On Wed, 25 Jun 2003 12:26:37 -0700, Hal Finney said:
can issue signatures just fine, even if they don't usually do so; and the
same with ElGamal encryption subkeys. We have loaded up the spec with
warnings about ElGamal signatures, but in fact those warnings mostly
relate to chosen plaintext attacks. In this case it is the key owner
A practical problem with ElGamal signatures is that verification is
really slow.
--
Werner Koch <wk(_at_)gnupg(_dot_)org>
The GnuPG Experts http://g10code.com
Free Software Foundation Europe http://fsfeurope.org