Questions tagged [pkcs8]
Public-Key Cryptography Standard, number 8, describes the Private-Key Information Syntax Standard which is used to carry (encrypted or unencrypted) private certificate keypairs.
16 questions
2 votes
1 answer
241 views
Kyber prime modulus p and base generator g
I am trying to learn more about Crystals Kyber. I am playing around with a Java implementation. I am only focussing on Kyber-512 for now, I have locally changed the source code in order to remove the ...
0 votes
0 answers
123 views
What format to use to store private and public key in one file other than a PKCS12 keystore?
TLDR I want to generate an X25519 keypair and then store it in a single file for easier handling, but I cannot use a keystore like PKCS#12. Why OpenSSL makes it quite easy to generate a private key in ...
0 votes
0 answers
480 views
How to extract a private key from .PFX file to .PEM file using AES-GCM as a password-based encryption?
I'm trying to extract a private key from a .PFX file to a .PEM file format. I was able to do it using Aes128Cbc in either .NET or OpenSSL: .NET: ...
0 votes
0 answers
32 views
What PKCS standard is this? [duplicate]
What PKCS standard is the public key in the image below? It seems to me that it is PKCS#8, but what I've read makes me think that PKCS#8 only applies to private keys. Here is the corresponding ...
1 vote
0 answers
4k views
Is it possible to check private key syntax using openssl?
I have a DER-serialized private key. The tool I have to provide the key to gives me algid parse error, not a sequence, and it looks like the problem is that the key ...
1 vote
2 answers
477 views
Is PyCryptodome's export_key with passphrase secure?
When exporting a private key with PyCryptodome, DER format, PKCS#8 and a suitably strong passphrase, is the resulting exported key secure enough to place somewhere that you would not normally want ...
1 vote
0 answers
1k views
How to get the key data from the pkcs#8 format? [closed]
Being newbie to crypto, I understood that RSA keys are shared are pairs $(e,n)$ or $(d,n)$. But when I was given a doc with keys, they were in PKCS#8 format. How to get the keys out of this format?
7 votes
1 answer
2k views
Ed25519 PKCS8 private key example from IETF draft seems malformed
Malformed PKCS8 Key Algorithm Identifiers for Ed25519, Ed448, X25519 and X448 for use in the Internet X.509 Public Key Infrastructure § 10.3. Examples of Ed25519 Private Key states the following: <...
6 votes
1 answer
11k views
What are the differences between plain and encrypted private keys?
It seems like there are different kind of private key formats, namely: PKCS#5 plain private key PKCS#8 plain private key PKCS#5 encrypted private key PKCS#8 encrypted private key I have seen these ...
0 votes
1 answer
642 views
creating PKCS8 private keys with a PBMAC1 hash
PKCS#8 provides two encryption schemes (PBES1 and PBES2) and one message authentication scheme (PBMAC1). It seems like a combined method (eg. authenticated encryption) would be ideal but whatever. ...
6 votes
1 answer
16k views
Why ssh-gen makes difference between PEM and PKCS8?
Correct me if I am wrong, but PKCS8 is format to store private key info. It could be binary-enoded (DER) or Base64 encoded (<...
1 vote
0 answers
372 views
Need help with PKCS#12 3 key triple des key expansion
I am trying to decrypt PKCS8-Shrouded Key Bag inside a PKCS#12 pfx file. The oid for the encrypted data is PbeWithSHAAnd3-KeyTripleDES CBC. Iteration count and salt has been provided within the pfx ...
11 votes
1 answer
15k views
Why can ssh-keygen export a public key in PEM PKCS8 format?
In the documentation of ssh-keygen (man ssh-keygen) it says for the option -m that an export ...
2 votes
2 answers
161 views
How badly does disclosing an M-bit prefix of an N-bit private key compromise security?
I apologize profusely for knowing nothing about cryptography, please go easy on me! I'm working on a project where I have a 2048-bit RSA private key and a public certificate generated from the ...
3 votes
1 answer
605 views
What is the technical name for a public key container in DER format?
I have a public key in the following (format-neutral; the type is specified by the DER bytes) format: ...