pem-dev
[Top] [All Lists]

Re[2]: summary of technical issues

1994-12-23 11:45:00
Which brings us back to the early proposal to identify public keys by 
their message digest. The syntax:

  <digest algorithm identifier>, <digest of DER-encoded public key>

should work just fine. (It works for all types of key, and the size is 
constant.)

-- Burt Kaliski
RSA Laboratories


______________________________ Reply Separator _________________________________
Subject: Re: summary of technical issues
Author:  vitor(_at_)uminho(_dot_)pt at INTERNET
Date:    12/23/94 9:32 AM


Hey! 
I hope it's not to late for me to reply. 
Anyway, here's some considerations

Galvin wrote:

1. Suggestion to require key selector to be the public key 

  Currently the key selector may be chosen arbitrarily (within 
  specified functional constraints) by the owner of a public
  key.  It has been suggested this generality is unnecessary and puts 
  undue burden on implementors.

There is another question, related with this suggestion: imagine i want 
to "hide" my public key, in order to give it only to "selected users" ? 
This is a valid method to increase security in the exchange of 
information between specifics users. Introducing the public key as a the key 
selector removes this possibility.

If i may do so, i would like to suggest the use of the last bytes ( 8 
or 16) as the key identifier, like PGP does. It's unique and doesn't 
unveil the public key.

Vitor Fernandes <vitor(_at_)di(_dot_)uminho(_dot_)pt>



<Prev in Thread] Current Thread [Next in Thread>