The asymmetric tag has no wiki summary.
5
votes
1answer
116 views
Why a symmetric key for HMAC?
I am working on securing a RESTful API and am using the Amazon AWS HMAC model as my guide. I am struggling with coming up with a secure way to store the symmetric keys on my end. What is the standard ...
2
votes
1answer
127 views
How large RSA-keys could the worlds combined computer power factorize in reasonable time?
If you combined every microprocessor on earth into one humongous computational cluster, how large RSA-keys could you factor in reasonable time (lets say a few years)?
I know from reading the answers ...
4
votes
3answers
99 views
What SSL options should not be used?
What SSL options should be avoided, due to recently discovered weaknesses? This might include symmetric algorithms, or MAC functions.
4
votes
2answers
112 views
What asymetric scheme provides the shortest signature, while being secure?
I've had a look at several signature schemes (DSA, ECDSA for the most common ones), and am wondering about whether there exist a scheme that would have the following properties :
Be asymmetric (one ...
5
votes
3answers
125 views
What specific padding weakness does OAEP address in RSA?
It's been recommended to use OAEP when padding messages to be encrypted via RSA, to prevent known plain text attacks.
Can someone elaborate this in better detail? I'd specifically like to know the ...
0
votes
1answer
137 views
Can I ensure that a public key derived from a private key is unique?
In asymmetric cryptography, is it possible to ensure that public key derived from a given private key is unique, no matter the algorithm?
4
votes
1answer
176 views
Potential issues with Kim Dotcom's new proposed “encrypted webmail service”
Just spotted a Reddit thread about Kim Dotcom, of MegaUpload fame, planning to produce a secure webmail system that allows people to communicate securely, without the worry of having their messages ...
3
votes
2answers
370 views
How X509 Certificates are used for Encryption
I have small doubt regarding the process of X509.
I am aware of OpenPGP Encryption/Decryption, where we generate the public key and private key. We can share the public key to vendors and they can ...
1
vote
3answers
589 views
Encrypt data within mobile app and send to web service
I'm developing a mobile application for Android and iOs. What is best practice when it comes to data encryption within the mobile application which will be sent to a web service?
Basically I will ...
1
vote
1answer
202 views
Asymmetric crypto to store credentials in HTML LocalStorage
We are developing a Mobile web app where the users want (and it is a non relaxable requirement) to be logged for a very long time.
The solution we are developing has a web-client part in HTML+JS and ...
5
votes
3answers
370 views
Is a 512 bit RSA key secure when used temporary?
Is a 512 bit RSA key secure when a new key gets generated and used approximately once a week? The key is only used for signing messages, not for encrypting sensitive data.
This is for a system where ...
1
vote
2answers
463 views
KDC(Key Distribution Center) vs Asymmetric Key Exchange
Today I was reading notes about cryptography and I came across a problem that exists in Symmetric Key encryption, which is how to share the secret key across the network.
1st Method :
Make use of ...
130
votes
8answers
52k views
Why not use larger cipher keys?
RSA Security commonly uses keys of sizes 1024-bit, 2048-bit or even 3072-bit. And most Symmetric algorithms only between 112-bit and 256-bit. I do realize that the current keys are secure enough for ...
1
vote
1answer
263 views
ECDH is better than plain RSA? [closed]
RSALabs recommend using at least 4096 bit long RSA keys to encrypt emails but we have some performance difficulty with 4096 RSA. my noob question is what is ECDH (i didn't understood from wikipedia ...
15
votes
6answers
634 views
Principle of asymmetric algorithm in plain english
I was giving a presentation to my colleagues about cryptography basics in which I explained about asymmetric algorithm and its use. One of the common question from the audience about asymmetric ...
5
votes
1answer
189 views
Most efficient key algorithm for a TLS server key?
Let's assume I want to setup a HTTPS service on a modern-but-no-so-speedy x86 server without any form of hardware cryptographic accelerator.
Which key algorithm should I choose for the server key in ...
3
votes
2answers
331 views
Shared Secret, is it a public key or a private key?
Reading the Diffie-Hellman non mathematical explanation i found that some mathematical operations are performed on private-key and the recipient's public key to generate a "shared secret" on both ends ...
4
votes
4answers
350 views
Is asymmetric encryption ever recommended for long-term storage?
Is asymmetric encryption ever recommended for long-term storage of data, is it advisable for example to store data in a database such that:
1) A user enters data on a website, it is encrypted using a ...
3
votes
4answers
673 views
Asymmetric crypto: Decrypt own messages without having private key
I have built a messages system for my website. Users can send the admin messages which are stored in the DB after being AES-encrypted.
I think that using asymmetric crypto (RSA through openssl) ...
1
vote
2answers
2k views
Encrypting string in javascript and decryption in java
I would like to know if someone know any library to do encryption in javascript and decryption in java. I have already tried many API, But getting not not getting same values in java.
I want ...
5
votes
2answers
867 views
What asymmetric encryption algorithms are in common use beside RSA?
I am looking for an asymmetric encryption algorithm other than RSA?
3
votes
5answers
4k views
Is there a simple example of an Asymmetric encryption/decryption routine?
I can understand Java, Perl and JavaScript code very well. The rest, I have not studied, but I guess I could figure out how to read/translate.
I would like to know what the simplest of Asymmetric ...
