RE: Decryption using private key from cert store failing with err

From: Rhett Gong [MSFT] (v-raygon_at_online.microsoft.com)
Date: 02/28/05


Date: Mon, 28 Feb 2005 01:46:32 GMT


>The reason we need to do a decrypt(private)/encrypt(public) is that that
is
>part of the SSL standard. It decrypts with the private key and then the
>other side encrypts with the public key

>From your description, I think you are using RSA for server authentication
and key exchange. If it is, then a process is as follows (from RFC2246):
<quote>
"a 48-byte pre_master_secret is generated by the client, encrypted under
the server's public key, and sent to the server. The server uses its
private key to decrypt the pre_master_secret. Both parties then convert the
pre_master_secret into the master_secret, as specified above.
RSA digital signatures are performed using PKCS #1 [PKCS1] block type 1.
RSA public key encryption is performed using PKCS #1 block type 2"
</quote>

Thanks,
Rhett Gong [MSFT]
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

This posting is provided "AS IS" with no warranties and confers no rights.



Relevant Pages

  • Re: OpenNETCF Cryptography questions - using RSA for licensing strategy
    ... I've never done any encryption so am interested to know where you get the ... > passes the private key and plainText to a WS. ... > then returns the cipherText and public key. ... >> longer decrypts the old data it used to decrypt. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Encrypting incoming messages with GnuPG
    ... could then be decrypted with my private key as usual. ... encrypted with hrickards@xxxxxxxxxxxx's public key. ... Postfix encrypts this email *again* with hrickards@xxxxxxxxxxxx's public ... Thunderbird then decrypts the message again with my private key, ...
    (Debian-User)
  • Re: No way to encrypt with private key in C#?
    ... As far as my naive textbook knowledge goes; ... 1)if a file is encrypted with the private key, ... 2)if a file is encrypted with the public key, ... What actually happens is that the sender encrypts with the recipient's public key, not his own key. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Encryption for group
    ... > private key to decrypt the symmetric key. ... Do I understand correctly that the symmetric key is ... encrypts the symmetric key several times, ... to different pairs of (public key, ...
    (sci.crypt)
  • Re: Key exchange
    ... Someone encrypts a new symmetric key with someone's public key. ... someone decrypts it with someone's private key so someone and someone ... can reset their ciphers. ...
    (sci.crypt)