Questions tagged [key]
Physical or digital keys. Digital keys are used for encryption or signing, or for authentication (e.g. API key). For product keys, use the tag product-key.
212
questions
2
votes
1
answer
1k
views
Android keystore passwords leaked
We develop Android applications and by mistake following strings were sent within custom Android project folder to several clients:
keyAlias
keyPassword
storePassword
The .keystore file itself was ...
- 209
12
votes
6
answers
4k
views
Can secrets be made safe in memory?
Say, I am running an application on a cloud server such as AWS. Suppose I supply a key at run-time (so its not stored anywhere alongside/inside code), is there a way to secure this key in memory?
So ...
- 1,375
3
votes
2
answers
186
views
Guidelines for password register size in embedded devices
I'm working on an embedded systems project for school in which we need to store a password (or key, whatever). The idea is that this design should eventually be reducible to bare-metal hardware and ...
- 211
0
votes
2
answers
143
views
When will it be feasible to enumerate all possible private/public key pairs [closed]
One way to defeat public key encryption would be to make a list of all public and private key pairings. For 128-bit and 256-bit keys, there are lots of possible pairs:
2^128 = 3.40e38
2^256 = 1.16e77
...
- 657
-2
votes
1
answer
292
views
Public key encryption for initial challenge-repsonse
I understand public key encryption, public key authentication, how digital signatures work and challenge-response authentication, but what confuses me is when they are all combined, and the question ...
6
votes
2
answers
776
views
Public key for SSH over the internet differs from a key for SSH over the LAN
I have a Raspberry Pi and can access it via SSH (authentication via user password) when my laptop is in the same network. Now I want to access it over the internet.
I already set my router to forward ...
- 2,340
4
votes
1
answer
2k
views
What would be a simple example of an asymmetric encryption function (asymmetric function)?
I am trying to understand RSA encryption but the algorithm seems quite complex.
I know that with asymmetric encryption you use a key and a function to encrypt data and a different function to decrypt ...
- 183
4
votes
2
answers
4k
views
How fast is it to bruteforce a 48-bit key with current technology?
Say you have a truly random hexadecimal key formatted as 1234.5678.ABCD, with 48-bit entropy. Assuming the key is stored with no hashing/salting, how fast/easy would it be to brute force it with ...
- 1,001
28
votes
3
answers
6k
views
Use multiple computers for faster brute force [duplicate]
I've watched Mr. Robot lately and can't stop thinking why it was so hard to decrypt files encrypted using AES encryption with a 256-bit key.
Let us say the only method to find the key is through brute ...
- 845
-1
votes
2
answers
767
views
Deduce RSA 1024 bit key from known input and output [duplicate]
I have 128 bytes of RSA encrypted data. I know the 16 bytes of decrypted data. Is it possible to compute the 1024 bit RSA key from this?
Or is there a tool that recovers the key?
Example:
openssl ...
- 403
4
votes
2
answers
1k
views
Storing Keys on Embedded Devices
What is a reasonable way of storing private keys/certs on an embedded device that doesn't have trust-zone, TPM or write-once storage? Without hardware backing the key-storage the key must be stored in ...
- 1,239
12
votes
2
answers
17k
views
Where should a keystore (.jks) be stored in a repository
I've got a question about the best practice in storing a Keystore file (.jks) in source control. This Keystore is called by a stand-alone Java component that retrieves a private key for the purpose of ...
- 181