Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
2
votes
0answers
70 views

Derivable encryption key - BIP0032 parallel

I wish to find an asymmetric encryption algorithm that supports key derivation, BIP0032 style. Meaning that I have some SEED [PRIV] and I give someone some public data [PUB], then given new public ...
1
vote
2answers
155 views

How many keys in a Hybrid Cryptosystem?

If symmetric cryptosystems have $C^2_n$ keys, and asymmetric systems have $2n$ keys, how many does a hybrid system have? This was in an online quiz from school Company A is considering to adopt ...
2
votes
1answer
27 views

Is it acceptable to add a setup algorithm in the public key encryption?

I saw in the paper How to Use a Short Basis: Trapdoors for Hard Lattices and New Cryptographic Constructions at page 29 that key generation algorithm of PKE can use a common random matrix $A$. Is it ...
1
vote
1answer
82 views

Comparable or partially homomorphic public key derivation for signatures?

Are there any public key signature schemes that can be compared blindly or partially homomorphically based on the private key without knowing the private key? Example: let's say I derive a public key ...
0
votes
0answers
47 views

Verifying valid public key and finding private key? [duplicate]

A naive user of RSA has announced the public key $n = 2903239, e = 5$. Eve has worked out that $n = 1237×2347$. Verify that the public key is valid and explain why the private key is $d = 2319725$. [...
-2
votes
1answer
495 views

Diffie-Hellman (Public Key exchange)

I have read a few tutorials in regards to this. My understanding is that Diffie-Hellman is a key exchange concept that is being use everywhere in our daily lives, which is also known as the public-...
0
votes
2answers
336 views

How to create a private key using $n,e,d,p,q$ where $n$ is prime

Someone has incorrectly created a public/private key pair where $N$ (modulus) is a prime number. This makes $p$ and $q$ trivial as they they are $n$ and $1$. $d$ is solved from $d \cdot e = \bmod (...
4
votes
1answer
124 views

Does Elliptic Curve Integrated Encryption Scheme (ECIES) provide IND-CCA2 security?

I am looking for a faster alternative to RSA with OAEP as a IND-CCA2 public key scheme. Elliptic Curve Integrated Encryption Scheme might be a candidate, but I am not sure if it provides IND-CCA2 ...
0
votes
0answers
64 views

Rolling Code via Encrypted Index vs Pre-Generated Keys

I am planning on designing a system that needs a password to be operated, using a rolling key. Now I am facing two options, as far as I am concerned: Having an index saved, which will be incremented ...
1
vote
0answers
101 views

Key Distribution Center Key Protocol Analysis

As shown in the image, why is Circle 1 to be B and Circle 2 to be A? Why is not the opposite, that is, Circle 1 to be A and Circle 2 to be B? like this picture From my understanding, Notation B in ...
2
votes
0answers
61 views

Concept for a RSA “repeater”. Is it sensible?

I have been using RSA signed/encrypted mailing a lot recently. Naturally, I wanted to use RSA mailing also on my phone, not only on my computer. However, I feel uneasy having my private key on my ...
1
vote
1answer
72 views

Digital signature

I learned that a digital signature is encrypted using private key and is decrypted using public key. How does the verifier gets the public for verifying the signature? If a person has to request ...
0
votes
1answer
152 views

Public key on Server Key Exchange Generation vs Public key on Server's Certificate

To understand the distinction between TLS 1.2 and TLS 1.3. I am stuck in the past understanding for TLS and the current reference I am studying: As I know certificate goes with owner's public key, ...
37
votes
5answers
101k views

What is the SSL private key file format?

I was researching about how to encrypt with RSA. I understood everything but not the format of the private keys. In the phpseclib (RSA in PHP), you can import your private key (private.key format) ...
3
votes
2answers
1k views

Why is proof-by-reduction needed (for Elgamal proof of security, for example)?

The textbook proof for Elgamal encryption basically reduces to the Decisional Diffie-Hellman assumption (DDH). Elgamal: $Gen(.): x \xleftarrow{R} \mathbb{Z}_p$; $Enc(m,g^x): r \xleftarrow{R} \mathbb{...
-1
votes
1answer
671 views

Creating multiple “public” keys from one private key

Is it possible to create a public key out of a private key, then create another public key from the first public key. And treat the first public key as a private key (So you have two levels of private ...
5
votes
1answer
731 views

RSA using 2 as a public exponent

I'm failing to see why 2 can never be used and what weaknesses would be associated with doing so. There's a similar question asking why it has to be in the form of $2^n$+1 but why not $2^n$
2
votes
1answer
80 views

Where does one store 3rd-party Public Keys

So, I've just started looking at the subject of Cryptography and am working through Stephen Haunt's Practical Cryptography course on PluralSight but have a question that doesn't appear to be covered. ...
3
votes
1answer
67 views

Pseudonymous publication of a series of texts online when a bad guy is expected to join in with fakes: will this approach to PGP verifiability work?

Alice wishes to publish under a pseudonym a series of texts online. She expects the texts to circulate, and she will not include any way of contacting her. Bob will not know the identity of the ...
6
votes
2answers
129 views

Why ECDSA has its form?

According to Wikipedia, if Alice wants to sign some message, she computes $s = k^{-1} (z + r d_A)$ then sends $(r, s)$ to Bob. I don't understand why they use this particular formula $s = k^{-1} (z + ...
0
votes
1answer
549 views

RSA encryption/decryption process is not working correctly

I'm trying to apply the RSA cryptosystem to encrypt a byte M=72, using predefined modulus n, public key exponent ...
5
votes
1answer
295 views

Is a transposition cipher categorized as asymmetric algorithm?

Consider a simplest transposition cipher, such as one with block size 8 and encryption key 43725681, the decryption key will be 84215637. As the keys are different, may I say a transposition cipher is ...
3
votes
1answer
416 views

SSL - encrypt with private key and then with public key?

Say there are 2 sides that wish to communicate: side A and side B. Let's say we are looking at side ...
11
votes
1answer
190 views

How does the process of creating a new secure Elliptic Curve look like?

I'm especially curious about the technique djb would have used to come up with his Curve 25519. Say I have already written down my goals, such as - Twist Secure, Speed, Side Channel resistance, etc. ...
2
votes
1answer
56 views

RSA engine with inaccessible private keys - susceptible to any attacks?

We are going to integrate some hardware accelerator for RSA into our next system on chip. This chip can accelerate the core RSA operation, i.e. modular exponentiation $y=A^x \mod(N)$. The private key (...
0
votes
1answer
140 views

Format of hybrid crypto envelope structure?

From posts including the accepted answer to How to encrypt file with RSA and AES that anyone with RSA key can decrypt them? hybrid crypto (AKA envelope encryption) a GPG-encrypted file has an ...
0
votes
1answer
52 views

Send content to owner of gpg public key, nested content symmetric encryption

If I want to encrypt a text content file using a symmetric algorithm like AES, is there a standard format gpg will expect, where it can detect a symmetric key (encrypted with recipient gpg public key ...
2
votes
1answer
28 views

Patterns flaw to sign a counter with public key encryption protocol

In modern asymmetric encryption protocol, like secp256k1, are there any flaws if you want to sign a counter? i.e: use a private key to sign from 1-n is that any chance make n+1 easier to guess?
1
vote
1answer
187 views

Why does DH-EKE require that public keys be indistinguishable from random?

The introduction to SPAKE pre-authentication states: Diffie-Hellman Encrypted Key Exchange (DH-EKE) is the earliest widely deployed PAKE. It works by encrypting the public keys of a Diffie-Hellman ...
3
votes
1answer
282 views

Performing a dictionary attack on RSA/ECB with no padding

I have the exponent $e=2^{16}+1$ and modulus $n$ (154 digit number) of an RSA public key along with the ciphertext (64 bytes) encrypted using the same key with RSA/ECB and no padding. I am required ...
57
votes
2answers
34k views

Impacts of not using RSA exponent of 65537

This RFC says the RSA Exponent should be 65537. Why is that number recommended and what are the theoretical and practical impacts & risks of making that number higher or lower? What are the ...
1
vote
2answers
142 views

How to calculate Trace function for a point on an elliptic curve

I encountered trouble with calculating Tr (trace function) for points on an elliptic curve in polynomial basis ( $GF(2^m), m = 431$). Maybe there are any assumptions that can simplify and allow ...
2
votes
3answers
158 views

For elliptic-curve cryptography, does a 256-bit key imply that $x$ and $y$ are each 256-bits or 128-bits?

In the wikipedia article, the claim is made that "256-bit elliptic curve public key should provide comparable security to a 3072-bit RSA public key". Since, in ECC, the public-key consists of a point $...
1
vote
2answers
1k views

A private key with multiple public keys?

I'm trying to design a wallet, where any number of public keys can be handed out. Say Alice hands out the public keys to receive messages. She doesn't want others to be able to link all of the public ...
2
votes
0answers
155 views

What standards of ECC point compression exist?

The method that I used before to decode EC point from public key led me in a dead end. So I just want to know what yet I could try. I've got a public key that I don't know how to decode and I am ...
2
votes
2answers
92 views

Limiting how many key pairs someone can generate without compromising their keys

Is there any way to assign someone a limited quota for how many cryptographic key pairs they can generate (ECC, RSA, any algorithm), and preferably non-interactively? By non-interactively I mean there ...
0
votes
1answer
134 views

Why does the Node crypto library do Diffie Hellman this way?

I was sifting through the Node Crytpo library and I came across their Diffie Hellman utility class. Their class implements a generateKeys function that, in their ...
48
votes
3answers
28k views

Definition of textbook RSA

What is the definition of textbook or "raw" RSA? What are some of the properties of textbook RSA? How does it differ from other schemes based on RSA?
4
votes
1answer
966 views

DGK Cryptosystem Key Generation and Decryption Issues

I detailed here the DGK (Ivan Damgård, Martin Geisler and Mikkel Krøigaard) cryptosystem, and I managed to get it to work, most of the time... The BIG problem that I am facing at the moment is that ...
1
vote
1answer
812 views

DGK Cryptosystem Encryption Speedup

Following @poncho's nice clarification of the RSA speedup here, let's see if I'm able to do the same in the case of the DGK cryptosystem: We have pk = (n, g, h, u), sk = (p, q, $v_p$, $v_q$) which ...
0
votes
0answers
203 views

Size of group for Elliptic curves vs RSA for equal security

For my research, I would like to compare the efficiency of a scheme when instantiated with Elliptic curves and RSA. So, I would like to know a "latest" comparison (as of 2018) on what group sizes of ...
0
votes
1answer
163 views

RSA How to select a value K such that $e d = 1 + k \varphi(N)$ holds

I am learning RSA cryptography. The part I am stuck on is understanding how k and the public exponent $e$ is selected. Given the formulas; Decrypting: $c^d \bmod N = (m^e)^d \bmod N$ Which is equal ...
2
votes
1answer
124 views

Detect MITM with hashed session-key — Is my protocol secure?

I have the following setup: An app ("client") wants to communicate securely with a device I created ("server"). The client has the public key of the server (and a hashed password) preinstalled. I use ...
4
votes
2answers
110 views

Cryptographic scheme where a single message cannot be decrypted but if combined with other it can be

i'm wondering if this type of cryptographic scheme does exists. I know about homomorphic encryption but if one has the private key, he can decrypt every single message. I would like to know if there ...
6
votes
2answers
345 views

Do standalone Oblivious Transfer (OT) Protocols exist?

Are there any Oblivious Transfer (OT) protocols that don’t rely on asymmetrical encryption, public-key encryption or key-exchange? I’m starting to wonder, as all the OT protocols I know of (and can ...
0
votes
1answer
74 views

Is the only use for the private key of a root certificate signing certificates issued by it?

A root certificate can be used to issue intermediate certificates. The private key of the root certificate is needed in order to sign any intermediate certificates. However, after that, we only need ...
1
vote
1answer
192 views

What are the different use cases between an HMAC and digital signature? [duplicate]

I understand that both an HMAC and digital signature are used to check the integrity and authenticity of a message. Further, I understand that a digital signature is non-repudiatible. What I do not ...
1
vote
1answer
85 views

Is a digital signature of use if you don't also encrypt the message containing it?

I'm sure this has been asked before. Its just too blindingly obvious. from wikipedia "Digital signatures, in which a message is signed with the sender's private key and can be verified by anyone who ...
1
vote
0answers
97 views

TPM 2.0 Reissued EK Cert

Unlike the TPM 1.2 module, the TPM 2.0 specification allows the platform user to create own ...
1
vote
1answer
75 views

How to exchange a secret through untrusted server in two steps?

I have a web application where I control the server, however, it should not have any knowledge of secrets that are exchanged between its users. This server holds RSA public keys of each registered ...