Email conversation
| From | Aurelien Marchand |
|---|
| To | Me |
|---|
| Subject | About javascript security and big numbers for RSA encryption |
|---|
| Date | 22 August 2003 21:54 |
|---|
Greetings,
I saw in the page
http://www.howtocreate.co.uk/tutorials/javascript/security that you
would like to be informed if a way has been found to RSA encrypt a text
using Javascript, by-passing Javascript inability to handle large numbers.
It has been found. The site: http://shop-js.sf.net/ contains javascript
code to deal with arbitrarily long numbers and thus can encode/decode
using RSA. I am actually studying this code to make it fit with my needs
for my company since I'm not very comfortable with the way that guy has
done his code.
Anyways, I hope it can help you. Let me know if it did.
Aurelien Marchand
| From | Me |
|---|
| To | Aurelien Marchand |
|---|
| Subject | Re: About javascript security and big numbers for RSA encryption |
|---|
| Date | 23 August 2003 15:24 |
|---|
Thanks. This sounds ideal, but unfortunately the site seems to be offline
right now. Do you have a copy of the required code?
| From | Me |
|---|
| To | Aurelien Marchand |
|---|
| Subject | Re: About javascript security and big numbers for RSA encryption |
|---|
| Date | 23 August 2003 19:22 |
|---|
Thanks. I managed to find a cached version on Google. I have put a link to
the site on my security page, just in case it comes back online (note, of
course, that JS RSA does not provide authenticated certificates, so you
are still vulnerable to third party exploits).
Still, thanks again for pointing me at the site. Very helpful.
Tarquin - author of http://www.howtocreate.co.uk/
| From | Aurelien Marchand |
|---|
| To | Me |
|---|
| Subject | Re: About javascript security and big numbers for RSA encryption |
|---|
| Date | 10 September 2003 14:18 |
|---|
Hi Taquin,
Indeed the site http://shop-js.sf.net seems down. I do have a working copy
of the code on my machine and I have adapted it to my needs (I coupled it
with SHA1 hashes and Base64 encoding). If you want the code, just let me
know. Additionally, the site shop-js.sf.net can be access through
http://shop-js.sourceforge.net/index.html and this one works.
Aurelien
| From | Me |
|---|
| To | Aurelien Marchand |
|---|
| Subject | Re: About javascript security and big numbers for RSA encryption |
|---|
| Date | 10 September 2003 14:42 |
|---|
Thanks, I have updated the security section again.
By the way, the key generation takes three seconds with Opera 7 on P4 1.8GHz
512 RAM Win XP, not the three minutes quoted on the site for IE.