CryptExport private key only

From: Anatoly (wiretransfers_at_yahoo.com)
Date: 10/26/03

  • Next message: Nick Carter: "PrincipalPermissionAttribute Confusion" 
    Date: Sun, 26 Oct 2003 01:28:17 -0400

    do I understand correctly, that when using RSA public/private key pair
    encryption, CryptExport's PRIVATEKEYBLOB flag will export both private and
    public keys together?

    from conventional use of Public/Private key pairs, it seems that one is
    supposed to use the public key to encrypt data and private key to always
    decrypt data.

    Is it legitimate to interchange the private/public keys in their purpose?
    that is can I use the public key to decrypt and private to encrypt and
    benefit from the same level of protection as the conventional scenario?

    I seem to have been able to reproduce the exact results when exporting
    encrypting a symmetric type of key into a blob while protecting it with
    either public and private key, and then importing it from the blob again
    using the opposite key (private or public), and decrypting the data with
    that imported symmetric key. The resulting output data is exactly the same
    as the input data.

    So does this mean that mathematically the private and public keys are
    interchangeable?

    -Anatoly

  • Next message: Nick Carter: "PrincipalPermissionAttribute Confusion"

    Relevant Pages

    • CryptExport private key only
      ... that when using RSA public/private key pair ... from conventional use of Public/Private key pairs, ... supposed to use the public key to encrypt data and private key to always ...
      (microsoft.public.platformsdk.security)
    • [Full-Disclosure] [OFFTOPIC] PGP vs. certificate from Verisign
      ... At no point should the CA EVER have your private key. ... case then why are we using public/private key crypto.You send YOUR PUBLIC ... unless there is some security hole in your local software (hint: ... This whole discussion is INCREDIBLY OFF TOPIC for full-disclosure, ...
      (Full-Disclosure)
    • Re: What is this error?
      ... The sender can not encrypt the message for your user because your user ... does not have a public/private key as of yet. ... As your user apparently does not have a digital cert for email, ...
      (microsoft.public.exchange.admin)
    • Re: What is this error?
      ... Dan wrote: ... does not have a public/private key as of yet. ... and use it whenever they want to encrypt messages sent to that user. ... is no way the sender could encrypt the message with SMIME. ...
      (microsoft.public.exchange.admin)
    • Re: What is this error?
      ... "daveberm" wrote: ... does not have a public/private key as of yet. ... and use it whenever they want to encrypt messages sent to that user. ... is no way the sender could encrypt the message with SMIME. ...
      (microsoft.public.exchange.admin)