Questions tagged [key]

Physical or digital keys. Digital keys are used for encryption or signing, or for authentication (e.g. API key). For product keys, use the tag product-key.

Filter by
Sorted by
Tagged with
2 votes
1 answer

Android keystore passwords leaked

We develop Android applications and by mistake following strings were sent within custom Android project folder to several clients: keyAlias keyPassword storePassword The .keystore file itself was ...
Kozuch's user avatar
  • 209
12 votes
6 answers

Can secrets be made safe in memory?

Say, I am running an application on a cloud server such as AWS. Suppose I supply a key at run-time (so its not stored anywhere alongside/inside code), is there a way to secure this key in memory? So ...
Jus12's user avatar
  • 1,375
3 votes
2 answers

Guidelines for password register size in embedded devices

I'm working on an embedded systems project for school in which we need to store a password (or key, whatever). The idea is that this design should eventually be reducible to bare-metal hardware and ...
agentroadkill's user avatar
0 votes
2 answers

When will it be feasible to enumerate all possible private/public key pairs [closed]

One way to defeat public key encryption would be to make a list of all public and private key pairings. For 128-bit and 256-bit keys, there are lots of possible pairs: 2^128 = 3.40e38 2^256 = 1.16e77 ...
adam.baker's user avatar
-2 votes
1 answer

Public key encryption for initial challenge-repsonse

I understand public key encryption, public key authentication, how digital signatures work and challenge-response authentication, but what confuses me is when they are all combined, and the question ...
Benjamin M's user avatar
6 votes
2 answers

Public key for SSH over the internet differs from a key for SSH over the LAN

I have a Raspberry Pi and can access it via SSH (authentication via user password) when my laptop is in the same network. Now I want to access it over the internet. I already set my router to forward ...
UTF-8's user avatar
  • 2,340
4 votes
1 answer

What would be a simple example of an asymmetric encryption function (asymmetric function)?

I am trying to understand RSA encryption but the algorithm seems quite complex. I know that with asymmetric encryption you use a key and a function to encrypt data and a different function to decrypt ...
yoyo_fun's user avatar
  • 183
4 votes
2 answers

How fast is it to bruteforce a 48-bit key with current technology?

Say you have a truly random hexadecimal key formatted as 1234.5678.ABCD, with 48-bit entropy. Assuming the key is stored with no hashing/salting, how fast/easy would it be to brute force it with ...
John Blatz's user avatar
  • 1,001
28 votes
3 answers

Use multiple computers for faster brute force [duplicate]

I've watched Mr. Robot lately and can't stop thinking why it was so hard to decrypt files encrypted using AES encryption with a 256-bit key. Let us say the only method to find the key is through brute ...
Mero55's user avatar
  • 845
-1 votes
2 answers

Deduce RSA 1024 bit key from known input and output [duplicate]

I have 128 bytes of RSA encrypted data. I know the 16 bytes of decrypted data. Is it possible to compute the 1024 bit RSA key from this? Or is there a tool that recovers the key? Example: openssl ...
Konrad Eisele's user avatar
4 votes
2 answers

Storing Keys on Embedded Devices

What is a reasonable way of storing private keys/certs on an embedded device that doesn't have trust-zone, TPM or write-once storage? Without hardware backing the key-storage the key must be stored in ...
Whome's user avatar
  • 1,239
12 votes
2 answers

Where should a keystore (.jks) be stored in a repository

I've got a question about the best practice in storing a Keystore file (.jks) in source control. This Keystore is called by a stand-alone Java component that retrieves a private key for the purpose of ...
rdChris's user avatar
  • 181

1 2 3 4