Questions tagged [ecc]
ECC stands for Elliptic Curve Cryptography. Elliptic curves are a mathematical structure which allow to define cryptographic operations on them.
166
questions
0
votes
1
answer
39
views
Why is there an ASN1 OID and a NIST CURVE reference for the same curve?
$ openssl ecparam -in param-ec.pem -text -noout
ASN1 OID: secp384r1
NIST CURVE: P-384
The file param-ec.pem indicates the curve is P-384, also known as secp384r1.
In the same way:
secp521r1 = P-521 ...
- 677
1
vote
1
answer
62
views
SSL certificate match with private key but doesn't match with CSR
I use the following command to create your private key and CSR (using the ECC algorithm):
openssl ecparam -out ECC.key -name prime256v1 -genkey -noout
openssl req -new -key ECC.key -out ECC.csr -...
- 37
0
votes
1
answer
59
views
What format is this private key in, and how can I process it using bouncycastle?
I have the following private key. I'd like to be able to process it into an instance of ECPrivateKey using Bouncycastle (or the builtin Java security API if bouncycastle isn't necessary).
-----BEGIN ...
- 101
2
votes
1
answer
80
views
SSH Handshake on Cisco IOS XE
I've configured the following on my IOS XE device.
!
ip ssh rsa keypair-name my-4096rsa-ssh-key
ip ssh version 2
ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256
ip ssh server algorithm ...
- 21
0
votes
0
answers
112
views
SafeNet eToken 5110CC w/ IDPrime 940MD: Generating ECC384/521 Errors + ICC/CVC Authentication
I am trying to utilize the SafeNet eToken 5110CC, which basically has the IDPrime 940MD with the applet 4.4.2.A., to generate ECC keys with lengths 384bits and 521bits to no avail.
The product brief ...
- 111
1
vote
0
answers
53
views
Is it possible to use an ed25519 security key with Google Chrome SSH applets?
After generating an OpenSSH EC key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
- 475
4
votes
0
answers
79
views
How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?
Now that OpenSSH supports Elliptic curve security keys (since version 8.2), it's possible to generate a ed25519-sk key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
This generates ...
- 475
0
votes
2
answers
419
views
Elliptic Curve Encryption Algorithm:ES256, Curve: P-256 Format representations
Can I please get some help in understanding the representation/connection between the issuer key structure, such as the one here:
{
"kty": "EC",
"d": "...
- 103
1
vote
2
answers
713
views
Is the elliptic curve secp256r1 without a backdoor?
Some loose reports have indicated that NSA implemented backdoors to some NIST elliptic curves. As far as I understand these do not include P-256, P-384, etc.
From a security standpoint, would it be ...
- 113
1
vote
1
answer
435
views
Why does ECC not have an encrypt capability in GPG, but RSA does?
I'm attempting to establish a process for setting up a new GPG identity for myself and my threat model.
Much of it is following guides which I believe are still considered best practices:
https://...
- 111
1
vote
1
answer
685
views
QR codes for shc Covid vaccine passports
In Canada, Québec introduced it's Covid-19 App "VaxiCode" on September 1; BC, "BC Vaccine Card", September 13, requirement in place until January 31, 2022, subject to extension; ...
- 113
0
votes
1
answer
202
views
wrong curve error during TLS handshake with vsftpd
I'm working on a project with a client based on mbedtls and a server built with vsftpd.
I had basic RSA authentication working but am now upgrading to using the cipher ...
- 113
3
votes
1
answer
493
views
GnuPG now uses ECC 25519 as default on new key generation - any compatibility issues to worry about?
TL;DR: I'm assuming that if GnuPG made it a default then it should be what we use, but it used "bad" defaults in the past so I'm wondering if there are any tradeoffs to this? More ...
- 33
1
vote
1
answer
163
views
RSA vs ECC certificate for IoT device client side certificate authentication
I am using client-side certificate authentication (mutual authentication) in my IoT prototype. we acquire client side certificates using embedded PKI through a CA.
There are the provisions of ...
- 163
1
vote
0
answers
121
views
Key generation between Tiny-C-ECDH and cryptography.hazmat.primitives.asymmetric.ec [closed]
I have two systems, one running a C environment on a RTOS and another a python program running on a Pi.
I need to generate an encryption key using ECDH between these two systems for symmetric ...
- 11
0
votes
0
answers
226
views
ESP32: Secure WiFi credentials via WebCrypto?
Background information:
I am not a computer scientist. However, in a research project I am currently building a ESP32-based sensor. Multiple sensors of this type are going to be used by multiple users....
- 101
1
vote
0
answers
243
views
What is the relation between cipher suite and certificate? [duplicate]
I generated my self signed certificate using openssl and I chose ECC keys (prime 256v1) for root certificate but while authenticating with the server i.e. IBM cloud and my device the negotiated cipher ...
1
vote
1
answer
230
views
GnuPG: Why is my Ed25519 signature 144 bytes long rather than 64?
according to https://www.rfc-editor.org/rfc/rfc8032
EdDSA uses small public keys (32 or 57 bytes) and signatures (64 or
114 bytes) for Ed25519 and Ed448, respectively;
But if I sign using Ed25519 in ...
0
votes
0
answers
317
views
MiTM attack on a Tor V3 Onion Service?
As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
1
vote
1
answer
218
views
Is using only secp384r1 and up named groups considered okay?
I found that secp384r1 is supported in almost all web browsers and it is considered secure.
My question is:
Is it okay if i use only secp384r1 and up named groups?
Are there any disadvantages ...
0
votes
0
answers
362
views
How to securely design REST API for Password Manager app?
I want to create Password Manager where users can create their accounts and store website passwords.
For the frontend, it will be a mobile app, but I need REST API as the backend data where the data ...
- 101
2
votes
1
answer
499
views
Can a client with an ECC certificate and a server with RSA certificate establish a mTLS connection?
Can a client with an ECC certificate and a server with RSA certificate establish a mTLS connection?
Can they agree on a cipher suite?
Why?
- 181
0
votes
2
answers
402
views
Signing CSR using an ECC keypair
I'm trying to sign a CSR using python-asn1crypto and python-pkcs11. I have an ECC Keypair stored in a Hardware Security Module (HSM).
Here's a code sample:
key = decode_ec_public_key(...
- 83
2
votes
0
answers
100
views
Should I re-timestamp old timestamps when switching to a stronger algorithm?
One of our clients uses a trusted timestamp service to prove that certain documents existed on the day they were created (they don't need a full digital signature, just the timestamp). The server uses ...
- 121
2
votes
1
answer
1k
views
Algorithm and key size to choose for SSL certificates (security and CPU wise) in 2020 (using nginx)
I posted this question already on SO, but as it is not really a programmin question I thought it might be a better place to ask here:
I want to setup a new SSL certificate store for generating SSL ...
- 125
3
votes
1
answer
2k
views
Why does TLS1.3 use same cipher suite for RSA and ECC key pairs?
As per this answer RSA and ECC certificates should use different cipher suites. I tried to test it. It holds true for TLSv1.2. But for TLSv1.3 I see same cipher suite being used for both types of ...
- 211
7
votes
1
answer
1k
views
gpg key size of 4096 and "the future is ECC"
My boss wants to sign our binary. I need to tell him how he can create the signing key.
Most if not all sites I have seen about signing binaries say "use gpg".
OK, so gpg per default has 2048. Their ...
- 417
1
vote
0
answers
104
views
PKCS12 generation for ECC key types using JavaScript
I'm generating p12 for ECC key types using the Forge library. https://github.com/digitalbazaar/forge/issues/777
This library already provides p12 for RSA key types; now, I'm trying to enhance to ECC ...
- 11
24
votes
3
answers
5k
views
Why don't folks seem to use ECC for TLS root certificate signature?
I looked around, and all I see is websites using RSA2048 for Root signature, and a few using ECC for encryption.
Are there any reasons folks don't seem to use ECC for TLS root signature?
Are there ...
- 689
2
votes
2
answers
2k
views
Does the "Key Encipherment" key usage make sense when using ECDH P384?
I configured a Windows CA and created a certificate template to issue certificates with ECDH_P384 keys:
Then I noticed that it's not possible to set the "Key Encipherment" key usage in the "...
- 71
10
votes
1
answer
339
views
How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?
What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I've read up on it and while I understand the basics (...
- 7,333
1
vote
1
answer
182
views
SSH and the ECDH component
With SSH, most of my servers use ed25519 (the twisted Edwards variant EC) for authentication.
I was wondering, after authentication with ed25519, does SSH protocol 2 simple use ephemeral/ephemeral ...
- 689
1
vote
1
answer
154
views
Does a TLS client needs to support one of the named groups (curves?) supported by the server for TLS handshake to succeed?
Does a TLS client needs to support one of the named groups (curves?) supported by the server for TLS handshake to succeed?
Longer version:
I'm running a web site using Windows Server 2016. The web ...
- 83
-2
votes
1
answer
166
views
Attack on RSA and ECC
I am reading information about RSA and Eliptic Curves cryptography. Assuming that both these two algorithms have stages until two parts achieve key exchange. If an attacker eavesdrop the stages before ...
- 211
2
votes
2
answers
401
views
Is it important to use separate GPG keys for signing Git commits and for SSH authentication?
When using GPG to sign Git commits, and as the SSH-agent, is it important to use separate sub-keys for the signing of the Git commits as it is for authentication with the SSH host of the Git server?
...
- 261
2
votes
1
answer
150
views
Is this key exchange algorithm secure and valid? [closed]
I'm writing reliable UDP implementation and I want it to be secure. Also, I want to make use of elliptic curve cryptography. I don't have the proper education to really understand the math behind this ...
0
votes
1
answer
105
views
How can I add bits of security? (e.g. RSA + ECC)
If we have an RSA layer of encryption over some text with n bits of security, then we use an elliptic curve, say with m bits of security, how can we calculate the total bits of security with RSA(ECC(.....
user216316
7
votes
1
answer
561
views
How does MariaDB's ed25519 auth scheme work?
Newer versions of MariaDB (a MySQL database server fork) have a new password based auth scheme called "ed25519". The docs are very sparse regarding how it works and what it does.
https://mariadb.com/...
- 7,613
2
votes
2
answers
2k
views
ECDHE_RSA_WITH_AES_128_GCM_SHA256 - How to determine ECDHE Key Length?
Server: SSL Certificate, 2048-bit RSA Public Key, Signature Algorithm is sha256RSA
What am I missing here? !
I've scoured the RFC's, and I have yet to find anything on how to determine the ECDHE key ...
- 77
0
votes
1
answer
325
views
secp256k1 GPG key?
Given that secp256k1 is used to underpin the entire Bitcoin network (worth $174B as of today) -- it appears to offer demonstrably better security than other EC curves as no one has yet taken the ...
- 1,538
0
votes
2
answers
511
views
CSR signature using elliptic curve
We've been asked to generate certificate signing request using elliptic curve and we can't use any third-party library it's an embedded application with very limited resources).
We are used to ...
5
votes
2
answers
2k
views
GPG unattended ECC key and subkey generation
I want to generate an ECC key where the primary key is just for cert and has 3 subkeys for auth, sign, encrypt.
I've found 2 methods to generate it. But I want to use unattended key generation via
...
1
vote
0
answers
104
views
Elliptic Curve searchable encryption for message delivery
I need a simple message scheme where a sender can send a private message to a receiver using a public database and without relieving who the receiver. All parties have an Elliptic Curve public and ...
- 152
0
votes
0
answers
1k
views
Converting a raw EC public key into EVP_PKEY using openssl
I am trying to convert a raw EC key and EVP_PKEY structure. The process seems straightforward but am running into issues.
Here is the code I am using --
unsigned char tmpPubKey[] = {
0x04, ...
- 263
1
vote
1
answer
241
views
OpenSSL ECC key - Additional byte in DER encoding for one curve
In the below, I use OpenSSL to create a private key for the secp224k1 curve. Note the length of the private key in the DER - 0x1d. That's 29 bytes, or 232 bits, not 224. It appears that a leading zero ...
- 115
6
votes
3
answers
7k
views
RSA 4096 vs. ECC Curve 25519
I want to use GPG to encrypt files before storing them as backup in the cloud. I don't care about interoperability or performance/resource consumption during encryption/decription. I only care about ...
- 161
0
votes
0
answers
129
views
Which encryption algorithm for cloud backup?
I want to backup my data to the cloud. Before that, I want to encrypt it using GPG (gpg (GnuPG) 2.2.11 and libgcrypt 1.8.4).
The backup is just for me, so I don't care about interoperability
I only ...
- 161
1
vote
1
answer
395
views
AES, RSA, ECC Key size [closed]
It is generally said that 2048-bit RSA keys are roughly equivalent to 112-bit symmetric keys and 2048-bit RSA keys are "sufficient for commercial use until around the year 2030" (https://security....
- 11
2
votes
1
answer
355
views
Shareable encrypted data in a web application
This is a follow up on my previous question about Storing sensitive, sharable data for a company where several of the employees have access to the server.
This solution has worked well for our ...
- 123
4
votes
1
answer
1k
views
ECDH and static key encryption
It's been a while and I'm still trying to figure out if my understanding of ECC crypto is correct.
Basically from what I understood a purely asymmetric encryption is never used. Usually the ...
- 143