In order to use the key / signing tool, you need to use this tool to create two key pairs, a "
public key" (public key) and a "
private key" You will need to create a key (
key pair) that will become a (pair).
The key is actually a string in the following format.
-----BEGIN PUBLIC KEY-----
MIGJAoGBAJYfPysW57qE3J2ddGWEG+RzXUzFkWa0ct3p7qJfuWDB+52DbfS9qSpw
iTHQ54vl7K35x+WDQdn29cfgJxp9UD3fzY4h6E2ReE9vj4h0FCMK8dpCFnQkOD/M
hDSiXfXz7KmfMXppM0CjofvH+IL7BJ3/GcLFcuEw3hEnzoajIm1TAgMBAAE=
-----END PUBLIC KEY-----
A public key is a key that can be made public, and a private key is a key that must not be made public.
The private key is used when signing. An electronic signature is generated using the private key.
The public key is used to verify the signature. The private key and the public key are always paired, and only signatures made with the relevant private key can be successfully verified with the public key paired with the private key.
Even if someone who does not know the private key signs with another private key, the signature cannot be confirmed with a valid public key. Since it is impossible to guess the private key from the public key, only the person who has the private key can sign a valid signature.
Note
Originally, when the "public key" is made public, it is necessary to make sure that the "public key" is valid. If you don't know if a public key is legitimate, the meaning of a digital signature is weaker. However, Kirikiri's key and signature tool does not take such considerations into account.
Note
The encryption method used by Kirikiri's key and signature tool was changed from ECC (elliptic curve cryptography) to RSA in 2.25beta7.
The RSA key generated by Kirikiri's key / signing tool is 1024 bits long. Also, the private key is not protected with a passphrase.
The RSA public / private key generated by Kirikiri's key / signing tool is compatible with the PEM format key of other software, but when using a key generated by other than key / signing tool, or key / signing The operation when the key generated by the tool is used by other software is not supported.