Re: Short intro on the K-R attack [Re: private key language]

On Wed, Dec 28, 2005 at 03:36:11PM -0800, Jon Callas wrote:

> Okay, so there isn't anything new here. We fixed this years ago.
No, we haven't. The public material can still be altered, unless some
expensive checks (like verifying the signature after it has been made) are
in place. Actually, the MDC at the end of the private material that does
not include the public part does exactly nothing against this attack.

-- 
Daniel