New answers tagged rsa
3
As you mentioned in a previous question, the goal of encrypting a hashed password is to add pepper to it, to make it harder (even impossible when a good pepper is used) to brute-force passwords, in the event that the database is breached.
Adding a pepper in a password-hashing function and symmetrically encrypting the hash are functionally equivalent. To ...
1
First, RSA is an asymmetric algorithm and there is no point of using an asymmetric algorithm here. Asymmetric cryptography is used when you need to exchange information with somebody you haven't established a shared key with.
RSA is rarely used to encrypt data directly (mostly its used to encrypt a key for a symmetric cipher which is what is actually used to ...
0
With regard to ...but in the id_rsa.pub file, there is no pair, it's just one gigantic string, where does it split?:
First and foremost, the private key file contains the pair of large primes, the public key file contains the product of these two large primes (this is called the 'modulus').
Although the private key and public key files produced by ssh are ...
-1
A password is not sent by the user, but the server does send a random string that is encrypted so only the user get prove they are the holder of the private key that corresponds to their copy of the public key inside servers copy of authorized_keys prior. Getting your key into that file remotely the hard part...
This way even if an eavesdropper peels back ...
1
Unfortunately there is not a single source of truth about attestation. I'll try to make it as clear as possible and cite when necessary.
TL;DR: The Endorsement Key is used to prove that you are talking to a real TPM. However, it cannot be used for signing. The AK can be used for signing and is associated with the EK.
Endorsement Key
You can consider the ...
0
The signature levels are defined in the man page under --ask-cert-level and --default-cert-level. sig refers to cert level 0, "means you make no particular claims as to how carefully you verified the key." sig 3 refers to cert level 3, "means you did extensive verification of the key." So self-signatures, which are created at the time ...
3
You're comparing a signature scheme (ed25519) for integrity / authenticity with an encryption scheme (hybrid RSA / AES) giving you confidentiality. As such, the comparison makes very little sense.
If you want to speed up encryption then you could replace RSA encryption of the key with ECIES, for instance using X25519 as key agreement scheme for Curve25519. ...
Top 50 recent answers are included
