At 3:41 PM +0200 8/13/01, Werner Koch wrote:
Please add a reference to section 12.5 [ElGamal] and make clear that
the use of ElGamal signatures is not suggested.
I'm a little uncomfortable over proper wording here; if they're so bad,
should they be there at all? I thought the present 12.5 wording was stern
enough to give anyone pause. Nonetheless, I added another wording. Here's
the complete paragraph:
Details on safe use of Elgamal signatures may be found in [MENEZES], which
discusses all the weaknesses described above. Please note that Elgamal
signatures are controversial; because of the care that must be taken with
Elgamal keys, many implementations forego them.
How's that?
Jon