Linked Questions

120 votes
6 answers
50k views

Why should one not use the same asymmetric key for encryption as they do for signing?

In an answer to a question about RSA and PGP, PulpSpy noted this: It is possible to generate an RSA key pair using GPG (for both encryption and signing -- you should not use the same key for both). ...
Iszi's user avatar
  • 27.1k
94 votes
4 answers
87k views

SSL Certificate framework 101: How does the browser verify the validity of a given server certificate?

(I have a basic understanding of public/private key, hashing, digital signatures... I have been searching online & stack forums last couple days but cannot seem to find a satisfactory answer.) ...
SecurityNoob's user avatar
  • 1,051
84 votes
3 answers
33k views

What is a good general purpose GnuPG key setup?

Since most key types can be used for multiple purposes, namely certification, authentication, encryption and signatures, one could simply use one key for everything - which is a bad idea, as ...
Tobias Kienzler's user avatar
18 votes
2 answers
5k views

Trying to understand RSA and it's terminology?

I get the gist of RSA but I'm mostly self taught so sometimes the phrases I picked to describe something don't match up with the widely accepted terminology. I'm trying to remedy this. I'm working ...
Corey Ogburn's user avatar
9 votes
1 answer
17k views

Authenticated Diffie Hellman Key Exchange

It appears that the textbook version of Diffie-Hellman is susceptible to man in the middle attack and the use of digital signatures could prevent this attack from occurring. Digital signatures could ...
Computernerd's user avatar
  • 2,431
8 votes
1 answer
10k views

How to encrypt with ECDSA?

Suppose there's a transaction in the blockchain in which a given address transfers bitcoins to whoever. I need to encrypt a message so only the owner of that address will read it. I have his public ...
Nathan Parker's user avatar
7 votes
3 answers
6k views

Digital Signature and Verification?

AFAIK , When Alice wants to write a message to Bob -- she uses Bob's public key and encrypt the message - and then Bob - using his private key - use to decrypt it. So public key is used to decrypt ...
Royi Namir's user avatar
7 votes
2 answers
2k views

Why can I sign but not encrypt?

-edit- After following a chain of links from this question I see this is similar/duplicate of Why should one not use the same asymmetric key for encryption as they do for signing? but this question ...
user avatar
1 vote
3 answers
15k views

What type of hashing method is used for the private key to encrypt for signing messages?

To use RSA for signing, Alice takes a hash of the message, encrypts the hash using her own private key, and appends the result (this is the signature) to the message. Eve can of course still decrypt ...
Breakhty's user avatar
  • 367
8 votes
1 answer
5k views

Why do X.509 certificates have "Key Usage" attribute?

I can find their values and all details in the RFC, but I cannot find why it was decided to have this attribute in certificates, instead of leaving them to be multipurposes. Is there a reasoning ...
Philippe's user avatar
  • 183
4 votes
1 answer
2k views

Are DSA keys breakable?

Are the DSA keys breakable? If so, what is the maximum key size that is breakable with the latest technology ? Why are DSA keys not used during authentication? Can we use DSA keys for encryption?
user45475's user avatar
  • 1,100
3 votes
4 answers
2k views

Can I use elliptic curve DSA in a secure message service?

I'm looking to design a system that allows a user of a crypto-coin such as Bitcoin to both have an online wallet and to be able to send and receive encrypted emails in the same system. The relevant ...
josh's user avatar
  • 580
2 votes
3 answers
4k views

Public key Infrastructure

Here the MD5 hash is being encrypted with the private key of the sender. But I read in a paper that private key is only used for signing and not encrypting. Is the image wrong or can private key also ...
Krishna Chaitanya's user avatar
5 votes
2 answers
2k views

Is it dangerous to use the same key (RSA) for both encryption (PGP) and authentication (SSH)?

Alice wants to send an encrypted message to Bob, but she also wants to connect to Carol's server. Are there any dangers associated with using the same RSA key for both PGP and SSH (other than a lack ...
christianbundy's user avatar
0 votes
1 answer
2k views

Encryption and Signature with same RSA private key

Talking about cipher-suites that use RSA both for sign of DH parameters and for digital signature. The keys used for these process are the same, or is there a public and private key for each one? If ...
Johnny Willer's user avatar

15 30 50 per page