ietf-openpgp
[Top] [All Lists]

Re: S2K and Tag 0x05 Q

2000-09-05 22:13:08
At 09:54 PM 5/09/2000 -0700, hal(_at_)finney(_dot_)org wrote:

<snip>

> Do you decide what length of the S2K session key to use (in your program),
> then when the secret key needs to be extracted from the secret key-ring,
> just keep trying multiple session key lengths in block size multiples (as
> generated from the S2K specifier) until the checksum checks out OK?
>
> It seems it would be a lot easier (maybe less secure?) if a session key
> length was specified somewhere.

The session key length is always known.  It is part of the algorithm
identifier.  See section 9.2.

Oh...

I didn't link section 9.2 with the session key length of an S2K...maybe in the next revision of 2440, a simple reference to 9.2 in section 3.6 would help others who are also wondering what session key lengths to use with the S2K's.

Regards


Erron Criddle
Comasp Ltd.
Level 2, 45 Stirling Hwy
NEDLANDS  WA  6009
Australia

Fax: 08 9386 9473
Tel: 08 9386 9534

http://www.comasp.com
ejc(_at_)comasp(_dot_)com












<Prev in Thread] Current Thread [Next in Thread>