ietf-smime
[Top] [All Lists]

RE: Comments on updated X9.42 draft

1998-11-06 14:01:05
I have one further comment on the X9.42 draft.  Presently it states:
X9.42 requires that the private key x be in the interval [2^(m-1) + 1,
(q - 2)]. 

The latest (ballot) version of X9.42 actually only requires that private
keys be in the interval [2, q-2].  Restricting the key space to
[2^(m-1)+1, (q-2)] only results in a smaller key space, which is
(slightly) easier to attack.  There is no reason to restrict it like
this.

        Robert.

<Prev in Thread] Current Thread [Next in Thread>