Re: Differences between RSA and ECDSA - Conceptual and Practical

2011-10-18 Thread Bruce Stephens
Jakob Bohm jb-openssl-Ov0D3Su7/I/qt0dzr+a...@public.gmane.org writes: [...] As explained above, 192 bit DSA and ECDSA only works with 192 bit hashes (and only one hash algorithm is allowed for each private/public key pair). You can use larger digests (SHA-512, for example), but the digest

Re: Differences between RSA and ECDSA - Conceptual and Practical

2011-10-18 Thread Jakob Bohm
On 10/18/2011 2:18 PM, Bruce Stephens wrote: Jakob Bohmjb-openssl-Ov0D3Su7/I/qt0dzr+a...@public.gmane.org writes: [...] As explained above, 192 bit DSA and ECDSA only works with 192 bit hashes (and only one hash algorithm is allowed for each private/public key pair). You can use larger

Re: Differences between RSA and ECDSA - Conceptual and Practical

2011-10-18 Thread Bruce Stephens
Jakob Bohm jb-openssl-Ov0D3Su7/I/qt0dzr+a...@public.gmane.org writes: [...] I did mention that in passing under my item 2 (where I mentioned use of 192-bit-truncated-SHA-224 as one allowed 192 bit hash algorithm for use with ECDSA-192). OK, sorry, I missed that. I don't remember if the

Re: Padding schemes [was Differences between RSA and ECDSA - Conceptual and Practical]

2011-10-14 Thread Jakob Bohm
On 10/13/2011 7:17 PM, Dirk Menstermann wrote: Hello Jakob, On 12.10.2011 22:21, Jakob Bohm wrote: I know that to sign, i have to take a hash of some document or message but, theoretically, i could encrypt any document? The padding scheme would shrink the message and them could reveal the

Re: Padding schemes [was Differences between RSA and ECDSA - Conceptual and Practical]

2011-10-14 Thread Dirk Menstermann
Thanks, On 14.10.2011 13:16, Jakob Bohm wrote: Unfortunately not, I am a security engineer, not a fully trained cryptographer/cryptanalyst. As an engineer I am aware that attacking an algorithm such as RSA is easier the more the attacker knows or can control about the input, and that

Re: Padding schemes [was Differences between RSA and ECDSA - Conceptual and Practical]

2011-10-13 Thread Dirk Menstermann
Hello Jakob, On 12.10.2011 22:21, Jakob Bohm wrote: I know that to sign, i have to take a hash of some document or message but, theoretically, i could encrypt any document? The padding scheme would shrink the message and them could reveal the same message after deciphering? The padding

Re: Differences between RSA and ECDSA - Conceptual and Practical

2011-10-12 Thread Jakob Bohm
On 10/8/2011 3:39 PM, Rick Lopes de Souza wrote: Hi all, This week i was in doubt to implemment some methods to sign using OpenSSL. I know that RSA needs the hash algorithm to do the padding scheme and ECDSA doesn't need. ECDSA (and regular DSA) on the other hand needs a hash scheme

Differences between RSA and ECDSA - Conceptual and Practical

2011-10-08 Thread Rick Lopes de Souza
Hi all, This week i was in doubt to implemment some methods to sign using OpenSSL. I know that RSA needs the hash algorithm to do the padding scheme and ECDSA doesn't need. Another thing that i know is that RSA can only sign things that are smaller than the size of the key used. I can imagine

Re: Differences between RSA and ECDSA - Conceptual and Practical

2011-10-08 Thread Michael Sierchio
On Sat, Oct 8, 2011 at 6:39 AM, Rick Lopes de Souza dragonde...@gmail.com wrote: Another thing that i know is that RSA can only sign things that are smaller than the size of the key used. No - you can sign a message of arbitrary length - a suitable message digest is what is encrypted (well,