Re: Newbie question on encryption keys



On 2007-07-10, rohanm79@xxxxxxxxx <rohanm79@xxxxxxxxx> wrote:
I am a little confused about creating encryption keys. How exactly
does one create a 128, 512 or 1024 bit key? If I use an encryption
software, does the encryption key mean the password? If so, is it
enough if I create a 128/8=16 char password or even 512/8=64 char
password?

How to specify key length depends on what kind of software you're
talking about. Usually it's set as some sort of command-line
argument or in a config file, or it may be prompted for
interactively. Consult the man page for details.

Dealing with public key encryption systems, the actual encryption
key generally has nothing to do with the password which you may or
may not be asked to provide. When you create a keypair with, e.g.,
GPG or OpenSSL, the key parameters themselves are pseudorandomly (or
randomly, depending on your hardware) generated in the program. The
password is only used as the basis for a /symmetric/ key with which
to protect the generated private encryption key; this is done to
make it more difficult for an attacker to obtain your private key,
should the file it is contained within fall into the wrong hands.

Let us know which particular software you're dealing with if that
didn't completely answer your question.

Mark

--
Mark Shroyer
http://markshroyer.com/
.



Relevant Pages

  • Re: Private folders
    ... JoeSpareBedroom wrote: ... Weak encryption that can be broken in a matter ... but he's dealing with his family. ...
    (microsoft.public.windowsxp.general)
  • Saving a password locally
    ... The config file is then encrypted with a 256-bit encryption ... The hashed password can off course not be ... used directly (the hacker will have to decompile the entire app). ...
    (sci.crypt)
  • Re: [Info-Ingres] Encryption of Data at Rest
    ... In another non-ingres database I've ... implemented a trigger which does a one way encryption. ... The decryption routines dont get released of course. ... We store the cryptographic keys in the databases config file - the ...
    (comp.databases.ingres)
  • Re: Automatically encrypting data files in a partition.
    ... > encryption keys, i.e.. ... > Ideally, the directory structure, and file names wouldn't be encrypted. ... > Some of these files, could be MS Office data files, others might be MS ... > 'data tree' into the config file, reload the config file into the ...
    (freebsd-questions)
  • Automatically encrypting data files in a partition.
    ... I need a way to store different directory trees and files with different ... 'data tree' into the config file, reload the config file into the ... 'encryption filesystem program' and all would be sweet;-) ...
    (freebsd-questions)