Hi Tony,
/Any reason for MD5? I understand the SHA-1 is longer. However, it is
/thought to be a stronger hash the MD5 at this time.
It doesn't know to be a cryptographically strong hash here.
/Does it really matter if you do not know the internal packet format as long
/as you know where the packet ends? Hashing is simply mixing together a
/stream of octets and so I do not believe the 'format' makes much of a
difference.
depending on the order in which a server received signatures in the past, a
key may look quite different on different servers, although with sorted
sigs it is the same.
cheers,
teun