Cryptography

366 readers

15 users here now

Questions, answers, discussions, and literature on the theory and practice of cryptography

Related resources;

Reddit cryptography forums 1 & 2; /r/crypto /r/cryptography
Cryptology ePrint archive
Discussion site for ePrint papers
Libera Chat's IRC:s #crypto - (IRC protocol URL)
Metzdowd cryptography mailing list
Randombit cryptography mailing list
StackExchange cryptography community

founded 2 years ago

MODERATORS

[email protected]

Can RSA be used for web API authentication? (lemy.lol)

submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]

8 comments fedilink hide all child comments

I need to

encrypt JSON payload (not just sign)
not share private key
verify the payload is generated with the shared public key and RSA fitting all of these.

As I've only made auth with JWT so far, I'm not sure. If I use RSA, I guess I have to put the encrypted text in the body.

Do you think it can be used? Any other suggestions?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 1 day ago

I wanted to let my users encrypt their payload with my public key so only I can decrypt that payload. Just like how PGP works. Eventually I've used hybrid encryption with AES for encrypting the payload and RSA for encrypting AES secret key.

Just to let you know this post is almost 2 years old :)