Question: Suppose A has a single RSA private key, public key pair, KR_A, KU_A and B has a single RSA private key, public key pair, KR_B,
Suppose A has a single RSA private key, public key pair, KR_A, KU_A and B has a single RSA private key, public key pair, KR_B, KU_B. B has been given KU_A. A is going to be using the corresponding private key KR_A for signing documents. B will verify the signature with KU_A. Suppose A and Bare not sure whether B has the right public key i.e. they think that possibly what B has is not the correct public key of A. To doublecheck that B indeed has the correct key, A and B use the following scheme: A sends to B: E_KU_B(KR_A) B decrypts this to recover KR_A. B then generates a random number R, and checks if R = D_KU_A (E_KR_A(R)). If it is, then B will accept that he has the correct public key, KU_A. Is this a good scheme? i. Give a YES/NO
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
