Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are they kept in the form of a file?

If so, is it accessible for me manually or is it used transparently only whenever there is a PKI handshake (please correct me if I am misusing the terminology)?

Thank you!

share|improve this question

migrated from Nov 23 '11 at 15:15

This question came from our site for information security professionals.

closed as not a real question by Gilles, Ƭᴇcʜιᴇ007, RedGrittyBrick, Nifle, ChrisF Nov 23 '11 at 21:36

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

What software are you using? This makes a big difference. – mikeazo Nov 23 '11 at 14:38
I am not using a software. I just want to visualize it. What's the mechanism behind it and so on. The concept itself is a bit obfuscated for me. What creates the public key in my machine? How does it get retrieved when someone wants to encrypt something and send it to me (and I will then decrypt it with my private key)? – user6004 Nov 23 '11 at 15:47

Your question is a bit too vague to answer definitively. The exact mechanics differ based on what software you are using and what operating system. If you want more specifics then please, as mentioned in the comments, include the software packages and operating systems you might be using. In order for us to answer the question of how to find your machine's private key then you'll need to let us know what operating system you are using at a minimum.

From a high-level, though, public key encryption basically works like this:

  • Your public and private keys will be generated by a key generator, your private key is often protected by a password or passphrase (or some other authentication mechanism)
  • Your public key is then published to some public area so that others can access it
  • You encrypt things using your private key
  • Someone else will decrypt that data using your public key

Many software packages will contain what's called a keyring for storing public keys locally. Then can also be stored centrally on a key server. Many operating systems will also store keys for you and provide an application level service for retrieving them.

Note that you are using PKI a bit incorrectly. PKI stands for Public Key Infrastructure and is used as the term for the overall system that creates and stores an entities keys.

share|improve this answer

There are many issues der in question,

First of all, if you want to use your PKI system for general usage like publishing your key for some transaction or to be legally valid in court of law, then you need to contact a certification authority or CA for short. Der are many CAs out der including Verisign, Thawte and others. They will charge you a fee for their services. They, the CAs are going to function as the root node in the chain of authentication. They are like trusted third party and everyone agrees when a CA says that Mr. X is actually Mr. X.

Now, if you don't want to publish your key, and want to use if just for some random internal purposes. Or to establish a SSH session with a friend whom you trust, then you don't need to contact a CA. you can generate a public/private key pair using your computer and a key generation software, some of which are available free of cost.

And regarding your original question, no it's not stored anywhere, you have to generate it in first place.

share|improve this answer
There is nothing magic about a CA that adds any kind of legality. – ewanm89 Nov 24 '11 at 1:22
If I go to my lawyers office with CD in hand, this is my public key and do the same with the person I want to use it with then that is far better as they know it came from me. All a CA does is that, it signs the key with their own private key saying yes I checked and this is indeed from ewanm89, however there have been many cases where this has not been true. – ewanm89 Nov 24 '11 at 1:24
the reason why when you do a online transaction and see a verisign sign on the address-bar and suppose that the transaction is going to be safe is precisely because of this trust. I bet you will not do the transaction if say, I was the one responsible for ensuring that yes, they website actually belongs to the bank. and there are legal statutes which makes the CA responsible for wrong authentication. – Vineet Menon Nov 24 '11 at 4:45

Not the answer you're looking for? Browse other questions tagged .