RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.

learn more… | top users | synonyms

0
votes
1answer
28 views

Does password protected git public key protect my repository?

When generating my public key for GIT access, I decided to set up a password for it. My push procedure looks like this now: Enter passphrase for key '/c/Users/USERNAME/.ssh/id_rsa': Counting objects: ...
0
votes
1answer
44 views

Crypto++ RSA - Encrypt and sign with the same key pair

I have a program A which needs to send messages to several instances of program B (B1, B2, etc...). The messages must be encrypted, and also signed. Which means only Bn instances can decode, and they ...
0
votes
0answers
48 views

RSA 3072 is 65,536 more difficult to factor than 2048? [migrated]

If RSA 3072 is equal to 128 bit symmetric and 2048 is equal to 112 bit symmetric then 128-112= 16 and 2^16= 65,536. In that case wouldn't this make 3072 more future proof against quantum computers or ...
4
votes
1answer
63 views

Why use a passphrase for RSA key?

Today I generated my first key pair, so my knowledge here is - so to speak - very limited. On client side I am using Windows and to log in I use PuTTY and I used PuTTYGen to create the keys. Here ...
1
vote
0answers
41 views

What is the largest cycle of RSA encryption?

Is there a maximum length of a message before it is impractical to use RSA?
0
votes
1answer
105 views

Why doesn't my manual RSA key exchange example work?

I'm trying to "manually" compute how the premaster_secret is computed using the RSA key exchange in TLS 1.2, but can't manage to make numbers meet. I am using Scapy SSL to generate a TLS session: I ...
0
votes
0answers
3 views

How can I show RSA OAEP IND-CPA secure [migrated]

How can I show, that RSA with OAEP is IND-CPA secure by using G,H one way function?
0
votes
1answer
139 views

Is this algorithm really end to end encrypted and secure?

I'm creating an anonymous chat where one of the premises is that the conversations are end to end encrypted. I'm using firebase so all the comunication between the clients and the server is SSL ...
0
votes
0answers
20 views

Clarification of RSA Key Exchange (TLS 1.2) and AES for On-Going Message Excahnge

I'm trying to understand the full flow of key exchanges for secure communications. As a potentially incorrect premise, I am under the impression that RSA is a good asymmetric technique for ...
0
votes
0answers
33 views

JSON Web Token Security RSA

We are planning to use JWT (JSON Web tokens) in an application project, which is a set of multiple distributed web services allowing SSO authentication (single sign on). So there is a single central ...
0
votes
0answers
13 views

Is it ok to use one key pair for my authentication endpoint?

I have an web endpoint that checks user passwords, then issues signed JWT tokens to the client if password matches what we have in the database. The JWT is signed with a RSA private key using RS512. ...
0
votes
0answers
20 views

Should RSA primes p and q should differ in length by “a few digits”? [migrated]

When generating RSA keys in the original RSA paper it is stated: "to gain additional protection against sophisticated factoring algorithms, p and q should differ in length by a few digits" Why is ...
1
vote
1answer
114 views

Is using “SHA-256 with RSA-2048 Encryption” a secure certificate hashing algorithm?

Is using "SHA-256 with RSA-2048 Encryption" a secure certificate hashing algorithm? I don't think it is. Two examples: nsa.gov [careers site] give.wfp.org
2
votes
1answer
106 views

What is the difference between a digital signature and whole message encryption?

I am newbie in information security I am trying to understand the difference between a digital signature and encryption of a message. Lets consider simple example of email message. I understand how ...
0
votes
0answers
27 views

Using the same public exponent for RSA on multiple machines

I have a system where many machines running the same software work independently of each other with no central server of any kind. A user may wish to speak with another user privately and securely, ...
0
votes
1answer
30 views

Non-identified algorithm for RSA decryption in tpm-emulator

While analyzing the source code of tpm-emulator I found that the RSA key decryption uses an algorithm that is unknown to me. The original file with this mystery is located in rsa.c, where the ...
6
votes
1answer
248 views

Are RSA Key Pairs unique?

I generate RSA key pairs mostly using the following command: ssh-keygen -t rsa -b 4096 -C "someemail@hostname.com" which produces a public-private RSA key pair. If I run this command again and ...
0
votes
1answer
24 views

Verify a key was signed by another key

I began using GPG4Win/Kleopatra, the GNU Privacy Guard implementation for Windows. More recently I wanted to verify a download of Qubes OS, for which a guide is offered here. They describe a master ...
1
vote
1answer
105 views

Someone logged in server through ssh using my RSA key

I just got the warning message from hosting provider that my server make outcoming traffic 1.5G to provide DDOS attack on someone host, and they disabled my VPS temporarily. When I search through ...
0
votes
0answers
21 views

Why SMIME decryption works with sender and recipient private key?

Im developing an application, that needs to use SMIME encryption and authentication. I've implemented a decryption system, and am currently testing it. I send the emails with another fully working ...
3
votes
1answer
57 views

Is this good/secure method for client-server communication encryption?

Something came to my mind, and I wonder if this is proper method for client-server communication, and if this method is wide-used. On connection, client generates seed, encrypts it using asymmetric ...
-7
votes
1answer
85 views

Is webkey a reasonably secure authentication system?

I just created Webkey in the last couple days. It's built to do client-certificate auth without using the (in my opinion unusable) client-cert functionality built into browsers. It would allow ...
2
votes
2answers
148 views

Is the RSA private key useless without the password?

I notice whenever I generate a new gpg key (using pgp) I always have to assign a password to it, which makes perfect sense. But if I'm not mistaken, gpg is based on prime numbers. How is this ...
0
votes
0answers
19 views

Signature algorithm with ECDH ? can we use RSA or ECDSA ? or ECDSA is compulsory?

I am going through RFC 5656. I want to know if ECDH with RSA is allowed? (I am not SSH ECC compliant).
2
votes
1answer
104 views

Why does this key get Base64 encoded prior to use?

I wish to have my server encrypt messages to clients who have each provided the server with an RSA public key, as well as having the clients authenticate their messages to the server using their ...
6
votes
1answer
464 views

Can a device be TLS compliant without RSA?

Let's consider an embedded device which supports ECC and some symmetric cryptographic primitives but not the RSA algorithm. Can it be TLS compliant? I think that if the device and the server share a ...
0
votes
1answer
62 views

RSA rainbow table

Wouldn't it be possible to create as many as possible key pairs for the RSA encryption and then determine from a public key which the corresponding private key is ?
3
votes
1answer
180 views

What would be a simple example of an asymmetric encryption function (asymmetric function)?

I am trying to understand RSA encryption but the algorithm seems quite complex. I know that with asymmetric encryption you use a key and a function to encrypt data and a different function to decrypt ...
1
vote
1answer
37 views

GPG/Bitcoin usb gadget device

My idea is to take a raspberry pi zero (or any embedded linux board) and shove GPG inside it to encrypt/decrypt/sign data with RSA/ECC (for bitcoin) via USB. Like a USB thing that holds your ...
1
vote
1answer
63 views

Minimal working configuration for reasonable security in openssh on Linux [duplicate]

I want to connect from my laptop to home server (both run some Linux; notice I explicitly want my user to be able to become root, in order e.g. to install new software): the server has the following ...
3
votes
1answer
79 views

How could an attacker read the content of php session variables?

In my PHP code, I am generating an RSA keypair, sending the public key to the visitor and storing the private key in a session variable. Is it possible that an attacker might somehow be able to read ...
69
votes
3answers
7k views

Will quantum computers render AES obsolete?

This is a spin off from: Use multiple computers for faster brute force Here's at least one source which says that quantum computers are on the way to being able to break RSA in the not too distant ...
0
votes
1answer
97 views

CSR with only public key with openssl

So I have been doing my research and haven't found anything specific enough to my problem. As the question title states, I want to make a CSR with only the public key. What I have been able to do is ...
0
votes
1answer
68 views

How does RSACryptoServiceProvider generate keys

The documentation for the constructor for RSACryptoServiceProvider states "If no default key is found, a new key is created. This constructor creates an Exchange key pair suitable to encrypt session ...
0
votes
0answers
25 views

RSA decryption with Private and Cert files

What I have : The cipher message, the plaintext message, and something that could be the RSA Private & Cert. (I can create as many couple ciphered/plaintext as I want) I would like to be able to ...
-2
votes
1answer
139 views

Teslacrypt Ransomware [duplicate]

I would like to know how to decipher a Windows 7 system that has been infected with a variant of Teslacrypt that: Encrypts a bunch of files and adds up "mp3" extension to theim Creates new files in ...
1
vote
1answer
116 views

What is the format of an RSA public key?

I have this RSA public key from which I want to get Modulus and exponent part but not able to get the format in which it is encoded. Can someone please tell how to decode it? -----BEGIN PUBLIC ...
0
votes
1answer
60 views

How to make a good choice between Symmetric and Asymmetric [closed]

Here and there and read a lot of articles and blog posts titled "Difference Between Symmetric Cryptography and Asymmetric Cryptography". But inside of them they are answered "What is Symmetric ...
-1
votes
2answers
61 views

Deduce RSA 1024 bit key from known input and output [duplicate]

I have 128 bytes of RSA encrypted data. I know the 16 bytes of decrypted data. Is it possible to compute the 1024 bit RSA key from this? Or is there a tool that recovers the key? Example: openssl ...
-2
votes
1answer
50 views

which algorithm/hash can possibly encrypt and decrypt certain data regardless of size?

I have intercepted some data for which i don't know which algorithm has been used to encrypt this data, this data has been for sure encrypted before transmitting, to decrypt the data i should ...
3
votes
2answers
417 views

Encryption: Files that can't be encrypted/cryptolocker family doesn't encrypt?

Are there any type of file whatsoever that can -not- be encrypted? Is there any data that can't be encrypted by the regular RSA encryption methods? Also, does anyone know what files the cryptolocker ...
0
votes
2answers
127 views

Can we store sensitive client information with the admins without them(admins) identifying it?

I am trying to design a pairing application for my university this valentine. How is it supposed to work, you ask?? The clients will submit preferences specifically names to the server and after some ...
0
votes
0answers
116 views

Is this c# digital signature implementation secure?

The code connects multiple clients to a server using TCP sockets asynchronously. I have added code to attach a digital signature to the outgoing messages from the server, to authenticate the message ...
0
votes
1answer
78 views

How can a RSA-2048 certificate be vulnerable to logjam attack? [duplicate]

Most likely I am missing some fundamentals: Our web servers are secured with TLS encryption. We use RSA-2048 bit certificates. The logjam attack targets the DH algorithm. How can our web servers be ...
3
votes
1answer
97 views

Should SHA-1 be used with RSA-OAEP

PKCS#1 defines SHA1 as default Hash function and all implementations support this Hash function and the Mask generation functions based on SHA1. In some implementations you can change the Hash ...
4
votes
1answer
59 views

What does an OpenPGP signature consist of?

I don't understand how OpenPGP signatures work. I have a picture which I want to sign, and a digital certificate which consists of my name and email address and my public key. Additionally, a digital ...
0
votes
2answers
61 views

Self-chosen fixed RSA PIN in addition to a Password

I'm using a Junos Pulse Secure Access Service (Juniper Networks), which requires to enter a RSA PIN in addition to the password. I don't know if this is always the case or if it's a custom ...
0
votes
1answer
46 views

Authenticating a user by verifying a signature

Background I'm setting up an API which will be used primarily over HTTPS (only calls not needing any security what so ever is available over HTTP). Some aspects of it need to be accessed only by ...
3
votes
1answer
53 views

Is it possible to have an RSA authentication subkey with a DSA master key?

My key setup is as follows: sec dsa3072/CA72E53A created: 2013-05-12 expires: never usage: SCA trust: ultimate validity: ultimate The following key was revoked on 2016-01-13 ...
1
vote
2answers
44 views

RSA blind signature vs signing a hash

My understanding is that the key feature of a blind RSA signature is that the signer is unaware of the contents of the message being signed. How is this different from simply hashing some data and ...