Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
1
vote
2answers
71 views

Secure implementation of public key cryptography

Reading online I've found out that for example the RSA implementation that you usually find on textook is not secure. Where I can find some secure implementation of algorithm such as RSA, ECDH, ECDSA? ...
1
vote
1answer
93 views

Assistance with parsing PGP PRIVATE KEY BLOCK's Secret-Key Packet (0x6) and Secret-Subkey Packet (0x7) using command lines and RFC 4880?

The throw away private keys below (master ed25519 & subkey curve 25519) were exported without being password encrypted. % cat skaht_0523F5B4_Secret.asc ...
1
vote
1answer
89 views

Using RSA public key as private key and vice-versa

I am writing an application that involves checking to see if data has been created by me. I do this by encrypting the data with the private key on my server, and then decrypting it using the public ...
0
votes
0answers
94 views

Define a Decryption algorithm on a given group-based Cramer Shoup lite scheme

I am currently working on public key encryption schemes and I want some help to figure out how decryption algorithms work. Suppose we have a public key $pk = (G,p,g,e)$ with $e \in Z^*_p$ . (where $G$ ...
0
votes
0answers
49 views

I need two types of easily crackable asymmetric and symmetric encryption

I have a school project in which I'm comparing asymmetric and symmetric encryption. I need two different types of easily crackable encryption, one symmetric and one asymmetric. I am planning on ...
3
votes
2answers
84 views

Multiple (RSA) public key encryption how to verify others received the same information? Non-deterministic encryption

I have an RSA system between multiple parties. Alice takes the targets (Bob and Oliver) public keys and encrypts a message using them and sends it to them. All parties know each other's public keys ...
73
votes
12answers
14k views

Who verifies the trust of certificate authorities?

Background I am a novice in the field of cryptography and cyber-security, and while studying asymmetric-key encryption, I learned about the potential of a man-in-the-middle attack. To mitigate this ...
1
vote
1answer
72 views

The goal, the method, and the interface of the signcrypt primitive.

Some time ago, I proposed making the site more educational by teaching correct cryptographic programming. The proposal had had somewhat good reception, but was met with cold ice as there had been ...
1
vote
1answer
37 views

Is there a LWE based public-key encryption scheme which is CCA1-secure?

Is there a lattice based PKE which is IND-CCA1 secure? Actually I am only familiar with LWE and SIS. So I want to know that what the IND-CCA1-secure LWE based PKE scheme looks like?
2
votes
3answers
743 views

Benefits of signing RSA-encrypted data?

I recently came across this (PDF) journal article, which describes what it calls "A New Design Of A Hybrid Encryption Algorithm" (which I must say, doesn't sound very novel, even in 2014!): An AES ...
5
votes
1answer
274 views

Zero knowledge proof for Paillier addition under multiple keys

Suppose $m_0, m_1, m_2 \in \mathbb{N}$ such that $m_0 = m_1 + m_2$, $m_i > 0$ (none of them can be 0 or lower) Under a Paillier cryptosystem, set $e_0 = E(m_0, r_0)$ for a public key $(g_0, n_0)$ ...
1
vote
1answer
38 views

How can a public-key encryption scheme be used to construct a commitment scheme in the CRS model?

For a PKE scheme $(Gen, Enc, Dec)$, the most 'obvious' idea is to commit to an encryption of a bit and in the reveal phase maybe send $r_g$, $r_e$ where $r_g$ is the randomness of $Gen$ and $r_e$ is ...
110
votes
7answers
65k views

How big an RSA key is considered secure today?

I think 1024 bit RSA keys were considered secure ~5 years ago, but I assume that's not true anymore. Can 2048 or 4096 keys still be relied upon, or have we gained too much computing power in the ...
3
votes
2answers
563 views

Brute forcing an elliptic curve encrypted key

I've been reading about ECC, and what I've established so far (correct me if I'm wrong) is that: pubKey = privKey * G where G is some special point on the secp256k1 curve. Doesn't this mean we ...
0
votes
1answer
29 views

Is it possible to multiplex TLS connections by SNI metadata without knowing any keys?

Imagine the following communication diagram: C1-----\ /--B1 C2------P---B2 ...----/ \--... We have multiple C(lients), call them C1, C2, etc. They connect to a ...
2
votes
1answer
58 views

Is it possible in PGP to provide verification/verify the ownership of a public key?

I am new to PGP/GPG and I am somewhat confused by the idea of the Web of Trust (WoT). Isn't signing a public key with its private key enough to prove the ownership of it? if it is so, why don't key ...
3
votes
0answers
39 views

Generalized Benaloh cryptosystem with $r=2$

Benaloh cryptosystem requires $\gcd(r, (q-1))=1$ which is impossible if $q>2$ (since it needs to be a large prime) and $r=2$. This confuses me, since Benaloh is referred to as an "extension" or "...
14
votes
1answer
719 views

Verbatim of early work on public-key cryptography?

In late 1997, the history of public-key cryptography was turned around with the announcement (then extended) that public-key cryptography was theorized in a 1970 note [1] by James Henry Ellis: The ...
1
vote
0answers
49 views

Verifying the ownership of curve25519 public keys

Let's say we have a group of users, authenticated by a server that providers the service, communicating on a secure channel (e.g. over HTTPS/TLS) and each user has a corresponding curve25519 key pair. ...
2
votes
0answers
39 views

Is the first Nonce exchange between Alice and Bob in Needham-Schroder key exchange protocol redundant?

For the Needham-Schroder protocol, assuming Alice and Bob are both able to guarantee each other's public keys (e.g. through a Certificate authority), the protocol is 1) A sends to B: $E_{publicB} [...
1
vote
0answers
32 views

Verify XML digital signature

I'm trying to figure out how to verify an XML digital signature. I have received a signed XML response (in string) in following format: ...
1
vote
1answer
82 views

Why aren't Diffie Hellman public keys used for authentication?

So I have been reading about Diffie Hellman and specifically the MitM attacks that it is vulnerable to. I am aware that these are solved currently in ssl for instance by using rsa signatures to ...
2
votes
1answer
108 views

Msieve & Yafu - RSA Exponents and bruteforcing

I am a layman in regards to the math behind RSA (and in general, relatively), and my goal is to bruteforce a large quantity of 512-bit RSA keys. Having searched around, I see that msieve, yafu, and an ...
-1
votes
2answers
134 views

Is it possible to encrypt something using literally only a public key?

Most basic explanations of asymmetric encryption proceed as follows: Bob wants to send encrypted message to Alice. Bob and Alice each generate public/private key pairs. Bob gets Alice's public key ...
0
votes
0answers
21 views

How to intuitively realize the Diverse Group System in the Hash Proof System(HPS)?

In the paper Universal Hash Proofs and a Paradigm for Adaptive Chosen Ciphertext Secure Public-Key Encryption by Cramer & Shoup, projective hash family derived from group system can be easily ...
2
votes
1answer
54 views

Is Googles Envelope Encryption the same as Hybrid Encryption?

Google is advertising the use of Envelope Encryption in their products with their KMS. By the description, it sounds very much like Hybrid Encryption. But since I could not find any reference to ...
2
votes
1answer
98 views

How is Diffle Hellman with RSA immune to man in the middle?

Alice and Bob want to exchange keys, Alice sends his half (the public key of the ephemeral key pair) signed with his private key and makes the public key available. Eve is bridging the connection so ...
2
votes
1answer
185 views

Public Key generation for Ed25519 vs X25519

It is my understanding that EdDSA uses a slight variant of Curve25519 (typically used for ECDH), called Ed25519. Given the same private key, are the differences between the two algorithms enough to ...
0
votes
1answer
140 views

Securely derive AES and ED25519 keys from a ED25519 seed

Go's ed25519 package exposes a function which allows creating a private key from a 32 byte seed. See: https://godoc.org/golang.org/x/crypto/ed25519#NewKeyFromSeed The reason I want to use this is ...
3
votes
1answer
93 views

Requirements for RSA key parameters

Recently I'm working with a chinese vendor for POS devices and their devices use 2048bit RSA keys for signing binaries. I had to generate a public/private pair (so I can sign my own binaries) and I ...
2
votes
3answers
134 views

Is the role of public key/private key determined arbitrarily or mathematically?

I have read about conflicting information about the roles of public/private keys. In one article(Asymmetrical-key algorithms), it says: Simply put each party, say Alice, picks a private random ...
1
vote
2answers
170 views

How to define a FHE scheme whose plaintext space is infinite using boolean circuits?

There are many kinds of fully homomorphic encryption scheme by using boolean circuits. And the plaintext space $\mathcal{P} = \{ 0,1 \}$. If there is a -bit FHE scheme, we can construct a FHE scheme ...
0
votes
0answers
24 views

Efficient receiver determination of public posted cipher

Assume there is a global message board, that people use to send messages to other people. Of course no one else but the receiver should know the content of the message, so senders use asymmetric ...
5
votes
1answer
1k views

Is there asymmetric encryption in SSH?

I've read in DigitalOcean article about SSH that in order for a server to authenticate a client: The server sends the client this encrypted message. If the client actually has the associated ...
0
votes
0answers
27 views

Symmetric key crypto secure communication infrastructure

Imagine that public-key crypto stops working. Are there any academic proposals out there that would explain how we could implement commercially viable secure communication based on the current ...
0
votes
2answers
123 views

Difference between Identity-based encryption and multiple key-pairs of public key encryption?

What is the difference between Identity-based encryption and multiple key-pairs of public key encryption scheme?? Suppose trusted key generator generates a bunch of public and private key pairs $(k_{\...
1
vote
2answers
65 views

Understanding Montgomery's parameterization of elliptic curves

I'm having a bit of trouble understanding the translation of affine coordinates to projective coordinates in Montgomery curve ECM. Would be very thankful if someone could explain it by expanding the ...
5
votes
2answers
837 views

True asymmetric ciphers beside RSA

Is there any TRUE public key cipher beside RSA? Most people would answer Elgamal or ECC, but for what is my understanding (and I know cryptography only superficially), those are not true asymmetric ...
5
votes
3answers
371 views

Why RSA-KEM is more secure than Textbook-RSA?

I am studying RSA-KEM but I can not see why it should be as secure as padding RSA messages (e.g with RSA-OAEP) when exchanging a key between two parties (say A and B). It is easy to see that Textbook-...
2
votes
3answers
3k views

Why do we need a digital signature?

First of all, I want to say that I'm totally new to cryptography. I searched on crypto stackexchange but couldn't find the answer to the following question.(probably because it's easy, but I still don'...
1
vote
0answers
53 views

Safest method for encrypting a file on a local machine

I am looking for a safe method to encrypt a local file on my machine. Let's say I have a file containing my logins and passwords -- how can I make sure that the encryption is reasonably sufficient in ...
0
votes
1answer
78 views

Can we retrieve his private key using his public key in ECC?

A paper wallet is the name given to an obsolete and unsafe method of storing bitcoin which was popular between 2011 and 2016. It works by having a single private key and bitcoin address, being printed ...
1
vote
1answer
85 views

Is it safe to re-use the same p and q to generate a new pair of keys in RSA if the old private key was compromised?

Say I selected two large primes p and q for RSA and computed my public key (e, n=pq) and my ...
0
votes
1answer
51 views

Authenticated encryption using libsodium's crypto_box_curve25519xsalsa20poly1305

It seems that crypto_box_easy, generates a random nonce and appends it to the cipher text in libsodium. I understand using the same nonce with the same key can be ...
11
votes
5answers
3k views

Suppose I capture encrypted data that I want to decrypt. Could I use a server farm to decrypt?

For argument's sake, let's say that I'm a bad actor who produces malware. I've infected around 10,000 computers and smartphones with my malware, which runs in the background and can be used to make ...
0
votes
0answers
38 views

Where to store public key of an asymmetric cryptosystem?

I am developing an application that uses ECIES encryption and I am currently storing private keys in secure place on each peer and storing public keys in a shared database (accessible by all peers). ...
2
votes
3answers
512 views

Why are in asymmetric cryptography as many keys as people involved needed?

The question: "10 friends wish to establish secure communications between themselves using asymmetric-key cryptography. How many keys need to be known by each user?" was posed by my teacher. He says ...
0
votes
0answers
21 views

Will CT (Certificate Transparency) override the use of CAA and/or DANE/TLSA records?

I'd want to know if some of these competing technologies has more chance to survive. It seems they are thought to solve a similar problem by different manners and I'd want to stick to the most ...
1
vote
0answers
30 views

Zero knowledge proof that ElGamal ciphertext encrypts the opening of Pedersen commitment

Given ElGamal ciphertext for a message $m$ with a random $r$ as $(c_1,c_2) \gets (g^r, g^my^r)$ for a public key $y$, and a Pedersen commitment $C \gets g^xh^r$, I have been able to create a proof ...
2
votes
2answers
158 views

RSA exercises example

I have doubts about this question Consider the following textbook RSA example. Let be p = 7, q = 11 and e = 3. Give a general algorithm for calculating d and run such algorithm with the above ...

1 2 3 4 5 33