Questions tagged [ecc]

ECC stands for Elliptic Curve Cryptography. Elliptic curves are a mathematical structure which allow to define cryptographic operations on them.

21 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
399 views

Does zero padding affect my ECDSA signature?

I have data varying between 32 bytes and 48 bytes for ECDSA signature i.e. it can be 33,34,35...etc..bytes upto 48 bytes. (Hashing is not considered in this implementation as per PKCS: ECDSA without ...
2
votes
0answers
45 views

Should I re-timestamp old timestamps when switching to a stronger algorithm?

One of our clients uses a trusted timestamp service to prove that certain documents existed on the day they were created (they don't need a full digital signature, just the timestamp). The server uses ...
2
votes
1answer
700 views

Why does TLS1.3 use same cipher suite for RSA and ECC key pairs?

As per this answer RSA and ECC certificates should use different cipher suites. I tried to test it. It holds true for TLSv1.2. But for TLSv1.3 I see same cipher suite being used for both types of ...
2
votes
0answers
392 views

How to securely store a PIN-encrypted prime number?

Situation: within a mobile application, we're generating and storing a private key (RSA or ECC) which we use to sign miscellaneous requests with (to authenticate using the mobile as a 2nd factor, or ...
2
votes
0answers
41 views

Can ECC correctness issues in CVE-2015-2730 allow “remote attackers to spoof ECDSA signatures”?

CVE-2015-2730: Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly ...
2
votes
0answers
2k views

End-To-End encrypted calls over GSM transport (not data / VoIP)

As the issue stands, it should be (or could be) possible, to encrypt voice, that's being passed through GSM voice call in such way, so that it's end-to-end encrypted. Ideally in form similar to what ...
1
vote
0answers
45 views

PKCS12 generation for ECC key types using JavaScript

I'm generating p12 for ECC key types using the Forge library. https://github.com/digitalbazaar/forge/issues/777 This library already provides p12 for RSA key types; now, I'm trying to enhance to ECC ...
1
vote
0answers
61 views

Elliptic Curve searchable encryption for message delivery

I need a simple message scheme where a sender can send a private message to a receiver using a public database and without relieving who the receiver. All parties have an Elliptic Curve public and ...
1
vote
0answers
135 views

Advantage Of ECDH-RSA over RSA Ciphersuites In TLS

If ECDH-RSA is used for key exchange, this is what happens: The server has its public ECDH parameter embedded within its certificate. The client generates its public ECDH parameter, extracts the ...
1
vote
0answers
41 views

Does using the same curve certificate on both ends cause security issues?

I have the following scenario: an application that establishes a full mesh connection with itself on a remote server. We use 0MQ and curve certificates for security and authentication, but at the same ...
1
vote
0answers
174 views

ECC order and modulus in EC

I have an error in reasoning regarding to the calculations on elliptic curves. The basic group operations are all calculated mod p. Ok right. Then I construct for ECC a discrete logarithm problem ...
1
vote
0answers
451 views

Is ECDH easier than DH to be broken?

As I am a security newbie, this post might have lots of misconceptions about security. If so, please let me know I've heard that ECDH is preferable to DH because its smaller key size and lower ...
1
vote
0answers
111 views

Using ED448 (or other elliptic curves) for password hashing

I was thinking about a password hashing scheme that would work roughly as follows. for i:=0 to n do password = HASH(password) private_key = GenerateRandomKey(ED448) public_key = GetPublicKey(ED448,...
1
vote
0answers
339 views

Why are NIST binary curves not as popular as NIST prime curves for ECDSA?

Most ECDSA certificates commonly encountered on the internet are signed using NIST prime curves, e.g., P-256, P-384, etc. Why are the NIST binary curves, Koblitz curves in particular, e.g., K-283, K-...
1
vote
0answers
101 views

OpenSSL API's to pass EC named curve list while generating SSL CTX?

I need to pass the selected EC named curve list to server. Could someone please let me know the OpenSSL API to achieve the same while generating the SSL_CTX?
1
vote
0answers
381 views

Curve25519xsalsa20poly1305 key derivation

I'm working on batch-encryption of files, for a small project of mine. The files are stored encrypted on a removable drive, and the keys are stored on a trustful server. For enhanced safety, I'd like ...
0
votes
0answers
52 views

How to generate a X509 certificate with an EC public key and RSA signature using OpenSSL?

I'm trying to generate a X509 certificate with an EC public key but an RSA signature. I'm using OpenSSL like this: openssl genpkey -algorithm EC -out ec256key.pem -pkeyopt ec_paramgen_curve:P-256 -...
0
votes
0answers
158 views

MiTM attack on a Tor V3 Onion Service?

As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
0
votes
0answers
70 views

How to securely design REST API for Password Manager app?

I want to create Password Manager where users can create their accounts and store website passwords. For the frontend, it will be a mobile app, but I need REST API as the backend data where the data ...
0
votes
0answers
633 views

Converting a raw EC public key into EVP_PKEY using openssl

I am trying to convert a raw EC key and EVP_PKEY structure. The process seems straightforward but am running into issues. Here is the code I am using -- unsigned char tmpPubKey[] = { 0x04, ...
0
votes
0answers
83 views

Which encryption algorithm for cloud backup?

I want to backup my data to the cloud. Before that, I want to encrypt it using GPG (gpg (GnuPG) 2.2.11 and libgcrypt 1.8.4). The backup is just for me, so I don't care about interoperability I only ...