Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [rsa]

RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.

-1
votes
0answers
6 views

how to read the text from encrypted file which is done using RSA algorithm

Here are the files that i have and key file contains encrypted data and "my" file is not able to open image
-2
votes
0answers
51 views

Is it possible to use AES algorithm for folder encryption and the AES key will be encrypted again using RSA algorithm? [on hold]

I'm a student and this research is a requirement for our graduation. To be honest me and my groupmates have no background in encryption but our university requires us to complete a complicated ...
3
votes
1answer
52 views

To what extent are countermeasures against side-channel attacks effective/ used regularly by everyone?

I'm doing an Extended Essay for IB right now and I'm doing it on how secure RSA is. As side-channel attacks are one category of attack, I was wondering (as I am struggling with the conclusion) while ...
2
votes
1answer
61 views

How does algorithms ensure public/private keys uniqueness? - RSA

I'm new to security and crpyto, I know that Public/Private keys are generated in a different way depending on the used algorithm, But let's take RSA as an instance (Using prime numbers), Does the ...
1
vote
0answers
47 views

Where To Store Public and Private Key files?

I'm creating a Java web-application using a WAR file to be deployed on a server. I will only be using one single web server and hosting. In my project, I'm generating two files: Public Key file and ...
2
votes
3answers
125 views

Does every recipient receive a different version of “encrypted” email using PGP?

If I understood it correctly, PGP encrypts email by using receiver's public key. In a multiple-receiver scenario, does that mean each receiver will get a different version of "encrypted" email but the ...
1
vote
1answer
41 views

Public Key Crypto - sign Bob's name into Alice's message or encrypt Alice's name

I was reading Defective Sign & Encrypt in S/MIME,  PKCS#7, MOSS, PEM, PGP, and XML and in section 5.1  Naming Repairs By signing Bob's name into her message, Alice explicitly identifies him ...
1
vote
2answers
78 views

Why digital signatures needs different algorithm

Why digital signatures uses algorithms such as DSA, ECDSA or RSA-PSS, and not just the RSA algorithm to encrypt the message hash with the private key? Is the choice more security or performance ...
3
votes
0answers
41 views

Naked RSA decryption

I'm working with some legacy code that uses naked RSA encryption with variable length packets. I've only found example code on how to handle this when the length of the packet is the correct length ...
0
votes
2answers
47 views

Is it necessary to encrypt messages client side if using HTTPS?

I am creating a messaging service for an app I'm developing and right now the data flow is as follows: Send: message sent to server => message encrypted based on user's public key and signed using ...
0
votes
1answer
50 views

SHA 1 with RSA for ssl certificate

Hi using SHA 1 with RSA encryption for ssl certificate is secure? As i know, sha 1 is not secure, but if we use RSA with sha1, still it will be an issue? Please suggest if any security issues exist.
0
votes
1answer
96 views

Does hashing a file consider its digital signature as well?

I have a signed (using Windows signtool) executable which is hashed by SHA1 algorithm and encrypted using RSA. Now I like to verify the executable to avoid security vulnerabilities. For that I have an ...
1
vote
1answer
74 views

Web Crypto API maturity for JavaScript RSA encryption?

We have been using a JavaScript crypto API to do RSA encryption in the browser. I know all the criticisms on encryption in JavaScript but we have evaluated pros and cons of the solution and the risks ...
1
vote
3answers
86 views

Recommended asymmetric algorithms for JWT?

I'm implementing JWT authentication for a new web service and am unsure which asymmetric algorithm to choose. I've searched around and haven't found any consensus or clear recommendations. According ...
0
votes
1answer
41 views

RSA uses substitution and shuffling?

I've been doing some searches for RSA and it appears that it uses shuffling but not substitution. Is this true? Simple explanation of the algorithm: https://www.geeksforgeeks.org/rsa-algorithm-...
0
votes
0answers
132 views

Using RSA private key as AES key for encryption

Example application need: An application pulls down data from a web service and needs to encrypt and persist this data locally to disk. Only this application should be able to decrypt the data stored ...
-1
votes
1answer
60 views

Deducing private key in RSA encryption from public key, cyphertext and plain text

Assuming someone is doing MITM attack. He knows the cyphertext, the public key and the plaintext message, can he deduce the private key from these 3 elements?
1
vote
2answers
106 views

How to handle end to end encryption [closed]

I am working on an app where the goal is to upload user data, store it, do some processing on that data and present it to user when asked. We want to follow end to end encryption model where the ...
0
votes
0answers
29 views

How can I find the publick key length of a dnssec public key

I have generated a DNS public-key (as far as I recall it is an rSA key). Given the key (ZSK and KSK), how can I figure our its length? how can I make sure it is RSA or another type? For example, this ...
1
vote
1answer
73 views

Storing RSA private/public key pairs in a file, on linux

Would it be wise to: Generate a lot of priv./pub. key pairs, and store them in a file on the server machine(Linux). (Let's say in a companies server room) Then encrypt the file with AES, and store ...
2
votes
0answers
53 views

mbedtls mutual authentication [closed]

I have a server CA cert, device cert and the device private key. I am using mbedtls and want to be able to create a mutual authentication connection between the device and the server. I also have to ...
1
vote
1answer
104 views

How to encrypt and sign a message with RSA?

I have been doing research on how RSA encryption works (mostly from a math's point of view) and I have come to understand this: By encrypting with the public key of bob, only bob can decrypt it with ...
0
votes
2answers
41 views

Does the symmetric key exchange through asymmetric encryption have to be done asymmetrically?

To communicate over a public channel, it seems often that 2 parties first use some asymmetric-encryption way to exchange a symmetric key. And then use the symmetric key for subsequent communication. ...
1
vote
3answers
56 views

How to enforce confidentiality while keeping the authenticity?

Below is an illustration of the digital signing process. According to Wikipedia: A digital signature is an authentication mechanism that enables the creator of the message to attach a code that ...
1
vote
0answers
40 views

Advantage Of ECDH-RSA over RSA Ciphersuites In TLS

If ECDH-RSA is used for key exchange, this is what happens: The server has its public ECDH parameter embedded within its certificate. The client generates its public ECDH parameter, extracts the ...
2
votes
0answers
41 views

when should i use HMAC-based JWT?

I read a number of blog posts and found that it is tough to keep the secret-key a secret and if using a symmetric algorithm for JWT creation, the generator has the power to create as well as validate ...
1
vote
2answers
65 views

How to authenticate using RSA avoiding MITM attacks

During my lessons of information security the professor told as that Alice can authenticate to Bob in the following way using RSA: Bob generates and sends a Nonce to Alice Alice signs this Nonce with ...
2
votes
2answers
76 views

Is RSA key-like browser authentication feasible?

I see that password based authentication is out of favor today, and Internet is moving toward RSA keys-based authentication. Coming from that fact, I am wondering if there would be a real benefit to ...
0
votes
1answer
217 views

Checking if an RSA private key is passphrase protected

I have generated an RSA key-pair on a computer, and I want to check if the RSA private key is encrypted (protected) with a passphrase. Note that the problem is not that I forgot the passphrase, but ...
0
votes
0answers
32 views

User specific AES-256 key for file. Retroactive encryption

I may be falling into a classic encryption-problem trap here... I've been developing applications using AES and public/private key encryption for some time so I have a good understanding of straight ...
0
votes
0answers
66 views

Compatibility advantages of RSA-4096 over RSA-3072

I am targeting a security level of 128 bits for GnuPG, so I am using SHA-256 and AES-128. Now I need to choose between RSA-3072 and RSA-4096. According to multiple sources RSA-3072 security level is ...
0
votes
1answer
122 views

Why is PKCS used? [closed]

Can anybody help me in understanding why PKCS is used? My confusion is that whether PKCS is used to transfer key in between client and server OR it is a standard to encrypt and decrypt the payload. I ...
2
votes
2answers
152 views

Should the client or the server generate the client's public-private key pair?

Say I have a mobile messaging app. There is a central server that manages stuff (like a directory of users, onboarding, etc.) and there are all the clients. My app is professional, so it uses ...
3
votes
2answers
335 views

Is server public key and Diffie Hellman public are the same?

I am trying to understand the working of TLS. I understand that there are various way to generate the master secret used to encrypting the data. Such as DH (Ephemeral DHE) and RSA. I understand that, ...
3
votes
6answers
369 views

Why can a man-in-the-middle attack not happen with RSA?

I understand how RSA works (generate private/public key pair, send public key to whoever you want to talk to, encrypt with public, decrypt with private), but isn't there a flaw in this? Let's say A ...
1
vote
2answers
104 views

Does git use the ssh user keys or the repository's deploy keys for encryption?

In this question I asked, why the SSH-Host key shown when connecting to a gitlab repository does not match the one shown on the instance configuration page. Nevertheless, the accepted answer says that ...
1
vote
2answers
99 views

Is there a stream cipher equivalent when using RSA key pairs?

From what I can gather, when encrypting with RSA key pairs, you cannot encrypt more data than the length of the key (at least I can't find the implementation in the libraries I'm using). So then, in ...
11
votes
2answers
702 views

Why are the gitlab SSH host key fingerprints not matching?

I tried to log into my university's gitlab via SSH. As expected, I was warned that the host is not known. Therefore, I tried to find the SSH host key on the "current configuration" page in the manual. ...
0
votes
1answer
469 views

why does ssh prompt with the ECDSA key instead of RSA [closed]

When I use an Ubuntu from linode ssh-keygen -l defaults to looking for an RSA file to "list". Yet ssh issued from a client asks for verification of the remote linode's ECDSA key. This means that ...
1
vote
1answer
199 views

how to save RSA keys in a software?

I am working on a non-professional piece of software that is required to generate and store RSA keys (public and private). The generated keys will be used to encrypt communication across the Internet. ...
1
vote
0answers
140 views

BadPaddingException when using the textbook cipher

I'm using an implementation as below to do an encryption where the bouncycastle is used as the crypto provider. So the ciphertext for a particular plaintext will not be dynamic as the RSA from ...
1
vote
1answer
90 views

Checking the primality of numbers for use in RSA [closed]

How can I check the primality of extremely large numbers such as those used in RSA, in Linux?
0
votes
1answer
70 views

How SSL Handshake recognise any attack

I already know that a replay attack on an SSL handshake is ineffective, but if we suppose that an "intruder" has listened and has got all of the information from a previous handshake, how will the ...
0
votes
0answers
52 views

What are the dangers of a compromised private key in “pass + certificate” VPN auth?

A VPN service I've encountered supports connecting to it with NetworkManager in linux. The options are OpenVPN as the connection type, with Password with Certificates (TLS) as authentication type. ...
3
votes
0answers
74 views

Attacks on RSA without knowledge of either key

All attacks on RSA seem to require knowledge of at least the ciphertext and the public key. However, has there ever been any evidence of an attack which simply uses a sufficiently large number of ...
0
votes
0answers
75 views

RSA/ECB/PKCS1Padding transformation

Is it secure to use RSA/ECB/PKCS1Padding transformation (with no parameters)? I found that padding oracle attack can be performed against the RSA with PKCS1Padding. I use this algorithm to encrypt ...
1
vote
1answer
34 views

Use D Parameter Of Private Key as HMAC Secret for JWT in a Load Balanced Environment

I need to use a signature for a JWT that needs to be created or verified on 12 different servers running in a load balanced environment. They all already have the same RSA Key Pair stored in the ...
-1
votes
3answers
201 views

How are private keys distributed safely?

I am going through the RSA algorithm and I have a few questions. My understanding of RSA Algorithm: How does a receiver get his private keys P and Q? For a particular public key, if every receiver ...
0
votes
1answer
103 views

What common techniques are there to decrypt a file given that I only know the private RSA key?

I've been trying to solve an online challenge. I've been given a file, which I suspect is encrypted (around 15KiB). I've also managed to obtain what seems to be an RSA private key (n == 2048). I know ...
1
vote
1answer
422 views

Why can RSA-OAEP padded mail be decrypted using OpenSSL 1.0.1e?

I have been encrypting messages and specifying RSA-OAEP padding with OpenSSL 1.0.2k, using the following command: openssl cms -encrypt -in content.txt -out message.msg \ -recip public-key.pem -keyopt ...