Timeline for GPG4WIN Kleopatra does not require RSA secret key components to decrypt
Current License: CC BY-SA 4.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 8, 2022 at 4:58 | answer | added | Dominic Jung | timeline score: 1 | |
| Feb 5, 2022 at 8:43 | comment | added | Dominic Jung | "Previously imported PFX are no longer imported" if you meant whether I deleted private keys of previously imported .pfx file, yes I did. I deleted private key imported with .pfx then imported .crt, but still decryption worked. | |
| Feb 5, 2022 at 8:39 | comment | added | Dominic Jung | Oh as in from Kleopatra I have to clear the previously cached private key information? I assumed when you delete private key it would not store the information anymore. I am aware of password by default cached for a few minutes unless you change it but I didn't see a reason why Kleopatra would want to do the same for private keys.. | |
| Feb 5, 2022 at 8:30 | comment | added | Steffen Ullrich | When using the crt - Did you start with a fresh setup to make sure that the information from the previously imported PFX are no longer imported? Because it contained the cert and also private key already. | |
| Feb 5, 2022 at 8:26 | comment | added | Dominic Jung | @Steffen Ullrich Does the public.crt I created in step 1 include private key? I imported that public.crt which clearly doesn't have private components to Kleopatra and both encryption and decryption worked. I thought I explained that well enough in the question but in case I didn't that's what I meant. And yes I already know .pfx already containes private key and certificate information. | |
| Feb 5, 2022 at 5:57 | review | Close votes | |||
| Feb 5, 2022 at 9:40 | |||||
| Feb 5, 2022 at 5:40 | comment | added | Steffen Ullrich | The above code shows how I created a public certificate file without secret key components." - it doesn't. The private key is clearly created (private.key) and also included in the pfx file. | |
| Feb 5, 2022 at 5:31 | comment | added | Steffen Ullrich | "I wanted to implement TLS style asymmetric encryption" - TLS does not use asymmetric encryption. It uses symmetric encryption instead after a key exchange. And this key exchange requires bidirectional communication, which means that doing things similar to TLS is not a useful approach in your case. | |
| Feb 5, 2022 at 3:34 | history | asked | Dominic Jung | CC BY-SA 4.0 |