RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.

learn more… | top users | synonyms

-1
votes
3answers
2k views

How long is a 2048-bit RSA key? [closed]

On stackoverflow: '2048 bits, or 1400 decimal digits' http://stackoverflow.com/questions/11832022/why-are-large-prime-numbers-used-in-rsa-encryption On Wikipedia: 'RSA-2048 has 617 decimal digits ...
4
votes
3answers
1k views

RSA key length vs. Shor's algorithm

I have just read a passage in Zeilinger's book about quantum world. My question is: Suppose there exist quantum computers. Given that a quantum computer can use Shor's algorithm, what key length ...
9
votes
4answers
1k views

Why does PGP use symmetric encryption and RSA?

Looking into the details of Pretty Good Privacy, I'm confused as to the reasoning behind encrypting the message with a session key and the key with the recipient's public key via RSA. I fail to see ...
1
vote
1answer
301 views

SSL: MITM possible if private key is known? [closed]

If a Man-in-the-middle has the private RSA key of the SSL encryption. It should be possible for the Man-in-the-middle to decode the entire HTTPS datastream right? So, then the encryption is ...
-2
votes
2answers
1k views

Can the U.S. goverment crack encryption? [closed]

Does USA government have the sufficient processing power to crack keys in matter of seconds? Let say 2048-bit RSA, for example. Since the RSA algorithm was developed by USA government (NSA?), I ...
4
votes
1answer
228 views

RSA vs PBKDF2 for password storage (theoretical)

I know this is not the right way to store passwords, but I'm asking this from a theoretical perspective: Suppose a web site's passwords were encrypted with RSA asymmetric encryption and the private ...
2
votes
2answers
152 views

Verifying the authenticity of a public key without manual intervention?

In RSA encryption it is said that ensuring the authenticity of the public key can be as important as the protection of the private key. An effective way of doing this is to have key custodians ...
3
votes
2answers
3k views

Decrypt from cipher text encrypted using RSA

I am sniffing a client side application traffic and I found some encrypted data. I am not able to decrypt it. Information which I have is Public Key: ...
29
votes
3answers
11k views

Is there any particular reason to use Diffie-Hellman over RSA for key exchange?

I often see RSA being recommended as a method of key exchange. However, the Diffie-Hellman key exchange method appears to be secure as well. Is there any considerations one should take into account ...
-1
votes
2answers
158 views

Why is RSA using fixed point type numbers?

Why does RSA use fixed-point numbers instead of floating-point? Are there too many floating-point implementations to choose from? Does fixed-point arithmetic increase the difficulty of factorization? ...
1
vote
1answer
351 views

RSA Possible Vulnerability?

Given c1 = cipher text of m encrypted with n1 and e Given c2 = cipher text of the same m encrypted with n2 and the same e, Is it possible to figure out either of the n's or m? I can't seem to solve ...
6
votes
3answers
470 views

Lessen impact of DoS attack on cpu-expensive login?

This is a follow-up to my previous question: Prevent DOS against RSA authentication. This question is also discusses a similar problem: Prevent denial of service attacks against slow hashing ...
4
votes
2answers
836 views

Web & insecure HTTP - Using RSA for encrypting passwords on the client side

I used client side password hashing in my register and login project. Its purpose is to prevent passive adversaries/eavesdroppers from discovering users' plaintext passwords when HTTP requests are in ...
4
votes
2answers
246 views

Prevent DOS against RSA authentication

In my current setup, the clients are bundled with the server's public key. The client encrypts a nonce and sends it to the server which uses its own nonce and the nonce received from the client to set ...
2
votes
1answer
537 views

How large RSA-keys could the worlds combined computer power factorize in reasonable time?

If you combined every microprocessor on earth into one humongous computational cluster, how large RSA-keys could you factor in reasonable time (lets say a few years)? I know from reading the answers ...
2
votes
2answers
158 views

Was DSA invented from RSA?

I'm wondering if the two algorithms are similar and whether DSA was really just based off RSA? Is DSA based on RSA and public key encryption? If so how does DSA introduce signing and makes it ...
2
votes
1answer
217 views

Does ciphersuite ECDH / ECDHE need hardware acceleration

I have started to read more about ECDH/ECDHE and am wondering if it has the similary issues as RSA - i.e. the processing power required for the decryption of private key is more than of the public ...
3
votes
4answers
5k views

RSA maximum bytes to encrypt, comparison to AES in terms of security?

What is the maximum number of bytes for encrypting a plaintext message using RSA that is reasonably secure and also efficient and would AES be better for the same size in bytes? The encryption doesn't ...
1
vote
2answers
986 views

Questions to hybrid encryption. RSA with AES

I want to use a hybrid encryption in my application, so after reading a lot of lines I ended with this implemantation, please critizie it ;) (I want to stick to .Net) byte[] aesKey = ...
5
votes
1answer
529 views

zero knowledge proof - where do we use it?

zero knowledge proof, Where do we use it online? I thought we mostly use the RSA algorithm.
1
vote
1answer
282 views

generating RSA keys through the browser

HTML5 has the element that sends an SPKAC to the server (as I understand it). But how do you do it in IE? One CA's websites gives me the following prompt: This Web site is attempting to perform a ...
0
votes
1answer
278 views

Where is RSA Digital signature used in the online banking world?

When i do online banking, i sign my digital transaction with a digipass. Ive been told that it uses a RSA-based digital signature scheme. But an rsa digital signature (1024 bit for the modulus) is a ...
4
votes
1answer
684 views

Why is ECC more vulnerable than RSA in a post-quantum world?

Forgive me if this should be in the crypto sub, but sometimes the answers there are very mathematical and I would rather have an answer which is a bit lighter on the math but still strong on the tech ...