From PKC to PKI: Reflections on Standardizing the RSA Algorithm
summary
Overview of what was standardized, why, and what actually happened: the PKCS1 format formalizes the hash-and-sign paradigm and a hybrid encryption model that encrypts a symmetric key then RSA-wraps it, and it specifies fixed-formatted blocks with lots of 0xFF padding and random nonzero padding to reach modulus size. Attack history matters: multiplicative attacks (DaVida, Desmedt) motivate hashing and full‑domain/PSS alternatives, Bleichenbacher-style oracle attacks exploit error leaks, and a famous ASN.1 parsing weakness lets implementors forge signatures; the PKCS series deploys widely and evolves but never perfectly.
AI-written summary · about
chapters (18)
- 0:00THE 2ND ZKPROOF WORKSHOP 2019
- 1:48RSA Public-Key Cryptosystem: Review
- 2:22About PKCS
- 4:37RSA Signatures: Original Model Dime-Hellman (1976) and RSA (1978)
- 7:23Hash-then-Sign Paradigm
- 14:03Fixed Padding
- 18:56Encrypting with Private Key
- 20:16Encrypted Digest
- 22:31RSA Encryption: Original Model Dime-Hellman (1976) and RSA (1978)
- 23:19Encrypt-then-Wrap Paradigm
- 26:363. Random Padding
- 26:52Block Type
- 28:02PKCS RSA Encryption: Summary
- 29:31Start with a Well-Balanced Paradigm
- 32:43Develop and improve Building Blocks
- 33:58Watch for Connection Issues
- 35:57Check for Changes in Assumptions
- 36:38Review and Repeat
related talks
24mWhy you shouldn't write crypto functions yourself
46mFrom substitutions to public keys - an introduction to cryptography
27mImplementing Post Quantum algorithms in PKCS #11
01h 00mCS Fundamentals: Why SSL and SSH are Secure
58mAsymmetric Encryption: A Deep Dive
26mNo way, JOSE!
01h 02mFrom Basic Idea to Impact: the story of modern cryptography
35mDiscussion on standardization