Private key
A private key is the secret component of an asymmetric cryptographic key pair used by its holder for operations such as authentication, decryption, or digital signing.
Hacking Cryptography
A private key is the secret member of an asymmetric key pair used for operations such as decryption or signature generation.
- How it is used
- Enables decryption, shared-secret derivation, and signature generation while counterpart public keys remain distributable.
- How deep it goes
- Works through private exponents in Diffie–Hellman and RSA, while deferring the proof that RSA decryption works.
- Examples
- Calculates a shared secret using private integers 3 and 9 modulo 13 and constructs an RSA exponent d from selected primes.
- What you can do after
- Evaluate/understand how secrecy of a private key supports decryption, key exchange, and signature authenticity.
Software Security for Developers
A private key is the confidential member of a cryptographic key pair used for operations such as decryption or digital signing.
- How it is used
- Protects service communication, certificate ownership, digital signing, and passwordless authentication at a trust boundary.
- How deep it goes
- Explains paired-key roles, compromise response, storage concerns, and practical Java operations, while deferring detailed private-key protection practices.
- Examples
- Uses warehouse-to-payments encryption, service request signatures, X.509 certificate creation, and hardware-key login challenges.
- What you can do after
- Operate private keys for RSA encryption, decryption, signing, certificate workflows, and hardware-key authentication.
Read how Software Security for Developers explains private key →
Real-World Cryptography
A private key is the secret value in a public-key cryptographic key pair used for decryption or other private-key operations.
- How it is used
- Uses asymmetric cryptography to establish shared secrets, decrypt messages, authorize transactions, and create signatures.
- How deep it goes
- Explains key-pair roles and protocol flows, with practical Python signing and C key-exchange examples, but defers implementation-level key management.
- Examples
- Uses Diffie-Hellman shapes, encrypted messages, Python Ed25519 signatures, C key exchange, and Bitcoin transaction signing.
- What you can do after
- Apply it via cryptographic libraries to decrypt messages, derive session secrets, sign data, and authorize Bitcoin transactions.
Secure APIs
A private key is the secret half of an asymmetric cryptographic key pair used to create digital signatures or perform private-key operations.
- How it is used
- Uses private keys to sign JWTs in asymmetric API authentication, leaving signature validation to the corresponding public key.
- How deep it goes
- Explains key generation, PEM loading, signing, and validation, but stops short of detailing EdDSA or RS256 implementation.
- Examples
- Demonstrates OpenSSL RSA generation, Python PEM loading, PyJWT PS256 issuance, and public-key JWT validation.
- What you can do after
- Apply it via OpenSSL, Python’s cryptography library, and PyJWT to generate keys, load a private key, and issue PS256 JWTs.
Elliptic Curve Cryptography for Developers
The secret key in an asymmetric cryptographic key pair that is controlled by its owner and used for signing or decryption operations.
- How it is used
- Deploys the private key for public-key exchange, shared-secret derivation, document signing, and zero-knowledge proof activity.
- How deep it goes
- Explains key roles, elliptic-curve equations, scalar generation, and C-style routines, while deferring full implementation security details.
- Examples
- Uses Alice–Bob exchange, document signatures, finite-field equations, pass-phrase hashing, and pairing-signature key-generation listings.
- What you can do after
- Build it from scratch by converting secret input into a scalar and deriving public or shared elliptic-curve values.
Read how Elliptic Curve Cryptography for Developers explains private key →
Road to Kubernetes
An SSH private key is the secret member of a cryptographic key pair used to authenticate secure shell connections.
- How it is used
- Authenticates GitHub Actions connections to remote virtual machines during automated deployment.
- How deep it goes
- Explains key generation, secret storage, file permissions, and workflow injection, but defers broader SSH-key background to an appendix.
- Examples
- Uses a dedicated github_actions_key pair and an NGINX installation workflow targeting an Akamai Linode instance.
- What you can do after
- Operate GitHub Actions to authenticate with a private key and install NGINX on a remote server.
ASP.NET Core in Action, 3e
A private key is a cryptographic key kept secret by its owner and used with a corresponding public key for decryption or signing.
- How it is used
- Protects HTTPS traffic and supports JWT signing-key configuration in development.
- How deep it goes
- Defines public/private key roles and certificate trust, but stops short of cryptographic algorithm internals.
- Examples
- Uses ASP.NET Core development certificates and user-jwts signing key material stored in User Secrets.
- What you can do after
- Evaluate how servers use secret key material for HTTPS decryption and JWT authentication.
Acing the Certified Kubernetes Administrator Exam, Second Edition
A private key is the secret cryptographic key used by an identity to prove possession of a public-key credential.
- How it is used
- Uses the private key to establish a Kubernetes user credential for API authentication.
- How deep it goes
- Shows key generation, CSR creation, certificate issuance, kubeconfig pairing, and access verification without explaining cryptographic internals.
- Examples
- Uses Carol’s `carol.key`, CSR, issued certificate, kubeconfig context, and forbidden pod-deletion attempt.
- What you can do after
- Operate/configure a Kubernetes user credential by generating a key and pairing it with an issued client certificate.
Read how Acing the Certified Kubernetes Administrator Exam, Second Edition explains private key →
Data Pipelines with Apache Airflow, Second Edition
A private key is a secret cryptographic key used to decrypt data or create digital signatures.
- How it is used
- Secures Airflow API-server traffic by enabling HTTPS and allowing the server to decrypt protected session data.
- How deep it goes
- Explains asymmetric encryption and HTTPS configuration, then stops short of detailed MITM mechanics and certificate internals.
- Examples
- Uses OpenSSL-generated privatekey.pem, Airflow SSL settings, localhost HTTPS, and browser trust warnings as concrete examples.
- What you can do after
- Operate/configure an Airflow API server with a private key and certificate to encrypt browser-to-server traffic.
Read how Data Pipelines with Apache Airflow, Second Edition explains private key →
API Design Patterns
A private key is the confidential component of an asymmetric cryptographic key pair used to generate digital signatures or perform other private-key operations.
- How it is used
- Authenticates API requests by signing payloads that servers verify with registered public keys.
- How deep it goes
- Explains generation, secrecy, signing, and verification, while deferring cryptographic mathematics and payload design.
- Examples
- Uses TypeScript key generation and Node.js crypto examples for signing and verifying arbitrary strings.
- What you can do after
- Apply it via Node.js crypto to generate credentials and sign API payloads without exposing the private key.
Grokking Web Application Security
A private key is a cryptographic key kept secret and used by its owner for operations such as decryption or digital signing.
- How it is used
- Secures HTTPS termination by letting a web server decrypt traffic using the key paired with its certificate.
- How deep it goes
- Explains deployment, theft paths, access controls, isolation, and certificate revocation while deferring TLS internals.
- Examples
- Illustrates a web server decrypting HTTPS traffic and an attacker seeking keys through SSH, remote desktop, or command injection.
- What you can do after
- Operate/configure it by limiting host access, isolating servers, protecting key directories, and revoking compromised certificates.
Read how Grokking Web Application Security explains private key →
Investing for Programmers
A private key is a secret cryptographic value used to sign cryptocurrency transactions and establish control over associated assets.
- How it is used
- Frames cryptocurrency ownership as a custody and risk-management question rather than a purely speculative investment decision.
- How deep it goes
- Defines transaction signing and custody, but stops short of detailing cryptographic algorithms or key-generation procedures.
- Examples
- Uses exchange accounts, cold wallets, hardware wallets, and Figure 5.5 to illustrate who controls transaction-signing keys.
- What you can do after
- Evaluate cryptocurrency custody arrangements and choose between exchange custody and secure cold-storage options.
Rust Servers, Services, and Apps
A private key is the secret member of a cryptographic key pair used to authenticate its holder or perform private-key cryptographic operations.
- How it is used
- Authenticates P2P nodes and SSH users without transmitting the secret key.
- How deep it goes
- Defines key-pair roles and demonstrates generation, while deferring detailed encryption, decryption, and signature mechanics.
- Examples
- Demonstrates Ed25519 generation in Rust and private-key authentication during SSH access.
- What you can do after
- Build a libp2p peer identity by generating a key pair and deriving a peer ID from its public key.
Read how Rust Servers, Services, and Apps explains private key →
Related concepts
- digital signatureproduces · A digital signature is cryptographic data generated with a private key and verified with corresponding public information to authenticate data or its signer and detect alteration.
- public-private key pairpart of · A public-private key pair is a mathematically related public key and private key used together for asymmetric cryptographic operations.
- ECDSAused by · ECDSA is a public-key digital signature algorithm that uses elliptic-curve arithmetic to generate and verify signatures.
- RSAused by · RSA is a public-key cryptosystem based on the computational difficulty of factoring large composite integers and supporting encryption and digital signatures.
- SSHused by · SSH is a cryptographic network protocol providing authenticated and encrypted remote access, command execution, and data transfer over untrusted networks.
- TLS terminationused by · TLS termination is the process of ending a TLS connection and decrypting its traffic at an endpoint or intermediary for processing or forwarding.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.