Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 47271

RSA is a common public key algorithm, which can be used for encryption and signature. It is a core component of most the security protocols used on the Internet, including the SSL/TLS protocol suite.

2 votes
1 answer
3k views

When using HMAC-SHA256 do I must save the secret in the databse to verify the sender?

Many API's I found that using same method for authentication: Signature is a HMAC-SHA256 encoded message containing nonce, customer ID (can be found here) and API key. The HMAC-SHA256 code must be …
Aminadav Glickshtein's user avatar
0 votes
2 answers
2k views

Is it secure to auth API requests using an RSA? [closed]

(See Bitfinex for example https://docs.bitfinex.com/v1/docs/rest-auth) I thought that it is more secure to use RSA. Each user will get a private key (we will not store it). … I know that there are a performance issue with RSA, but it is for very short messages, so it is not concerning me. Why others not doing it? There is any security issue with it? …
Aminadav Glickshtein's user avatar