Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with public-key-infrastructure
Search options answers only
not deleted
user 37315
A public-key infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. In cryptography, a PKI is an arrangement that binds public keys with respective user identities by means of a certificate authority (CA). There are three main categories of PKI: Web / SSL certs, corporate networks, and Government ID / ePassport.
1
vote
How is a root CA offline?
I'm told a root CA keeps they public/private keys totally offline.
It is not a question of online vs. offline but secret vs. public. The private key is held private as the name suggests, i.e. it …
- 208k
3
votes
Accepted
How to understand the PKI's revocation of keys and certificates function?
... but I don't know the revocation of PKI, if wen want to remove it, we can just rm -rf it. why this has relationship with PKI?
If a certificate is compromised no one should trust this certifica …
- 208k
2
votes
Is CA the only way to securely share public key?
A CA is not a way to share a public key in the first place. The idea behind signing a certificate (which contains the public key) by a CA is to propagate an existing trust into a CA to the certificate …
- 208k
8
votes
Can a powerful adversary trick ACME to generate a certificate?
Generating the certificate is not sufficient for a successful attack. The adversary actually needs to be able to use the certificate to impersonate the server to the client, i.e. the client needs to r …
- 208k
0
votes
Should name constraints be present on a subordinate CA issued to an organization?
Why does the subordinate CA lack the name constraints?
Because browsers would ignore these settings anyway.
Currently there is no technical way to restrict which certificates sub-CAs can issue.
- 208k
26
votes
Is there such a thing as public key steganography
One of the draw backs of traditional steganography is that both parties need to exchange a secret key.
Don't infer from the implementation of one specific tool to the limits of steganography itse …
- 208k
2
votes
Accepted
Certificate binary matching
I think you are referring to certificate pinning in the context of client authentication, where the server not only checks that the client can successfully establish the SSL handshake with the certifi …
- 208k
4
votes
Accepted
Impose certificate extensions through the certificate authority instead of the client
The CSR is not used as a fixed order but more like a wishlist. Most CA do not simply sign this CSR but instead just take the clients public key from the CSR and then add whatever information and restr …
- 208k
5
votes
difference between OCSP, CRL and CDP
The certificate revocation list (CRL) is a list of revoked certificates. It does not contain the certificate itself but mainly the serial number. It is signed directly or indirectly by the CA which is …
- 208k
1
vote
Accepted
How can I extract all required data to re-encrypt browser-decrypted requests identically?
If you want to replicate only the encrypted messages than you would need the symmetric keys used for encryption and also the random initialization vectors used together with these keys. Additionally y …
- 208k
1
vote
How many certificates can a CA issue before its secret key is renewed?
Essentially you are asking how much known plain text is needed in order to get to the private key when doing an RSA or ECDSA signature, because you have the certificate and hash (input signature algor …
- 208k
16
votes
Accepted
Is an identity certificate the same as a public key?
Is identity certificate same as public key?
No, a certificate contains a public key but is not the public key itself.
If no, then is identity cert considered a secret?
Usually not, it usua …
- 208k
3
votes
What can happens if someone read the public and private keys of ssh?
Reading the public key is not a problem since as the naming suggests: it is for public use anyway. The private key instead needs to be protected. Access to the (unencrypted) private key on key-based a …
- 208k
78
votes
Can I get a public key from an RSA private key?
can I get a public key?
It's easy using openssl rsa:
$ openssl rsa -in the-private-key-from-your-question.pem -pubout
writing RSA key
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCB …
- 208k
2
votes
Diffie Hellman implementation- NodeJS
You are assuming that generateKeys is a deterministic operation so that a attacker knowing the DH parameters will generate exactly the same keys. But this is a wrong assumption. The attacker will end …
- 208k