Tag Info

Accepted

How do certificates help?

I can understand that the signature helps ensure that the public key was not tampered with. The certificate contains a lot of other information, which is all signed by the signature. An X.509 ...
• 87.1k

Create a new signature from existing DSA signatures

As far as we know, no, it's not possible to generate a new valid DSA signature from existing ones (for given public key), even for an already signed (known) message (assuming secure choice of ...
• 128k

1 vote

How does signing with FORS work in SPHINCS+?

If by redundant you mean not relevant to the signature being verified, then yes. If by redundant you mean unusable for other signatures, then no. All of the square values in the tree represent WOTS+ ...
• 14.4k
1 vote

Defending MITM attacks during key exchange

However, since the public key are modified, they can ensure that they are having a secure channel by ensuring their (alicePubKey + bobPubKey), or simplier, hash(alicePubKey + bobPubKey), is same. ...
• 1,844
1 vote

What do people use non-extractable WebCrypto keys for?

The best thing about non-extractable keys it that they are literally the only thing on the web which the web server cannot compromise. The web server can easily change up your Javascript code, to ...

Only top scored, non community-wiki answers of a minimum length are eligible