickly. Assume $RSA$ with $n$ bit prime factors and $...
5
votes
2answers
889 views

Raw curve25519 public key points

I'm trying to understand curve25519, and ECC public points. I'm playing with Minisign, to better understand the fundamentals of ECC. Minisign uses curve25519 and outputs public keys as base64 ...
4
votes
2answers
2k views

How to generate a public key from a private ECDSA key?

Having some specific ECDSA curve and a private key, how does one calculate the public key? I am having a hard time finding the algorithm and equations for it.
4
votes
4answers
85 views

Does larger key size mean larger data size in asymmetric encryption?

I'm new to cryptography. I know the larger the key size (like 128-bit vs 1024-bit) the harder the ciphertext is to crack, generally. But assuming everything else being equal, does a larger key size ...
3
votes
1answer
138 views

Why is the NIST recommendation for the private key exponent so much smaller than the modulus?

NIST recommends a 256-bit private key exponent for DLP with a 3072-bit modulus. This question answered how the modulus was chosen/calculated, however, why isn't the private key size closer to the ...
0
votes
1answer
92 views

What does it imply if in RSA pow(m, e, n) is same as the m

So, Let's assume we have n which is made up of 2 strong primes which cannot be factored & e which is textbook value of e ...
2
votes
1answer
80 views

What is the actual result of a Logjam's DH attack?

Does a Logjam attack calculate a group of probable Diffie-Hellman private keys for a user and then try them one at a time to see if it can decrypt the message - or does it directly calculate the one ...
25
votes
5answers
16k views

Why does RSA need p and q to be prime numbers?

Despite having read What makes RSA secure by using prime numbers?, I seek a clarification because I am still struggling to really grasp the underlying concepts of RSA. Specifically, why can't we ...
3
votes
1answer
799 views

Can a public key be same as private key?

As I understand, we choose the public and private keys to be mutual inverses. However, it is possible that, in a group, there can be numbers which are their own inverses. E.g. Consider p = 7, q = 3. n ...
1
vote
0answers
50 views

I need to send 16 bytes using ECC keys on a resource-constrained device

I have a system where a resource-constrained device has to send 16 bytes. It has its ECC key pair, and a peer's Public ECC Key. We're using the p256 curve. The device also has an AES-128 hardware ...
1
vote
0answers
60 views

How can I prove that the plaintext of an elgamal ciphertext is the discrete log of an element?

Is there any (efficient) method to prove that the plaintext of an ElGamal ciphertext is the discrete log of an element? In the scenario I concerned, I have an El Gamal key pair $(pk, sk) = (g^y, y)$....
0
votes
0answers
7 views

How to let CA signed x509 key work in OpenPGP mailing system?

So let's say we have a OpenPGP mailing system which all mails are signed and encrypted with OpenPGP keys. And now you bought a CA signed x509 certificate and you want to imement into the mailing ...
12
votes
3answers
5k views

How many KDF rounds for an SSH key?

What is the best practice on choosing how many key derivation function (KDF) rounds/iterations when generating an SSH key pair with ssh-keygen? Am I correct in saying that it is unnecessary if the ...
5
votes
1answer
356 views

Post-quantum candidates for asymmetric cryptography with small key sizes

One of the things that I have come to like about elliptic curve cryptography is that the key only needs to be twice as long as the desired security level. That's a very small expansion (I also like it ...
1
vote
1answer
51 views

Are there any asymmetric key encryption/decryption algorithms?

When it comes to encrypting some data (where data being something of a large size), symmetric key cryptosystem is predominant. Symmetric key algorithms like AES, DES, Blowfish, IDEA etc. are ...
0
votes
0answers
17 views

Off-Chain Channel With Multi Participants That Have Different View/Write Access

I'm looking to expand my blockchain ability to have off-chain channels between different participants (let's say more than 2 participants). The requirements: Only the participants of the channel ...