2 votes

Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User

I am afraid that whatever you do to pretend that you have no access to that data, it will be close to snake oil security. The central problem, is that as the data has to be encrypted and decrypted on ...
Serge Ballesta's user avatar
1 vote

Over-Optimizing Security? Storing Encrypted Data on a Server While Private Key Remains With User

One option is to deploy this as a 'zero-trust' application, where all encryption and decryption of medical records takes place on the users' and the doctors' devices; and your server only sees ...
mti2935's user avatar
  • 22.7k
1 vote
Accepted

Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn't public key enough?

... and there is no option to just use the public key? This option exists. As documented you have to use the -pubin argument to specify that the key given with -inkey is a public key. You create the ...
Steffen Ullrich's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible