Re: ElGamal, EME-PKCS1-v1_5

Marko Kreen <markokr@gmail.com> Thu, 24 June 2010 19:52 UTC

Received: from hoffman.proper.com (localhost [127.0.0.1]) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id o5OJqdAk089528 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 24 Jun 2010 12:52:39 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by hoffman.proper.com (8.14.4/8.13.5/Submit) id o5OJqdAY089527; Thu, 24 Jun 2010 12:52:39 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org)
X-Authentication-Warning: hoffman.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from mail-ww0-f43.google.com (mail-ww0-f43.google.com [74.125.82.43]) by hoffman.proper.com (8.14.4/8.14.3) with ESMTP id o5OJqbjC089521 for <ietf-openpgp@imc.org>; Thu, 24 Jun 2010 12:52:38 -0700 (MST) (envelope-from markokr@gmail.com)
Received: by wwd20 with SMTP id 20so106574wwd.16 for <ietf-openpgp@imc.org>; Thu, 24 Jun 2010 12:52:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=xGI9otJ2ud5zIZCBqoZqZIuimrt/rALrSE1J7JEU3Jw=; b=N7ITyQTPPLV2hQj12RpnSw8AwK3IwwkO9QEwKVUy9B8ECoQPuLjzlx/Wv9qMeCJdEf KzAkKhr3oAonwKqDnMzCiNsqcn3MbGZKxhlE0xKXahpuGyFbZDBVpxhmkuuXL6zJAacy aLeURW9eQw8KQDNlx/eiSHVUR1Xe5N+zQRKFo=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=V4bPWg3hhYng9fpszYG1lwNQYDsaG1OceqCw5xnt4cHUyA2DbHAec6xLDciEZsXMJh 9ArbXOEkrXfPLGZjPQzVeiaIL3EoxItpeX1yuUUWiLVOpIZokO3huMequs2KmvoiLj3e pi4QHuKrIpS45x9GRh9WH9GA/3J0TCFHMmB/o=
MIME-Version: 1.0
Received: by 10.216.160.132 with SMTP id u4mr7319871wek.19.1277409156055; Thu, 24 Jun 2010 12:52:36 -0700 (PDT)
Received: by 10.216.175.69 with HTTP; Thu, 24 Jun 2010 12:52:35 -0700 (PDT)
In-Reply-To: <20100624173119.GJ25604@brian.internal.monetra.com>
References: <20100624173119.GJ25604@brian.internal.monetra.com>
Date: Thu, 24 Jun 2010 22:52:35 +0300
Message-ID: <AANLkTilyE2RAaXxa2sfKgzY0xiGM6Y-5budUOJbTkdwd@mail.gmail.com>
Subject: Re: ElGamal, EME-PKCS1-v1_5
From: Marko Kreen <markokr@gmail.com>
To: Brian Lewis <brian@monetra.com>
Cc: ietf-openpgp@imc.org
Content-Type: text/plain; charset="ISO-8859-1"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On 6/24/10, Brian Lewis <brian@monetra.com> wrote:
>  I'm trying to generate a tag 1 (public-key encrypted session key)
>  packet.
>
>  I'm using ElGamal, so the algorithm-specific fields are, according to
>  http://tools.ietf.org/html/rfc4880#section-5.1,
>  MPI g**k mod p
>  MPI m * y**k mod p
>
>  So I need m = EME-PKCS1-v1_5(...). According to
>  http://tools.ietf.org/html/rfc3447#section-7.2.1, PS is k - mLen
>  - 3 random nonzero bytes, where k is the length of RSA n in bytes. But I
>  don't have RSA n. I have ElGamal p, g, and y.
>
>  In EME-PKCS1-v1_5, what is k if I'm using ElGamal?

mod p ~ mod n

-- 
marko