Questions tagged [rsa]

RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.

Filter by
Sorted by
Tagged with
0
votes
0answers
4 views

WebCrypto SubtleCrypto RSA sign/verify AND encrypt/decrypt? [migrated]

I have a project where I'd like to use public-key cryptography in both typical sign/verify situations and encrypt/decrypt situations. For example, I'd like to create a self-signed X.509 certificate ...
0
votes
1answer
92 views

Some questions about encryption in Java

I have some questions about encryption in java as I'm trying to develop a password-manager-like application for my final test in Computer Science in High School (Germany). The password manager uses a ...
0
votes
0answers
38 views

The RSA-CRT-faults lenstra's attack signature

I was reading this [paper]https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf)1 about the use of faults in the computation of signatures with the CRT optimized version of RSA(see the end of the ...
3
votes
2answers
170 views

Are ECB and CBC modes of operation generally insecure?

In some Java code that I'm reading, I stumbled over the following encryption algorithms passed to the Cipher.getInstance(...) method: AES/CBC/PKCS5Padding DESede/ECB/PKCS5Padding RSA/ECB/PKCS1Padding ...
1
vote
0answers
19 views

How to authorize a subkey using a primary master key pair?

I'm using webcrypto, not PGP/GPG. I would like to use a key pair to create a "subkey" that is authorized by my primary key in a way anyone can publicly verify so I don't need to expose the primary ...
1
vote
2answers
165 views

Required a simple guide for secure messaging application

For my personal research, I have to create a messaging app, but security is only important part of application, security from MITM (man in the middle attack), at device end, and at server level. (note:...
1
vote
2answers
121 views

RSA insensitive and extractable private key export from SoftHSM 2

I've created an RSA private key in SoftHSM 2 via EJBCA with the following config: attributes(*, CKO_PUBLIC_KEY, *) = { CKA_TOKEN = false CKA_ENCRYPT = true CKA_VERIFY = true CKA_WRAP = false }...
1
vote
1answer
200 views

Is it possible to decrypt a PGP encrypted file without private key?

I had been using my own PGP key (RSA/1024) for more than 15 years. That key is my identify on the Internet for a long time, and also be used for encrypting a huge data. Recently, my colleagues told ...
0
votes
1answer
83 views

Is there any solution to this system?

INTRODUCTION First of all, I'm a beginner in RSA mechanisms and similar but I'm really interested in knowing if this is possible. In this scenario, I organized a party where certain people receive a ...
0
votes
2answers
85 views

private key of SSL certificate

To create a certificate, first we need to fill a CSR and in CSR we have to place our public key and that key pair can be generated by different ways in different devices. To do ssh, we run command (...
1
vote
1answer
141 views

How to generate an OpenVPN 4096 or 8192 bit static key?

How to create an OpenVPN static / pre-shared key with key size 4096 or 8192 bit? openvpn --genkey Creates 2048 bit strong keys only. Static key. Not CA.
10
votes
2answers
2k views

The maximum size of a file that I can encrypt with a specific key size

a 1024-bit private key is generated using the openssl genrsa privateKey.pem 1024 command. we extract the public key from the private key using the command openSSl rsa -in privatekey.pem -pubout -...
2
votes
1answer
96 views

Why does the NodeJS Crypto docs use CBC instead of GCM for RSA key-pair?

I have read that GCM is almost always more secure than CBC when implemented correctly. However, in the documentation of NodeJS, CBC is being used as an example instead. The key-pair will be stored ...
0
votes
1answer
67 views

Decrypt RSA ciphered TLS 1.2 traffic using client RSA private key (not server)

I am using stunnel as a MITM to decrypt TLS traffic in between an app and its web server. The traffic between the app and the MITM server cannot be decrypted simply with RSA cipher as the app is not ...
0
votes
0answers
14 views

Private encryption and public decryption key pair [duplicate]

Is it possible to have the public component of a key pair being capable only of decryption?
-2
votes
1answer
94 views

Attack on RSA and ECC

I am reading information about RSA and Eliptic Curves cryptography. Assuming that both these two algorithms have stages until two parts achieve key exchange. If an attacker eavesdrop the stages before ...
0
votes
0answers
15 views

Which part/step of the TLS handshake is essential for providing PFS? [duplicate]

I would say the key exchange part, because PFS is used only during the key exchange of server and client. Am I right or have I overlooked something?
1
vote
1answer
71 views

Is it important to use separate GPG keys for signing Git commits and for SSH authentication?

When using GPG to sign Git commits, and as the SSH-agent, is it important to use separate sub-keys for the signing of the Git commits as it is for authentication with the SSH host of the Git server? ...
0
votes
1answer
108 views

RSA Key, String vs Hex vs Base64 vs byte-array represantational form

....key is normally a string of bits used by a cryptographic algorithm to transform plain text into cipher text or vice versa.... https://www.di-mgt.com.au/cryptokeys.html Suppose I have a Backend ...
2
votes
1answer
73 views

Reason to generate encryption keypair server side rather than on device?

I want my native applications (android/ios) to have a keypair (RSA or ECIES) so that certain data on requests to my API can be encrypted. I want each client to have a unique keypair. The device will ...
2
votes
1answer
154 views

JWT: Choosing between HMAC and RSA

It is my understanding that HMAC is a symmetric signing algorithm (single secret key) whereas RSA is an asymmetric signing algorithm (private/public key pair). I am trying to choose between these 2 ...
0
votes
0answers
36 views

What is the best way to secure biometric login?

I've a fingerprinter devices. In this device there is an RSA private key and a userID. I've a tool written in C to recognize this device and to read that informations if the fingerprint is correctly ...
0
votes
2answers
117 views

Is there any way to send data securely from multiple As to B in the presence of eavesdropper, without losing anonymity like in a public key exchange?

Suppose I have n subordinates at work. Any subordinate should be able to submit his or her report anonymously to me via digital means. Also suppose that I have no means of broadcasting any form of ...
0
votes
1answer
139 views

How to encrypt a >1MB file with RSA? [duplicate]

I am new to cryptography, so please excuse any "obvious" beginner mistakes. I need to send a file larger than one MB to Bob, but my RSA keys are only 1024 bit large. I believe this means I can't use ...
2
votes
3answers
217 views

Use RSA key to encrypt/decrypt personal document

Suppose I have generated a public/private RSA4096 keypair using GPG. Is it secure to use this keypair to encrypt/decrypt documents solely for personal use, i.e., have an encrypted backup of some very ...
0
votes
1answer
40 views

How can I add bits of security? (e.g. RSA + ECC)

If we have an RSA layer of encryption over some text with n bits of security, then we use an elliptic curve, say with m bits of security, how can we calculate the total bits of security with RSA(ECC(.....
3
votes
2answers
76 views

Is it secure to use a single pair of RSA keys to achieve mutual authentication?

I saw this design recently in an infotainment product. The goal is mutual authentication between two ECUs, E1 and E2. They only care about each other. The basic idea is to keep both keys secret and ...
1
vote
4answers
737 views

Data too large for key size while trying to sign then encrypt

I'm not very experienced in the security field, but I'm trying to sign then encrypt a large folder in order to deal with software updates in some machines that will be offline. I've thought about ...
0
votes
1answer
59 views

How to implement server/client software where only user can access his files via key-pair

I want to implement a server side application with REST API - clients are browser and mobile app. User will have a login (email, password) and will store his files on the server. These files must be ...
1
vote
1answer
670 views

RSA key exchange is obsolete. Enable an ECDHE-based cipher suite

If what this says is what I think, does that mean the connection could be compromised and or vulnerable to MitM &/or other attacks? Cert shows to be good, but there is this "RSA key exchange is ...
3
votes
1answer
84 views

RSA SecureID - is the serial of the key public?

If I am having an RSA SecureID hardware key, I can see serials/numbers at the back of the SecureID (so not the every-minute changing token)? Is that public information? Or should the serials on the ...
2
votes
1answer
123 views

Is there a name for this (unconventional?) use of RSA for authentication?

I am writing an article about a late-1980s system that uses the RSA algorithm for the purpose of authentication. However, rather than the usual approach of encrypting a hash of the message using a ...
1
vote
1answer
54 views

Mix and match RSA and ECDSA in TLS

Suppose TLS client and server want to communicate, authenticating both parties. They each have sufficiently trusted certificates, but one corresponds to an ECDSA private key and the other corresponds ...
2
votes
1answer
95 views

RSA key size in TLS ciphersuite with RSA key exchange

I'm using the TLS cipher suite TLS_RSA_WITH_AES_256_CBC_SHA56. The Public Key of the Server's Certificate is RSA (2048 Bits) I understand that the RSA algorithm is used here for for key exchange, as ...
1
vote
2answers
259 views

ECDHE_RSA_WITH_AES_128_GCM_SHA256 - How to determine ECDHE Key Length?

Server: SSL Certificate, 2048-bit RSA Public Key, Signature Algorithm is sha256RSA What am I missing here? ! I've scoured the RFC's, and I have yet to find anything on how to determine the ECDHE key ...
0
votes
1answer
117 views

How can I distribute highly confidential keys for a symmetric cipher?

Say I want to exchange a key with someone for a symmetric cipher (say AES) without meeting them in person. What would be the most secure way to do this over the Internet? My first instinct would be ...
0
votes
0answers
89 views

How is a cryptographic key used as a password when using WiFi? [duplicate]

I have recently come from a post and the accepted answer described the password as a cryptographic key. I have an understanding of RSA, AES and uses of it such as digital signatures however I fail to ...
0
votes
0answers
45 views

Can I know the RSA encryption algorithm using the key-pair and encrypted data? [duplicate]

I generated ssl certificate and its key shared it to a third party. They claim that they use my ssl to encrypt data using RSA PKCS1. But I am not able to decrypt it using RSA:ENCRYPTION_PKCS1, I ...
1
vote
1answer
65 views

Is a pure-JS raw RSA implementation secure for transferring information? [closed]

Assuming I have the RSA forge (javascript) library, does the pure-RSA implementation work for information transferring? I know that the forge library has the keysystem and everything, but I want to ...
0
votes
1answer
77 views

How to obtain body from RSA signed document without verifying signature?

According to my understanding of computational cryptology, the body of a signed document can be retrieved disregarding whether or not the signature is authentic. However, I cannot apply this ...
0
votes
1answer
60 views

Are all web servers for a domain wildcard certificate supposed to have the same private key?

If I have three web servers that all have the same CSR based on a domain, *.domain.com, does that mean all the servers have the same private key? I know it's a short question, but I am not sure of ...
0
votes
0answers
87 views

How do you generate a RSA private key that is BER encoded with OpenSSL?

According to the Linux Kernel's Asymmetric Cipher API found at the following URL: https://www.kernel.org/doc/html/latest/crypto/api-akcipher.html#asymmetric-cipher-api, you must pass a BER encoded ...
2
votes
1answer
117 views

is it safe to AES encrypt the RSA private key and storing it in the database

i'm building an app that really needs encryption of this type , my question is it safe to store the aes encrypted RSA key in the database ? here is how i encrypt the key : i generate a random 256 ...
0
votes
1answer
120 views

Is asymmetric encryption is safe on the Internet? Can't a hacker just pose as a valid user?

When I read the RSA asymmetric encryption: In the environment: Rules are: blue boy, red girl, and black men. blue boy and red girl all have their own public key (blue) and private key (red). In ...
2
votes
1answer
119 views

Is there a password based challenge response authentication scheme with public key cryptography?

I was thinking about an authentication where the user only has to know a password but no salt, everything else the client retrieves from the server yet a user's password can't be retrieved from the ...
0
votes
0answers
50 views

Offline code signature verification scheme

Assume that I want to sign digitally updates for an offline appliance (lets say a limited linux VM). To begin with, such mechanism is not in place and the very limited OS doesn't have any CA ...
0
votes
1answer
69 views

Is it secure to store an rsa private key with aes encrypted in your database?

I want to use multiple clients but I don't want different public key for that specific user. So I have to share the private key between all clients that I only have to use one public key. So I thought ...
0
votes
0answers
55 views

percentage of X.509 certs using rsaEncryption as publicKey algorithm

Quoting 2017_TLS_Telemetry_Report.pdf: Not surprisingly, 2048-bit keys now protect 90% of the world’s TLS hosts. The use of 4096-bit keys have quadrupled, as a share of hosts, but we expect it to ...
1
vote
0answers
202 views

how to generate RSAES-OAEP keys?

RFC4055 describes RSAES-OAEP keys and RSASSA-PSS keys. OpenSSL's genpkey utility supports let's you generate RSASSA-PSS keys (you have to set the aglorithm parameter to RSA-PSS) but if it supports ...
1
vote
2answers
122 views

Can a document be digitally signed multiple times, successively by different users?

The question is, if a document that is collaboratively edited, one user per time, could be digitally signed by every editor before it is passed to the next editor. And if yes, could the final receiver ...

1 2 3 4 5 13