Questions tagged [ecdsa]
The ecdsa tag has no usage guidance.
24
questions
0
votes
0
answers
50
views
Is pass -> [via pbkdf2] -> seed -> ECDSA key pair better than pass(word) hashing?
For a web service, I am considering generating random 25-49 recovery codes as a kind of pass that can be stored in a pass manager (no usernames).
Instead of pass(word) hashing on the server, I ...
- 1
0
votes
1
answer
171
views
How to decrypt ECDSA_secp256k1 private key from PEM format generated with OpenSSL
I'm trying to decrypt an encrypted ECDSA_secp256k1 private key generated using the OpenSSL CLI command openssl ecparam -genkey -name secp256k1 | openssl ec -aes-128-cbc -out ecdsa_priv.pem but I want ...
- 3
1
vote
0
answers
322
views
Given a Java ECPublicKey ECDSA PublicKey, how can I build an SSH2 public key? [closed]
I have created a ECDSA key and now need to convert this to SSH2 key.
final KeyPairGenerator keyGen = KeyPairGenerator.getInstance("ECDSA");
ECGenParameterSpec params = new ...
- 11
1
vote
0
answers
160
views
Ramifications of the psychic/CVE-2022-21449 ECDSA verification vulnerability
On 2022-04-19, Neil Madden published a vulnerability in the ECDSA signature verification code of the library bundled with some editions of Java, including some recent by Oracle and in OpenJDK. That ...
- 1,169
2
votes
1
answer
830
views
SSH Handshake on Cisco IOS XE
I've configured the following on my IOS XE device.
!
ip ssh rsa keypair-name my-4096rsa-ssh-key
ip ssh version 2
ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256
ip ssh server algorithm ...
- 21
1
vote
0
answers
156
views
Is it possible to use an ed25519 security key with Google Chrome SSH applets?
After generating an OpenSSH EC key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
- 507
7
votes
1
answer
261
views
How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?
Now that OpenSSH supports Elliptic curve security keys (since version 8.2), it's possible to generate a ed25519-sk key on a hardware security key:
$ ssh-keygen -t ed25519-sk -C comment
This generates ...
- 507
0
votes
1
answer
1k
views
How do I turn an 88 byte ECDSA public key into a 65 byte uncompressed or 33 byte compressed key for use with bitcoin
In my situation my private key is in an HSM. I cannot access it for use with the various bitcoin golang libraries. Most of the functions require the private key "in-use". Although in my case,...
- 3
0
votes
1
answer
594
views
wrong curve error during TLS handshake with vsftpd
I'm working on a project with a client based on mbedtls and a server built with vsftpd.
I had basic RSA authentication working but am now upgrading to using the cipher ...
- 113
1
vote
2
answers
174
views
Premeditated substitution of ECDSA-signed message by the signer
If I understand correctly section 4.2 in Jacques Stern, David Pointcheval, John Malone-Lee, and Nigel P. Smart's Flaws in Applying Proof Methodologies to Signature Schemes, in proceedings of Crypto ...
- 1,169
4
votes
1
answer
2k
views
GnuPG: How to create ECDSA signature?
https://www.rfc-editor.org/rfc/rfc6637 defines ECDSA for OpenPGP and https://wiki.gnupg.org/ECC lists elliptic curve support in GnuPG since version 2.1
I have version 2.2.25 and it lists ECDSA as ...
0
votes
1
answer
774
views
Verify signature without digest
I'm trying to verify that a smartcard (possibly doctored by an attacker) has access to the (ECDSA P-384) private key for which I was given a (signed) public key, in order to verify that the card is ...
- 175
47
votes
4
answers
39k
views
Should I be using ECDSA keys instead of RSA?
I read on ssh.com that there are new ECDSA ssh keys that one should be using to create the public / private key pair; and that's it's a US Government Standard based on elliptical curves (probably ...
- 1,385
1
vote
2
answers
916
views
How to store ECDSA public key securely in Android
I am writing an Android application that needs to verify that a request is sent from a trusted party (me).
This is my current solution:
Storing keys:
Generate ECDSA public key / private key from a ...
- 13
1
vote
0
answers
94
views
How to authorize a subkey using a primary master key pair?
I'm using webcrypto, not PGP/GPG.
I would like to use a key pair to create a "subkey" that is authorized by my primary key in a way anyone can publicly verify so I don't need to expose the primary ...
- 313
6
votes
2
answers
5k
views
Difference in ECDSA private key format
I have two private ssh keys, - one was originally created with ssh-keygen the other one with a python script. They are supposed to be the same, however one works for authentication and the other one ...
- 185
6
votes
2
answers
12k
views
Convert ECDSA keys (PEM, OpenSSH)
To work with ECDSA keys I am using the python-ecdsa library. Unfortunately this library can not process keyfiles properly if they are provided in the OpenSSH format. Instead I generate them in the PEM ...
- 161
3
votes
1
answer
2k
views
Mix and match RSA and ECDSA in TLS
Suppose TLS client and server want to communicate, authenticating both parties. They each have sufficiently trusted certificates, but one corresponds to an ECDSA private key and the other corresponds ...
- 187
2
votes
1
answer
688
views
Which KEK can wrap AES, RSA and ECDSA keys securely?
If I have AES256, RSA4K and ECDSA-512 keys as CEKs, which I need to securely store, what KEK can I use to securely wrap these without reducing the bit strength? I am aware that an AES256 key can wrap ...
- 123
0
votes
1
answer
401
views
How can ECDSA offer stronger security with the same key length (same amount of entropy)? [duplicate]
It's always been told that ECDSA is more secure "per bit of key size", such that it offers same security with a shorter key, or offers stronger security with the same key length.
However, per my ...
- 1,378
1
vote
0
answers
761
views
CA signature Algorithm: sha256WithRSAEncryption or ecdsa-with-SHA256
I need to update a CA that is about to expire, currently is using Signature Algorithm 256WithRSAEncryption and I am thinking in using ecdsa-with-SHA256 with something like:
openssl req -x509 -nodes -...
- 213
4
votes
1
answer
1k
views
Is it possible to fake ECDSA signatures?
Recently, I came across a reddit post claiming it was easy to mutate bitcoin signatures to generate message/signature pairs.
https://www.reddit.com/r/btc/comments/9xpivk/...
- 143
11
votes
4
answers
8k
views
Recommended asymmetric algorithms for JWT?
I'm implementing JWT authentication for a new web service and am unsure which asymmetric algorithm to choose. I've searched around and haven't found any consensus or clear recommendations. According ...
- 113
0
votes
1
answer
4k
views
why does ssh prompt with the ECDSA key instead of RSA [closed]
When I use an Ubuntu from linode
ssh-keygen -l defaults to looking for an RSA file to "list".
Yet ssh issued from a client asks for verification of the remote linode's ECDSA key.
This means that ...
- 943