One change: 5.2.2

in 5.2.2 in the very last paragraph it says:

"DSA signatures SHOULD use hashes with a size of 160 bits, ..."

needs to be changed to

"DSA signatures MUST use hashes with a size of 160 bits, ..."

Although other hashes could work, nothing in the spec defines how to
truncate longer hashes, or pad shorter hashes.  Since these details aren't
fully defined, you need to change the SHOULD to a MUST.

--- reply to tzeruch - at - ceddec - dot - com ---