Questions tagged [public-key]
An asymmetric cipher is an encryption scheme using a pair of keys, one to encrypt and a second to decrypt a message. This way the encrypting key need not be kept secret to ensure a private communication. Similarly in public key authentication, the verification key can be public and the signing key private.
1,616
questions
6
votes
2answers
292 views
The difficulty of computing discrete logs
I understand that in Diffie-Hellman it should be hard to compute $a$ given $g$ and $g^a$.
In computational Diffie-Hellman, it appears to be hard to compute $(g^{ab})$ from $g^a$ and $g^b$.
As for ...
6
votes
2answers
302 views
Is there a partially homomorphic quantum secure public key cryptosystem with IND-CCA1 security?
I recentely asked "IND-CCA1 RSA padding?" about whether there is a IND-CCA1 secure variant of RSA. The original version of the question also allowed usage of ECC which would allow usage of ElGamal, ...
6
votes
3answers
5k views
Why use a timestamp and how can someone know it's the correct one?
Let's say A wants to send a message, so everyone who gets the message, can be assured that it's from A. A then sends a message ...
6
votes
1answer
12k views
Can a server's ECDSA fingerprint be spoofed during SSH?
I have read somewhere that Servers which have SSH access for users in the public can have their public key posted publicly (e.g., on a website), so that people who access such a server using SSH can ...
6
votes
2answers
365 views
Finding the subgroup in isogeny-based cryptography
Isogeny-based cryptography is one of the newest post-quantum cryptography. Hardness of this system is based on finding isogeny between two elliptic curves. Also this is theorem:
Elliptic curves are ...
6
votes
1answer
848 views
Private and Public Keys
I have a very basic understanding of encryption and the encapsulation process, but for the life of me I can't grasp how public keys and private keys work, how they're made, and how they're exchanged. ...
6
votes
2answers
6k views
How to measure ECC key size?
I have implemented a ECC key generation scheme successfully. Now I need to find ECC key sizes of each generating key pairs. I assumed that ECC key size is the size of the ECC private Key.
So I would ...
6
votes
2answers
4k views
Are there any elliptic curve asymmetric encryption algorithms?
RSA offers the functionality of encrypting (short messages, or symmetric keys) with a public key, and decrypting with a private key. However, RSA key generation is extremely expensive, especially for ...
6
votes
1answer
254 views
Are there groups where the computational Diffie Hellman problem is easy but the discrete log problem is hard?
I know that there are elliptic curve groups, used in pairing-based cryptography, where the decisional Diffie Hellman problem (ie. given $g$, $g^a$, $g^b$ and $c$, determine if $c = g^{ab}$ is easy but ...
6
votes
2answers
637 views
Can an RSA public key be generated without ever knowing the factors? [duplicate]
Context: http://blog.cryptographyengineering.com/2013/12/a-few-more-notes-on-nsa-random-number.html
Assume I wanted to use RSA as the basis for a hash function or DRBG. Also assume that my construct ...
6
votes
1answer
847 views
Question about why RSA is hard to attack
I think I understand why RSA is hard to attack but I'd like to get clarification if I actually do.
Assume there are two people, Alice and Bob, who are attempting to communicate privately but that we ...
6
votes
1answer
389 views
How are trapdoor functions developed/found and where can I find existing ones?
Trapdoor functions are a fundamental part of public key cryptography. An example of the most common trapdoor is
Prime Factorization, used in cryptosystems such as RSA
How are these trapdoor ...
6
votes
3answers
3k views
How can I prevent a message replay with RSA?
I am using RSA to encrypt some data but I would like to eliminate the possibility of message replay. By message replay I mean sending a valid message multiple times to the original recipient. It is ...
6
votes
1answer
8k views
How exactly does certificate based authentication work?
I know the concept of key generation, as well as encryption and decryption using public and private keys.
When it comes to authenticating a user by a server, in general there are three types:
...
6
votes
1answer
539 views
What is the difference between RCCA and CCA2?
Well, I know it's easy to tell CCA1 from CCA2, but I failed to find the difference between RCCA and CCA2.
What is the difference?
6
votes
1answer
1k views
Public-Key Deterministic Encryption : Why does not provide perfect security?
I've got a question about an assignment . The question is "Why a Public-Key Deterministic Encryption Algorithm does not provide perfect security ?" . I suppose it means according to Shannon .
Any ...
6
votes
1answer
1k views
Proof that padded RSA is CPA-secure
I'm referring to page 383 of J. Katz and Y. Lindell's Introduction to Modern Cryptography. The book presents a padded RSA:
${\bf Key Generation:}$ same as Textbook RSA (given security parameter $1^...
6
votes
1answer
2k views
Client and server using same SSL certificate - any issues?
I'm working on software where multiple components will communicate with each other using SSL.
There would be one central component acting as a server, which would also require the clients to present ...
6
votes
1answer
4k views
Get RSA PlainText without Knowing Private Key
If I have an algorithm,RSA-Crack(), that, for a given RSA public key (n,e), is able to decrypt 1% of the messages encrypted with that key (without knowledge of the corresponding private key).Can there ...
6
votes
3answers
624 views
Has any alternative to RSA and Discrete Logarithm been standardized for deployment?
Suppose RSA and Discrete Logarithm over any group (including elliptic curves) gets broken what other schemes we have for DEPLOYMENT IMMEDIATELY do we have to rescue the internet from collapse?
So ...
6
votes
1answer
939 views
Key Exchange & key Distribution in symmetric key cryptography
I want to know whether there is a difference between key exchange & key distribution in private key cryptography as well as public key cryptography?
or is it the same term?
6
votes
1answer
1k views
Can an U2F public/private key-pair for signatures be used for encryption?
I understand that this might be more a process question:
Given a U2F device which supports signatures using ECDSA public/private key pairs, is there a way to use the signing function of such a device ...
6
votes
2answers
233 views
How should I implement a secure recovery of encryption?
I want to create a system to host as securely as possible encrypted data in a way that not even the system can know the content of the data, but that it could be recovered.
I would like to know how ...
6
votes
1answer
47k views
How to decrypt a '.enc' file that has been encrypted with RSA using a public key? [closed]
While solving a CTF challenge online, I came across a situation where I needed to decrypt a '.enc' file that has been encrypted using someone's public key. The ...
6
votes
1answer
4k views
Are there comprehensive alternatives to RSA?
If we wished to, is there a comprehensive alternative to RSA?
I say comprehensive as I wonder if there is one which does both encryption and digital signature like RSA?
If not, simply what ...
6
votes
0answers
97 views
Why is recipient hashed in this Sign/Encrypt/Sign proposal?
Own research
In my journey into trying to understand PGP, and public key signing and encryption as a whole, I came across this answer on CE. It is an answer to a question with the title: Should we ...
5
votes
3answers
2k views
Is it possible to reduce the size of an RSA key?
The details about what an RSA key is made up of are explained succinctly here.
Is it possible to reduce the amount of data that's usually packaged with the (private) key and then derive it later?
5
votes
5answers
10k views
Why is the private key generated first in public key crypto?
I'm still new to public key crypto. I'm trying to understand how it is that the private key is generated first in public key crypto? I would have expected the private and public key to be generated at ...
5
votes
2answers
683 views
Can we say that if $P=NP$ there is no CPA secure public key encryption?
I've learned that public key encryption is based on the problem of Discrete Log (as regard to group theory) which believed to be hard.
But, can we say that it doesn't matter on which problem our ...
5
votes
2answers
1k views
Raw curve25519 public key points
I'm trying to understand curve25519, and ECC public points.
I'm playing with Minisign, to better understand the fundamentals of ECC.
Minisign uses curve25519 and outputs public keys as base64 ...
5
votes
2answers
2k views
Do I really need to use the same private/public key pair in RSA?
So I'm making an Android application, I need my application to be only able to scan my own generated QR codes, and I want to make sure that nobody else can generate fake ones.
The data isn't ...
5
votes
4answers
1k views
Alternative to NSA encryption algorithm
I am looking for a strong alternative to elliptic curve cryptography. It should be something that could face quantum computing attacks, but nothing created by the NSA.
I heard about isogeny key ...
5
votes
2answers
2k views
Why is Diffie Hellman used alongside public keys?
I just read this post here: Why do we need asymmetric algorithms for key exchange? that asserts that in public key cryptography when asymmetric keys are used to secure communications, for parties to ...
5
votes
4answers
3k views
Is it possible to create an open-source SecurID?
As far as I understand it, the hardware key-fob two-factor systems such as RSA SecurID depend on secret algorithms, and employ tamper-resistant hardware to prevent reverse engineering.
Is there some ...
5
votes
1answer
853 views
RSA using 2 as a public exponent
I'm failing to see why 2 can never be used and what weaknesses would be associated with doing so.
There's a similar question asking why it has to be in the form of $2^n$+1 but why not $2^n$
5
votes
3answers
2k views
public key cryptography and digital signature
I read the following from Understanding Public Key Cryptography on Microsoft TechNet:
Using a private key to establish identity shows that the full
encryption and decryption operation was ...
5
votes
2answers
2k views
RSA performance
I was wondering what is the performance bottleneck in RSA algorithm?
Is it the size of message, calculating the modular inverse, exponentiation?
Say I have a fixed value of n to encrypt and decrypt ...
5
votes
2answers
2k views
Difficulty of breaking RSA for a given key size
Is it true that breaking a 1024-bit RSA key is as difficult as breaking a 128 bit symmetric key (e.g. AES)? I know that breaking a RSA key is equivalent to factoring the modulus $N$. To factor it, you ...
5
votes
1answer
1k views
Is there asymmetric encryption in SSH?
I've read in DigitalOcean article about SSH that in order for a server to authenticate a client:
The server sends the client this encrypted message.
If the client actually has the associated ...
5
votes
1answer
8k views
5
votes
2answers
899 views
Public key crypto without modular arithmetic?
This comment from Reddit math, in response to a statement about how people can communicate secrets to each other with a third party listening, has a very small, simple example of public key ...
5
votes
3answers
738 views
Is there a public key semantically secure cryptosystem for which one can prove in zero knowledge the equivalence of two plaintexts?
If Alice encrypts two messages $a$ and $b$, such that $x=E(a)$, $y=E(b)$. Can Alice prove (without revealing $a$, $b$ or the private key) that $a = b$?
Obviously the proof must not be too long and it ...
5
votes
2answers
658 views
Can we use elliptic curve cryptography in wireless sensors?
Can we use elliptic curve cryptography in wireless sensors?
If so, how do you map points to message characters?
5
votes
2answers
346 views
Bleichenbacher attack, binary search, formula for $s_i$
Reading an excellent article explaining Bleichenbacher attack I came across the following statements under the formula for $s_i$:
if we pick $r ≥ 2(bs_{i-1} - 2B) / n$, we obtain
$(2B + 2(bs_{...
5
votes
1answer
543 views
ECDSA key recovery - floating point values
I'm currently attempting to recover an ECDSA key.
I have $m$, $m'$ and signatures $(r, s)$, $(r', s')$, and I know that $k$ is constant, the curve is NIST P-192 and the hash function of the. As such,...
5
votes
3answers
2k views
Fast PKI for embedded device
We are creating a device with a small microcontroller (20 MHz CPU 16 KiB RAM).
We need some way to securely send signed files to device (only signature, no encryption necessary). An external company ...
5
votes
2answers
1k views
Generation of strong primes
It seems that this is pretty difficult to find large (above 1024 bits) strong primes, or at least such primes $p$ where $(p-1)$ has a very large prime factor. Is there any information regarding the ...
5
votes
1answer
3k views
File format of an $2048$ bits RSA public key
From here, there are $14$ bytes specifying the file format of the key. I am still quite confused about the format bytes. For example, the following public key
30 82 01 0a 02 82 01 01 00 8e a3 d1 c7 ...
5
votes
2answers
272 views
Can S/MIME be still considered secure?
Previoulsy I had asked this question at https://stackoverflow.com/questions/18235983/can-s-mime-be-still-considered-secure but I feel this forum is topic-wise the right place.
Recently there has been ...
5
votes
2answers
1k views
Is a RSA-signature of some identifying data a safe way to implement a license key?
I have this idea of implementing a license key:
After the user downloads the program, he connects to a website and sends his Windows product ID.
The website, then, sends this back to him with a ...
