Asymmetric cryptography, or public-key cryptography, is the foundation of security protocols that do not require shared secrets.

learn more… | top users | synonyms

-3
votes
0answers
76 views

Do banks use anything besides AES encryption? [on hold]

I know that AES only comes in three sizes (128, 192, 256) but does that mean that banks only use these three for their symmetric and asymmetric encryption? Do any of the big banks use bigger key sizes ...
2
votes
1answer
90 views

What is the difference between a digital signature and whole message encryption?

I am newbie in information security I am trying to understand the difference between a digital signature and encryption of a message. Lets consider simple example of email message. I understand how ...
0
votes
1answer
45 views

How to verify the signature value in a SSL certificate?

According to RFC 3280 a certificate's basic syntax is Sequence := { tbsCertificate signatureAlgorithm signatureValue } In tbsCertificate, SubjectPublicKey is the public key of the ...
7
votes
3answers
1k views

What are the disadvantages of using public key cryptography when encrypting files? [duplicate]

I am wanting to encrypt a file with my public key, my friend told me that this is not a good idea but did not explain why. Can someone explain please.
7
votes
5answers
184 views

Secure application data transmission via SMS channel

There are mobile banking applications that use SMS channel to communicate with their server. Some of them offer both internet and sms channels which the customer gets to choose from. While there's ...
2
votes
1answer
44 views

What does it mean to sign a public key and what's wrong with signing someone else's key?

I just stumbled upon this comic and I'm not sure if I understand what's going on. I googled and I figured that somehow people can sign other people's public keys and then they that person is ...
-1
votes
0answers
29 views

Decrypt asymmetric private key with user password [closed]

I want to store sensitive information in database. My idea is I use RSA encryption I store public key in database and I would like to decrypt private key with user password and I also store this in ...
0
votes
0answers
51 views

For multiple clients it's better symmetric or assymetric encryption?

I'm a newbie in the encryption world so I'm here for asking which is the best solution between Symmetric and Asymmetric encryption. In our use cases, we have multiple clients that must be ...
1
vote
1answer
193 views

SQL Server Asymmetric Encryption Keys

I have used SQL Server database with data to be encrypted and I will use symmetric key for encryption and will encrypt it by asymmetric key now comes the question how to give user permission to ...
1
vote
1answer
65 views

how is public key being exchanged in asymmetric cryptography?

I understand that exchanging public key between parties is challenging task in asymmetric cryptography.Can someone help me understand how it is achieved?
1
vote
2answers
84 views

How are private and public keys different?

While reading about DKIM I saw that the sender's private key is used to encrypt a hash, later decrypted by the recipient using the sender's public key. This is exactly the other way compared to ...
99
votes
6answers
66k views

“Diffie-Hellman Key Exchange” in plain English

Can someone explain to me what Diffie-Hellman Key Exchange is in plain English? I have read in a non-tech news page that Twitter has just implemented this technology which allows two persons to ...
5
votes
1answer
2k views

How secure is GPG symmetric encryption?

Since I am new to encryption and have recently been losing stuff, I decided to start a file that contains some passwords for online accounts and whatnot, encrypt it, back it up (and keep a single copy ...
0
votes
2answers
96 views

Password based Asymmetric Key generation

I am looking for a password based key derivation scheme that results in an asymmetric key pair. I have worked with PBKDF and its variants but could not come up with any way of generating a key pair. I ...
11
votes
1answer
365 views

Recommended operational security for generating one's primary key pair?

I have been looking for an operational security guide for generating one's asymmetric key pair for (Open)PGP. I have found plenty of technical guides for how to use GnuPG to generate RSA key-pairs, ...
0
votes
1answer
40 views

How to make a good choice between Symmetric and Asymmetric [closed]

Here and there and read a lot of articles and blog posts titled "Difference Between Symmetric Cryptography and Asymmetric Cryptography". But inside of them they are answered "What is Symmetric ...
-5
votes
1answer
77 views

What happens if two parties have the same public key? [closed]

What would happen if I get a public key that someone else already has? Isn't the security very weak in that case?
3
votes
5answers
136 views

Is it secure to ship public key with license file?

I've implemented a licensing client and server for our web-applications. Currently there is only one way for licensing an app, user should manually upload the license file using specified form and ...
5
votes
3answers
158 views

Public Key Encryption instead of passwords

As an alternative to using passwords, customers could be provided with individual asymmetric-encryption key pairs (i.e. a private key with associated public key), which could be used to validate their ...
0
votes
0answers
52 views

stream cipher & e-banking

As I read on internet, I ran into these two question. Yet, I thought about it but still don’t know how to tackle it. May I have your help? (a) During an e-banking transfer the bank uses a stream ...
0
votes
2answers
53 views

Asymmetric Encryption for Multiple Recipients?

Let's assume an arbitrary group of people who hold a key pair and who make their public key online accessible. Let X, A, B and C be arbitrary people from that group. Now X wants to encrypt a message ...
9
votes
3answers
17k views

Encrypt data within mobile app and send to web service

I'm developing a mobile application for Android and iOs. What is best practice when it comes to data encryption within the mobile application which will be sent to a web service? Basically I will ...
-3
votes
1answer
53 views

ssl - How is asymetric algorithm used in SSL/TLS?

Okay I have read the questions here on how SSL works, but they all focus on symmetric encryption. But I have configured Apache WebServer to use RSA for SSL using the openSSL tool. Now my question is ...
8
votes
2answers
800 views

ProtonMail security concerns

This TED talk brought me here. First of all, to those who created ProtonMail: Nice job!!. Regardless of what people say, it's definitely a big step forward from tradition options like Hotmail, Gmail ...
42
votes
4answers
5k views

Why is key exchange necessary at all?

Let's say "Alice" and "Bob" want to communicate with each other over an insecure network. Using Diffie–Hellman key exchange, they can get the same symmetric key at last. However, as I understand, ...
2
votes
1answer
44 views

Use asymmetric encryption once to exchange symmetric key

I'm developing a json API that should be able to handle a huge amount of clients. To make this work I need to reduce the overhead as far as possible. One of the ideas I have is to use https only in ...
2
votes
2answers
1k views

Does public key auth in SSH prevent most MITM attacks?

I found this article that claims asymmetric crypto signature of DH-obtained key prevents MITM: http://www.gremwell.com/ssh-mitm-public-key-authentication Key idea: The value of 'signature' is a ...
0
votes
3answers
128 views

In message signing, is the digest encrypted with a generated symmetric key or with the sender's private key?

I understand the encryption process uses a generated symmetric key to encrypt a message, and then encrypts the symmetric key with the receiver's public key before it is sent across the wire. This ...
1
vote
0answers
52 views

Purpose of MAC when encrypting? [duplicate]

Really basic question, but what is the purpose of using a MAC/HMAC when you are encrypting using a symmetric key algorithm? It is my understanding that the purpose of a MAC is to authenticate the ...
1
vote
0answers
60 views

Curve25519xsalsa20poly1305 key derivation

I'm working on batch-encryption of files, for a small project of mine. The files are stored encrypted on a removable drive, and the keys are stored on a trustful server. For enhanced safety, I'd like ...
0
votes
1answer
80 views

In Asymmetric cryptography, is the number of Private Keys limited?

My question is a bit of a leading question, because I assume that the number of Private Keys is a finite number. However, it is possible that the number is such a large number that it would ...
1
vote
1answer
68 views

Need asymmetric encryption(not signing) where server encrypts and client decrypts

So I'm trying to build a licensing server, where the licenses of the applications need to be checked when logging in or when the application gets used. But some of those application work offline most ...
1
vote
2answers
187 views

Difference between KMS and PKI

While the PKI System deal with digital certificates life cycle and Key Management System (KMS) deal with keys life cycle. What is the the fundamental difference between them? Is it possible to ...
0
votes
1answer
309 views

RSA: same symbols in plaintext give same symbols ciphertext?

I just started studying Information Security, but I just ran this program: http://www.sanfoundry.com/cpp-program-implement-rsa-algorithm/ and faced this strange thing. For small keys (don't try to ...
3
votes
2answers
201 views

Why can I sign but not encrypt?

-edit- After following a chain of links from this question I see this is similar/duplicate of Why should one not use the same asymmetric key for encryption as they do for signing? but this question ...
1
vote
1answer
101 views

Cloud-based IM protocols / services saving messages encrypted on server which is decryptable only by user? [closed]

I am looking for a cloud-based (i.e. not end-to-end) secure IM protocol or service. The first one comes to my mind is telegram. Here is a quote from telegram's privacy policy: Cloud Chats ...
2
votes
1answer
10k views

Encrypting string in JavaScript and decryption in Java [closed]

I would like to know if there is any library to do encryption in JavaScript and decryption in Java. I have already tried many APIs, but am not getting the same values in Java. I want public-private ...
7
votes
2answers
229 views

Can symmetric key cryptography provide identification?

I understand that PKI uses digital certificates to link a public key to an entity, but is there anything similar for symmetric cryptography. If, theoretically, PKI didn't exist, how do you know you ...
3
votes
1answer
158 views

Is this symetric or asymetric encryption?

I’m at the beginning of my journey into the world of security. I am reading about the most fundamentals topics and I have encountered something unusual that has thrown me. The Conundrum: I have come ...
1
vote
3answers
2k views

How to use public key in ~/.ssh for asymmetrical encryption with OpenSSL

I want to do an asymmetrical file encryption: openssl genrsa -des3 -out private.key 4096 openssl rsa -in private.key -pubout -out public.key openssl rsautl -encrypt -pubin -inkey public.key -in a ...
2
votes
1answer
207 views

How does this encrypted webmails works?

In the last days I was looking on Tutanota, ProtonMail, LavaBoom, and others webmails that promise to respect users privacy. For all those, the one I most liked was Tutanota. I did few tests with ...
3
votes
1answer
1k views

difference between public key and host key and security of host key

In SSH, what is the difference between host key and public key. Public key I believe that is part of private/public key pair, so, that anything sent by server(encrypted using private) can be ...
11
votes
0answers
481 views

Strength and length of Symmetric vs Asymmetric keys [duplicate]

There are many questions surrounding the differences between symmetric and asymmetric encryption keys. I think I've read them all at this point. But I'm still left wondering: Why does a "secure" ...
0
votes
2answers
522 views

Is an >=2048bit key with Asymmetric encryption secure enough to negotiate a Symmetric encryption key?

Let's say that a client app already knows the public key of the server to which it needs to communicate with and the client app needs to connect to the server using a normal non-secured internet ...
1
vote
1answer
137 views

All users can write only one can read system

The system I want to implement has the following requirement: All users can insert some sensitive data, but only one, master user, can see it. There is any known, already implemented solution to this ...
0
votes
2answers
114 views

Public Key Transfer between two Applications

I have a Service written in c# which uses asymmetric Encryption to Encrypt Data, and a client application which Decrypts the Encrypted data received from the service. How can I do the following ...
0
votes
1answer
165 views

How can I generate some public and private keys on both sides with low overhead?

We have an Authority Center (CA) generating some public and private keys for each client (more than one pair for each client). One method for sending keys to client is sharing a secret key between CA ...
1
vote
1answer
274 views

“Inverted” asymmetric encryption

I am developing a system to prevent frauds in tickets. What do I need? An algorithm to generate a QR Code that will be shown to my clients in a ticket. An algorithm to validate (offline) the ...
3
votes
2answers
847 views

How Securely Store Sensitive Data on Mobile Appliation

i want to develop a mobile bank app (windows phone, android, ios) that interact with bank channel. first time when user opens application the key exchange process begins and at end of this process a ...
1
vote
0answers
47 views

SSL Asymmetric encryption newbie [duplicate]

I am relatively new to the world of cryptography and was wanting to develop a webpage which allows credit card payments. Thus, I looked into the digicert ssl service, hoping that it could do what I ...