Re: Securing SSH

From: Richard Soderberg (richard.soderberg@kib.ki.se)
Date: 12/29/01

  • Next message: Yaroslav Klyukin: "Re: SSH SETUP" 

    From: "Richard Soderberg" <richard.soderberg@kib.ki.se>
Date: Sat, 29 Dec 2001 00:38:10 GMT

    In article <tu2jqpiug333@corp.supernews.com>, "William Stacey"
    <staceyw@ameritech.net> wrote:

    >> It secures the connection (can't decrypt the session), but auth is only
    > safe as
    >> long as your public key file is safe.
    > That is in direct conflict with my understanding and what Richard said.
    > I thought the Public key file did not need to be safe. Anyone could
    > have this and security could still be maintained - no?

    As i understand it, the very essence of assymetric encryption is that
    your public key is and should be -public. The private key, on the other
    hand, should be kept very private. If you encrypt a message using the
    private key it is decryptable with the public key - proof that the message
    originated from you (or someone with access to your private key).
    If I want to send you an encrypted message I use your public key to
    encrypt it and the only one able to decrypt it is you, using your private
    key.
    Cheers,
    /RS

    Relevant Pages

    • Re: RSACryptoServiceProvider decrypt with public key
      ... key/decrypt with the private key and encrypt with the private key/decrypt ... encrypt data and send it back to Alice. ... only she can decrypt Bob's data. ... see the public key and the encrypted data, but she could not decrypt Bob's ...
      (microsoft.public.dotnet.security)
    • Re: how to have a gpg public key?
      ... Having just a public key doesn't do you much good. ... You need both a private key and a public key; ... can encrypt and decrypt your messages and you are just ...
      (Debian-User)
    • Re: DECRYPT with PUBLIC key (how to?)
      ... values in my application which would be decoded with my own public key which ... This is a very stupid thing to think that you can encrypt with private ... Private key operations often uses CRT ... Signature schemes and Encryption schemes have completely different ...
      (microsoft.public.dotnet.security)
    • Re: private to public decrypt now working
      ... would have the private key, all vice presidents would have a public key. ... All vice's could encrypt and only president could decrypt. ...
      (microsoft.public.dotnet.security)
    • [OT] Re: Basic question about Public Private Key Pairs
      ... > and private keys allow me to decrypt, but vice versa is not possible (or ... a public key and a corresponding private key. ... You can encrypt something with each key; ...
      (microsoft.public.dotnet.security)