ThalesGroup / pycryptoki

Python interface to SafeNet's PKCS11 library implementation
Apache License 2.0
59 stars 22 forks source link

ECC encryption #47

Open lehongzhang opened 8 months ago

lehongzhang commented 8 months ago

Hello everyone, please tell me how to use ECC encryption. Is there any guidance dome?

astraw38 commented 8 months ago

Are you thinking of ECIES (and here)? Or ECDH then doing symmetric encryption?

obstacleman commented 8 months ago

What are you trying to encrypt and who is it for?

ECC keys aren't used directly to encrypt something. Typically you are doing a key agreement to establish a shared symmetric key which is then used to encrypt the content.

On Mon, Jan 29, 2024, 9:32 a.m. Ashley C Straw @.***> wrote:

Are you thinking of ECIES https://thalesdocs.com/gphsm/luna/7/docs/network/Content/sdk/mechanisms/CKM_ECIES.htm (and here https://thalesdocs.com/gphsm/luna/7/docs/network/Content/sdk/using/ecies_general.htm? Or ECDSA then doing symmetric encryption?

— Reply to this email directly, view it on GitHub https://github.com/ThalesGroup/pycryptoki/issues/47#issuecomment-1914814950, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACRXPONKP5PJQL6WLTSVQ7TYQ6XI3AVCNFSM6AAAAABCPCENHWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMJUHAYTIOJVGA . You are receiving this because you are subscribed to this thread.Message ID: @.***>

lehongzhang commented 8 months ago

hello , What I want to use is elliptical encryption and use it to encrypt a certain text. That text is on the HSM server.

On Mon, Jan 29, 2024 at 11:35 PM Mike Gardiner @.***> wrote:

What are you trying to encrypt and who is it for?

ECC keys aren't used directly to encrypt something. Typically you are doing a key agreement to establish a shared symmetric key which is then used to encrypt the content.

On Mon, Jan 29, 2024, 9:32 a.m. Ashley C Straw @.***> wrote:

Are you thinking of ECIES < https://thalesdocs.com/gphsm/luna/7/docs/network/Content/sdk/mechanisms/CKM_ECIES.htm>

(and here < https://thalesdocs.com/gphsm/luna/7/docs/network/Content/sdk/using/ecies_general.htm>?

Or ECDSA then doing symmetric encryption?

— Reply to this email directly, view it on GitHub < https://github.com/ThalesGroup/pycryptoki/issues/47#issuecomment-1914814950>,

or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACRXPONKP5PJQL6WLTSVQ7TYQ6XI3AVCNFSM6AAAAABCPCENHWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMJUHAYTIOJVGA>

. You are receiving this because you are subscribed to this thread.Message ID: @.***>

— Reply to this email directly, view it on GitHub https://github.com/ThalesGroup/pycryptoki/issues/47#issuecomment-1914949229, or unsubscribe https://github.com/notifications/unsubscribe-auth/BFVWXEBLSZKVGOK4BANQGNLYQ66ULAVCNFSM6AAAAABCPCENHWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMJUHE2DSMRSHE . You are receiving this because you authored the thread.Message ID: @.***>

-- *This e-mail message is intended for the internal use of the intended recipient(s) only. The information contained herein is confidential/privileged. Its disclosure or reproduction is strictly prohibited. If you are not the intended recipient, please inform the sender immediately, do not disclose it internally or to third parties and destroy it.

In the course of our business relationship and for business purposes only, Valeo may need to process some of your personal data. For more information, please refer to the Valeo Data Protection Statement and Privacy notice available on Valeo.com https://www.valeo.com/en/ethics-and-compliance/#principes*

astraw38 commented 8 months ago

You'd really need to determine what sort of encryption scheme you're wanting to do, and that is heavily determined by your use case or requirements. Are you trying to wrap something off the HSM? The links I provided will give you a great place to start.

lehongzhang commented 8 months ago

I have got the text from HSM but I want to elliptical encrypt it

On Fri, Feb 2, 2024 at 4:29 AM Ashley C Straw @.***> wrote:

You'd really need to determine what sort of encryption scheme you're wanting to do, and that is heavily determined by your use case or requirements. Are you trying to wrap something off the HSM? The links I provided will give you a great place to start.

— Reply to this email directly, view it on GitHub https://github.com/ThalesGroup/pycryptoki/issues/47#issuecomment-1922185045, or unsubscribe https://github.com/notifications/unsubscribe-auth/BFVWXECZRKVJ6XJV66XX6NDYRP3MJAVCNFSM6AAAAABCPCENHWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMRSGE4DKMBUGU . You are receiving this because you authored the thread.Message ID: @.***>

-- *This e-mail message is intended for the internal use of the intended recipient(s) only. The information contained herein is confidential/privileged. Its disclosure or reproduction is strictly prohibited. If you are not the intended recipient, please inform the sender immediately, do not disclose it internally or to third parties and destroy it.

In the course of our business relationship and for business purposes only, Valeo may need to process some of your personal data. For more information, please refer to the Valeo Data Protection Statement and Privacy notice available on Valeo.com https://www.valeo.com/en/ethics-and-compliance/#principes*