Re: [keyassure] publishing the public key

[Paul Wouters <[e-mail]>]

On Tue, 15 Feb 2011, Peter Gutmann wrote:

> A public key contains a number of components and options. For example for ECC
> there are the basic key values p, a, b, G, n, h (or m, f, a, b, G, n, h for
> binary curves), an indication of the underlying field (prime or binary), the
> point format, whether point compression is used, polynomial vs. normal basis,
> whether fixed domain parameters are used, and probably some other stuff I've
> forgotten.  How is all this stuff communicated?

I see.

> this (a) ain't gonna cut it because it doesn't cover what's required by TLS
> and (b) requires that your TLS implementation speak DNSSEC (or at least the
> DNSKEY part of DNSSEC) just to get a key. I can't see TLS implementors being
> too enthusiastic about this.

Okay.

I'll have to do some more reading to ensure I understand everything, and I'll
write up something for this for you to check.

Thanks!

Paul