Re: private key language

On Wed, Dec 28, 2005 at 09:12:44AM -0500, David Shaw wrote:

> What weakness in the private key format are you referring to?
The Klima-Rosa attack: the private material is not bound cryptographically
to the public material, thus by changing the public material, the attacker
can reconstruct the private material from just one (corrupted) signature,
and forge that signature to cover up the attack.

Please read the Klima-Rosa paper (poor English, but good content), for more
details.

-- 
Daniel