Difference between revisions of "Public key cryptography"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
|||
| (29 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
| − | + | [[wikipedia:Public key cryptography]] | |
| + | * [[RSA]]/[[DSA]] | ||
| + | * [[BLS digital signature]] | ||
| + | |||
| + | |||
| + | == Commands == | ||
| + | Generate public key from [[private key]]: | ||
| + | * <code>[[ssh-keygen -y]] -f ~/.ssh/id_rsa > ~/[[.ssh/]]id_rsa[[.pub]]</code> | ||
Generate a public key from a [[PEM]] private key | Generate a public key from a [[PEM]] private key | ||
* <code>[[openssl]] [[rsa]] -in mykey.pem -pubout > mykey.pub</code> | * <code>[[openssl]] [[rsa]] -in mykey.pem -pubout > mykey.pub</code> | ||
| − | Generate fingerpring | + | Generate [[fingerpring]]: |
* <code> [[ssh-keygen]] -l -f /etc/ssh/ssh_host_XXXXkey.pub</code> | * <code> [[ssh-keygen]] -l -f /etc/ssh/ssh_host_XXXXkey.pub</code> | ||
| − | + | ||
| − | * <code> | + | * <code>[[gpg --gen-key]]</code> |
[[OpenSSH 7.6]] (2017) | [[OpenSSH 7.6]] (2017) | ||
| − | * Refuse [[keys]] <1024 bits in length and improve reporting for keys that do not meet this requirement. | + | * Refuse [[keys]] <1024 bits in [[key length | lengh]] and improve reporting for keys that do not meet this requirement. |
== Related terms == | == Related terms == | ||
| + | * [[X.509]] | ||
* <code>[[ssh-copy-id]]</code> | * <code>[[ssh-copy-id]]</code> | ||
* <code>[[ssh-keygen]]</code> and <code>[[puttygen]]</code> | * <code>[[ssh-keygen]]</code> and <code>[[puttygen]]</code> | ||
| + | * <code>[[ssh-keyscan]]</code> | ||
* [[sshd logs]]: [[Failed publickey for]] | * [[sshd logs]]: [[Failed publickey for]] | ||
* [[Athena IDProtect card]] | * [[Athena IDProtect card]] | ||
| Line 24: | Line 33: | ||
* [[Whitfield Diffie]] | * [[Whitfield Diffie]] | ||
* [[Key length]] | * [[Key length]] | ||
| − | * [[RSA]], [[DSA]], [[ | + | * [[EdDSA]]: [[ed25519]], [[RSA]], [[DSA]] |
| + | * [[ECDSA]]: [[Bitcoin]] | ||
| + | * [[SHA]] | ||
| + | * [[TLS]], [[S/MIME]], [[PGP]], [[GPG]] | ||
| + | * [[AWS]]: <code>[[aws ec2 import-key-pair]]</code>, <code>[[aws ec2 create-key-pair]]</code>, <code>[[aws ec2 describe-key-pairs]]</code> | ||
| + | * [[BLS digital signature]] | ||
| + | * <code>[[sops]]</code> | ||
| + | * [[WebAuthn]] | ||
== See also == | == See also == | ||
* {{Key}} | * {{Key}} | ||
* {{ssh}} | * {{ssh}} | ||
| − | * | + | * {{RSA}} |
| + | * {{Public key}} | ||
* {{CA}} | * {{CA}} | ||
| − | + | ||
[[Category:Security]] | [[Category:Security]] | ||
Latest revision as of 08:14, 19 January 2023
wikipedia:Public key cryptography
Commands[edit]
Generate public key from private key:
ssh-keygen -y -f ~/.ssh/id_rsa > ~/.ssh/id_rsa.pub
Generate a public key from a PEM private key
Generate fingerpring:
ssh-keygen -l -f /etc/ssh/ssh_host_XXXXkey.pub
OpenSSH 7.6 (2017)
Related terms[edit]
- X.509
ssh-copy-idssh-keygenandputtygenssh-keyscan- sshd logs: Failed publickey for
- Athena IDProtect card
- Minerva attack
- Cisco IOS: Configure public RSA key authentication
- Whitfield Diffie
- Key length
- EdDSA: ed25519, RSA, DSA
- ECDSA: Bitcoin
- SHA
- TLS, S/MIME, PGP, GPG
- AWS:
aws ec2 import-key-pair,aws ec2 create-key-pair,aws ec2 describe-key-pairs - BLS digital signature
sops- WebAuthn
See also[edit]
- Public key cryptography,
private key,public key,key length,ssh-keygen,ssh-keyscan, Root certificate, KEX, Generate a key - SSH:
ssh, TLS,.ppk, .pem, .crt, .pub, ED25519, Key exchange method (KEX), public key, private key,ssh -Q kex,IAMUserSSHKeys,known_hosts, ssh tunnel, Dropbear - Public-key cryptography: RSA, DSA, ECDSA, EdDSA (Ed25519), AES, RSA Conference, hash,
pkeyutl, Signature, key length, Easyrsa, OAEP, Ron Rivest, Adi Shamir, Leonard Adleman - Public-key cryptography, Public key certificate, BLS digital signature
- CA, Root Certificates, FreeIPA, PKI, OpenCA, Wildcard certificate,
certtool,certbot(Let's Encrypt),certinfo(Cloudflare), ACME, Boulder,cfssl(Cloudflare), Public key certificate, public key, TLS and X.509, OCSP, Subject Alternative Name (SAN),openssl ca, Self signed certificate, CSR,keytool, ACM, KMS,aws acm, IdenTrust, multirootca, cert-manager, ca_cert_identifier
Advertising:
