IETF Logo Mail Archive

Re: How to Calculate Signatures?

Ben Laurie <ben@algroup.co.uk> Sun, 03 April 2005 20:41 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA25099 for <openpgp-archive@lists.ietf.org>; Sun, 3 Apr 2005 16:41:19 -0400 (EDT)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j33KSHCP057539; Sun, 3 Apr 2005 13:28:17 -0700 (PDT) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j33KSHSa057538; Sun, 3 Apr 2005 13:28:17 -0700 (PDT)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from mail.links.org (mail.links.org [217.155.92.109]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j33KSFtZ057527 for <ietf-openpgp@imc.org>; Sun, 3 Apr 2005 13:28:16 -0700 (PDT) (envelope-from ben@algroup.co.uk)
Received: from [193.133.15.218] (localhost [127.0.0.1]) by mail.links.org (Postfix) with ESMTP id 254E733C33; Sun, 3 Apr 2005 21:28:12 +0100 (BST)
Message-ID: <42505164.7040807@algroup.co.uk>
Date: Sun, 03 Apr 2005 21:26:12 +0100
From: Ben Laurie <ben@algroup.co.uk>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Hal Finney <hal@finney.org>
Cc: ietf-openpgp@imc.org
Subject: Re: How to Calculate Signatures?
References: <20050403193929.0812057EBA@finney.org>
In-Reply-To: <20050403193929.0812057EBA@finney.org>
X-Enigmail-Version: 0.89.6.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

Hal Finney wrote:
> On this basis, if we did want to support the larger SHA hashes, we should
> truncate them and keep the left 160 bits for use with existing DSA keys.

Yes, please.

And "doh!" on the downgrade attack. Must think before posting.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

v2.23.0 | Report a Bug | By Email