ietf-openpgp
[Top] [All Lists]

Re: Shortcomings of current schemes (Was: One-pass signatures)

1998-07-25 15:59:57
-----BEGIN PGP SIGNED MESSAGE-----

On Sat, 25 Jul 1998 15:53:38 -0500, Black Unicorn wrote:

There is, as far as I can tell, no way to detach
cleartext signatures from a signed and encrypted PGP message.

Suggestions?

How about some kind of dual pass in your given scenario?  First sign
the plain text to provide the authentication - then encypt the
signed output as an entity on it's own. Bob the stockbroker can then
decrypt the order and store the signed text.

Any use?


Regards

Mark


-----BEGIN PGP SIGNATURE-----
Version: PGP for Business Security 5.5.6
Comment: Pretty Good Privacy for everyone!

iQEVAwUBNbpjOAH51oKwHy7lAQFmgwgApVuiQEF5CR7FlLxFl21fCS8Rpicsty+f
BaJEbV4XrWBK5B7qhW1H4bBp2nKfnE9C1qNtHWLCkaNnU4/+knFeDzUsmvmNF/Kz
cuygWT5TV8R+9Ybb7GwcvqkZp9qB3ehAOhWUuMjPuWJiRgI2WvzReQIIt8vu0qSx
RyWIsGM2NU4KzWbde0MFSjkE3JQwwfmBsXeSFma7eZliqiH+WlpiQjjkBV+nzO1C
orQtduYORmF5peNEqZiyqKJURLLE3K+GnaMsNu/VBhz+PmPZrrHUCYAKCoFPqs4C
wpJwKGalb/UnSkNR6Ev1haHbRuZ57p2vUWdgs8UWTjDpwZa3hSKptA==
=53ZO
-----END PGP SIGNATURE-----