Re: Multi-recipient security hole?

> ... could
> not find a hint at all that one should use _different random patterns
> for each recipient_ in these type 02 blocks to prevent chinese remainder
> attacks for the case where the public exponent is 3. I believe this should
> be further clarified in the son-of-RFC1115.

Agreed.  I'm already putting finishing touches on the draft before
submitting it as an ID, so this is a perfect time to add a statement
of clarification.

-DB