Questions tagged [public-key-infrastructure]
A public-key infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a PKI is an arrangement that binds public keys with respective user identities by means of a certificate authority (CA). There are three main categories of PKI: Web / SSL certs, corporate networks, and Government ID / ePassport.
1,320
questions
4
votes
1
answer
182
views
Do current browsers still validate CRLs in enterprise PKI environments
I know that modern web browsers don't check CRLs for certificates from CAs in the default trust store anymore.
I also know that there are some exceptions for certificate validation when it comes to ...
- 338
0
votes
0
answers
34
views
SSL/x509 certificate/public key expiration [duplicate]
I would like to know the process of how public keys/certificates are renewed for a website. I understand the concept of CA (Certificate Authority) chains, and how the public key/certificate for a site ...
- 1
0
votes
1
answer
41
views
Over what fields is the X509 hash computed over? [duplicate]
Is this how X509 certificates are verified to be valid?
The receiver receives the certificate
Look at the issuer of the cert, and find the public key of that CA (its hardcoded in the application or ...
0
votes
0
answers
43
views
View public key(s) exchange during https handshake from the command line
It is possible to view the entire HTTPS session from start to end? Any command line I can run?
I am interested in understanding more about the exchange of the public key(s) in order to establish a ...
- 101
2
votes
1
answer
329
views
Asymmetric encryption in case of multiple parties
For the consumer of the API to send and receive, encrypt and decrypt into that same API, wouldn't the client consumer also have to have the same public and private key as the server that provides the ...
- 125
1
vote
1
answer
55
views
Does defining "a minimum path length" for certification validation have any security benefit?
As you may know, Common Criteria (AKA ISO/IEC15408: A standard for IT Security Evaluation) have provided some security base-line documents named "Protection Profile" for software developers ...
- 304
1
vote
1
answer
40
views
What problem does "max_path_length" attribute in certificates are going to solve?
I'm trying to understand the purpose of defining pathLenConstraint and max_path_length in RFC5280 (Internet X509 PKI Certificate and CRL Profile):
For pathLenConstraint The above mentioned RFC states:
...
- 304
2
votes
1
answer
82
views
Can an Intermediate CA extend its "Certificate Key Usage" by issuing a new certificate for itself?
I'm trying to understand the purpose of defining self-issued certificate concept in RFC5280 (Internet X509 PKI Certificate and CRL Profile):
Regarding this concept the RFC states:
This specification ...
- 304
0
votes
1
answer
76
views
What mechanisms exist to detect compromised default certificate private signing keys?
This is partially a follow-up to the these questions:
Is visiting HTTPS websites on a public hotspot secure?
Can free Wi-Fi hotspot providers snoop on HTTPS communications?
I understand of course ...
- 101
0
votes
1
answer
98
views
Why installing a root certificate on the client opens a door for MitM attack?
Most internet communication is now end-end encrypted using TLS. In the TLS process, the TLS server sends a PKI certificate to the user which then gets authenticated using the CA's root certificate ...
- 3
2
votes
1
answer
122
views
A web browser localy encrypted by default
Some years ago, I've found a web browser which I can't remember the name. It had pretty impressive security standards. For example:
Symmetric encryption key (password) is mandatory for saving ...
- 21
0
votes
0
answers
31
views
client side certificate installed on ios 16 are not being sent by browsers on that device when a server requests for a identity cert
I have a client side certificate from cloudflare (non-root) that i install on our devices in order to gain access to our sites that ask for a client side certificate from browsers. This works ...
0
votes
0
answers
15
views
Cryptographic primitive for delegating authority to another pubkey recursively
Is there a cryptographic primitive that allows pubkeys to delegate authority to each other without preserving the whole chain?
I'm considering an authorization scheme where all authentication is based ...
- 1
0
votes
2
answers
62
views
Trust segregation in PKI
I am designing a cloud based PKI infrastructure which issues and manages TLS certificates for telemetry devices and data server. Each customer will install multiple telemetry devices and a data server ...
- 191
0
votes
1
answer
55
views
Man in the middle attack on response from server [duplicate]
Let's assume that I am logging into my Gmail account from my browser using my username and password. I know that my input will be encrypted using Google's private key and the only one who can decrypt ...
- 111
1
vote
1
answer
115
views
Would the configuration described below violate any Security Technical Implementation Guides (STIGs)?
Would the configuration described below violate any Security Technical Implementation Guides (STIGs)?
WebAPI Consumer
WebAPI Service
Production Environment (WebAPI Consumer Production Private Key)
...
- 113
2
votes
1
answer
124
views
Is sharing private key with CDN dangerous?
When you use a Content Delivery Network (CDN) and want to enable HTTPS, you need to import your certificate there. So you should provide your Private Key to the CDN. Is this secure? I mean CDN can log ...
- 159
0
votes
0
answers
43
views
Help understanding PKI MTLS and digital signature architecture
I'm building an identity service using PKI and MTLS for authentication where users are supposed to be able to sign data e.g. a json string or a document.
Where I am now
I have implemented working MTLS ...
0
votes
2
answers
168
views
Ransomware public key: can I find the respective private key?
I got a ransomware called StopDjvu. On my PC, I have found the public key that is used by the malware (maybe RSA hardcoded).
Is it possible to extract the private key from the public key?
2
votes
2
answers
113
views
Encrypt with private and decrypt with public keys /Openssl
Hi,
Recently, I was studying about openssl.
I found that encrypting with a private key is allowed while decrypting with the public one isn't, and throws an error:
unable to load Private Key or A ...
- 23
0
votes
0
answers
68
views
Securing the Server Hello in TLS 1.3
I've been trying to better understand TLS, and am stuck on one point with TLS 1.3. I understand that the Client makes an assumption regarding which Cipher Suite the Server will select, and includes a ...
1
vote
1
answer
44
views
Confusion Regarding TLS Handshake and Key Exchanges
I know much has been written on this topic, but I am still stuck on some on the details of TLS handshake and I would like to have a better understanding of what happens. I've been using several ...
1
vote
1
answer
84
views
Root CA best practice
We are planning a new PKI for our company.
Existing structure is a single root CA and two issuing CA's. One for test, one for production.
We can keep the new PKI design the same or we can use another ...
- 11
0
votes
1
answer
45
views
Does the ssh client compute the public key from the private key?
If I use ssh like this ssh -i id_rsa it means im passing the private key to ssh. Does ssh now then compute the public key from it and then send it to the server? Then the server would look if the ...
0
votes
1
answer
34
views
Authenticate people online with simple public / private key scheme or similar
how can I ensure that person X on website A is the same person who contacts me?
Here is my use case.
On website A I post message asking username X to contact me. Someone send me an email - how do I ...
- 1
1
vote
1
answer
182
views
Extremely strange and concerning SSL issues. MITM attack?
While not particularly knowledgeable on public key infrastructure, I've noticed strange issues with SSL and TLS lately that I'm unable to diagnose. As these issues have currently left me dumbfounded I'...
- 11
1
vote
0
answers
22
views
PKI Structure with multiple intermediates [duplicate]
is there a possibility to create a 2-Tier PKI with multiple CA's for redundancy?
The scenario would if, if CA1 becomes unavailable, CA2 could be used to verify certificates and/or the complete ...
- 11
1
vote
1
answer
33
views
Distrusting a cross signed certificate
Consider the following scenario
OpenSSL and x.509v3 is used.
You have 2 CA's: CA1 and CA2. Both CA's have cross signed each other,
meaning CA1 has signed CA2 and CA2 has signed CA1.
When CA1 signed ...
- 88
1
vote
1
answer
307
views
ed25519-sk vs. gpg-agent on Yubikey
According to my understanding of this document, Yubikey is capable of running ed25519-sk and gpg-agent.
Which one is more secure? Obviously, ed25519-sk wouldn't work, if the SSH server is old, but ...
- 113
2
votes
1
answer
567
views
Why does the OpenVPN server need to keep client's private key?
When I installed the openvpn server following these instructions, the work flow was like below
Create ca.crt
Create server.key and cert
Create client.key and cert
As far as I know, when A and B are ...
- 23
0
votes
1
answer
84
views
How do you trust two different cloud provider servers?
I've found a question with an answer here on Security StackExchange or on Unix StackExchange, but I can't find it anymore apparently :( If you find this answer already, help would be appreciated, I ...
- 1,542
0
votes
1
answer
482
views
Client Authentication in SSL Handshake
I am trying to understand how client certificate authentication works in an SSL handshake.
Can someone help to clarify the following bullet points below:
Do we need to have a Client Leaf certificate ...
- 3
1
vote
1
answer
324
views
How to create and embed Signed Certificate Timestamp (SCT) in certificate
I have deployed a Certificate Transparency (CT) log server that uses Google's CTFE (named "certificate-transparency-go" on Github) and Trillian Projects. And I have issued a pre-certificate, ...
- 23
3
votes
1
answer
82
views
Is it (under FIPS) possible to generate a CSR for an asymmetric key with usage=WRAP?
To clarify: The FIPS module Security Policy lists using RSA keys for wrap/unwrap. FIPS is a moving target, and the state of the requirements when the CMVP approved module went through the process ...
- 251
3
votes
1
answer
102
views
Name Constraints, empty sets in permitted subtree (RFC 3280 vs RFC 5280)
I'm trying to understand the effect of empty sets in permittedSubtrees in both, RFC 5280 and RFC 3280. There is something that doesn't compile in my head.
Scenario:
We have a CA certificate with the ...
- 5,916
6
votes
1
answer
130
views
What is the best practice for relying parties to selectively trust certificates in a corporate pki hierarchy?
I have a pki infrastructure for internal company use.
In this pki there are multiple registration authorities whose responsibility is to.
receive certificate issuance requests
verify the identity of ...
2
votes
1
answer
219
views
How to make 3 separate issuing Certificate Authorities aware when a certificate has been revoked on 1 Certificate Authority?
There is one offline Root CA. There are 3 issuing CAs, each on their own domain. There are domain trusts in place, but these domains are not in the same forest.
All 3 domains and CAs are managed by ...
- 121
1
vote
1
answer
171
views
How can I recover the full certificate chain knowing the final X.509 certificate?
Given
Final X.509 certificate A in PEM format.
Access to the certificate store of the server, which encloses all certificates, including singing chain for the certificate A.
OpenSSL shows following ...
- 131
0
votes
0
answers
36
views
Retrieve list of trusted server public keys during an application run
I'm trying to implement a mechanism that allows me to maintain a list of SSL server certificate public keys that have been verified as trusted during an application run time. For example:
Application ...
- 111
0
votes
0
answers
65
views
How to viably use HSM on public cloud providers (AWS or GCP)
I don't have any experience with HSMs.
My goal is to secure critical seed phrases used to generate crypto wallets
I found a good approach is to use HSMs to store encryption keys and encrypt the seed ...
0
votes
1
answer
96
views
Should Subordinate CAs on separate domains point to one location for CDP and AIA?
I'm a bit confused with how CRLs and AIAs work. I am on a domain B and I have been tasked with building a Subordinate CA that has an offline Root CA located in Domain A perimeter. These domains are ...
- 121
1
vote
1
answer
79
views
Best practice for "stateOrProvinceName" in certificate
In RFC-4519 stateOrProvinceName is abbreviated to ST. Should we assume that it is best practice to put ST=<name-of-state> in the certificate if the state or province is indicated? After all X-...
- 4,613
3
votes
1
answer
150
views
What is the right way to transfer public-private keypairs over intranet?
First asked on StackOverflow and referred to this board, here:
I have an embedded system (Netburner 5441x) that encodes public-private RSA keypairs into devices. I have ported OpenSSL into the system ...
- 33
0
votes
1
answer
135
views
How do centralized crypto exchanges store seed phrases and users' private keys?
Say I'm trying to develop a CEX, hence I will hold custody of users' keys. How would I go about doing that and ensuring safety and security?
From what I know, I can generate the users' keys from a ...
0
votes
0
answers
33
views
Setting up PKI with separate machines acting as the root CA, intermediates and leaves
I am doing a project where I want to create a PKI with different VMs acting as different entities (i.e. root CA, intermediate CAs, leaves, OCSP) in the PKI hierarchy. They will be able to process ...
0
votes
1
answer
48
views
Recommendations on PKI roles as per ETSI EN 319 401 - V2.3.1
I want to configure roles (least privilege) on my CA instance (EJBCA) and I'm trying to find what are the best practices to do this.
I've tried to read the ETSI EN 319 401 - V2.3.1 standard and try to ...
- 193
16
votes
5
answers
5k
views
Where does the root of trust actually lie?
We are told that the roots of trust in the PKI are the handful of
Certificate Authorities that issue root certificates and sign other certificates and ensure at least some extent of trust to be ...
0
votes
2
answers
106
views
Secure data (+ private key) storage in an insecure public cloud environment
We are trying to encrypt files in a manner that they can be completely secure in an insecure environment (like a public cloud). We're talking about military grade secure.
The data should be so secure ...
- 234
0
votes
0
answers
31
views
What is a link certificate in public key infra?
What is a link certificate? in my use case we have a private ca and one our vendor has their own private ca and we should be able to link vendor with our private ca, is it possible? what are the ...
1
vote
2
answers
65
views
How to prove the authenticity of the telemetry message?
I'm curious what is the most widespread way nowadays to sign the telemetry message from a software program to prove its authenticity to the receiver?
Imagine the software (which can run on-premise, at ...
- 131