Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
1
vote
1answer
191 views

Decrypt RSA with known public key and modulus and the range of dp

How to decrypt RSA while given $e$,$n$ and the range of $dp$ ? ...
2
votes
1answer
262 views

How many Bits/Bytes is a public key, given its encoding

I am struggling to understand what the "bit/byte" size of a public key is, how you can work it out, and even what it means. An example of a RSA public key is: AAAAB3NzaC1yc2EAAAABJQAAAQB/...
0
votes
2answers
838 views

Counterfeit EU Green Passes

In the EU, a person will soon be able to perform certain activities (going to concerts, to sports events, etc.) only if they can present a valid Green Pass that certifies that the bearer has been ...
1
vote
0answers
16 views

What is the security implication of non-full-rank systematic matrix in McEliece cryptosystem?

The Classic McEliece cryptosystem has the following key generation procedure: Choose a field $\mathbb{F}_{2^m}$, an irreducible polynomial $g(x)$ of degree $t$, and $n$ field elements $\alpha_1, \...
5
votes
1answer
100 views

What uses are there (if any) for asymmetric message encryption?

What uses are there (if any) for asymmetric encryption of a message, instead of hybrid encryption? Specifically, I'm not considering asymmetric encryption of a symmetric key (eg old TLS RSA key ...
-2
votes
1answer
52 views

How to hack pass-protected private RSA key

I know nothing about cryptography. I must present a completed ASP project to my university that proves I have learned clingo. I have heard that the task of recovering the plaintext private RSA key ...
2
votes
1answer
80 views

Can CPA secure scheme be converted to CCA secure?

I would like to know if there are some methods or techniques that can convert a public key encryption scheme from CPA secure to CCA secure?
2
votes
1answer
43 views

Coding gain and minimum determinant in cryptography

In coding theory, the notions of coding gain and minimum determinant of a code have been defined as follows: let $\mathcal{X}$ be a (full diversity) code and $X,X^\prime\in\mathcal{X}$. Then the $\...
2
votes
2answers
162 views

Zero knowledge RSA public key

Suppose Bob has $k>1$ RSA public keys $(e_i, n_i)$ without any knowledge of their corresponding private keys. Alice also has all the public keys, but also has a private key for only one of them, ...
0
votes
1answer
41 views

The security level of secret share compared to homomorphic encryption

I want to compare additive secret share to Paillier encryption. However, I haven't found out how to set the parameters in such a way that the security level is consistent. Additive secret share (...
2
votes
1answer
50 views

Is the relationship between private and public keys an example of bijection between two sets?

Just want to make sure that my understanding is correct whether there is only one public key for any private key, and vice versa. I know that there are many algorithms, and this may not be a property ...
2
votes
1answer
51 views

How much much data can be verified by an electronic signature?

I’m trying to get a good understanding of how data encryption and signing work. I imagine these vary a bit depending on the software being used. In particular, I am wondering about this: how much data ...
0
votes
0answers
28 views

Combining WireGuard keys

I suspect the answer is "no", but still: In WireGuard [1], there's a concept of private and public keys for peers; public key derives from a private one and connection between two parties ...
1
vote
0answers
26 views

Can one prove that a particular public key is part of an aggregated (MuSig) public key?

The MuSig paper (2018) describes a Schnorr signature key aggregation scheme which lets a set of individual public keys to be merged into a single, "aggregated" public key. In the protocol ...
0
votes
1answer
91 views

Public key size for different elliptic curves

Let's say I want a certain level of security (eg 128 bits) when using ECIES but I also want to minimise communication, does the elliptic curve used matter on the size of the public key? If it does ...
0
votes
0answers
31 views

Algorithm to ensure m people signed off on a task out of a group of N

I have a task that needs M people to approve out of a group of N. I can obviously implement it in software using a basic ECC signature mechanism. The code on the "server" can send request ...
15
votes
2answers
2k views

Is there an asymmetric encryption protocol which provides arbitrarily many seemingly unrelated public keys for a single private key?

I am looking for an encryption protocol with the following properties. Alice has a private key $x$. Using this private key, she chooses public key $p$ corresponding to this private key. She let's Bob ...
0
votes
1answer
39 views

Prove data encrypted with different keys matches

Suppose user A encrypts some data using his public key and stores the data publicly. Later user A would like to transfer that same data to user B publicly by encrypting it using user B's public key. ...
1
vote
0answers
70 views

Can this kind of encryption scheme be useful in practice?

Recently, I have an idea to construct an public-key encryption scheme which contains five algorithms: Setup($1^k$): generate public parameters $pp$ and a master key $mk$. KeyGen($pp$): take $pp$ as ...
4
votes
1answer
186 views

Can modular exponentiation with a public index be considered a secure permutation?

Secure permutation can be used in Sponge and Duplex constructions to build hash functions and encryption. To potentially use them in public-key cryptography, some arithmetic properties is desired. Can ...
1
vote
0answers
32 views

Is it possible to provably make cryptocurrency tokens inaccessible?

Would it be possible to generate an agreed upon public key that has no corresponding private key (maybe by using the latest few block hashes of a blockchain) and then send cryptocurrency to that ...
2
votes
1answer
68 views

How do I validate Curve448 public keys?

Performing an ECDH calculation with an invalid public key can leak information about your own private key. With Weierstrass curves, it's important to verify that the peer's public key is actually a ...
0
votes
1answer
36 views

Domain Keys Identified Mail (DKIM)

If a company uses Domain Keys Identified Mail ("sender adds a special signature which includes author name / date signed by RSA Private Key. Receiver verifies the signature by looking up the ...
1
vote
1answer
60 views

How feasible is it to guess the private key of libsodium by taking into account generation time?

So suppose you are doing this locally (so no network noise), and know the exact specifics of your processor too. Is it feasible to figure out the private key (while having access to the public-key) ...
0
votes
1answer
78 views

How to securly save ED25519 private key on hard drive

I am developing an application which stores user's private Identity key (ed 25519) on user's hard drive without any security. What are the best practices / standards to save private key on hard drive, ...
1
vote
1answer
38 views

CrypTool RSA Features [duplicate]

I am attempting to manually encrypt a plaintext message (message = MI) using RSA. I receive an answer of: 33,264 and 21,164. When I enter the same plaintext into CrypTool to confirm that my ...
0
votes
0answers
63 views

Am I Doing RSA Correctly?

I am trying to figure out how to complete RSA manually. I am trying to encode a simple block message (Mi). I used CrypTool to determine the encryption. When I "manually" computed the ...
1
vote
1answer
82 views

Verify that x, y coordinates given as hex string are valid points on an Elliptic Curve [duplicate]

Given the following information: "curve": "P-256", "qx": "729C51D177EBE2079A0FB7B0B3C2145159CF81EC61960E642A1744719AA9F913", "qy": "...
0
votes
0answers
35 views

Decrypt encryptedKey session key using - AES-128 - PKCS-1#rsaes-kem-kdf2-kw-aes128

I have basic knowledge about how encryption algorithms work such as RSA, AES and so on. I have an XML response encrypted with both AES and RSA. I tried using OpenSSL to decrypt with several steps but ...
0
votes
0answers
30 views

How does the public-key generation work in the multivariate post-quantum digital signature GeMMS?

There are a few steps in the public-key generation of GeMSS that I am trying to understand. The first is the below equations (1). What does "$\theta_i$ forms a basis for $\mathbb{F}_{2^n}$ over $\...
1
vote
1answer
35 views

Encrypted verifiable schema with hidden content

I'm having a problem with an encryption scheme. There are two entities, $A$ and $B$. $A$ give a simple message $m \in [0,1]$ to $B$. $B$ should generate an encrypted message of $m$: $e=Enc_{pk}(m)$ ...
2
votes
1answer
62 views

Volume of an NTRU lattice

Let $K$ be a number field of degree $n$ and $\Lambda^q_h=\{(f,g)\in\mathcal{O}_K\text{ : }fh-g = 0\bmod q\mathcal{O}_K\}$, where $h$ is an NTRU public key. Then $\{(1,h),(0,q)\}$ generates a lattice. ...
0
votes
1answer
43 views

RSA encryption key conditions

I recently read the RSA cryptosystem but now I confused in key generation phase. According to the Euler's Theorem, we have just one condition: e.d = k.ϕ(N) + 1 where: "e" is encryption ...
0
votes
0answers
116 views

Given $e$ and $d$, find $\phi(n)$

Let's say we have just RSA public and private exponents $e$ and $d$ but not the corresponding modulus $n$. Is there a method to find $\phi(n)$? This is for a CTF challenge. I am not concerned about ...
0
votes
0answers
21 views

How to assert identity in a secure and non-copyable way?

Say I have the Mona Lisa, and I want to stick an RFID tag or similar mechanism on a back corner of the painting to verify this is the real Mona Lisa and any others are forgeries. What mechanism would ...
0
votes
0answers
18 views

What is the difference between openssl functions - d2i_PublicKey & d2i_PUBKEY and what scenarios decide which should be used?

What is the difference between openssl functions - d2i_PublicKey & d2i_PUBKEY and what scenarios decide which should be used?...
0
votes
0answers
29 views

How about, when using public key cryptography, one encrypts, signs, and encrypts again?

I suppose one reason for prepending the name would be that a malicious Bob could pose as Alice by encrypting the exact same message + Alice's signature using Charlie's public key, and trick Charlie ...
0
votes
2answers
89 views

What exactly is asymmetric about 'asymmetric cryptography'?

What exactly is asymmetric about 'asymmetric cryptography'? https://www.sysadmins.lv/blog-en/digital-signatures.aspx says: "In other words, anything that is encrypted by a public key can be ...
1
vote
0answers
51 views

TLS 1.3 Handshake - Usage of MAC and Digital Signature for CertificateVerify and Finished Message

I was wondering, why the TLS 1.3 handshake employs two different 'messages' that compute an authentication code over the whole handshake. As far as I understand, the CertificateVerify "message&...
1
vote
0answers
18 views

Proving the security of the public key BGV scheme

The security proof basically comes down to the following based on this paper. We want to show that two distributions are statistically indistinguishable. Say we have that $a,a′,x,x′$ are drawn from an ...
1
vote
0answers
30 views

Hashing Public Key of Lamport or Winternitz OTS

For the Lamport or Winternitz public keys, couldn't one just hash down the large public key to 256 bits in order to greatly reduce the public key size while still having basically the same security? ...
0
votes
0answers
35 views

Complete taxonomy of public-key cryptosystem primitives

This question is similar to “What primitives are needed to generically implement public-key cryptography?”, but with a more applied/contingent focus: That question asked about what's theoretically ...
0
votes
0answers
26 views

How does a forward search attack work? [duplicate]

I just came across this term “forward search attack” while reading about Interchange key and Session key. The book mentioned that using session key helps to prevent attacks such as forward search ...
0
votes
0answers
49 views

How can I enhance the security level of my RSA code?

I am trying to enhance the security level of my RSA code that I implemented in Python. I tried to add blind operation, randomized algorithm to my RSA code (separately, not together), but I am not sure ...
0
votes
2answers
199 views

What is the name of this public key encryption cryptosystem?

I have been trying to find the name of a public key encryption cryptosystem that I learnt as an introduction to cryptography some years ago but the only scheme I could find was something similar but ...
0
votes
1answer
62 views

Is cypher.js secure for sensitive data? [closed]

Is this library secure? Link to github repo Here's his explanation: Cypher does not encrypt through allocation based on mapping patterns. Cypher encryption process is completely mathematical and ...
0
votes
1answer
64 views

Is this protocol secure?

Before anyone freaks out, this is purely speculative and I am not developing a cryptosystem! I can't see anything wrong with this protocol, but my knowledge of cryptography is rather superficial: ...
6
votes
2answers
2k views

Do certificates need to be stored as encrypted?

The titles says most of what we're confused with. Here's some details: On an embedded device, we have a microcontroller and external flash memory. This memory can be easily read and written to in ...
3
votes
1answer
105 views

What is the simplest post-quantum asymmetric cryptographic algorithm for key exchange?

This question has been burning in the back of my head for the past few days, and a quick Google search doesn't yield any usable results. As the title suggests: What is the easiest-to-understand post-...
0
votes
1answer
111 views

Are zero knowledge proofs alternative private key encryption? [closed]

Are they the alternative to private keys. If I understand correctly, because of the increasing computational power in today's world, zero knowledge proofs are more safe than private keys ? Are these ...

1
2
3 4 5
39