Regarding ... #6

[William Allen Simpson <[e-mail]>]

A small note to cover the bases:

> From: Ran Atkinson <[e-mail]>
> 6) Please also see ...
>           the note from Ron Rivest with subject
>       "Photuris terminology" dated 12 Oct 1995 19:54:57
>
Which read (excerpted):

# *****************************************************************
# *** There is nothing in this notion of "signature" that means ***
# *** that the message can not be derived from the signature.   ***
# *****************************************************************
# Indeed, I believe that the CCITT standards distinguish explicitly between
# "signature schemes with message recovery" and "signature schemes without
# message recovery".
# ...
# I would suggest adding language of the following form somewhere (such as
# on the top of page 23):
#
#         The Signature-Choice method must specify a signature method that
#         does not have "message recovery": it should not be feasible to
#         compute the message from the signature.
# ...

The language appeared in draft -05 on Oct 14!  Cannot get much faster
than that!

Also, in response to other messages, the use of the term Signature was
changed to Verification, of which a "signature" is only one example....

[e-mail]
          Key fingerprint =  2E 07 23 03 C5 62 70 D3  59 B1 4F 5E 1D C2 C1 A2