re: separation of signed and encrypted messages

"vedaal" <vedaal@hotmail.com> Tue, 16 October 2001 14:28 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA24800 for <openpgp-archive@odin.ietf.org>; Tue, 16 Oct 2001 10:28:46 -0400 (EDT)
Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id f9GE2Zc21775 for ietf-openpgp-bks; Tue, 16 Oct 2001 07:02:35 -0700 (PDT)
Received: from hotmail.com (oe58.law3.hotmail.com [209.185.240.58]) by above.proper.com (8.11.6/8.11.3) with ESMTP id f9GE2YD21769 for <ietf-openpgp@imc.org>; Tue, 16 Oct 2001 07:02:34 -0700 (PDT)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 16 Oct 2001 07:02:30 -0700
X-Originating-IP: [63.211.85.132]
From: vedaal <vedaal@hotmail.com>
To: ietf-openpgp@imc.org
Subject: re: separation of signed and encrypted messages
Date: Tue, 16 Oct 2001 10:01:57 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Message-ID: <OE58s955E3yIyEOadke00001939@hotmail.com>
X-OriginalArrivalTime: 16 Oct 2001 14:02:30.0698 (UTC) FILETIME=[322620A0:01C1564B]
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

David Hopwood wrote:

>vedaal wrote:
> is there any way to separate a message that was signed and encrypted
> to a dh key, into a free-standing verifiable signed message?

>If-and-only-if the private encryption key is known, yes. This is no
>different to 'sign and RSA-encrypt'

yes,
but is there any way to do it, short of rewriting gpg, pgp to include a -d
command similar to the -d command of 2.6.3?

on a related note:

the separation that can be done now, is from 2.6.x using the command:
  pgp -da (filename).pgp
which (after giving the correct passphrase), produces
 filename.asc
which is a free-standing armored signed file, verifiable, and displaying the
text of the original message,
but,
is clearly different from an intentional armored signature file, which
usually begins with 'ow' as the first two characters
of the pgp block,

so,

would it be possible to somehow link such a separated signed file, and show
that it had to be from a specific
signed and encrypted file?  {possibly through an mdc tag on the armor}

if it 'could' be done,

then, one would 'not' have to surrender a session key or secret key, to
decrypt a signed and encrypted e-mail,

one could simply {from a remote area, without anyone needed to 'witness' the
decryption process}
separate it into the armored signed file, and release that to the
'authorities', and show that it had to have come from
the specific signed and encrypted e-mail in question.


vedaal