Questions tagged [ecc]
ECC stands for Elliptic Curve Cryptography. Elliptic curves are a mathematical structure which allow to define cryptographic operations on them.
150
questions
0
votes
0answers
29 views
One product unit needs one or two x.509 certificate [closed]
I'm developing a safety product and asked to enable secure communication support to work with maintenance application running on a host pc and to work with third-party products.
So Do I need to have ...
0
votes
0answers
33 views
Curve25519 vs. Curve25519 and AES Key vs. Curve25519 AES Ciphertext (Instagram)
I am trying to send a password from a client to the server. I just don't know how to encrypt it.
method:
I used a website (Instagram) as a guide here.
Here the password is encrypted with AES and the ...
0
votes
0answers
144 views
MiTM attack on a Tor V3 Onion Service?
As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
1
vote
1answer
71 views
Is using only secp384r1 and up named groups considered okay?
I found that secp384r1 is supported in almost all web browsers and it is considered secure.
My question is:
Is it okay if i use only secp384r1 and up named groups?
Are there any disadvantages ...
0
votes
0answers
64 views
How to securely design REST API for Password Manager app?
I want to create Password Manager where users can create their accounts and store website passwords.
For the frontend, it will be a mobile app, but I need REST API as the backend data where the data ...
2
votes
1answer
76 views
Can a client with an ECC certificate and a server with RSA certificate establish a mTLS connection?
Can a client with an ECC certificate and a server with RSA certificate establish a mTLS connection?
Can they agree on a cipher suite?
Why?
0
votes
2answers
108 views
Signing CSR using an ECC keypair
I'm trying to sign a CSR using python-asn1crypto and python-pkcs11. I have an ECC Keypair stored in a Hardware Security Module (HSM).
Here's a code sample:
key = decode_ec_public_key(...
2
votes
0answers
41 views
Should I re-timestamp old timestamps when switching to a stronger algorithm?
One of our clients uses a trusted timestamp service to prove that certain documents existed on the day they were created (they don't need a full digital signature, just the timestamp). The server uses ...
1
vote
1answer
181 views
Algorithm and key size to choose for SSL certificates (security and CPU wise) in 2020 (using nginx)
I posted this question already on SO, but as it is not really a programmin question I thought it might be a better place to ask here:
I want to setup a new SSL certificate store for generating SSL ...
2
votes
1answer
565 views
Why does TLS1.3 use same cipher suite for RSA and ECC key pairs?
As per this answer RSA and ECC certificates should use different cipher suites. I tried to test it. It holds true for TLSv1.2. But for TLSv1.3 I see same cipher suite being used for both types of ...
4
votes
1answer
294 views
gpg key size of 4096 and “the future is ECC”
My boss wants to sign our binary. I need to tell him how he can create the signing key.
Most if not all sites I have seen about signing binaries say "use gpg".
OK, so gpg per default has 2048. Their ...
1
vote
0answers
43 views
PKCS12 generation for ECC key types using JavaScript
I'm generating p12 for ECC key types using the Forge library. https://github.com/digitalbazaar/forge/issues/777
This library already provides p12 for RSA key types; now, I'm trying to enhance to ECC ...
24
votes
3answers
4k views
Why don't folks seem to use ECC for TLS root certificate signature?
I looked around, and all I see is websites using RSA2048 for Root signature, and a few using ECC for encryption.
Are there any reasons folks don't seem to use ECC for TLS root signature?
Are there ...
1
vote
2answers
761 views
Does the “Key Encipherment” key usage make sense when using ECDH P384?
I configured a Windows CA and created a certificate template to issue certificates with ECDH_P384 keys:
Then I noticed that it's not possible to set the "Key Encipherment" key usage in the "...
10
votes
1answer
293 views
How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?
What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I've read up on it and while I understand the basics (...
1
vote
1answer
85 views
SSH and the ECDH component
With SSH, most of my servers use ed25519 (the twisted Edwards variant EC) for authentication.
I was wondering, after authentication with ed25519, does SSH protocol 2 simple use ephemeral/ephemeral ...
1
vote
1answer
65 views
Does a TLS client needs to support one of the named groups (curves?) supported by the server for TLS handshake to succeed?
Does a TLS client needs to support one of the named groups (curves?) supported by the server for TLS handshake to succeed?
Longer version:
I'm running a web site using Windows Server 2016. The web ...
-2
votes
1answer
117 views
Attack on RSA and ECC
I am reading information about RSA and Eliptic Curves cryptography. Assuming that both these two algorithms have stages until two parts achieve key exchange. If an attacker eavesdrop the stages before ...
2
votes
2answers
151 views
Is it important to use separate GPG keys for signing Git commits and for SSH authentication?
When using GPG to sign Git commits, and as the SSH-agent, is it important to use separate sub-keys for the signing of the Git commits as it is for authentication with the SSH host of the Git server?
...
3
votes
1answer
99 views
Is this key exchange algorithm secure and valid? [closed]
I'm writing reliable UDP implementation and I want it to be secure. Also, I want to make use of elliptic curve cryptography. I don't have the proper education to really understand the math behind this ...
0
votes
1answer
49 views
How can I add bits of security? (e.g. RSA + ECC)
If we have an RSA layer of encryption over some text with n bits of security, then we use an elliptic curve, say with m bits of security, how can we calculate the total bits of security with RSA(ECC(.....
4
votes
1answer
272 views
How does MariaDB's ed25519 auth scheme work?
Newer versions of MariaDB (a MySQL database server fork) have a new password based auth scheme called "ed25519". The docs are very sparse regarding how it works and what it does.
https://mariadb.com/...
2
votes
2answers
1k views
ECDHE_RSA_WITH_AES_128_GCM_SHA256 - How to determine ECDHE Key Length?
Server: SSL Certificate, 2048-bit RSA Public Key, Signature Algorithm is sha256RSA
What am I missing here? !
I've scoured the RFC's, and I have yet to find anything on how to determine the ECDHE key ...
0
votes
1answer
160 views
secp256k1 GPG key?
Given that secp256k1 is used to underpin the entire Bitcoin network (worth $174B as of today) -- it appears to offer demonstrably better security than other EC curves as no one has yet taken the ...
0
votes
2answers
239 views
CSR signature using elliptic curve
We've been asked to generate certificate signing request using elliptic curve and we can't use any third-party library it's an embedded application with very limited resources).
We are used to ...
4
votes
2answers
896 views
GPG unattended ECC key and subkey generation
I want to generate an ECC key where the primary key is just for cert and has 3 subkeys for auth, sign, encrypt.
I've found 2 methods to generate it. But I want to use unattended key generation via
...
1
vote
0answers
61 views
Elliptic Curve searchable encryption for message delivery
I need a simple message scheme where a sender can send a private message to a receiver using a public database and without relieving who the receiver. All parties have an Elliptic Curve public and ...
0
votes
0answers
603 views
Converting a raw EC public key into EVP_PKEY using openssl
I am trying to convert a raw EC key and EVP_PKEY structure. The process seems straightforward but am running into issues.
Here is the code I am using --
unsigned char tmpPubKey[] = {
0x04, ...
1
vote
1answer
139 views
OpenSSL ECC key - Additional byte in DER encoding for one curve
In the below, I use OpenSSL to create a private key for the secp224k1 curve. Note the length of the private key in the DER - 0x1d. That's 29 bytes, or 232 bits, not 224. It appears that a leading zero ...
3
votes
3answers
3k views
RSA 4096 vs. ECC Curve 25519
I want to use GPG to encrypt files before storing them as backup in the cloud. I don't care about interoperability or performance/resource consumption during encryption/decription. I only care about ...
0
votes
0answers
83 views
Which encryption algorithm for cloud backup?
I want to backup my data to the cloud. Before that, I want to encrypt it using GPG (gpg (GnuPG) 2.2.11 and libgcrypt 1.8.4).
The backup is just for me, so I don't care about interoperability
I only ...
1
vote
1answer
293 views
AES, RSA, ECC Key size [closed]
It is generally said that 2048-bit RSA keys are roughly equivalent to 112-bit symmetric keys and 2048-bit RSA keys are "sufficient for commercial use until around the year 2030" (https://security....
2
votes
1answer
164 views
Shareable encrypted data in a web application
This is a follow up on my previous question about Storing sensitive, sharable data for a company where several of the employees have access to the server.
This solution has worked well for our ...
3
votes
1answer
659 views
ECDH and static key encryption
It's been a while and I'm still trying to figure out if my understanding of ECC crypto is correct.
Basically from what I understood a purely asymmetric encryption is never used. Usually the ...
1
vote
1answer
537 views
How can I use 'safe' Elliptic Curve algorithms in .Net Core?
I'm looking to build my own digital signature operations into a program I'm writing, and the nuances of cryptography are a bit beyond me.
According to this website the NIST/NSA algorithms (P-224, P-...
3
votes
1answer
407 views
BouncyCastle and Microsoft Cng ECDH secret key mismatch
I'm trying to refactor some client-side code from BouncyCastle to Microsoft Cng. I've figured out how to convert key format(ECC key blobs) between them, but I couldn't calculate the same secret.
...
1
vote
0answers
133 views
Advantage Of ECDH-RSA over RSA Ciphersuites In TLS
If ECDH-RSA is used for key exchange, this is what happens:
The server has its public ECDH parameter embedded within its certificate. The client generates its public ECDH parameter, extracts the ...
2
votes
1answer
993 views
Why PEM encodings of EC public and private keys use different headers?
Manual page for OpenSSL ec command states:
The PEM private key format uses the header and footer lines:
-----BEGIN EC PRIVATE KEY-----
-----END EC PRIVATE KEY-----
The PEM public key ...
3
votes
1answer
4k views
Is the JDK standard EC KeyPairGenerator suitable for use with both ECDSA and ECDH algorithms?
I've seen various references on the web for generating Elliptic Curve KeyPairs in Java, and the two most commonly referenced examples (unsurprisingly) use the JDK default provider and BouncyCastle.
...
2
votes
2answers
355 views
Can be used ECDH with static public key and parameters?
I have protocol required for privacy. Thus, I want to use hybrid cryptography. Base on my knowledge, ECDH is fast and secure.
My system consists of 3 main components a trusted-server, client, and ...
1
vote
1answer
805 views
ASN.1 encoding of X25519 private key
I'm using mbed TLS for ECDH key agreement using Curve25519. The private and public keys are stored and transmitted as Hex strings as easily generated with mbed TLS. Those strings are big-endian. This ...
7
votes
1answer
2k views
Where can I find a canonical list of elliptic curve names and their aliases?
I recently had a problem where I created an EC client certificate which used the sect571k1 curve and I got some strange errors attempting to use it as a client certificate through Mozilla Firefox. It ...
5
votes
2answers
4k views
What is the format of an X9.62 key?
RFC8292 contains this gem:
The "k" parameter includes an ECDSA public key [FIPS186] in
uncompressed form [X9.62] that is encoded using base64url encoding
[RFC7515].
There is an example of the use of ...
2
votes
1answer
124 views
What can you do with a sufficiently complex quantum computer against Elliptic Curve Cryptography?
I've heard that a modified version of Shor's algorithm can "break" ECC. But what does this mean specifically? What are all the things you can do with this algorithm? Can you:
decrypt messages ...
1
vote
0answers
41 views
Does using the same curve certificate on both ends cause security issues?
I have the following scenario: an application that establishes a full mesh connection with itself on a remote server. We use 0MQ and curve certificates for security and authentication, but at the same ...
2
votes
1answer
177 views
Is it safe for both client and server to use the same keypair in CurveZMQ?
I make software for physics labs, and computers in the labs are exchanging all sorts of information with each other and with researcher's laptops, usually on a university network. I use ZeroMQ for ...
2
votes
1answer
200 views
Does the ECDSA signature value (of an OCSP response) need to be DER encoded
In OCSP responses by a certain eIDAS PKI I every once in a while get signature values which, when unpacked from their BIT STRING, contain an ECDSA signature whose INTEGER constituents have an ...
16
votes
2answers
6k views
Generate new key - ECC vs RSA
I intend to start using GnuPG again. I haven't used it for the last 2 years and was surprised that there is now the option for RSA and ECC keys.
After reading a bit about ECC, it seems to me there is ...
1
vote
1answer
93 views
Is There a Whitepaper or Explanation of ECDSA somewhere? [closed]
Let's say I wanted to write an implementation of ECDSA from scratch to better understand it. I can't find a raw, non-abstract explanation anywhere. I tried tracking down the sources on the wiki ...
0
votes
1answer
599 views
How I can get the point of elliptic curve?
I have set a connection with facebook.com and I need the point that is used in the signature.
I have the public key and the certificate. Also with the command:
openssl ec -pubin -in facebook_pub.key ...
