Tag Info

New answers tagged

2

What you are describing is the exact problem of public key distribution that PKI is meant to solve. When your "master key pair" is used to sign the public key of an authoritative content provider for a specific domain, then you are issuing a certificate linking the domain name with a public key. That is what you are intending to do, and that's PKI, whether ...


0

We decided to go with a fingerprinting approach. When we issue a provider with a keypair, we hash the public key plus the domain it's authoritive for together, and then sign it using the master registries key. This way, we can verify that a providers key is both valid and authoritive for their domain by verifying the hash of the key+domain Is valid. If ...


0

What I understand you to mean is, could someone use a brute-strength attack on the key directly (without using using password-guessing to generate different keys) any easier if it were generated with a weak password than with a strong one? If that is your question, then the answer in the vast majority of cases (and certainly with any recently implemented ...


1

Overview Some examples for review/discussion. Alternative: local password generated key for internal use in encryption-key access control API. Entropy and increasing it. 1. Some examples for review/discussion In systems that take a user's pass-word/-phrase in order to derive the encryption key, what is the relationship between that password's ...


0

There is a lot of misconceptions and myths about /dev/random or /dev/urandom. It's not true in general that using /dev/urandom is always good enough and that /dev/random is for paranoid only. The key here is the total amount of entropy collected during the lifespan of the instance before you start to generate numbers. That's what matters most. After ...


2

The chances of this happening by chance are zero. You have either: Found the old private key you thought was lost (hidden file?), or Used a deterministic key generation mode which takes user-supplied entropy (passphrase). If you use the same entropy you will get the same key, or You've got a completely borked install which always returns the same random ...



Top 50 recent answers are included