Linked Questions

71 votes
7 answers
51k views

Why can't you work backwards with public key to decrypt a message?

As the title suggests, I am curious to know why you can't work backwards using a message, public key and encrypted message to work out how to decrypt the message! I don't understand how a message can ...
user avatar
  • 829
88 votes
4 answers
80k views

SSL Certificate framework 101: How does the browser actually verify the validity of a given server certificate?

(Sorry I know this is a complete noob question and at the risk of posting a somewhat duplicate topic. I have a basic understanding of public/private key, hashing, digital signature... I have been ...
user avatar
52 votes
2 answers
10k views

Digital Certificate deployment: using two certs for each user?

At a large enterprise environment I have come across a deployment approach for Digital Certificates where each user is issued two (2) key pairs: One for signing documents, emails, etc. that is ...
user avatar
  • 2,813
48 votes
4 answers
44k views

Can I use a private key as a public key and vice versa?

I have code to encrypt data using a public key and decrypt it using a private key. This is useful when a client wants to send data to a server and know that only the server can decrypt it. But say I ...
user avatar
18 votes
4 answers
5k views

If the public key can't be used for decrypting something encrypted by the private key, then how do digital signatures work?

I'm learning asymmetric encryption in the use case of ssl/tls protocol. I can understand that the public key (like a padlock) can encrypt (lock) something and only the private key can decrypt (open)...
user avatar
7 votes
3 answers
2k views

How do I actually air gap my CA computer?

I remember reading about the necessity of air gapping the CA computer (never connecting it to any network whatsoever, no USB dongles etc). I am preparing for setting up a number of certificates (...
user avatar
  • 213
2 votes
3 answers
2k views

RSA Digital signatures vs "encryption with the private key"

I found this statement In RSA crypto, when you generate a key pair, it's completely arbitrary which one you choose to be the public key, and which is the private key. If you encrypt with one, you can ...
user avatar
  • 2,276
6 votes
2 answers
4k views

Verify digital signature without key public key in signature

When receiving emails, I sometimes see the following: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I found an integer overflow in PHP, in the conversation of dates to "Julian Day Count" function. ...
user avatar
  • 75
3 votes
1 answer
4k views

What is the difference between a digital signature and whole message encryption?

I am newbie in information security I am trying to understand the difference between a digital signature and encryption of a message. Lets consider simple example of email message. I understand how ...
user avatar
  • 155
13 votes
1 answer
2k views

How do certificates work in terms of encryption, hashing, and signing?

I think I might understand this stuff, but I want to be sure I've got the details correct. There is a lot of information out there on the high-level implementation of certificates, as well as the ...
user avatar
5 votes
1 answer
1k views

Can OpenSSL decrypt the encrypted signature in an Amazon Alexa request to a web service?

We're using OpenSSL to parse and verify the certificate and signature that Amazon's Alexa sends to external web services, following their list of requirements in the instructions here. We're ...
user avatar
4 votes
1 answer
3k views

How to verify a server key exchange packet

I have a problem between two ends of an SSL connection. The server sends ServerKeyExchange and the client says the server key exchange packet is not signed correctly, so I want to check the signature ...
user avatar
  • 163
1 vote
1 answer
2k views

Is this algorithm really end to end encrypted and secure?

I'm creating an anonymous chat where one of the premises is that the conversations are end to end encrypted. I'm using firebase so all the comunication between the clients and the server is SSL ...
user avatar
  • 113
6 votes
2 answers
424 views

Data Integrity in PKCs

This is a simple question but one which greatly confuses me. When you have a PKC, the public key can be accessed by anyone. Therefore, doesn't this mean that anyone can encrypt data? My question is ...
user avatar
  • 247
1 vote
2 answers
834 views

What if the Local Windows Cert Store is Compromised?

The diagram below illustrates chaining digital certificates up to a publicly trusted Root Certificate: (source: globalsign.com) I have been researching how trusted root authorities (such as ...
user avatar
  • 13

15 30 50 per page