When we generate an API key in Binance there is a generated secret key too. I could not find any reference that those are RSA key pairs. They could be just random unrelated numbers. Is the Binance API Key the public key of RSA key pairs?
This answer pertains not only to this question, but also to your earlier question at Using two different random numbers instead of RSA Keys.
api key and the
secret key are not an asymmetric key pair. This can be seen by looking at an example of how these keys are used to access the API, for example, at https://stackoverflow.com/questions/47984654/binance-api-keys.
You'll notice that if you follow the code in the top-voted answer, that the
api key is included in the request, then to authenticate the request, an HMAC of the request is generated using the
In order to validate the request, the server would have to verify the HMAC. HMAC's rely on symmetric cryptography, not asymmetric cryptography. In other words, in order to validate the request, the server would have to know the
api key. This is in contrast to a digital signature used in asymmetric cryptography, where the private key is used to sign the request, and the public key is used to verify the signature.
Another way to think of this is that this is akin to a login function, where the
api key is akin to the username, and the
secret key is akin the password. But, unlike a login function, the password is not sent across the wire in this case, it's used as the key to an HMAC function over the request.
See https://aspsecuritykit.net/guides/implementing-hmac-scheme-to-protect-api-requests/ for some interesting reading on this method of authentication with an API.