Re: comments on draft-ietf-idpr-specv1-02.txt

[Noel Chiappa <[e-mail]>]

    They provide NO guarantee of source authenticity, and the only
    integrity that they show is that the data has not been changed since
    the time that the MD4/5 hash has was created. Unfortunately, since
    MD4/5 ARE NOT digital signature algorithms ... If you are looking for
    a full digital signature algorithm, then you need something like RSA
    or DSA. ... MD4/5 were never intended for the purpose you describe,
    and provide essentially no authentication.

If the input to the hash function (MD4/5) includes not only the data, but a
secret, known only to the source and destination, isn't the resulting hash
output a digital signature? (Agreed, the key management is not as nice as a
hash function combined with a private-key, since you need N^2 rather than 2N
keys for the same degree of unspoofability.)

We're both being picky, but your point about the document being unclear is
true, though.

	Noel