At 02:31 PM 4/13/99 -0500, James H. Cloos Jr. wrote:
|Given a recipient with only an RSA keypair (algo 1), and a sender with
|only a DSA/Elgamal pair (algos 17 and 16), should the sender
|encrypt+sign, will any extant software be able to decrypt and verify?
If the sender has software that can do RSA, yes. If their software can't do
RSA (for example, suppose they had an NAI/PGP freeware version), then the
sender cannot encrypt to the recipient.
Any OpenPGP-compliant version, though will be able to verify DSA sigs and
encrypt to Elgamal keys.
Does that answer your question? Really your question is an implementation
question, not a standards question.
Jon Callas jon(_at_)pgp(_dot_)com
CTO, Total Network Security 3965 Freedom Circle
Network Associates, Inc. Santa Clara, CA 95054
Fingerprints: D1EC 3C51 FCB1 67F8 4345 4A04 7DF9 C2E6 F129 27A9 (DSS)
665B 797F 37D1 C240 53AC 6D87 3A60 4628 (RSA)