11. Asymmetric Cryptography (RSA vs ECC) & Digital Signatures with GPG Keys • Git, System Design & Web Security (OWASP Top 10) • Rishabh Ki Kaksha

Git, System Design & Web Security (OWASP Top 10) › 11. Asymmetric Cryptography (RSA vs ECC) & Digital Signatures with GPG Keys

40 mins

← Prev Next →

Course Syllabus

Module 1: Git Internals, Plumbing Commands & DAG Graph Architecture

01. Git Internals: Blobs, Trees, Commits & Annotated Tags (The .git Directory Anatomy) 02. Git DAG (Directed Acyclic Graph) & Plumbing Commands (cat-file, hash-object, write-tree) 03. Git Three Trees Architecture: Working Directory, Staging Index & HEAD

Part 1: Git Mastery, Security Defense & Caching

Module 2: Advanced Branching Strategies & Disaster Recovery

04. Advanced Rebasing: Interactive Rebase (squash, edit, fixup) vs Merge 05. Git Disaster Recovery: git reflog, Cherry-Pick & Recovering Deleted Commits/Branches 06. Enterprise Branching: Trunk-Based Development vs GitFlow vs Feature Flag Architecture

Module 3: Web Application Security: OWASP Top 10 Defenses

07. OWASP #1 & #3: SQL Injection (SQLi) & Server-Side Request Forgery (SSRF) Hardening 08. Cross-Site Scripting (XSS): Stored, Reflected, DOM-based & Content Security Policy (CSP) 09. CSRF vs Cross-Origin Traps: SameSite Cookies, Anti-CSRF Tokens & CORS Preflight Rules 10. Broken Object-Level Authorization (BOLA/IDOR) & Role-Based Access Control (RBAC/ABAC)

Module 4: Cryptography, PKI, SSL/TLS & Mutual Auth (mTLS)

11. Asymmetric Cryptography (RSA vs ECC) & Digital Signatures with GPG Keys 12. Public Key Infrastructure (PKI), TLS 1.3 Handshake & Let's Encrypt Automation 13. Mutual TLS (mTLS) for Zero-Trust Service-to-Service Communication

Module 5: DevSecOps, Secret Scanning & Zero-Trust Security Architecture

14. Automated Secret Scanning (Gitleaks, Trufflehog) & Git Pre-Commit Hooks 15. Software Supply Chain Security: Dependabot, SBOM (Software Bill of Materials) & Signed Commits 16. Enterprise Zero-Trust Architecture: Cloud IAM, Bastion Hosts & WireGuard VPN Networks

Interactive Lesson Studio

# 11. Asymmetric Cryptography (RSA vs ECC) & Digital Signatures with GPG Keys

> Git & Web Security Notes by Rishabh - Topic 11

---

### 1. Asymmetric Cryptography (Public-Private Key Pair 🔑)

*   **Public Key:** Duniya me kisi ko bhi share kar sakte hain (Encryption & Signature Verification ke liye).
*   **Private Key:** Strictly confidential server/machine par rehti hai (Decryption & Digital Signing ke liye).

---

### 2. RSA vs ECC (Elliptic Curve Cryptography) ⚡

*   **RSA (4096-bit):** Prime factorization par based; large key sizes, slow math calculation.
*   **ECC / Ed25519 (256-bit):** Discrete logarithm over elliptic curves; **RSA 3072-bit jaisi security sirf 256 bits me, 10x faster execution!**

---

### 3. GPG Signed Commits on GitHub (`Verified` Badge 🛡️)

Attacker Git me `git config user.name "Linus Torvalds"` likh kar commit impersonate kar sakta hai.  
**GPG / SSH Commit Signing** commit metadata ko private key se sign karta hai jisse GitHub **Green Verified Badge** show karta hai!

```bash
# Sign commit with GPG key:
git commit -S -m "Verified secure commit"
```

---

### 4. Master Comparison Matrix

---

### 5. Interview Ke 3 Sawal Is Topic Se

1. **Digital Signature create karte waqt message ko direct sign karte hain ya message ke hash ko?** -> Hamesha message ke cryptographic hash (SHA-256) ko private key se encrypt karke signature banaya jata hai (Speed and fixed-length optimization).
2. **SSH Key Pair generation me `ed25519` `rsa` se behtar kyu hai?** -> Chhote key size (256 bits vs 4096 bits), fast cryptographic operations aur side-channel timing attack resistance ki wajah se.
3. **Key Exchange (Diffie-Hellman / ECDH) kya karta hai?** -> Do parties ko open public internet par bina private secret share kiye ek shared symmetric AES encryption key derive karne deta hai.

---
**Next Topic:** 12. Public Key Infrastructure (PKI), TLS 1.3 Handshake & Let's Encrypt Automation

Loading lesson content...

Python 3.12

Full IDE

Live Execution Terminal

Click "Execute Live" to run code.
                

Lesson Mastery AI Quiz

AI Doubt Solver

CERTIFICATE OF COMPLETION

Rishabh Gehlot

PHP 8+ & Laravel 11 Master Track