A public-key infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a PKI is an arrangement that binds public keys with respective user identities by means of a ...
2
votes
0answers
13 views
Validate XML-DSig by DVCS
Is it possible to validate an XML message (with XML-DSig or XAdES signature) by a Data Validation and Certification Server (RFC 3029)? Should it understand XML signatures or not? Could it parse XML? ...
3
votes
1answer
46 views
What is the difference between Key Escrow and a Recovery Agent?
From what I understand Key Escrow is where a copy of they key is stored in a safe place so they can be recovered later.
But in the context of PKI, a Recovery Agent can also recover private keys.
How ...
3
votes
2answers
90 views
Two-way secure communication using two pairs of public/private keys?
Let's say I want to create a protocol to securely communicate between two endpoints - each of the two endpoints know the other's public key and all data exchanged is encryted using one's public key ...
5
votes
5answers
154 views
A standard way to manually add a digital signature to a pdf file?
I've created a few certificates to use myself, but I find myself stumped when it comes to creating a certificate which contains a digital signature. First, how would I go about creating a standard ...
6
votes
2answers
202 views
Is ECDSA breakable by quantum computers?
Is ECDSA secure from quantum computers? Will quantum computers be able to calculate it's private keys from the knowledge of the public key once there are working quantum computers?
3
votes
1answer
51 views
Clarification on Digital Certificates
I used the makecert tool to create:
self-signed certificate
client certificate
These are the commands I used:
makecert -n "CN=MatthewCA" -r -sv MatthewCA.pvk MatthewCA.cer **for self signed ...
1
vote
1answer
23 views
are organizations that receive certificates considered “end entities” in a PKI?
I am trying to understand the term end-entity. Does this term just mean anybody that plays a role in a PKI system that is not a CA? So if I request a certificate from A who is a CRL issuer for ...
3
votes
1answer
196 views
Remote System Administration of an Encryption-Switch-Encrypted Infrastructure
I can't seem to find a decent explanation anywhere of the practicalities of remote system administration (e.g. SSH) of an encryption-switch-encrypted SAN-stored infrastructure.
The environment will ...
10
votes
2answers
160 views
What does having an internal two-tier PKI protect against?
There are a lot of Best Practice documents that recommend having an offline Root CA and an Enterprise Subordinate CA that is signed by the root, for an internal Microsoft AD Certificate Services ...
3
votes
2answers
144 views
BOTs C&C channels
Can someone please explain the C&C for bots ?
im reading a paper about Android bot , and its explaining something called URL flux
as method of C&C . however i couldn't really get it , so ...
1
vote
1answer
130 views
Does Java's implementation of OCSP and CRL checking handle intermediate CAs?
I've read that Java provides OCSP and CRL checking for CertPaths via:
Security.setProperty("ocsp.enable", "true");
System.setProperty("com.sun.security.enableCRLDP", "true");
Do these implementations ...
4
votes
2answers
133 views
SSH password vs. key authentication
I've usually been told that public key authentication is strongly preferred over password authentication for SSH. However our previous admin was against public keys and only issued passwords and took ...
1
vote
1answer
70 views
generating RSA keys through the browser
HTML5 has the element that sends an SPKAC to the server (as I understand it).
But how do you do it in IE?
One CA's websites gives me the following prompt:
This Web site is attempting to perform a ...
1
vote
1answer
77 views
x509: must the signature algorithm and public key algorithm match?
I'm having trouble getting Firefox to send an encrypted message using a certificate, and I've found that the only difference between this one and others that work fine are that this one has a DSA ...
4
votes
1answer
150 views
Why is ECC more vulnerable than RSA in a post-quantum world?
Forgive me if this should be in the crypto sub, but sometimes the answers there are very mathematical and I would rather have an answer which is a bit lighter on the math but still strong on the tech ...
1
vote
1answer
80 views
Can I use any ssl certificate to sign and encrypt AS2 message?
I'm absolutely new to this topic of ssl certificates, so please be patient with me.
My task is to install an AS2 communication with some business partner. Therefore we need message signing and ...
1
vote
1answer
25 views
What audit procedures are applied to ENotaries and to the software they use?
From a theoretical standpoint, the very notion of an electronic notary - ENotary implies a host of problems related to biometrics, signature revocation, timestamping, keeping a reliable electronic ...
3
votes
1answer
124 views
Why do PGP master keys only have a single subkey, and tie certification with signing by default?
After learning more about PGP subkeys and how to split apart the roles of (S)igning, (E)ncryption, (A)uthentication and (C)ertification, I discovered that in most cases(?) a default master key has a ...
0
votes
1answer
102 views
How to test for OCSP
I have to test OCSP feature on a SSL server. Since it is a pretty standard feature now, I was looking around for tips on test plans / setting up OCSP responder etc. I have not found anything so far. ...
3
votes
2answers
90 views
Why are SSL certificates valid only from a certain date?
Each SSL certificate is valid starting from a specific date and up to the expiration date.
What's the point in that "valid from" date? Why do we want a certificate to only be valid after a specific ...
3
votes
2answers
86 views
Anything to do about old gpg keys?
Quite A few years ago (in middle school) I created some gpg keys, published them to a keyserver, etc. because I was l33test kid on the block. Now I have gone through a few new computers and OS's, ...
0
votes
1answer
134 views
Can I ensure that a public key derived from a private key is unique?
In asymmetric cryptography, is it possible to ensure that public key derived from a given private key is unique, no matter the algorithm?
1
vote
1answer
64 views
How to have Thunderbird include a root certificate?
An eMail signed via S/MIME also contains the X.509 certificate chain containing the public key in order to directly verify the signature (assuming its issuing CA is deemed trustworthy). The chain does ...
0
votes
1answer
100 views
What key sizes are allowed within TLS if the DHE_RSA is the only key exchange allowed?
Can I make assumptions about minimum and maximum key sizes if all I know about a TLS server is the fact that it uses DHE_RSA for key exchange?
Can the server be configured to use weak key sizes for ...
1
vote
1answer
151 views
What is the difference between RSA1 & RSA in regards to SSH? Also when is the fingerprint & random art used?
I have searched this site for RSA1 with no results. From multiple google searches I have understood that RSA1 was used in SSH1 (which isn't recommended). However if its a single algorithm why are ...
3
votes
1answer
146 views
Internal CA for Digital Signature Solution - PKI Based
I'm trying to set up a digital signature solution which would work with a internal PKI.
We have considered Microsoft Certificate Services, but we don't want to rule out any other option to set up a ...
3
votes
1answer
258 views
Enhanced Key Usage vs. Extended Key Usage
I've seen both the terms Enhanced Key Usage and Extended Key Usage, and both were abbreviated as EKU. Do both refer to the same extension or property?
41
votes
10answers
2k views
Why do we not trust an SSL certificate that expired recently?
Every SSL certificate has an expiration date. Now suppose some site's certificate expired an hour ago or a day ago. All the software by default will either just refuse to connect to the site or issue ...
4
votes
1answer
148 views
Why do X.509 certificates have “Key Usage” attribute?
I can find their values and all details in the RFC, but I cannot find why it was decided to have this attribute in certificates, instead of leaving them to be multipurposes.
Is there a reasoning ...
-1
votes
1answer
144 views
GPG advantages / disadvantages, is it useful or secure? [closed]
I thinking about GPG, is very widely used, but is secure? Why and where we using GPG?
I found an article from 2002, but is very old.
4
votes
1answer
115 views
Which properties of a X.509 certificate should be critical and which not?
RFC5280's section 4.2 states
Each extension in a
certificate is designated as either critical or non-critical. A
certificate-using system MUST reject the certificate if it encounters
...
1
vote
1answer
111 views
How to troubleshoot why Thunderbird rejects a PKCS#12 certificate with “Could not verify this certificate for unknown reasons”?
After playing around a bit with openssl, I created a PKCS12 certificate which imports flawlessly in Firefox while Thunderbird "Could not verify this certificate for unknown reasons". Talk about a ...
0
votes
3answers
111 views
Make the public key unrecoverable given the private key
OpenSSL seems to bundle the private key together with the public key when it produces .pem files. Is there a way to prevent this from happening; i.e. prevent OpenSSL from creating a .pem private key ...
4
votes
1answer
297 views
How to set up OpenSSH to use x509 PKI for authentication?
I do not mean simply putting the public RSA key of a x.509 certificate into ~/.ssh/authorized_keys - I'm looking for a way to set up a ssh such that x.509 certificates signed by a pre-defined CA will ...
2
votes
2answers
168 views
How to secure a truecrypt container allowing access with multiple SSH public keys?
I would like to create a TrueCrypt container which can be accessed by multiple people. The container itself can be stored anywhere, e.g. in a shared folder in Dropbox or Google Drive, ...
I would ...
11
votes
4answers
2k views
What is certificate pinning?
I'm superficially familiar with SSL and what certs do. Recently I saw some discussion on cert pinning but there wasn't a definition. A DDG search didn't turn up anything useful. What is certificate ...
3
votes
1answer
76 views
FIPS 140-1 and FIPS 140-2
I tried googling for this info but it's not easily available because FIPS 140-1 is now really old.
Does FIPS 140-2 automatically cover FIPS 140-1 - i.e. if a device (in my case an HSM - Hardware ...
2
votes
2answers
240 views
How to implement a Web of Trust?
How to implement a Web of Trust, or something similar?
Alice get a public and a private key from the RSA guy.
Bob need to send to Alice a nuclear secret code (or his babysiter's phone number).
Bob ...
1
vote
3answers
110 views
RSS Feeds: restrict access
"We are a bunch of journalists and we share much of the information via e-mails. This has become tedious now. Hence we found out a way to share, by just having to share our private blog posts via ...
3
votes
4answers
465 views
Is it possible to create a self signed certificate authority?
Would it be possible to create a legitimate certificate with the CA bit set? I dont have a usecase associated with this, I'm merely curious.
To explain my question : Suppose I sign a public ...
1
vote
1answer
176 views
How does a developer interact with Microsoft Certificate *Web Services*
Microsoft Certificate Web Services is a HTTPS web service (WS-Trust) that has no Kerberos dependency and can be used on a variety of devices. This is new in Windows 2008 and is separate from the ...
1
vote
2answers
157 views
Is the use of DSA keys a security risk?
According to the answers on this question the differences between RSA and DSA would seem to be trivial. However, according to this page DSA compromises your security if anyone is sniffing your ...
0
votes
1answer
109 views
Behavior when validating an expired certificate chain
I have the following situation:
A server certificate (CServ) is signed by self-signed certificate (C0)
A client certificate (CCli) is signed by CServ
Client's trust-store contains C0, so the client ...
2
votes
1answer
107 views
What damage could be done if a malicious certificate had an identical “Subject Key Identifier”?
I'm looking at the the Subject Key Identifier attribute of a CA certificate and am trying to understand the role it plays in validation and infer how validating client software could get it wrong.
...
2
votes
1answer
54 views
Is it a good idea to generate certificate-specific CRLs? What is this technique called?
Suppose I create 3 certificates with the following CRLs
Cert1 http://crl.server.com/batch1/root1.crl
Cert2 http://crl.server.com/batch2/root2.crl
Cert3 ...
2
votes
1answer
180 views
What should a CRL file name look like when “new” and “delta” CRLs are generated?
I suspect my Windows 20012 Certificate Server CRL revocation configuration is incorrect every time I generate a new CRL or a new Delta, only a maximum of 3 files are generated.
When I created the ...
2
votes
1answer
157 views
What Enhanced Key Usages are required for PKI infrastructure tasks? (OIDs for OSPF and CRL signing, etc)
I'm building a constrained PKI that specifies EKUs for the the entire hierarchy and want to document the OIDs required for PKI tree maintenance tasks.
I understand that clients may not validate the ...
4
votes
2answers
205 views
Extensions for SSL server certificate
I have some question about the X.509 v3 extensions. What extensions should appear in a proper certificate for a SSL server ?
5
votes
3answers
354 views
Is a 512 bit RSA key secure when used temporary?
Is a 512 bit RSA key secure when a new key gets generated and used approximately once a week? The key is only used for signing messages, not for encrypting sensitive data.
This is for a system where ...
4
votes
4answers
498 views
Why would someone want to encrypt RSS feeds?
I heard the idea of encrypting the RSS feeds using public key encryption system from someone and since then I am intrigued by the idea. But then I started to wonder what would be the basic need for ...
