Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
3
votes
1answer
48 views

What's the difference between symmetric and asymmetic multilinear map?

In pairing-based cryptography, we have 3 types, namely Type-I, where $\mathbb{G}_1 = \mathbb{G}_2$, and in Type-II and Type-III we have that $\mathbb{G}_1 \neq \mathbb{G}_2$, however in Type-II we ...
3
votes
1answer
1k views

In which public key encryption algorithms are the private and public key not reversible?

The RSA public key encryption system has the characteristic that the public key and the private key can be reversed. That is, information encrypted with the public key can be decrypted with the ...
0
votes
0answers
33 views

Alternate to distributing master key to every user in circle of trust

I am designing an end-to-end encrypted file storage system where only the user should be able to access their own data. The best I could come up with is a system designed around a master key that is ...
0
votes
0answers
31 views

How to get a random point of a specific EC group with cofactor Not-Equal 1?

We got a EC group generated with point G, and the cofactor of E(G) is with the similar size of the Order. Now we need a random point of E(G) and not revealing the "logarithm" of the random point, so ...
1
vote
1answer
29 views

How are old encrypted messages recovered for the sender?

Take ProtonMail as an example. It encrypts all emails with some kind of asymmetric keys. But obviously, they can't store my private so the key must be obtained when I log in. This means, they must be ...
2
votes
1answer
133 views

Can the original data be extracted from an RSA private key signed message

I'm working on a system that the main objective is to verify the message was written by the right person, but it would also be desirable if the message can't be understood by anyone sniffing it. It ...
2
votes
1answer
126 views

Should I PGP encrypt using a publickey intended only for Certify?

I'm working with a publickey that does not include EncryptStorage or EncryptCommunication flags (see RFC4880 for flag reference). My question is, is it safe/appropriate to encrypt using this key? <...
0
votes
1answer
486 views

Half of any bitcoin (crypto) public key - (public key half) is possible

I found a topic on bitcointalk Public key x and y == Double(Half of the Public key x and y) half any public key is possible how that possible , in crypto there is subtraction and multiplication ...
18
votes
3answers
3k views

Digital signature that is only verifiable by one specific person

I would like to digitally sign a message in such a way that the signature can only be verified by one specific person. Simply encrypting the signature will not work, because that person could then ...
0
votes
0answers
20 views

What is the difference between these pairings classifications?

I know the basic definitions of bilinear groups. For example, there is a bilinear pairing that uses elliptic curves and has the following properties: For $G_1$, and $G_2$ are cyclic groups of prime ...
0
votes
1answer
86 views

Question regarding of the ECC test vector format

I am trying to find some ECC test vector for using. I just find some post (like this) and github resource (like this ) They are good reference to my C test code but I'd like to get some more advice... ...
16
votes
4answers
7k views

Why does the recommended key size between symmetric and asymmetric encryption differ greatly?

In various articles it is mentioned that for secure communications, the recommended key sizes are 128-bit key size for symmetric encryption (which makes it $2^{128}$ possible keys?) and 2048-bit key ...
-2
votes
2answers
79 views

question about RSA [duplicate]

I am very new in cryptography field, what I want to ask but I cannot find an answer is this: In public key cryptography, such as in RSA, does it matter if the adversary knows/can detect the public key?...
2
votes
2answers
106 views

Asymmetric keys (e.g. RSA) must be so much longer than symmetric keys (e.g. AES). Why? [duplicate]

I have been reading that RSA has to do with math (prime numbers), while symmetric key encryption deals with blocks of data and modifying the blocks with replacements and remappings, but I still don't ...
0
votes
0answers
28 views

Key Value Based Key Derivation

For a system that is using public key cryptography to authenticate users and their actions I'm trying to solve (ease) UI/UX problem so that users will be able to use login/passwords they're accustomed ...
0
votes
0answers
27 views

Difference between RSA & ECC [duplicate]

My question is regarding Asymmetric-key encryption, in which situation is better to use RSA? What are the advantages of RSA comparison with ECC but from a security point of view? Thank you
1
vote
0answers
29 views

Looking for commutative asymmetric cipher for data matching

I need some crypto operation for matching data privately between two peers (let say Alice and Bob). Alice should be able to encrypt her data with Alice and Bob public keys and pass the cipher text to ...
2
votes
0answers
90 views

Security of an Elliptic Curve Public Key with a “Small” x-coordinate

Consider an elliptic curve over a finite field $F_p$ with $p$ prime and order $n$. Let $Q$ be a generator for the field. Given a public key point $P = aQ$, suppose we have an algorithm that finds an ...
1
vote
0answers
48 views

Is there a public-key system that can chain?

Does there exist any asymmetric cryptosystem that has the following properties: If I know somebody's public key PBK_1 and my own key pair (PVK_2,PBK_2), I can construct a new public key PBK_3 such ...
1
vote
1answer
137 views

Private key can't be traced (GPG)?

I am very new to cryptography. I was reading about GPG/PGP Basics when a doubt arose: As per my understanding, everyone knows the algorithm (from GPG) with which I generated my key pair. If I show my ...
21
votes
3answers
16k views

Why is the P-521 elliptic curve not in Suite B if AES-256 is?

In the NSA's document, "The Case for Elliptic Curve Cryptography" (archived), we have ...
16
votes
1answer
4k views

What are the benefits of lattice based cryptography?

Previously we visited the benefits of elliptic curves for cryptography. Lattice based cryptography is starting to become quite popular in academia. The primary benefit of lattice based crypto is the ...
1
vote
0answers
59 views

RSA How to find the exponent ($e$) of the Public key with the values $p$ $q$ and an example are given

I'm wondering if it's possible to find the public exponent ($e$) with an example and the (rather small) values of $p$ and $q$ given. Currently the only option I found is bruteforcing this value, but ...
1
vote
2answers
356 views

EC Key Compression

Using the secp256k1 curve, will the below yield the same result? Generate private key -> compress private key -> generate public key Generate private key -> generate public key -> compress public key ...
4
votes
3answers
764 views

Why is it impossible to find the private key from the public key?

From what I understand, based on the article A Beginner’s Guide: Private and Public Key Cryptography Deciphered, the public key is generated by performing $n$ tangent plus mirroring operations from ...
2
votes
3answers
12k views

In public key cryptography, how many keys are required for secure communication between n parties?

In public key cryptography, how many keys are required for secure communication between n parties? In my view the answer should be $n^2$. Reason: There are ‘$n$’ Parties. Every Party has One (1) ...
-1
votes
2answers
1k views

How exactly are GPG keys (and prime numbers inside of GPG) mathematically related?

I know that the keys are somehow mathematically related, and I know that they're somehow generated via prime numbers, but how exactly are they related? I realize that it'd probably be best for me to ...
0
votes
1answer
254 views

Will publishing two or more public keys of the same RSA private key cause a security risk?

I want to make an end-to-end messaging platform where everyone is identified with a unique random private key. Everyone uses other peers' public keys to identify and send encrypted messages and verify ...
1
vote
2answers
1k views

How does RSA public and private key structure look like?

So I was reading this wiki about the RSA algorithm and I read this article to understand it better. My goal was to create a simple program that would generate private and public keys. I got to the ...
0
votes
1answer
56 views

DH prime size required to force an attack of $2^N$ steps

Why the size of a DH prime $p$ should be about 6800 bits long to force an attacker to perform $2^{128}$ steps to attack the system? How is this relationship 6800-128 established?
1
vote
2answers
49 views

PKI Multiple Samples start to expose Private Keys?

My understanding is that using a PKI, public/private key pair is generally secure to send message to people. That is, encrypt a message using the recipient's public key so they use their private key ...
6
votes
1answer
830 views

Private and Public Keys

I have a very basic understanding of encryption and the encapsulation process, but for the life of me I can't grasp how public keys and private keys work, how they're made, and how they're exchanged. ...
1
vote
0answers
128 views

ECC with 512bit compatible curves

I understand that given solutions for solving a discrete logarithm problem are on the order of 𝑂(2𝑛/2), ergo, 256bit private keys based on 25519 or secp256k1 have an effective bit strength of ...
0
votes
2answers
303 views

What is the difference between forward secrecy and key freshness?

Is all random private key that generating a unique session key is both forward secrecy and key freshness?
4
votes
1answer
59 views

Why is D_K only required to be infeasible to derive from E_K for almost every key K?

In DH76 'New Directions in Cryptography', it states that 3) for almost every $K \in \{K\}$, each easily computed algorithm equivalent to $D_K$ is computationally infeasible to derive from $E_K$ ($...
1
vote
0answers
25 views

How does the KeyGen of Merkle's improvement of Lamport's OTS work?

In his paper [1] on page 17 and 18, Merkle proposes an improvement on Lamport's OTS by only signing the 1's in the message in combination with a checksum of the amount of 0's in the message. I get the ...
1
vote
1answer
62 views

How to prevent Public Key from being replaced entirely?

I am using RSA to sign my license file using Microsoft CNG API. I am signing the license file and sending the file with the <...
1
vote
2answers
52 views

Characteristic of Public Key?

Is Public key used directly to encrypt a message or it is used to derive other keys ? Can we decrypt a message with same public key using which it was encrypted ? So far I understand, as PKI is based ...
1
vote
2answers
622 views

Guidelines for cryptographic key generation

I was wondering whether you know can point me to some general (basic) principles/guidelines one should follow for generating cryptographic keys? I have looked at NIST 800-133, but was hoping for some ...
5
votes
1answer
187 views

Identifying a bad public key

The great thing about public key cryptography is that anyone can generate a keypair, keep the private key secret and publish the public key anywhere they want. This is used in CAs where an ...
3
votes
1answer
202 views

Why isn't ElGamal a symmetric-key scheme?

I was asked about this question by a friend. He considers that Alice and Bob share a secret key s=g^(xy). So why isn't it considered a symmentric-key scheme? ...
0
votes
1answer
188 views

Why Nonces and timestamps are used in Public key authority?

why the nonces(N1 and N2) and Timestamps(T1 and T2) are used in Public key Authority? which of them prevent replay attack?
0
votes
0answers
29 views

Importance of the order of public/private key application to a signed encrypted message [duplicate]

Let's say two users (U1, U2) each have a private key they keep to themselves, and each broadcast a corresponding public key to the world. Let's then say that U1 wants to send a signed encrypted ...
3
votes
2answers
2k views

How can a message encrypted with the public key be decrypted with the private key?

I've been reading about encryption and have a basic understanding of the concept. What I don't understand, however, is how a calculation with one key can result in a number that, through calculation ...
0
votes
0answers
35 views

How to exchange a common key to a group of person using Elliptic-curve Diffie–Hellman (ECDH)? [duplicate]

In ECDH, when two persons want to share private keys, they first select a point $G$ on the elliptic curve and after that, each of them picks a random integer $a$ and $b$, respectively, and multiply ...
0
votes
0answers
53 views

Decentralized / Distributed Private Key Generation between Untrusted Parties?

I found an interesting concept in this paper, page 13, (Link to the paper) called "Decentralized private key generation", as follows: "Decentralized private key generation – Multiple Enigma nodes ...
2
votes
1answer
65 views

Share secret non-interactively in a verifiable way

In an application, I need to share a secret (random number) with a Group of known receivers over a public channel (a Blockchain) but each receiver needs to be able to check that the others received ...
-1
votes
2answers
153 views

How to find at least one private key from a large list of compressed public keys secp256k1

Not long ago I saw a discussion on the Bitcoin Talk forum: https://bitcointalk.org/index.php?topic=5060735.msg50736695#msg50736695 Please give advice and working methods? Is it possible to find at ...
0
votes
0answers
24 views

Minimal secure index of quasi-cyclic codes for code-based cryptography

It is well-known that keys (generator matrices) of code-based cryptography are very large for its practical usage. To reduce them scientists propose to use families of quasi-cyclic codes. I remind ...
2
votes
2answers
201 views

Can you compress an elliptic curve private key in half?

According to this, a $n$-bit key offers about $n/2$ bits of security. That got me wondering, can you compress the key in half? At first blush, no, because the key is essentially a random number, and ...