3 ms·
At first, I thought that this is pretty harmless, but now I suspect that there may be a way to exploit a dump of public keys tied to personal information: let's
by dmytrish 11y ago
At first, I thought that this is pretty harmless, but now I suspect that there may be a way to exploit a dump of public keys tied to personal information: let's say that some powerful adversary (like NSA) uses some kind of rainbow tables to associate public keys with private. Having a lot of public keys, they are likely to know some private ones and identities behind them.
This hypothesis requires some mathematical ground, though. It may be that probability of guessing a private key is still negligible.
- craigds 11y agoNot exactly a cryptography guy, but I don't think PKC quite works like that. Rainbow tables rely on people using the same password as each other. This happens a lot with passwords, but it's unlikely to happen with key pairs, assuming they're generated with proper CSPRNGs.
- baby 11y ago> rainbow tables There is no such thing in public key crypto. The only thing that comes close to it that I can think of is the problem where weak public parameters were hard coded in a library (Apache) and were used by many many many person. Look at the logjam paper.