Comments (3)
You don't share the private key - when a party (let's say Bob) generates a new device and runs generateTransformKey
, he will have a private encryption for his user key and a public key for the device - these together will be used to compute the transform key. The generated transform key is signed using Bob's private signing key, and his corresponding public signing key is placed in the transform key, so anyone can validate the signature. The signing key pair is distinct from the encryption key pair.
Since the signing key is distinct from the encryption key, obtaining a private signing key will not allow anyone to decrypt any cipher.
When Bob gets a message that was encrypted to his user public key, he can use the transform key to transform the ciphertext to be encrypted to his device's public key, then his device can use it's private encryption key to decrypt the transformed ciphertext.
Hope that helps clarify.
from recrypt-rs.
ahh
The signing key pair is distinct from the encryption key pair
is exactly what I needed!
Since the signing key is distinct from the encryption key, obtaining a private signing key will not allow anyone to decrypt any cipher.
Thanks for the clarification @BobWall23
from recrypt-rs.
@drbh I'm closing this issue since it seems your question was answered. Let us know if there is anything else you're wondering.
from recrypt-rs.
Related Issues (20)
- Migrate CI to github actions
- Re: serde and backends HOT 4
- github.GithubException.GithubException HOT 1
- Cargo publish HOT 1
- Why is the length of plaintext fixed HOT 1
- RUSTSEC-2020-0056: stdweb is unmaintained HOT 1
- the message can be in F_p^12 or not? HOT 2
- target-cpu is not set correctly and is being ignored HOT 1
- Mention patents
- RUSTSEC-2021-0127: serde_cbor is unmaintained HOT 1
- Results from recrypt.transform cannot be serialized HOT 1
- Error Creating PlainText HOT 1
- Why do I have to use Plaintext [u8; 384]? HOT 2
- Function Score functions should be transformed as well HOT 1
- Obtaining bytes used to instantiate Plaintext back HOT 1
- test post please ignore
- What is the point of signing key pairs? HOT 3
- threshold proxy re-encryption? HOT 1
- How to serialize and deserialize EncryptedValue ? HOT 9
- remove godotenv from scratch images
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from recrypt-rs.