Questions tagged [pkcs1]

PKCS #1 is the first of a family of standards called Public-Key Cryptography Standards (PKCS), published by RSA Laboratories. It provides the basic definitions of and recommendations for implementing the RSA algorithm for public-key cryptography. It defines the mathematical properties of public and private keys, primitive operations for encryption and signatures, secure cryptographic schemes, and related ASN.1 syntax representations.

Filter by
Sorted by
Tagged with
1 vote
0 answers
628 views

Sign according RSASSA-PKCS1-v1_5 standard

I'm totally lost with is standard RSASSA-PKCS1-v1_5. I have commands that signs document and checks signature below. openssl dgst -sha256 -sign private-key.pem -out aaa.txt.sha256 aaa.txt openssl dgst ...
vico's user avatar
  • 269
0 votes
1 answer
65 views

Why does PCKS1-v1.5 signing require DER wrapping?

Reading RFC3447, Section 8.2.1, primitive RSASSA-PKCS1-V1_5-SIGN requires an encoding into ASN.1/DER. Why not just sign the raw hash bytes rather then wrapping them as ASN1?
Freeman's user avatar
  • 135
0 votes
2 answers
4k views

Obtaining .p12 certificate from PEM file and CRT file provided by GoDaddy

A few months ago a colleague who left generated a CA certificate from GoDaddy. I am not sure the exact steps he took but currently we would like to install the CA certificate on a server to fully ...
Gilboot's user avatar
  • 121
1 vote
1 answer
2k views

how to generate RSAES-OAEP keys?

RFC4055 describes RSAES-OAEP keys and RSASSA-PSS keys. OpenSSL's genpkey utility supports let's you generate RSASSA-PSS keys (you have to set the aglorithm parameter to RSA-PSS) but if it supports ...
neubert's user avatar
  • 1,748
1 vote
1 answer
512 views

SSL/TLS and PKCS#1-1.5 Encoding - Why?

I read about SSL (version 3.0) and that the PreMasterSecret (pms) is encoded with PKCS#1-1.5 before the client encrypts it with the given public RSA key and sends the encryption to the server. So the ...
winklerrr's user avatar
  • 125
2 votes
0 answers
553 views

mbedtls mutual authentication [closed]

I have a server CA cert, device cert and the device private key. I am using mbedtls and want to be able to create a mutual authentication connection between the device and the server. I also have to ...
user avatar
0 votes
1 answer
2k views

Why is PKCS used? [closed]

Can anybody help me in understanding why PKCS is used? My confusion is that whether PKCS is used to transfer key in between client and server OR it is a standard to encrypt and decrypt the payload. I ...
Prajeesh  K P's user avatar
0 votes
1 answer
129 views

Is L and P the same for OAEP in CMS

In RFC 4055 Additional Algorithms the application of PKCS#1 2.1 RSAES-OAEP (RFC 3446) for key transport is described. The (key transport) parameters of RSAES-OAEP in this RFC define a hash function, ...
eckes's user avatar
  • 982
1 vote
1 answer
290 views

Is there such a thing as an SSLeay/PKCS#1-style static Diffie-Hellman key?

That is, would you ever find a PEM file which starts: -----BEGIN DH PRIVATE KEY----- or: -----BEGIN DH PUBLIC KEY----- ? And if so, what is its structure? I know static DH keys are an oddity, ...
Tom Anderson's user avatar
6 votes
1 answer
863 views

Does PKCS 1.5 padding make it possible for an attacker to extract the private key or not? Is PKCS 1.5 safe to use in authentication context?

Im currently writing a authentication app based on RSA, for Android that should be impossible to copy, even if you have physical access to a phone without lockscreen/PIN. However, the HSM inside the ...
sebastian nielsen's user avatar
0 votes
1 answer
119 views

Share private key with expiry period

I'd like a way to encrypt my data, and temporarily share access to 'semi-trusted' parties. If I encrypt my data with my private key, is it possible to share my private key (or some derivative of it)...
Kevin's user avatar
  • 103
17 votes
1 answer
10k views

Should SHA-1 be used with RSA-OAEP?

PKCS#1 defines SHA1 as a default hash function and all implementations support this hash function and the mask generation functions based on SHA1. In some implementations you can change the hash ...
Bernhard's user avatar
  • 273
4 votes
1 answer
1k views

encoding of optional NULL in DER

In PKCS1 there's DigestInfo: DigestInfo ::= SEQUENCE { digestAlgorithm AlgorithmIdentifier, digest OCTET STRING } AlgorithmIdentifier is defined in RFC5280: AlgorithmIdentifier ::=...
neubert's user avatar
  • 1,748
2 votes
0 answers
878 views

CMS signed data OpenSSL verification error

I have a CMS signed data that is successfully verified through Java BouncyCastle library. When trying to verify through OpenSSL, I am getting the following error: >openssl smime -verify -inform ...
user1563721's user avatar
  • 1,119
0 votes
1 answer
276 views

Standard digital signature data representation

I am creating digital signatures using various scheme, e.g. RSASSA-PSS. The result is bytes that represents signed data with private key. I would like to store signature as a standard data ...
user1563721's user avatar
  • 1,119
2 votes
1 answer
9k views

breaking down RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING

So Java has a mode called RSA/ECB/OAEPWITHSHA-256ANDMGF1PADDING. What does that even mean? RFC3447, Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1, section 7....
neubert's user avatar
  • 1,748
1 vote
1 answer
3k views

What does the EC Private key version field mean?

I have read the question Converting ECC Private key to PKCS#1 format. And I understood that the value of the version field of the traditional EC private key is 01. We can use the command openssl ...
Asif's user avatar
  • 11
20 votes
3 answers
31k views

Converting ECC Private key to PKCS#1 format

Is there any way to convert an ECC private key to RSA PKCS#1 format? I have tried converting it to PKCS#8 first using OpenSSL: openssl pkcs8 -topk8 -nocrypt -in EC_key.pem -out pkcs8_key.pem This ...
Sid Said's user avatar
  • 203