Questions tagged [ecdsa]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
42 views

Ramifications of the psychic/CVE-2022-21449 ECDSA verification vulnerability

On 2022-04-19, Neil Madden published a vulnerability in the ECDSA signature verification code of the library bundled with some editions of Java, including some recent by Oracle and in OpenJDK. That ...
user avatar
  • 1,050
2 votes
1 answer
121 views

SSH Handshake on Cisco IOS XE

I've configured the following on my IOS XE device. ! ip ssh rsa keypair-name my-4096rsa-ssh-key ip ssh version 2 ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256 ip ssh server algorithm ...
user avatar
  • 21
1 vote
0 answers
59 views

Is it possible to use an ed25519 security key with Google Chrome SSH applets?

After generating an OpenSSH EC key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
user avatar
  • 475
4 votes
0 answers
85 views

How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?

Now that OpenSSH supports Elliptic curve security keys (since version 8.2), it's possible to generate a ed25519-sk key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment This generates ...
user avatar
  • 475
0 votes
1 answer
381 views

How do I turn an 88 byte ECDSA public key into a 65 byte uncompressed or 33 byte compressed key for use with bitcoin

In my situation my private key is in an HSM. I cannot access it for use with the various bitcoin golang libraries. Most of the functions require the private key "in-use". Although in my case,...
user avatar
  • 3
0 votes
1 answer
229 views

wrong curve error during TLS handshake with vsftpd

I'm working on a project with a client based on mbedtls and a server built with vsftpd. I had basic RSA authentication working but am now upgrading to using the cipher ...
user avatar
  • 113
1 vote
2 answers
132 views

Premeditated substitution of ECDSA-signed message by the signer

If I understand correctly section 4.2 in Jacques Stern, David Pointcheval, John Malone-Lee, and Nigel P. Smart's Flaws in Applying Proof Methodologies to Signature Schemes, in proceedings of Crypto ...
user avatar
  • 1,050
3 votes
1 answer
882 views

GnuPG: How to create ECDSA signature?

https://www.rfc-editor.org/rfc/rfc6637 defines ECDSA for OpenPGP and https://wiki.gnupg.org/ECC lists elliptic curve support in GnuPG since version 2.1 I have version 2.2.25 and it lists ECDSA as ...
user avatar
0 votes
1 answer
373 views

Verify signature without digest

I'm trying to verify that a smartcard (possibly doctored by an attacker) has access to the (ECDSA P-384) private key for which I was given a (signed) public key, in order to verify that the card is ...
user avatar
36 votes
4 answers
21k views

Should I be using ECDSA keys instead of RSA?

I read on ssh.com that there are new ECDSA ssh keys that one should be using to create the public / private key pair; and that's it's a US Government Standard based on elliptical curves (probably ...
user avatar
  • 1,247
1 vote
2 answers
664 views

How to store ECDSA public key securely in Android

I am writing an Android application that needs to verify that a request is sent from a trusted party (me). This is my current solution: Storing keys: Generate ECDSA public key / private key from a ...
user avatar
1 vote
0 answers
71 views

How to authorize a subkey using a primary master key pair?

I'm using webcrypto, not PGP/GPG. I would like to use a key pair to create a "subkey" that is authorized by my primary key in a way anyone can publicly verify so I don't need to expose the primary ...
user avatar
  • 313
5 votes
2 answers
3k views

Difference in ECDSA private key format

I have two private ssh keys, - one was originally created with ssh-keygen the other one with a python script. They are supposed to be the same, however one works for authentication and the other one ...
user avatar
  • 165
6 votes
2 answers
8k views

Convert ECDSA keys (PEM, OpenSSH)

To work with ECDSA keys I am using the python-ecdsa library. Unfortunately this library can not process keyfiles properly if they are provided in the OpenSSH format. Instead I generate them in the PEM ...
user avatar
  • 161
3 votes
1 answer
807 views

Mix and match RSA and ECDSA in TLS

Suppose TLS client and server want to communicate, authenticating both parties. They each have sufficiently trusted certificates, but one corresponds to an ECDSA private key and the other corresponds ...
user avatar
2 votes
1 answer
518 views

Which KEK can wrap AES, RSA and ECDSA keys securely?

If I have AES256, RSA4K and ECDSA-512 keys as CEKs, which I need to securely store, what KEK can I use to securely wrap these without reducing the bit strength? I am aware that an AES256 key can wrap ...
user avatar
  • 123
0 votes
1 answer
301 views

How can ECDSA offer stronger security with the same key length (same amount of entropy)? [duplicate]

It's always been told that ECDSA is more secure "per bit of key size", such that it offers same security with a shorter key, or offers stronger security with the same key length. However, per my ...
user avatar
  • 1,378
1 vote
0 answers
578 views

CA signature Algorithm: sha256WithRSAEncryption or ecdsa-with-SHA256

I need to update a CA that is about to expire, currently is using Signature Algorithm 256WithRSAEncryption and I am thinking in using ecdsa-with-SHA256 with something like: openssl req -x509 -nodes -...
user avatar
  • 193
4 votes
1 answer
1k views

Is it possible to fake ECDSA signatures?

Recently, I came across a reddit post claiming it was easy to mutate bitcoin signatures to generate message/signature pairs. https://www.reddit.com/r/btc/comments/9xpivk/...
user avatar
8 votes
4 answers
6k views

Recommended asymmetric algorithms for JWT?

I'm implementing JWT authentication for a new web service and am unsure which asymmetric algorithm to choose. I've searched around and haven't found any consensus or clear recommendations. According ...
user avatar
0 votes
1 answer
3k views

why does ssh prompt with the ECDSA key instead of RSA [closed]

When I use an Ubuntu from linode ssh-keygen -l defaults to looking for an RSA file to "list". Yet ssh issued from a client asks for verification of the remote linode's ECDSA key. This means that ...
user avatar
  • 912