RE: rsa key generation issue/question

2007-08-10 Thread David Schwartz
> I am not familar with ASN.1, or any of the specifice of which the rsa > key is generated. It just seemed as it should not be so. > What is the ASN.1 encoding, and how is it used? The vast majority of file formats begin with a header that is similar or identical for files that contain different

Re: rsa key generation issue/question

2007-08-09 Thread Marek Marcola
Hello, > I am not familar with ASN.1, or any of the specifice of which the rsa > key is generated. It just seemed as it should not be so. > What is the ASN.1 encoding, and how is it used? RSA private key is a set of big numbers: n,d,e,p,q,dmp1,dmq1,iqmp. (this is not one number). When this numbers

Re: rsa key generation issue/question

2007-08-09 Thread Patrick Parsons
I am not familar with ASN.1, or any of the specifice of which the rsa key is generated. It just seemed as it should not be so. What is the ASN.1 encoding, and how is it used? On 8/9/07, Marek Marcola <[EMAIL PROTECTED]> wrote: > Hello, > > Looks like this may be the issue, a flaw in the key gener

Re: rsa key generation issue/question

2007-08-09 Thread Marek Marcola
Hello, > Looks like this may be the issue, a flaw in the key generation algorithm. > https://www.kb.cert.org/vuls/id/724968 Probably not, this is flow in Montgomery multiplication which is used in modular exponentation. Of course modular exponentation is used in key generation process in p,q prime

Re: rsa key generation issue/question

2007-08-09 Thread Patrick Parsons
Looks like this may be the issue, a flaw in the key generation algorithm. https://www.kb.cert.org/vuls/id/724968 __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: rsa key generation issue/question

2007-08-09 Thread Patrick Parsons
These are the first few bytes of the key. Here they are from 10 keys generated with the command: openssl genrsa -rand /dev/urandom MIIBOwIBAAJ MIIBOgIBAAJ MIIBPAIBAAJ MIIBPQIBAAJ MIIBOgIBAAJ MIIBOgIBAAJ MIIBOQIBAAJ MIIBOwIBAAJ MIIBOwIBAAJ MIIBOwIBAAJ On 8/9/07, jimmy bahuleyan <[EMAIL PROTECTED]>

Re: rsa key generation issue/question

2007-08-09 Thread Marek Marcola
Hello, > I have noticed when generating rsa keys that the first 10 digits or > so are identical or nearly identical. Is this normal or is something > wrong? Does this issue occur for anyone else? > The version of openssl I am using is openssl-0.9.8b-8.3.fc6 and I am > using -rand /dev/urandom to

Re: rsa key generation issue/question

2007-08-09 Thread jimmy bahuleyan
Patrick Parsons wrote: > Hello, > I have noticed when generating rsa keys that the first 10 digits or so are > identical or nearly identical. Is this normal or is something wrong? Does > this issue occur for anyone else? could you post the bytes that you're referring to. (my guess is that it's t