Key generation is the process of generating keys for cryptography. A key is used to encrypt and decrypt whatever data is being encrypted/decrypted.

learn more… | top users | synonyms

1
vote
1answer
343 views

keytool -genseckey -alias TDES -keyalg DESede -keysize 128 works within jre/bin folder but not when the keytool.exe is on another location

I would like to create a TDES key with size 128bits and 2KTDES key with 192bits for authentication in a Desfire smart card. Hence I have used the keytool to generate the jceks with the following ...
-5
votes
2answers
48 views

Javascript web-based key derivation [closed]

Is there a website with a key derivation function running entirely in client-side Javascript? The string which is used to generate the key cannot be seen outside the client. It shouldn't use a run-...
1
vote
2answers
58 views

Guessing the whole PBDKF2 output from 1 half

If I use PBDKF2 with a good enough password and salt to generate a 2n bytes key, does knowing the first or last n bytes make it any easier for a 3rd party to guess the other half of my key than using ...
3
votes
1answer
180 views

How bad an idea is intentionally using short RSA keys for signing CloudFront private-content URLs?

While pondering a question on SO about efficiently generating signed private-content URLs for CloudFront I decided to check what sorts of savings could be found by using a shorter RSA key. With the ...
1
vote
1answer
35 views

Is there a cryptosystem that allows a set of auditors to confirm that they have valid Shamir or Group signatures?

Suppose I have a client that generates and sends a Shamir key (or group signature) to a set of Auditors. This key is essentially an unverified set of bytes. Each auditor wants to somehow verify that ...
1
vote
1answer
429 views

Create Public Key using OpenSSL instead of PuTTYgen for PKCS#8

I'm trying to create a public key pair for ssh-rsa authentication. If I'm using puttygen.exe, the "OpenSSH authorized_keys file" string looks like this: "ssh-rsa AAAAB3 ... 6yIK9Nbw== rsa-key-...
3
votes
1answer
108 views

output from CryptGenRandom [closed]

Can we capture the output of Windows CryptGenRandom function. Suppose an application is utilizing CryptGenRandom, as a user can we know what is the Random Number generated and given to the ...
1
vote
1answer
230 views

Security without TLS certificates

after getting an answer to Security over multi-streaming such as SCTP i have found that i do not have the capacity to give a public key or certificate to the other end securely (to be sure MitM cannot ...
4
votes
2answers
326 views

Sharing RSA keys between PGP and SSH protocols: Does this pose a security risk?

If I generate a PGP subkey that only has the authentication capablity and use this to generate an SSH keypair to authenticate Git for example, does this pose a security threat? When I do, should I ...
4
votes
2answers
116 views

Symmetric key generation

Assume I have a source that generates symmetric keys. This source could be a very solid HSM device, somewhat reliable PRNG, a compromised key generator or a hardcoded value which returns the same byte ...
0
votes
1answer
42 views

Guidelines for time for encryption key regeneration

I am looking at using a third party key distribution protocol. I do not have much details of the internals itself. However I am required to configure the time for regeneration of the (128 bit ...
2
votes
1answer
551 views

Are there any security implications in creating an SSH key for the root user?

I've written an install script on a server to quickly set up new sites in the /srv directory. It needs to do a git clone, and has to be run via sudo in order to have the permissions to do all the ...
1
vote
1answer
566 views

Does AES 256 encryption support a master key and generated (time-bombed) keys?

I have a scenario where semi-sensitive [1] data for a corporate web application is to be stored in the browser's localized storage (Indexed DB to be specific, via JavaScript). The intention is to ...
3
votes
1answer
383 views

Are WoSign S/MIME certificates generated on the server side and therefore unsafe to use?

WoSign has been in the media for offering free server and client certificates. Since one of my (free) S/MIME certificate from another CA is about to expire soon after one year and WoSign offers ...
2
votes
1answer
884 views

Determine private key size using public certificate [duplicate]

I have a public certificate in a PEM (.pem) file -----BEGIN CERTIFICATE----- MIICsjCCAZqgAwIBAgIJAMA1YIQ2JLXDMA0GCSqGSIb3DQEBBQUAMBExDzANBgNV ... 29V/R9RZOoSBHDzGPL84wm4qojMuwQ== -----...
5
votes
2answers
193 views

PKI/Why does Microsoft require my cert before encrypting an email?

Microsoft doesn't allow sending public-key encrypted messages using Outlook 2003-2012 on Windows 7-8x environments without first creating your own Digital ID or private key for signing. Per Microsoft,...
6
votes
1answer
4k views

JSON Web Tokens - How to securely store the key?

I was building a RESTful Web Service when I came across JSON Web Tokens as an alternative to traditional cookies for authentication. The concept core of this method is that the server is the only ...
2
votes
3answers
245 views

Is it safe to generate a password for a user during sign up in a web application?

I'm working on updating a web application. It currently creates a password for a user during sign up. Is asking the user to create the password themselves safer than relying on a generated password?
3
votes
1answer
199 views

OBKG on smartcard with PKCS#11

I have a new smart card with an on board PKCS#11 module and operate in a Win 8 environment. Like many cards, it can generate its own key pairs for enhanced security (only the public key can leave ...
2
votes
1answer
65 views

Session key renewal between two constrained devices

I'm not keen on encryption and security overall, so please forgive my ignorance. Let's assume the following: We have two nodes which are constrained devices (resources not sufficient for asymmetric ...
4
votes
1answer
175 views

Generating secret keys with secret keys

Hydra is a secretive organization. It is comprised of several Directors at the top, and many Agents underneath them. A Director sends Agents on secret missions. During these missions, communication ...
0
votes
1answer
96 views

Safely encrypting data received through HTTPS

I am receiving sensitive data over an HTTPS connection and need to store this on disk, encrypted so no one can tamper with it, but for reading later on. Each user in the system has a password. The ...
7
votes
1answer
427 views

RSA key generation: gpg vs openssh

When I generate RSA key for ssh (both server-side and client-side): dpkg-reconfigure openssh-server ssh-keygen the key generation is completed instantly. However, when I generate RSA key for gpg, ...
0
votes
1answer
211 views

PCI compliant RSA key generation and getting value of private exponent

Is it possible to generate RSA key and get its private exponent in clear and to be compliant with the following PCI requirement?: Keys must be generated so that it is not feasible to determine that ...
1
vote
1answer
101 views

Safenet iKey 4000 RSA key pair generation in FIPS 140-2 compliant mode

I need to generate RSA key pair and show the public and private key on screen (in a secured room). The algorithm must be FIPS approved. So I would like to use iKey 4000 which is FIPS 140-2 level 3 ...
2
votes
0answers
15 views

Why is the entropy of a session key approximately half the number of bits in the key? [duplicate]

From this OWASP page on "Insufficient Session-ID Length", it states: Assuming that the session identifiers are being generated using a good source of random numbers, we will estimate the number ...
2
votes
0answers
196 views

How is Tresorit client-side encryption key stored and managed?

I am using Tresorit on Mac OS X and iPhone. When I am using it there is always applied client-side encryption before posting the file to cloud. The key used for encryption is AES-256 and CFB mode of ...
0
votes
0answers
38 views

Distribution of key by server

I have read that in asymmetric cryptography, a system admin can generate key pairs on the server. After that, the users will be given the generated key pairs and this is an efficient way of doing this ...
1
vote
1answer
495 views

Same RSA key pair for all users

Let's say in my computer running Debian i have an RSA key pair generated by user foo and copied the public key to server_A for allowing key based authentication in ssh for foo. Now my question is can ...
4
votes
3answers
1k views

Calculate time taken to break AES key

A 256 bit AES key is required to be broken using the brute force method on a 2GHz computer. How long would it take to break the key in the best case and in the worst case situations? Assume that 1000 ...
0
votes
1answer
99 views

Looking for a way to encrypt/decrypt data using a generated key that works in Windows and Linux

I am looking for a way to encrypt/decrypt data on windows and linux platforms. The data gets encrypted in windows and the same data needs to be decrypted on linux/windows and vice versa. I understand ...
7
votes
7answers
923 views

Is it possible to make a more secure random number generator algorithm by XORing two or more less secure random number algorithms?

Is it possible to make a more secure random number generator (e.g. for cryptologic purposes) by combining two or more less secure random number generator algorithms using XOR? Here is an example of ...
9
votes
1answer
2k views

Using HMAC to generate secret keys

I am developing a platform that uses several secret keys for several usages: key1 for hashing passwords (using pbkdf2-hmac-sha256), key2 to generate non-repeating unpredictable uuids (using aes-128 ...
2
votes
0answers
29 views

Question regarding RFC7296 (IKEv2) PRF+

In RFC 7296, in section 2.13 What do the "K", "S", and T# represent? And my follow-up question is, in section 2.14 What would be the K, S, and T# equivalent in {SK_d | SK_ai | SK_ar | SK_ei | ...
3
votes
1answer
1k views

Key generation: Differences between GnuPG classic, stable, modern?

I plan to create a 4096 bit RSA&RSA key pair: gpg --gen-key --personal-digest-preferences SHA512 --cert-digest-algo SHA512 Is there any difference in generated key quality between versions 1.4 (...
0
votes
0answers
113 views

How should I organize my keys?

Suppose I have a set of computers with variegate level of trust (for example): I fully trust my own desktop pc at home I trust a bit also my smartphone, but I know it could be stolen I trust a bit ...
2
votes
1answer
117 views

Long passwords and key derivation functions

Not being a security expert, I have a rather theoratical question that I have been thinking about for quite a while now: Let's imagine an encryption software that takes a user-provided password, ...
3
votes
0answers
3k views

Running openssl s_client with an aes encrypted key fails

I'm trying to verify a 2-way SSL connection using the openssl s_client command openssl s_client -connect localhost:8883 -CAfile ca.pem -cert client.crt -key client.key The openssl s_client fails ...
2
votes
1answer
154 views

Why is using [x] to generate random keypairs a bad idea?

Anyone who has generated large GPG public/private keypairs has come across this annoying message: "Not enough random bytes available. Please do some other work to give the OS a chance to collect more ...
4
votes
2answers
289 views

How to properly transition from standard PGP keys to using subkeys?

When I initially set up PGP, PGPTools didn't prompt me to create separate subkeys, as explained in the article "Creating the Perfect PGP Keypair". Now that I've learned a bit more about PGP, I'd like ...
2
votes
1answer
558 views

What are the typical ways to generate a One Time Password?

I'm looking for the typical ways to generate a One Time Password. I know about the HOTP and TOPT. But, in my case, the problem is that the "server" only has a display as interface and the otp-...
1
vote
2answers
243 views

Is it possible to find CryptoKey from orginal password and hashed password?

WebsitePanel is a windows hosting control panel that uses a CryptoKey to hash passwords into the databases. We have lost WebsitePanel config file and lost CryptoKey. We have to reinstall WebsitePanel ...
0
votes
2answers
217 views

Can I generate multiple PGP key pairs for later use

I was just wondering if I can generate couple of PGP key pairs and save them for later use or backup. In addition can I be sure that other wont generate and use some of my key pairs in the meantime. I ...
1
vote
1answer
3k views

Generate public key from private key [closed]

Can we generate a public key from a private key?
8
votes
2answers
590 views

Can the human brain generate cryptographically secure random numbers?

A security conscious friend of mine was attempting to generate entropy using random dice rolls to generate a random password, and I became curious about the security of random number generators and ...
4
votes
3answers
296 views

How does a chosen ciphertext attack work on textbook RSA?

I am very new to cryptography and I am confused with something. Here is the homework question I am having trouble with: Write a program to attack the Textbook RSA Encryption Scheme, in order to ...
0
votes
2answers
237 views

How to combine a key and a password in practice

Alice wants to encrypt her data. She is not comfortable with using only a password. While she prefers to use a properly random crypto key, she isn't confident she can protect the key file from theft ...
0
votes
1answer
169 views

How can I generate some public and private keys on both sides with low overhead?

We have an Authority Center (CA) generating some public and private keys for each client (more than one pair for each client). One method for sending keys to client is sharing a secret key between CA ...
1
vote
2answers
134 views

How to generate a superkey to decrypt strings

I'm working on an application where users have a key or password generated by me that is used to encrypt a string. Each user has their personal key, and no user should be able to decrypt another user'...
17
votes
4answers
2k views

Is there any reason someone wouldn't use a longer key?

Larger key sizes are said to be more difficult to bruteforce; is there any reason someone would then decide to instead use a smaller key? Is there any negative effect in using a larger key size, such ...