2
votes
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
I am afraid that whatever you do to pretend that you have no access to that data, it will be close to snake oil security. The central problem, is that as the data has to be encrypted and decrypted on ...
1
vote
Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User
One option is to deploy this as a 'zero-trust' application, where all encryption and decryption of medical records takes place on the users' and the doctors' devices; and your server only sees ...
1
vote
Accepted
Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn't public key enough?
... and there is no option to just use the public key?
This option exists. As documented you have to use the -pubin argument to specify that the key given with -inkey is a public key. You create the ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
cryptography × 2351encryption × 848
hash × 318
tls × 217
passwords × 209
authentication × 193
aes × 142
public-key-infrastructure × 133
rsa × 109
certificates × 102
digital-signature × 101
random × 95
key-management × 93
openssl × 74
asymmetric × 64
cryptanalysis × 64
web-application × 60
key-exchange × 55
key-generation × 51
.net × 47
privacy × 45
ssh × 44
file-encryption × 44
salt × 44
protocols × 44