Questions tagged [key]

Physical or digital keys. Digital keys are used for encryption or signing, or for authentication (e.g. API key). For product keys, use the tag product-key.

Filter by
Sorted by
Tagged with
0 votes
0 answers
23 views

Is it that a pair of a locking device and an opening device is asymmetric, and a single device which can both lock and open is symmetric? [closed]

I understand that a pair of a locking device and an opening device is asymmetric, and a single device which can both lock and open is symmetric. Is that correct?
user avatar
  • 5
1 vote
0 answers
87 views

How exactly does OpenVPN's tls-auth option apply HMAC to packet messages?

Update: I've been able to work out everything I was asking about packet structure when I was finally able to get Wireshark to work, but there is one last thing I'm confused on which I detail at the ...
user avatar
  • 97
1 vote
1 answer
41 views

Is providing a static TLS key during an OpenVPN handshake useless for commercial providers?

When using OpenVPN, tls-auth and tls-crypt are widely adopted options, allowing a static key to be used in the initial handshake. This helps prevent against DoS attacks, as without the valid key a ...
user avatar
  • 97
0 votes
0 answers
22 views

How can a client safely post/get a (symmetric) client key to/from a key distribution center?

If you look at the above Kerberos protocol's diagram, you can find that the protocol works on the basis that the (symmetric) client key initially exists on both the client node and the key ...
user avatar
0 votes
0 answers
13 views

Is the rolling jam attack considered a MITM attack

As far as I understand, the rolling-jam attack involves eavesdropping, signal blocking and replaying. Does that qualify it as an MITM attack? Could one say that the attacker is controlling the traffic?...
user avatar
0 votes
1 answer
58 views

What format is this private key in, and how can I process it using bouncycastle?

I have the following private key. I'd like to be able to process it into an instance of ECPrivateKey using Bouncycastle (or the builtin Java security API if bouncycastle isn't necessary). -----BEGIN ...
user avatar
1 vote
0 answers
47 views

Storing AES key for later usage

I am currently working on a cli application which uses AES encryption. For key generation, I am using the PBKDF-2 algorithm, along with SHA-256. I am providing a way to enter the password once and ...
user avatar
0 votes
1 answer
46 views

Where should private key(s) reside in IPsec VPN tunnel

I setup an IKE VPN server for road warriors. I actually have this working (YAY!) but took some shortcuts that are leaving me with a working yet not-right/secure setup. My setup is as follows: My ...
user avatar
  • 159
-2 votes
2 answers
62 views

Is the term "only-unlocking key" more accurate than the term "private key"?

Paraphrasing this: Symmetric cryptography is like a door lock. Everyone that has a key can lock and unlock. Asymmetric cryptography is like a common lock or handcuff. Anyone can lock it but only the (...
user avatar
0 votes
0 answers
53 views

Storing an encryption key securely

I am struggling with the question how to store a security key in a secure way. I have done some research and there are multiple options. Option 1) Storing the key on the same server (not recommended, ...
user avatar
0 votes
1 answer
110 views

Does alias in a truststore matter?

I was trying to add a new certificate to our truststore. But I got the alias already exists error. I can't remove the old certificate yet, but I have to add the new certificate. Will it matter if I ...
user avatar
1 vote
1 answer
118 views

Tricky apartment key fob copies frequency & code correctly but the copy doesn't work - not a rolling fob

I have this key fob for our apartment building, and I want to make a copy of it. I've taken it to 3 locksmiths who are able to create a copy, but the copies don't work. I've confirmed that it doesn't ...
user avatar
0 votes
0 answers
53 views

How dangerous is a leaked private key from outside the infrastructure in context of: "Azure Active Directory keyCredential property Disclosure?"

Microsoft published the Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs which describes how to check if an Azure AD is ...
user avatar
0 votes
0 answers
72 views

Acquiring true randomness for generating a key

Recently starting to immerse myself into cryptography, the problem concerning the generation of true randomness being unachievable for computers at this point was raised. If computers were able to ...
user avatar
0 votes
1 answer
198 views

Encryption Algorithm With Separate One-Way (Hashing) And Two-Way (Decryption) Keys

In cryptography, generally we have two ways of handling sensitive information. We can use one-way encryption such as hashing. This is useful when we never need to retrieve it again. In this case, we ...
user avatar
  • 743
0 votes
0 answers
82 views

Is it safe to use a Digital Signature created with a PKI certificate's private key as a password

I'm trying to create application-layer encryption for user data in my database, using password derivation function. But there is a problem, that there must be an admin user, who can access all user's ...
user avatar
0 votes
1 answer
309 views

VeraCrypt: Is it possible to change the master key?

The password in VeraCrypt is used to en-/decrypt a header, that contains a master key, that is used to en-/decrypt the data. I know, that I can change the password, which will not change the master ...
user avatar
1 vote
1 answer
149 views

Security requirements for public API keys

I need to provide security requirements for public API keys that will be generated by a web application and then used in automation scripts by clients. The scripts will be run on the endpoints several ...
user avatar
  • 11
1 vote
2 answers
131 views

How to manage Encryption Key for Server Side Encryption in AWS S3

I need to encrypt personal data like email, phone number, etc. I am using AWS KMS for managing the encryption keys. This is the system that is already implemented is as follows: All the existing data ...
user avatar
5 votes
1 answer
323 views

Impact of having more X509v3 Key Usage fields than required?

I was wondering if having an "oversubscription" of "Key usage fields" inside a X509v3 certificate can negatively impact the performance and/or the security of a server. For example ...
user avatar
  • 65
1 vote
0 answers
776 views

"Failed connecting to the YubiKey. Make sure the application has the required permissions." [closed]

I have a Yubikey version 5.2.7 and I can't generate any new certificates on yubikey manager app, which is weird since I have already generated two certs (on 9d slot) and they worked fine. Now the ...
user avatar
  • 111
0 votes
0 answers
92 views

Is using HSM worth in this scenario?

Long story short, I've assigned with the task to find a way to improve security in an application, they are using java keystores to save and protect the keys. The application owner is worried that ...
user avatar
  • 11
1 vote
1 answer
224 views

Looking for a lost PKE keyless entry fob

I have been looking for my lost car key. I have RTL-SDR and I am able to listen to key fobs frequency which varies between 350-444MHZ. I was trying to understand how most of the keyless entry systems ...
user avatar
0 votes
1 answer
178 views

Can you obtain the passphrase of an encrypted SSH key, given the unencrypted key?

Imagine you get hold of someone's private SSH key, which is encrypted. Now imagine you also get hold of the unencrypted key (e.g., because some SSH client stores it after decryption). Can you ...
user avatar
  • 190
0 votes
2 answers
180 views

Required certificate key usage for signing document

What's the required key usage/extended key usage for signing documents, eg.PDF, Word, PowerPoint, Excel, etc... I am going to create a self-signed certificate that is needed to sign those documents. I ...
user avatar
  • 103
1 vote
1 answer
294 views

How safe is AES 256bitkey encoded in HEX, Base64?

I am using CryptoJS AES 256 encryption: CryptoJS.AES.encrypt(realData, generateKey(passphrase), {iv: iv}); The secret is generated through: function generateKey(passphrase) { const salt = CryptoJS....
user avatar
0 votes
1 answer
631 views

Does certutil -delkey actually delete the certificate and private key?

I am trying to delete a certificate and it's private key using certutil -csp "Microsoft Enhanced Cryptographic Provider v1.0" -delkey "the key container". This gave me a command ...
user avatar
  • 121
1 vote
1 answer
302 views

gnu gcc source archives signed with expired GPG key?

I'm in the course of rescuing a legacy app that got left behind and turned out to be needed on rare occasions, one of which occurred yesterday. I need to rebuild some libraries and the libraries have ...
user avatar
  • 163
9 votes
3 answers
3k views

Securing API keys for a Twitter account for a program to be run on other PC's

I've created a method to allow my project EditVideoBot to be 'decentralised', where rather than the program processing and uploading all video editing requests on my own central server, users can ...
user avatar
1 vote
1 answer
199 views

Key pairs extension / version

I read in some docs, there are several version of GPG key extension available. For ex: gpg, ascii, p12 I know .gpg extension is in binary, and Ascii is in text. But I want to know their differences ...
user avatar
  • 13
1 vote
0 answers
86 views

Necessary fingerprint length etc. when Alice wants to send multiple pseudonymous messages in public to Bob and keep option of proving authorship later [closed]

Alice wants to send Bob messages. She has the following requirements. She plans to send him messages that are sequentially numbered, pseudonymous, and sent to him publicly over a period of time. Each ...
user avatar
0 votes
1 answer
191 views

The risk of RSA encryption. Would individually encrypted characters be risky?

Is it possible to decrypt a RSA message if the characters of the message are individually encrypted? The info you have is the message, the public key and the n which is too big to be factorizable.
user avatar
  • 3
2 votes
1 answer
1k views

OpenSSL encrypt DER format private key

When converting a password-protected PEM/PKCS1-encoded private key to DER format one is not able to encrypt the key, OpenSSL automagically asks for the password and writes the plain-text key in the ...
user avatar
  • 131
1 vote
0 answers
181 views

How to use TPM for key management [closed]

I have read about TPM that these are the secured ways of storing cryptographic keys. I want to know how can I use it. I have an application running on a PC which has TPM. This application has hard ...
user avatar
0 votes
1 answer
133 views

Difference between these two extracted public keys?

I generated an RSA Private Key using openssl genrsa -out mykey.pem 2048 To extract the public key I have found 2 commands, one using openssl : openssl rsa -in mykey.pem -pubout > mykey.pub And the ...
user avatar
  • 103
5 votes
3 answers
1k views

Hierarchical Key Rotation. Should I rotate the lowest level keys?

I have a hierarchical key system designed for my project. In this system a block of data is encrypted using a Data Encryption Key (DEK). This DEK is encrypted using a Key Encryption Key (KEK) which is ...
user avatar
1 vote
1 answer
153 views

Can a host access a VPS disk's encrypted directory directly while running?

I have an Ubuntu VPS running at a remote host. The disk is not encrypted but I have a specific directory that is encrypted for which I must provide a password via an SSH session (not stored anywhere ...
user avatar
1 vote
1 answer
227 views

How to create same ssh key pair on different systesm at different times

Was going through the SSH key pair generation and did tried with the few systems i have. refer to the below command and the thumbprint value post key pair generation. $ ssh-keygen.exe -t rsa ...
user avatar
1 vote
0 answers
112 views

Is it ok to store my Android app keystore password in a text file on my disk?

I am reading on how to sign and publish my flutter app on android. When reading through the official docs, they suggest to make a configuration file where I put my password to the keystore in plain ...
user avatar
  • 111
1 vote
0 answers
160 views

Securing API keys for accessing Google APIs via Front End (UI)

This question is about how to secure API keys. Not sure if this is in the same category as Key management for Cryptography and should follow the same rules. See details below. We currently have hybrid ...
user avatar
5 votes
0 answers
1k views

Is `gpg --refresh-keys` secure and where is this documented?

From the gpg manual: --refresh-keys Request updates from a keyserver for keys that already exist on the local keyring. This is useful for updating a key with the latest signatures, user IDs, etc. ...
user avatar
  • 191
0 votes
0 answers
80 views

Authenticate Windows/Linux process against hardware security module

I have a hardware security module connected to a host computer (Windows/Linux). The HSM contains symmetric keys used to encrypt/decrypt data (i.e. files and real-time communications); the keys are ...
user avatar
1 vote
2 answers
197 views

use custom 'key' for hardware security token

Using a hardware security token as a second factor is generally considered quite a boost in security. But one of the issues I'm having is how to backup the (digital) keys used in the hardware device (...
user avatar
1 vote
1 answer
141 views

TLS- Key exchange for session keys. Why?

I have a question about the Key Exchange Algorithm used in TLS process. I have read that the Key Exchange algorithm is used by client and server to exchange session keys. Do the client and server ...
user avatar
  • 11
0 votes
0 answers
300 views

Is it safe to use HMAC to create an API key?

I am planning to create an API key using the user's password as message and a random number assigned to that user in my database as key (or vice-versa). I will then store the hash of that API key in ...
user avatar
1 vote
0 answers
200 views

Lost GPG private key and revocation certificate

I have created a GPG key and uploaded it to pgp.mit.edu. Then I accidentally wiped the drive that contained both the key and the revocation certificate. So what to do now? I found a possible answer ...
user avatar
  • 111
0 votes
1 answer
171 views

What's a secure way to generate a keypair from a secret password?

I like to generate a public-private key pair that is seeded from a string. So having the string and the generation algorithm is enough to recreate the keys. I want to do this because I can then ...
user avatar
  • 121
0 votes
3 answers
445 views

Associate API key with user

I am creating a public API that will require API key authentication. When a user wants to register a new API key, they send a request to one of our endpoints with a list of permissions they want. We ...
user avatar
1 vote
1 answer
1k views

Wrap key operation in Azure Key Vault - symmetric keys

Could anyone explain why the bolded part of the wrap key description? Wraps a symmetric key using a specified key. The WRAP operation supports encryption of a symmetric key using a key encryption key ...
user avatar
4 votes
1 answer
918 views

OpenVPN Key Size 1024 vs 2048 and Eavesdrop vs Access?

OpenVPN recommends using a 2048 RSA key size for greater security, however, the hardware I'm using is somewhat weak and defaults to using a 1024 RSA key size. I'm trying to determine if it's worth ...
user avatar