Questions tagged [public-key]

An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.

Filter by
Sorted by
Tagged with
2 votes
1 answer
321 views

How to solve this Baby Bleichenbacher Attack?

I am trying to solve this problem from https://toc.cryptobook.us/book.pdf. I am having trouble with this question : (Baby Bleichenbacher attack). Consider an RSA public key (n, e), where n is an RSA ...
Lightening's user avatar
2 votes
1 answer
556 views

How are public and private keys generated and used for encryption and decryption in a lattice based cryptosystem?

I've recently become quite interested in lattice based cryptosystems, and I wish to understand them more deeply. I have only a rudimentary understanding of the shortest vector problem (SVP), and its ...
Steve Mucci's user avatar
1 vote
1 answer
1k views

How to know if a public key has been created based on the ECDSA algorithm?

Suppose in a network, the identity of users is their public key, which is generated based on the ECDSA algorithm. That is, to create a valid identity, a user must generate an ECDSA public key and then ...
Questioner's user avatar
4 votes
1 answer
222 views

Zero knowledge validation to check if private element is in a set hidden on a central server

I am trying to determine how to apply ZK proofs to the asymmetric scenario below. Say there is a list of 5000 secret elements on a centralized web server. Users are trying to guess what those 5000 ...
Rurock's user avatar
  • 43
1 vote
2 answers
195 views

How do certificates help?

I am reading a networking book by Mike Meyers, and it says that a certificate is a file that contains A public key, and A signature (cryptographic hash of the public key, encrypted with the private ...
landau's user avatar
  • 113
0 votes
0 answers
53 views

minimal public-key authenticated encryption protocol

One party (master) wants to send data to another party (slave) over an insecure channel using public-key encryption and signature schemes such that: master is authenticated, data is confidential, ...
yoyo's user avatar
  • 420
0 votes
1 answer
60 views

How to evaluate efficacy of new public-key cryptosystems

Suppose I had a new public-key or key exchange protocol. How do I objectively evaluate it so as to determine if it is worth sharing with the broader community? Whenever developing a cryptosystem, it ...
user918212's user avatar
0 votes
1 answer
423 views

What are Key Size requirements (rather than modulus size) for different Asymmetric Algorithms for 112-bit security?

A lot of writeups, books & webpages say that to get 112 bit security (i.e $2^{112}$ steps), you need to use RSA or DH with 2048 key size or ECDH with 224 key size. In reality, I think what is ...
user93353's user avatar
  • 2,225
-4 votes
1 answer
453 views

Compressed Address public key [closed]

Is it possible to get the x, y of the compressed public key? I have decompress it and naturally it gives the xy of the decompress public key. I need the xy coordinates of my compressed public key . ...
Roy Nahar's user avatar
3 votes
1 answer
197 views

How can you use ZK-proofs and public key signatures in this situation?

Let us say that we have 3 entities: an Issuer I , a user/prover P and a verifier V. ...
jacobi_matrix's user avatar
0 votes
0 answers
91 views

Can two ciphertexts that decrypt to the same plaintext be statistically "distant"?

It might be a little dumb: I think it should be possible, if I encrypt a plaintext using the same public key twice, it should be possible to end up with two ciphertexts that for whom the statistical ...
Aryan's user avatar
  • 1
0 votes
0 answers
327 views

Is it secure to sign a JWT using RS256?

I have implemented an authentication scheme using JWT with assymetric keys (RS256). The idea is that (assuming some microservice-based acrhitecture) the authentication service will sign all JWTs with ...
LlewellynS96's user avatar
0 votes
1 answer
1k views

Finding the private key with the transaction signature [duplicate]

I have two ETH transactions (both belonging to the same address) that both have the same r value in the transaction signature, is it possible to extract the private key from it? Details of both ...
Hossien Basuli's user avatar
0 votes
1 answer
41 views

Authenticate people online with simple public / private key scheme or similar

How can I ensure that person X on website A is the same person who contacts me? Here is my use case. On website A I post message asking username X to contact me. Someone send me an email - how do I ...
Lofter's user avatar
  • 1
0 votes
1 answer
261 views

Can we force a chosen ciphertext to be decrypted to a chosen plaintext while controlling only $e(=3)$ in RSA? [duplicate]

I have bumped into this challenge from a well known CTF site. I don't want to make a reference to it because I don't want this to be a hint for anyone. And also to avoid giving out the source code of ...
tur11ng's user avatar
  • 962
2 votes
2 answers
225 views

How do I try a timing attack on a public-key implementation on a general-purpose computer?

I'm writing a higher-order function in Haskell for use in public-key algorithms; it works equally well for RSA or elliptic curves. I'd like to test it for susceptibility to side channel attacks. How ...
Pierre Abbat's user avatar
2 votes
1 answer
128 views

How does this libgcrypt elgamal decryption work?

Update: The question below was asked before I realized that this is being done to prevent a side channel attack: https://github.com/advisories/GHSA-5p8v-2xvp-pwmc What I am still curious about, is the ...
Derek's user avatar
  • 155
1 vote
1 answer
166 views

Bactracking resistance PRNG - real world usage

I read about bactracking resistance: http://cs.yale.edu/publications/techreports/tr1466.pdf https://arxiv.org/pdf/1810.02227.pdf https://www.schneier.com/wp-content/uploads/2017/10/paper-prngs.pdf ...
Tom's user avatar
  • 1,221
4 votes
1 answer
675 views

What asymmetric encryption to use that is safe against quantum computers?

i am currently searching for a post-quantum, asymmetric encryption since I need to keep a few files safe for the next decades. AES 256 is what I am using currently, but I would like to leverage the ...
TryingToBeABetterProgrammer's user avatar
13 votes
2 answers
3k views

Validating an RSA public key

What kind of tests can be performed on a public key to check if it is likely a valid key? The tests should be relatively fast - i.e. not computationally intensive - and not include modular ...
Maarten Bodewes's user avatar
  • 92.6k
1 vote
0 answers
59 views

Using multiple asymmetric keys as backups for one another

I've been thinking about ways to take advantage of multiple asymmetric encryption schemes so that each key could be a backup to the others in case of cryptanalysis of one given scheme. Those public ...
Olivia Leiv's user avatar
0 votes
0 answers
84 views

Are there servers that are oblivious to their own output?

Suppose there are $n$ parties with public keys $pk_1,...,pk_n$. Is it possible that a server S constructs an algorithm $A$ so that for some public random nonce $r$ given as input, S computes some &...
Doron's user avatar
  • 99
4 votes
1 answer
857 views

Is it true that Public keys with even y coordinate correspond to private key that are less than n/2 and vice versa? (Secp256k1)

The question is somewhat complex and directed to clearing things out. Suppose that $n$ is the order of the cyclic group. It $n - 1$ is the number of all private keys possible ...
Emma Lincoln's user avatar
0 votes
1 answer
56 views

QR-PKE not CCA secure

Due to a comment stating "... QR-PKE is secure (CPA)..." I've been thinking of how to prove that it's not CCA secure, and would like to understand whether my proof is correct. Here's the QR-...
Anon's user avatar
  • 403
1 vote
0 answers
52 views

Is it possible to execute multi party computation over public ledger?

Let $F(x_1,…,x_n)\mapsto(y_1,…,y_n)$ be some arbitrary computable function. Suppose there are $n$ parties, where each party $i$ encrypt its message $m_i$ with a public key $\mathrm{pk}_i$ and obtain $...
Doron's user avatar
  • 99
2 votes
0 answers
281 views

In RSA, are e and d technically equivalent? [duplicate]

In the process of finding RSA key pairs, we first find a e that is relatively prime to φ(n) (where n = p × q), and then find d such that e × d mod φ(n) = 1. Is d also relatively prime to φ(n), or not ...
SamTest's user avatar
  • 157
-2 votes
2 answers
161 views

How to modify elliptic curve point?

Good day. How I can modify elliptic curve point, like number modulo ? number example, with unknown privkey 5555555555 : 5555555555 % 2500 = 555 how to get pubkey with privkey 555, from pubkey with ...
Caraco Mongos's user avatar
15 votes
6 answers
6k views

Why do web-services tend to use preshared secret keys for client authentication instead of public keys?

Every API that I have ever signed up with gives you a secret key that you can then paste into your application. They know the key, and so do you. (The one exception may be VAPID for Web Push). Why is ...
Gregory Magarshak's user avatar
1 vote
1 answer
129 views

Is it possible to design an algorithm that is based on the xor of the plaintext bits?

Let E be some IND-CPA public key encryption scheme. Given two users with public keys $pk_0,pk_1$ respectively, each user $i$ selects a nonce $r_i$ at random and computes an encryption $c_i = E_{pk_i,...
Doron's user avatar
  • 99
0 votes
1 answer
838 views

Is there some restrictions on values of p,q,d,e etc in RSA algorithm while trying to encrypt English Ciphertext?

Background: I've seen that the value of plain text should be lesser than p*q as per this slide. I was reading Tanenbaum's Computer Network book the next night, and I saw this thing that I'm not sure ...
zeeshanseikh's user avatar
0 votes
1 answer
90 views

Is this a secure way to implement E2EE to be decrypted be multiple parties?

Problem I have a central server to store content. A user can create content and control who can decrypt this content. This needs to be secure using E2EE. How another user knows whether to fetch this ...
George's user avatar
  • 103
2 votes
2 answers
195 views

How to destroy a randomly generated key after using it?

for example, I have an encryption program like this: Input: a message, M; my public key Kpub Step 1: randomly generate a ...
Leo's user avatar
  • 99
2 votes
1 answer
357 views

How to encrypt data which never leave the client but can't be decrypted without the server?

Terms: Client: Browser, mobile app or desktop application written using using JavaScript, HTML, CSS and packaged with Capacitor / Tauri. Server: NodeJS based API. Data: Username / password Vendor: ...
webnoob's user avatar
  • 123
0 votes
2 answers
2k views

In a Diffie-Hellman key exchange Find this key and compute the shared secret key k

Hi I struggling to find the answer of my schhol exam, can anyone help me . In a Diffie-Hellman key exchange the multiplicative group of integers modulo p is used with the parameters p = 59, g = 3 mod ...
Yen's user avatar
  • 3
11 votes
3 answers
3k views

Is there any way to (irrevocably) *transfer* a private key to another person?

Let's say that Alice is the administrator of a group. For each message generated by a group member, Alice uses an administrator's private key ($sk$) to sign it, indicating that this message has been ...
Z. Chen's user avatar
  • 185
0 votes
0 answers
481 views

RSA / RS256 Encryption with the public key I have

safe to say I'm a complete beginner when it comes to cryptography... I believe the example output below is some sort of RSA (or RS256) encrypted string, and was just curious whether it'd be possible ...
James's user avatar
  • 101
1 vote
1 answer
547 views

Why Can't I Use an Nacl Sign Keypair for Encrypt and Decrypt Operations?

I'm aware that the difference between the NaCL sign keys vs the box keys is that the secret key that comes from the NaCL box keypair is the ...
planet-pranav's user avatar
16 votes
4 answers
5k views

Is there a cryptographic algorithm that can make a "lottery ticket"?

With public-key cryptography, I know Alice can "seal" a message that only Bob can open. But in that case, Alice knows the message that she is sealing. What if Alice wants to seal a random ...
mherzl's user avatar
  • 263
0 votes
0 answers
73 views

Check if pubkey belongs to twisted Edwards25519

I want to check if some pubkey belongs to twisted edwards25519 (I guess this is used for ed25519 ?) The problem is that I have in theory some valid pubkeys like: ...
bladzio's user avatar
  • 103
2 votes
1 answer
2k views

How can a root CA be kept offline and function

Based on many suggestions I have seen around, this, that.etc. Best practice says to keep the root CA offline for very understandable reasons. But how can it be truly offline? Doesn't the root ca have ...
dobro's user avatar
  • 21
6 votes
1 answer
207 views

Will a semi-hyperelliptic pairing be used in real-world cryptography if it is faster than state-of-the-art elliptic pairings?

Let $\mathbb{G}_1$, $\mathbb{G}_2$, $\mathbb{G}_T$ stand for three groups of the same large prime order $r$. I invented a pairing $e\!: \mathbb{G}_1 \times \mathbb{G}_2 \to \mathbb{G}_T$ (with ...
Dimitri Koshelev's user avatar
0 votes
0 answers
293 views

RSA with huge ciphertext

I am trying to find the flag from an RSA ciphertext, I am able to get the factors from factordb.com but the given e is not ...
CipherNewbie's user avatar
1 vote
1 answer
213 views

How to know that MAC isn't modified in ECIES

I am new to ECC but I was wondering, If there is a situation where instead of the ciphertext being falsified, the sent MAC was tampered. How does the receiver verify that the ciphertext is still ...
Kibnakamoto's user avatar
1 vote
2 answers
170 views

Prove a plain text belongs to encrypted data

Given an encrypted (RSA) message and it's original plain text, is there a way to prove that the plain text belongs to the encrypted message ?
justACoder's user avatar
2 votes
0 answers
57 views

Generating pairs of elliptic $\mathbb{F}_q$-curves isogenous over $\mathbb{F}_q$ such that nobody knows an $\mathbb{F}_q$-isogeny between them

Let $\mathbb{F}_q$ be a large finite field. What if I invent how to efficiently construct pairs of elliptic "cryptographically strong" $\mathbb{F}_q$-curves $E_1$, $E_2$ isogenous over $\...
Dimitri Koshelev's user avatar
3 votes
2 answers
712 views

Are digital signatures unique for the messages they sign?

Practical implementations of digital signature algorithms (DSAs) employ hash functions to ensure that input is small and of a fixed sized; otherwise, DSAs would be too slow for most real-world ...
Taylor Hardin's user avatar
1 vote
1 answer
66 views

Are RSA keypairs proof of work?

My computer generates a 65536-bit RSA keypair in 106 minutes. Is there a way to generate them faster by some trade-off? Can they be created in bulk, so long as they're able to encrypt and decrypt? Is ...
Brent's user avatar
  • 111
0 votes
0 answers
28 views

Can a private key be reverse engineered when a 3rd party has a lot of my digital signatures? [duplicate]

I am wondering how secure it is to share digital signatures with a 3rd party (signed using one private key). For example, let's say I'm signing a million different messages with my private key and ...
Vlad's user avatar
  • 569
0 votes
2 answers
104 views

Is there any Cryptographic loop function that returns first input?

I want to use cryptographic function that returns the initial input or something related to it like its hash, the function should work like Encrypting some data or its hash, then encrypt the output of ...
Mohamed A. Taha's user avatar
0 votes
1 answer
177 views

Proof that user compressed public key corresponds the curve equation (secp256k1)

I am trying to check if some compressed public key corresponds to an elliptic curve equation (secp256r1). As far as I know it should be valid once the following equation is fulfill y^2 = x^3 + ax + b ...
bladzio's user avatar
  • 103

1
3 4
5
6 7
47