Questions tagged [ecc]
ECC stands for Elliptic Curve Cryptography. Elliptic curves are a mathematical structure which allow to define cryptographic operations on them.
0
votes
0answers
9 views
ECC protocol practical implementation in python [migrated]
My goal is to code a program for ECC implementation. Right now i am at the basics and i am trying to follow an example found on the internet. I will give the code below. The problem is the after ...
2
votes
1answer
25 views
ECDH and static key encryption
It's been a while and I'm still trying to figure out if my understanding of ECC crypto is correct.
Basically from what I understood a purely asymmetric encryption is never used. Usually the ...
1
vote
1answer
138 views
How can I use 'safe' Elliptic Curve algorithms in .Net Core?
I'm looking to build my own digital signature operations into a program I'm writing, and the nuances of cryptography are a bit beyond me.
According to this website the NIST/NSA algorithms (P-224, P-...
3
votes
1answer
60 views
BouncyCastle and Microsoft Cng ECDH secret key mismatch
I'm trying to refactor some client-side code from BouncyCastle to Microsoft Cng. I've figured out how to convert key format(ECC key blobs) between them, but I couldn't calculate the same secret.
...
1
vote
0answers
44 views
Advantage Of ECDH-RSA over RSA Ciphersuites In TLS
If ECDH-RSA is used for key exchange, this is what happens:
The server has its public ECDH parameter embedded within its certificate. The client generates its public ECDH parameter, extracts the ...
2
votes
1answer
122 views
Why PEM encodings of EC public and private keys use different headers?
Manual page for OpenSSL ec command states:
The PEM private key format uses the header and footer lines:
-----BEGIN EC PRIVATE KEY-----
-----END EC PRIVATE KEY-----
The PEM public key ...
1
vote
1answer
388 views
Is the JDK standard EC KeyPairGenerator suitable for use with both ECDSA and ECDH algorithms?
I've seen various references on the web for generating Elliptic Curve KeyPairs in Java, and the two most commonly referenced examples (unsurprisingly) use the JDK default provider and BouncyCastle.
...
2
votes
2answers
72 views
Can be used ECDH with static public key and parameters?
I have protocol required for privacy. Thus, I want to use hybrid cryptography. Base on my knowledge, ECDH is fast and secure.
My system consists of 3 main components a trusted-server, client, and ...
1
vote
1answer
261 views
ASN.1 encoding of X25519 private key
I'm using mbed TLS for ECDH key agreement using Curve25519. The private and public keys are stored and transmitted as Hex strings as easily generated with mbed TLS. Those strings are big-endian. This ...
6
votes
1answer
277 views
Where can I find a canonical list of elliptic curve names and their aliases?
I recently had a problem where I created an EC client certificate which used the sect571k1 curve and I got some strange errors attempting to use it as a client certificate through Mozilla Firefox. It ...
4
votes
1answer
556 views
What is the format of an X9.62 key?
RFC8292 contains this gem:
The "k" parameter includes an ECDSA public key [FIPS186] in
uncompressed form [X9.62] that is encoded using base64url encoding
[RFC7515].
There is an example of the use of ...
2
votes
1answer
101 views
What can you do with a sufficiently complex quantum computer against Elliptic Curve Cryptography?
I've heard that a modified version of Shor's algorithm can "break" ECC. But what does this mean specifically? What are all the things you can do with this algorithm? Can you:
decrypt messages ...
1
vote
0answers
41 views
Does using the same curve certificate on both ends cause security issues?
I have the following scenario: an application that establishes a full mesh connection with itself on a remote server. We use 0MQ and curve certificates for security and authentication, but at the same ...
2
votes
1answer
89 views
Is it safe for both client and server to use the same keypair in CurveZMQ?
I make software for physics labs, and computers in the labs are exchanging all sorts of information with each other and with researcher's laptops, usually on a university network. I use ZeroMQ for ...
2
votes
1answer
87 views
Does the ECDSA signature value (of an OCSP response) need to be DER encoded
In OCSP responses by a certain eIDAS PKI I every once in a while get signature values which, when unpacked from their BIT STRING, contain an ECDSA signature whose INTEGER constituents have an ...
7
votes
2answers
2k views
Generate new key - ECC vs RSA
I intend to start using GnuPG again. I haven't used it for the last 2 years and was surprised that there is now the option for RSA and ECC keys.
After reading a bit about ECC, it seems to me there is ...
1
vote
1answer
60 views
Is There a Whitepaper or Explanation of ECDSA somewhere? [closed]
Let's say I wanted to write an implementation of ECDSA from scratch to better understand it. I can't find a raw, non-abstract explanation anywhere. I tried tracking down the sources on the wiki ...
0
votes
1answer
301 views
How I can get the point of elliptic curve?
I have set a connection with facebook.com and I need the point that is used in the signature.
I have the public key and the certificate. Also with the command:
openssl ec -pubin -in facebook_pub.key ...
0
votes
1answer
64 views
How I can get the elliptic curves parameters from a host?
For example, with openssl I have seen that facebook works with ANSI X9.62 prime256v1 elliptic curve and what I want is the point of the curve that is using with my signature. I have seen that I can ...
1
vote
0answers
82 views
ECC order and modulus in EC
I have an error in reasoning regarding to the calculations on elliptic curves. The basic group operations are all calculated mod p. Ok right.
Then I construct for ECC a discrete logarithm problem ...
0
votes
0answers
142 views
RSA certificate but ECDHE? [duplicate]
I'm using a rsa 2048 bit certificate for tls. (Signed by lets encrypt)
My browser tells me the exchange is made via ECDHE (Elliptic-curve Diffie–Hellman). How is this possible, if the certificate isn'...
1
vote
1answer
157 views
CECPQ1 key exchange functionality
CECPQ1 (combined elliptic Curve and Post-Quantum Cryptography Key Exchange) is a new key exhange developed by google, which combine X25519 with NewHope (elliptic Curve KE + Post-quantum KE).
Google ...
0
votes
0answers
135 views
Exist any non-NIST curve supported by browsers to be used in ECDSA on TLS?
I have already read this post and few related ones.
I'm the developer of one website and I don't want to use the NIST curves (like prime256v1) for ECDSA, what I can use in place? The Ed25519 and ...
0
votes
1answer
519 views
Get r and s from ECDSA Signature as two concatenated integers (OpenSSL) [closed]
EVP_DigestSignFinal() gives me a DER encoded signature.
Some examples:
ECDSA-SHA-256
30 44 02 20 [..r..] 02 20 [..s..]
30 46 02 21 [..r..] 02 21 [..s..]
30 45 02 20 [..r..] 02 21 [..s..]
ECDSA-SHA-...
3
votes
1answer
1k views
Wrong size for EC key pair
I'm using OpenSSL to generate EC key pairs. I notice that the length of the keys as displayed by OpenSSL are exactly one byte longer than expected for both private and public Key.
The 00 (first Byte ...
2
votes
0answers
182 views
How to securely store a PIN-encrypted prime number?
Situation: within a mobile application, we're generating and storing a private key (RSA or ECC) which we use to sign miscellaneous requests with (to authenticate using the mobile as a 2nd factor, or ...
1
vote
0answers
192 views
Is ECDH easier than DH to be broken?
As I am a security newbie, this post might have lots of misconceptions about security. If so, please let me know
I've heard that ECDH is preferable to DH because its smaller key size and lower ...
2
votes
0answers
39 views
Can ECC correctness issues in CVE-2015-2730 allow “remote attackers to spoof ECDSA signatures”?
CVE-2015-2730: Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly ...
4
votes
0answers
2k views
Which ECC to choose with GPG?
I want to generate a key pair with gpg2 2.1.11 and libgcrypt 1.6.5.
I use the command gpg2 --expert --full-key-gen. This allows me to choose an ECC:
Please select what kind of key you want:
(1) ...
1
vote
1answer
188 views
How widely used is Elliptic Curve Cryptography?
I would like to know how widely ECC is being used today (or has been used in recent years). How do I find data about this? Also, what are good metrics for quantifying this?
1
vote
0answers
76 views
Using ED448 (or other elliptic curves) for password hashing
I was thinking about a password hashing scheme that would work roughly as follows.
for i:=0 to n do
password = HASH(password)
private_key = GenerateRandomKey(ED448)
public_key = GetPublicKey(ED448,...
3
votes
1answer
793 views
Four ECDSA P256 CSPs are available in Windows. Which one should I use?
According to Azure support case #116120515025419, the public datacenter only supports the following
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P256
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256_P256
...
3
votes
1answer
490 views
Signature in ECDSA-signed X.509 certificates
I wonder if there is a standard way of encoding the ECDSA-signature in the signature field of an X.509 certificate.
As far as I understand, the signature is a tuple of two integers r and s. If the ...
2
votes
2answers
327 views
ECC How to exchange signed and encrypted data
With .NET Framework 4.7 the Elliptic Curve Cryptography (ECC) was greatly enhanced:
The .NET Framework 4.7 has enhanced the functionality available with
Elliptic Curve Cryptography (ECC). ...
6
votes
2answers
1k views
What are the performance differences (for client and server) between DHE and ECDHE in TLS?
My question is about the client and server performance for (EC)DHE.
I am having difficulties in understanding this picture (which is based on numbers from Ivan Ristic' book "Bulletproof SSL and TLS").
...
1
vote
1answer
405 views
Is it possible to use ECC private key for encryption?
I want to use an ECC private key for encryption because of mutual authentication.
But I cannot find a method (or function) in wolfcrypt (wolfSSL) or the micro-ecc library.
Is is okay to use an (ECC)...
2
votes
3answers
1k views
RSA or ECDHE for x.509 certificates-what does each do?
I am relatively new to x.509 certificates, but recently i have been looking at the https connection padlock at the top of the screen. On certain websites, clicking on the pad informs me that the site ...
0
votes
2answers
133 views
Which approach to use to implement encryption in a Windows desktop app?
I will need to do some encryption of the user data in my Windows desktop application, written in C/C++ using WinAPIs (no .NET or WinRT stuff.) Namely, I'll be doing the following:
Symmetric ...
1
vote
1answer
361 views
Server with support for both EC and RSA keys
I have a server that implements DTLS using OpenSSL 1.0.1 but supports only RSA keys as of today. I want to add support to this server to accept EC keys to be able to implement the newer ECDHE-ECDSA ...
2
votes
1answer
326 views
Why does the CSR contains an explicit curve when generating private key with genpkey?
When I generated the SSL key using ecparam, I got a CSR with a named curve:
$ openssl ecparam -genkey -out ecparam.key -name prime256v1
$ openssl req -new -sha256 -key ecparam.key -out ecparam.csr -...
1
vote
1answer
368 views
Hex private ecdsa key to PEM File library [closed]
I am trying to convert a raw private ecdsa key in hex format (k) to a PEM file. I searched for few hours, but couldn't find a suitable library(Python prefered). I am using python-ecdsa but I there is ...
2
votes
1answer
789 views
How are ECDSA signatures computed for X509 Certificates?
I am trying to verify a certificate signature on my own. To do this, I created a self-signed certificate using OpenSSL with the two following command lines:
openssl ecparam -name secp256k1 -genkey -...
0
votes
1answer
114 views
Derive a shared secret between different curves [closed]
Is it possible to derive a shared secret between different curves?
An explanation would be nice.
How can I decide which curve I should use in my software?
Highest amount of bits has in my case the ...
3
votes
2answers
3k views
SSH key strength factor besides key length (say ed25519 vs rsa-4096)
I am not of the field of IS but I want to secure my humble VPS and I cam across a clashing of opinions between 3 IS guys: 2 say that ed25519 ssh keys are a bit more secure than ssh-rsa of 4096 bytes ...
1
vote
0answers
294 views
Why are NIST binary curves not as popular as NIST prime curves for ECDSA?
Most ECDSA certificates commonly encountered on the internet are signed using NIST prime curves, e.g., P-256, P-384, etc. Why are the NIST binary curves, Koblitz curves in particular, e.g., K-283, K-...
2
votes
2answers
605 views
Selection of Curve in ECC for openssl 1.0.1?
I am using both version of openssl 1.0.1 and openssl 1.0.2 :
in openssl 1.0.2 have one function which is to set highest preference curve automatically.
But, in openSSL 1.0.1 there is no any function ...
1
vote
0answers
251 views
Does zero padding affect my ECDSA signature?
I have data varying between 32 bytes and 48 bytes for ECDSA signature i.e. it can be 33,34,35...etc..bytes upto 48 bytes. (Hashing is not considered in this implementation as per PKCS: ECDSA without ...
1
vote
0answers
86 views
OpenSSL API's to pass EC named curve list while generating SSL CTX?
I need to pass the selected EC named curve list to server. Could someone please let me know the OpenSSL API to achieve the same while generating the SSL_CTX?
1
vote
1answer
350 views
Evaluation board for side channel attacks [closed]
I have started working on side channel attacks particularly focusing on DPA and DEMA for different cryptographic algorithms; targeting FPGA devices. I want to measure the power and EM radiated out of ...
1
vote
0answers
971 views
End-To-End encrypted calls over GSM transport (not data / VoIP)
As the issue stands, it should be (or could be) possible, to encrypt voice, that's being passed through GSM voice call in such way, so that it's end-to-end encrypted.
Ideally in form similar to what ...
