Linked Questions

74 votes
7 answers

Why can't you work backwards with public key to decrypt a message?

As the title suggests, I am curious to know why you can't work backwards using a message, public key and encrypted message to work out how to decrypt the message! I don't understand how a message can ...
Max's user avatar
  • 859
93 votes
4 answers

SSL Certificate framework 101: How does the browser actually verify the validity of a given server certificate?

(Sorry I know this is a complete noob question and at the risk of posting a somewhat duplicate topic. I have a basic understanding of public/private key, hashing, digital signature... I have been ...
SecurityNoob's user avatar
  • 1,041
52 votes
2 answers

Digital Certificate deployment: using two certs for each user?

At a large enterprise environment I have come across a deployment approach for Digital Certificates where each user is issued two (2) key pairs: One for signing documents, emails, etc. that is ...
George's user avatar
  • 2,813
50 votes
4 answers

Can I use a private key as a public key and vice versa?

I have code to encrypt data using a public key and decrypt it using a private key. This is useful when a client wants to send data to a server and know that only the server can decrypt it. But say I ...
Graeme Perrow's user avatar
21 votes
4 answers

If the public key can't be used for decrypting something encrypted by the private key, then how do digital signatures work?

I'm learning asymmetric encryption in the use case of ssl/tls protocol. I can understand that the public key (like a padlock) can encrypt (lock) something and only the private key can decrypt (open)...
Aaron Shen's user avatar
7 votes
3 answers

How do I actually air gap my CA computer?

I remember reading about the necessity of air gapping the CA computer (never connecting it to any network whatsoever, no USB dongles etc). I am preparing for setting up a number of certificates (...
Pavel's user avatar
  • 213
2 votes
3 answers

RSA Digital signatures vs "encryption with the private key"

I found this statement In RSA crypto, when you generate a key pair, it's completely arbitrary which one you choose to be the public key, and which is the private key. If you encrypt with one, you can ...
Vanity Slug -'s user avatar
5 votes
1 answer

What is the difference between a digital signature and whole message encryption?

I am newbie in information security I am trying to understand the difference between a digital signature and encryption of a message. Lets consider simple example of email message. I understand how ...
CROSP's user avatar
  • 175
6 votes
2 answers

Verify digital signature without key public key in signature

When receiving emails, I sometimes see the following: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I found an integer overflow in PHP, in the conversation of dates to "Julian Day Count" function. ...
W Khan's user avatar
  • 75
5 votes
1 answer

Can OpenSSL decrypt the encrypted signature in an Amazon Alexa request to a web service?

We're using OpenSSL to parse and verify the certificate and signature that Amazon's Alexa sends to external web services, following their list of requirements in the instructions here. We're ...
Christopher Ryan's user avatar
13 votes
1 answer

How do certificates work in terms of encryption, hashing, and signing?

I think I might understand this stuff, but I want to be sure I've got the details correct. There is a lot of information out there on the high-level implementation of certificates, as well as the ...
Dave Hirsch's user avatar
4 votes
1 answer

How to verify a server key exchange packet

I have a problem between two ends of an SSL connection. The server sends ServerKeyExchange and the client says the server key exchange packet is not signed correctly, so I want to check the signature ...
Daniel's user avatar
  • 163
1 vote
1 answer

Is this algorithm really end to end encrypted and secure?

I'm creating an anonymous chat where one of the premises is that the conversations are end to end encrypted. I'm using firebase so all the comunication between the clients and the server is SSL ...
Rafael's user avatar
  • 113
6 votes
2 answers

Data Integrity in PKCs

This is a simple question but one which greatly confuses me. When you have a PKC, the public key can be accessed by anyone. Therefore, doesn't this mean that anyone can encrypt data? My question is ...
seedg's user avatar
  • 257
1 vote
2 answers

What if the Local Windows Cert Store is Compromised?

The diagram below illustrates chaining digital certificates up to a publicly trusted Root Certificate: (source: I have been researching how trusted root authorities (such as ...
miesch1's user avatar
  • 113

15 30 50 per page