Skip to main content

Questions tagged [ecdsa]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
55 views

ECDSA certificates not impacted by Let’s Encrypt certificate chain change?

We received an email from Cloudflare about the upcoming Let’s Encrypt certificate chain change. At some point, it states that "Additionally, this change only impacts RSA certificates. It does not ...
Vic Seedoubleyew's user avatar
0 votes
1 answer
276 views

Why does the Public Key Info field in an X509 certificate for EC indicate the algorithm

The Subject Public Key Info field can have a value like ECDSA_P256 or ECDH_P256 when ECC is used. Why is it not sufficient to specify "ECC_P256"? In other words, why is it not enough to ...
Lemon Sky's user avatar
  • 185
1 vote
0 answers
72 views

MbedTls - keeping context private?

Let's assume we're running on mbed system with internal and external RAM. Dumping external RAM is much more easier for attacker on such systems when debug ports are locked. I'm wondering if the ...
akimata's user avatar
  • 11
0 votes
0 answers
106 views

Is pass -> [via pbkdf2] -> seed -> ECDSA key pair better than pass(word) hashing?

For a web service, I am considering generating random 25-49 recovery codes as a kind of pass that can be stored in a pass manager (no usernames). Instead of pass(word) hashing on the server, I ...
r j's user avatar
  • 138
0 votes
1 answer
605 views

How to decrypt ECDSA_secp256k1 private key from PEM format generated with OpenSSL

I'm trying to decrypt an encrypted ECDSA_secp256k1 private key generated using the OpenSSL CLI command openssl ecparam -genkey -name secp256k1 | openssl ec -aes-128-cbc -out ecdsa_priv.pem but I want ...
petreze's user avatar
1 vote
0 answers
542 views

Given a Java ECPublicKey ECDSA PublicKey, how can I build an SSH2 public key? [closed]

I have created a ECDSA key and now need to convert this to SSH2 key. final KeyPairGenerator keyGen = KeyPairGenerator.getInstance("ECDSA"); ECGenParameterSpec params = new ...
Vicky's user avatar
  • 11
1 vote
0 answers
206 views

Ramifications of the psychic/CVE-2022-21449 ECDSA verification vulnerability

On 2022-04-19, Neil Madden published a vulnerability in the ECDSA signature verification code of the library bundled with some editions of Java, including some recent by Oracle and in OpenJDK. That ...
fgrieu's user avatar
  • 1,243
2 votes
1 answer
1k views

SSH Handshake on Cisco IOS XE

I've configured the following on my IOS XE device. ! ip ssh rsa keypair-name my-4096rsa-ssh-key ip ssh version 2 ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256 ip ssh server algorithm ...
TimmayG's user avatar
  • 21
1 vote
0 answers
217 views

Is it possible to use an ed25519 security key with Google Chrome SSH applets?

After generating an OpenSSH EC key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment Is it possible to use this key with Google Chrome SSH applet or Mosh, in particular on non-Linux ...
Petr's user avatar
  • 517
8 votes
1 answer
402 views

How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?

Now that OpenSSH supports Elliptic curve security keys (since version 8.2), it's possible to generate a ed25519-sk key on a hardware security key: $ ssh-keygen -t ed25519-sk -C comment This generates ...
Petr's user avatar
  • 517
0 votes
1 answer
2k views

How do I turn an 88 byte ECDSA public key into a 65 byte uncompressed or 33 byte compressed key for use with bitcoin

In my situation my private key is in an HSM. I cannot access it for use with the various bitcoin golang libraries. Most of the functions require the private key "in-use". Although in my case,...
Pete's user avatar
  • 3
0 votes
1 answer
864 views

wrong curve error during TLS handshake with vsftpd

I'm working on a project with a client based on mbedtls and a server built with vsftpd. I had basic RSA authentication working but am now upgrading to using the cipher ...
stdcerr's user avatar
  • 113
1 vote
2 answers
225 views

Premeditated substitution of ECDSA-signed message by the signer

If I understand correctly section 4.2 in Jacques Stern, David Pointcheval, John Malone-Lee, and Nigel P. Smart's Flaws in Applying Proof Methodologies to Signature Schemes, in proceedings of Crypto ...
fgrieu's user avatar
  • 1,243
4 votes
1 answer
3k views

GnuPG: How to create ECDSA signature?

https://www.rfc-editor.org/rfc/rfc6637 defines ECDSA for OpenPGP and https://wiki.gnupg.org/ECC lists elliptic curve support in GnuPG since version 2.1 I have version 2.2.25 and it lists ECDSA as ...
matthias_buehlmann's user avatar
0 votes
1 answer
1k views

Verify signature without digest

I'm trying to verify that a smartcard (possibly doctored by an attacker) has access to the (ECDSA P-384) private key for which I was given a (signed) public key, in order to verify that the card is ...
Wouter Verhelst's user avatar
52 votes
4 answers
54k views

Should I be using ECDSA keys instead of RSA for SSH?

I read on ssh.com that there are new ECDSA ssh keys that one should be using to create the public / private key pair; and that's it's a US Government Standard based on elliptical curves (probably ...
leeand00's user avatar
  • 1,441
1 vote
2 answers
1k views

How to store ECDSA public key securely in Android

I am writing an Android application that needs to verify that a request is sent from a trusted party (me). This is my current solution: Storing keys: Generate ECDSA public key / private key from a ...
hollaholl's user avatar
1 vote
0 answers
128 views

How to authorize a subkey using a primary master key pair?

I'm using webcrypto, not PGP/GPG. I would like to use a key pair to create a "subkey" that is authorized by my primary key in a way anyone can publicly verify so I don't need to expose the primary ...
Xeoncross's user avatar
  • 313
6 votes
2 answers
6k views

Difference in ECDSA private key format

I have two private ssh keys, - one was originally created with ssh-keygen the other one with a python script. They are supposed to be the same, however one works for authentication and the other one ...
Kyu96's user avatar
  • 185
6 votes
2 answers
14k views

Convert ECDSA keys (PEM, OpenSSH)

To work with ECDSA keys I am using the python-ecdsa library. Unfortunately this library can not process keyfiles properly if they are provided in the OpenSSH format. Instead I generate them in the PEM ...
766F6964's user avatar
  • 161
3 votes
1 answer
2k views

Mix and match RSA and ECDSA in TLS

Suppose TLS client and server want to communicate, authenticating both parties. They each have sufficiently trusted certificates, but one corresponds to an ECDSA private key and the other corresponds ...
Eugene Ryabtsev's user avatar
2 votes
1 answer
833 views

Which KEK can wrap AES, RSA and ECDSA keys securely?

If I have AES256, RSA4K and ECDSA-512 keys as CEKs, which I need to securely store, what KEK can I use to securely wrap these without reducing the bit strength? I am aware that an AES256 key can wrap ...
mithya's user avatar
  • 123
0 votes
1 answer
496 views

How can ECDSA offer stronger security with the same key length (same amount of entropy)? [duplicate]

It's always been told that ECDSA is more secure "per bit of key size", such that it offers same security with a shorter key, or offers stronger security with the same key length. However, per my ...
iBug's user avatar
  • 1,368
1 vote
0 answers
901 views

CA signature Algorithm: sha256WithRSAEncryption or ecdsa-with-SHA256

I need to update a CA that is about to expire, currently is using Signature Algorithm 256WithRSAEncryption and I am thinking in using ecdsa-with-SHA256 with something like: openssl req -x509 -nodes -...
nbari's user avatar
  • 223
4 votes
1 answer
2k views

Is it possible to fake ECDSA signatures?

Recently, I came across a reddit post claiming it was easy to mutate bitcoin signatures to generate message/signature pairs. https://www.reddit.com/r/btc/comments/9xpivk/...
FrozenKiwi's user avatar
12 votes
4 answers
10k views

Recommended asymmetric algorithms for JWT?

I'm implementing JWT authentication for a new web service and am unsure which asymmetric algorithm to choose. I've searched around and haven't found any consensus or clear recommendations. According ...
user3607758's user avatar
0 votes
1 answer
4k views

why does ssh prompt with the ECDSA key instead of RSA [closed]

When I use an Ubuntu from linode ssh-keygen -l defaults to looking for an RSA file to "list". Yet ssh issued from a client asks for verification of the remote linode's ECDSA key. This means that ...
H2ONaCl's user avatar
  • 953