New answers tagged

1

For RSA, the public key size determines the size of the ciphertext, and you need quite long public keys to achieve adequate security. However, there are actually quite a lot of problems with using RSA for encryption of arbitrary data (for example, if any datum is even almost as long as the public key, or longer, is it significantly more complicated to do the ...


1

First of all, a few misconceptions: You've got the way public key crypto (which is in fact called "public key" or "asymmetric", not "private key") works a bit wrong. The public key can encrypt and verify but can't sign or decrypt. The private key is the reverse. The sensitive operation in both cases - the one that only an ...


1

The difficulty here is that the web application must have access to the key in order to send emails. But if the application is breached, the attacker could obtain that key and decrypt the emails. So total security is probably not possible, but you can make attacks more difficult. Indeed, storing encrypted data in the database could be useful since it ...


Top 50 recent answers are included