RE: Comments on updated X9.42 draft1998-11-06 14:01:05I have one further comment on the X9.42 draft. Presently it states: X9.42 requires that the private key x be in the interval [2^(m-1) + 1, (q - 2)]. The latest (ballot) version of X9.42 actually only requires that private
keys be in the interval [2, q-2]. Restricting the key space to
[2^(m-1)+1, (q-2)] only results in a smaller key space, which is
(slightly) easier to attack. There is no reason to restrict it like
this.
Robert.
|
|
||||||||||||||||