RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.

learn more… | top users | synonyms

2
votes
2answers
103 views

HPKP and multiple SSL certificates

Some weeks ago, we enabled the HTTP Public Key Pinning header on our website. As per the specification, we included not only the SHA-256 fingerprint of our current RSA key, but also that of a backup ...
2
votes
0answers
297 views

Good Library for RSA-2048 in C with some restrictions [closed]

I'm looking for a C/C++ implementation of RSA with a 2048 bit key (preferably read from a file). My target is an embedded platform, so it comes with some odd restrictions. The hardware restricts us ...
0
votes
0answers
14 views

Risk to pgp secret keys with known cleartext/ciphertext? [duplicate]

There are a couple of schemes which encrypt IMAP message stores to yourself using GPG/PGP. Which makes initial sense and would keep casual snoopers from getting email. But it raises a question as ...
2
votes
2answers
546 views

Chrome status warning on a netbanking secure site connection [duplicate]

I visited my bank's web banking site and clicked on the Green Lock in the address bar of my Google Chrome browser out of curiosity. Under the "Connections" tab Chrome spits out this disturbing ...
5
votes
2answers
570 views

How much faster does a GPU or FPGA crack an RSA key compared to a CPU?

Are there any significant speed up in time on cracking an RSA key (either brute-force or factoring with general number field sieve) using a GPA or FPGA compared to a CPU? If there is a speed ...
0
votes
1answer
57 views

Passing data among 3 parties with public key encryption

There are three parties involved in a repeated data transfer process: Client C, Broker B and Provider P. There might be multiple clients C. Broker B manages P's customer database. Each customer has a ...
2
votes
1answer
600 views

RSA/ECB/PKCS1Padding: Encrypting a Session Key JavaScript

How to do ECB mode when dealing with RSA? I dont understand it. The Aadhar authentication doc (http://uidai.gov.in/images/FrontPageUpdates/aadhaar_authentication_api_1_6.pdf Page 33) says that we have ...
0
votes
2answers
83 views

FREAK attack - why doesn't Finished message prevent it?

Here is my understanding of FREAK (let me know if I'm right please): 1) Client wants to use modern RSA in ClientHello 2) MITM forwards Export_RSA 3) Server says ok and sends an export RSA key, ...
2
votes
2answers
446 views

PKCS#1-1.5 encoding - is there a reason to use 00 in block type?

For encryption block looking like this: EB = 00 || BT || PS || 00 || Data where BT - block type and PS - padding string, I've read that we use three types of BT - 00, 01, 02. Now, since 00 and 01 are ...
1
vote
2answers
337 views

Encryption / Decryption algorithm generic across JRE (Sun/IBM)

Is there any encryption algorithm that is generic across all platforms? Is RSA generic across SUN/IBM JRE? Another question: will base64Encoder / base64Decoder sun.misc.BASE64Decode / ...
1
vote
1answer
795 views

How ECDHE is signed by RSA in ECDHE_RSA cipher

About ciphers that use ECDHE as Key Exchange and RSA as Authentication: How exactly this two algorithms work together, is ECDHE process encrypted by RSA public key? What are the DH parameters? ...
4
votes
2answers
4k views

RSA public key and private key lengths

I'm having a problem understanding the size of an RSA public key and its private key pair. I saw different key sizes for RSA algorithm (512, 1024,... for example), but is this the length of public ...
4
votes
2answers
98 views

Secret, Public, and Private Keys?

...and nonces. Can someone show an example of how this actually works using small intelligible numbers? For example: secret key: "100" public key: "10" private key: "1000" I am just trying to ...
6
votes
4answers
3k views

What is the role of RSA in ECDHE-RSA? [duplicate]

I have read some textbooks and not found a convincing explanation. In the cipher suite ECDHE-RSA-AES128-GCM-SHA256, what is the role of RSA in the first part (ECDHE-RSA)? This part of the cipher ...
5
votes
1answer
3k views

SSH Key: Ed25519 vs RSA

A lot of people recommend using Ed25519 instead of RSA keys for SSH. The introduction page of Ed25519 (http://ed25519.cr.yp.to/) says: [..] breaking it has similar difficulty to breaking [..] RSA ...
4
votes
2answers
208 views

Why did browsers deprecate 1024-bit RSA, but retain SHA-1?

I was reading Mozilla's security blog Phasing out Certificates with 1024-bit RSA Keys. Effectively, some browsers are deprecating 1024-bit RSA for CAs and Subordinate CAs because the certificate must ...
1
vote
1answer
138 views

Who uses 1024-bit RSA?

I know they're deprecated, but does anyone still use 1024 bit RSA encryption or certificates? Do you know of any examples of systems that use it today? What would be the implication if someone ...
4
votes
1answer
178 views

Managing keys generated with insufficient entropy

Since the Linux RNG which provides /dev/random (and by extension /dev/urandom) is seeded by "mouse and keyboard activity, disk I/O operations, and specific interrupts" (source, PDF) and since virtual ...
3
votes
1answer
177 views

Choose your own exponents in RSA?

In another interesting post, one of the developers/security researchers behind Phuctor suggests that using different exponents with RSA keys will "[increase] the costs of attacking your setup ...
2
votes
2answers
170 views

Offline RSA strong prime test similar to Phuctor?

One of the ways that RSA keys get consistently owned is when they're generated without enough entropy. Dan Kaminsky refers to a study which found that 1 in 200 RSA keys were badly generated and these ...
1
vote
1answer
78 views

Prevent padding oracle attack on key exchange process

I found in my searches that the padding oracle attack can be used against the RSA with PKCS1PAdding or OAEP padding, and I used this algorithm for a symmetric key exchange. How can I prevent a padding ...
2
votes
1answer
365 views

toy OpenPGP encryption with manually generated keys

I've been playing around with OpenPGP encryption for a little while. Here are the steps I've followed: Generate an unencrypted public/private key pair in my keyring with gpg --gen-key. Dump the ...
0
votes
1answer
309 views

RSA: same symbols in plaintext give same symbols ciphertext?

I just started studying Information Security, but I just ran this program: http://www.sanfoundry.com/cpp-program-implement-rsa-algorithm/ and faced this strange thing. For small keys (don't try to ...
-2
votes
1answer
193 views

What is encryption by RSA with AES? [duplicate]

By visiting some websites, like bank websites, we can see for example: TLS_DHE_RSA_WITH_AES_128_CBS_SHA, 128 bits, TLS 1.0 I would like to know: What does mean CBC? TLS 1.0 is an old version, is ...
5
votes
3answers
226 views

Secure Hash of a very short payload - is it possible?

I am looking to verify the integrity of a very small payload, approx 64 bytes, which will be stored in a QR code. I need to verify that the payload has not been generated or altered by an attacker. ...
2
votes
1answer
625 views

Determine private key size using public certificate [duplicate]

I have a public certificate in a PEM (.pem) file -----BEGIN CERTIFICATE----- MIICsjCCAZqgAwIBAgIJAMA1YIQ2JLXDMA0GCSqGSIb3DQEBBQUAMBExDzANBgNV ... 29V/R9RZOoSBHDzGPL84wm4qojMuwQ== ...
8
votes
1answer
1k views

How many qubits are needed to factor 2048-bit RSA keys on a quantum computer?

I've been reading about quantum computing and turns out that 512-bit quantum processors are already a thing. I also read about Shor's algorithm, which can break RSA and several asymmetric encryption ...
0
votes
1answer
165 views

RSA vs DSA Digital Signature Message Digest Recovery

I'm learning about signatures using RSA and DSA, I've come across this little fact: RSA can recover the message digest from the signature, whereas in DSA this isn’t possible – you have to have the ...
2
votes
1answer
145 views

someone may be doing something nasty

I have an ssh server. earlier toady, I was about to login to my server, when I got a message that said something along the lines of "Someone may be trying to do something nasty" and indicating a man ...
2
votes
1answer
207 views

How does this encrypted webmails works?

In the last days I was looking on Tutanota, ProtonMail, LavaBoom, and others webmails that promise to respect users privacy. For all those, the one I most liked was Tutanota. I did few tests with ...
-1
votes
3answers
346 views

If TLS 1.2 is considered unbreakable, why do the NSA and other agencies invest in supercomputers? [closed]

If a 2048-bit RSA key and a 256-bit AES key are considered to be unbreakable within the foreseeable future by any kind of computer, why do the NSA and other intelligence agencies invest in ...
2
votes
0answers
195 views

How to use IIS ssl certificate(CNG) for data encryption

I want to use RSA to encrypt/decrypt some data using IIS's ssl ceritifcate, from within a web service(WCF). I've managed so far to do this by using .NET security ...
1
vote
1answer
134 views

RSA private/public keys

Is it possible to recover a private key, given a public key and a substring/a part of the corresponding private key?
0
votes
1answer
236 views

RSA vs DSA working methodolgy?

I have looked for various answers but I am being confused on how does RSA can be used for both Digital Signatures and Encryption/Decryption like in "TLS_DHE_RSA_..." or "TLS_RSA_.." cipher suite ...
0
votes
1answer
2k views

RSA key sizes v/s public key sizes

I am new to cryptography. I have an api provided by a bank. The banks says that they are using RSA algorithm with 2048 bits. We used this api first to get the public key. Here is the sample public ...
1
vote
3answers
3k views

Looking for a (simple) utility to decrypt rsa-encrypted text in Windows?

Quick question: I'm looking for a simple utility program to be able to decrypt rsa-encrypted data (either base64-encoded or binary attachment) on a Windows workstation. Scenario: There is a group of ...
4
votes
1answer
456 views

How is JWT implemented?

I'm using django-rest-framework-jwt in one of my APIs. As you might know, the concept is simple: you send username and password and you get a token back. The token is not stored anywhere on the ...
5
votes
1answer
579 views

Asymmetric / end to end encryption for web messaging app

Background I'm trying to design a secure and sustainable web app for messaging. The purpose is to learn how to create secure web application. The application is suppose to be written in Javascript ...
2
votes
0answers
169 views

How to import key BLOB generated from Microsoft CryptExportKey from Linux

I have a private/public key pair saved as key BLOBs which were in fact exported with the Microsoft "CryptExportKey" API. Now I need to use the same key pair (specially the public key) under Linux ...
1
vote
1answer
162 views

Private messages for an ios app - how secure is this system?

I'm designing architecture for sending private messages (i.e. only sender and receiver are able to read a message). Client side - iOS, server side - Parse.com I'm thinking of using RSA to ...
4
votes
2answers
2k views

Converting ECC Private key to PKCS#1 format

Is there any way to convert an ECC private key to RSA PKCS#1 format? I have tried converting it to PKCS#8 first using OpenSSL: openssl pkcs8 -topk8 -nocrypt -in EC_key.pem -out pkcs8_key.pem This ...
0
votes
3answers
946 views

Is it possible to wrap and export RSA private key in FIPS 140-2 Level 3 compliant hardware?

I would like to do the following on FIPS 140-3 Level 3 certified cryptographic token using PKCS#11: Generate RSA key pair on token Import AES key from multiple components Wrap and export RSA private ...
0
votes
1answer
188 views

PCI compliant RSA key generation and getting value of private exponent

Is it possible to generate RSA key and get its private exponent in clear and to be compliant with the following PCI requirement?: Keys must be generated so that it is not feasible to determine that ...
1
vote
1answer
94 views

Safenet iKey 4000 RSA key pair generation in FIPS 140-2 compliant mode

I need to generate RSA key pair and show the public and private key on screen (in a secured room). The algorithm must be FIPS approved. So I would like to use iKey 4000 which is FIPS 140-2 level 3 ...
3
votes
1answer
339 views

Best practices for Private Key management

How should I go about handling my RSA Private Key for my high-security Rails web application? This may seem like a "soft" question, not related to cryptography per-se, but is nevertheless very ...
1
vote
1answer
216 views

How strong is the performance impact of signing when using RSA_AES_256_ECDH

To encrypt web communication, I use SSL with a RSA key with a length of 2048 bit, AES key's with a length of 256 bit and the ECDH-algorithm for the negotiation of the AES key's (or to exchange the ...
1
vote
1answer
357 views

Same RSA key pair for all users

Let's say in my computer running Debian i have an RSA key pair generated by user foo and copied the public key to server_A for allowing key based authentication in ssh for foo. Now my question is can ...
0
votes
1answer
46 views

public key formats [closed]

I have the following PEM format public key: -----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDguwHaldTclMAFg1BQ45Q8DPIc ...
0
votes
2answers
141 views

Decrypting old data from PHP extension

I recently came across an old website of mine that I had used the PageProtectionPlus MediaWiki extension to encrypt parts of. I'm curious to see what I wrote, but the extension is no longer supported ...
2
votes
2answers
220 views

Encrypting short data with RSA only?

I have a case where I need to create recovery accounts and I want to create them so that nobody knows the password to them until/unless necessary. Hence, I thought that I would do it using RSA - when ...