ElGamal signature values?
Werner Koch
wk@gnupg.org
Mon Aug 13 15:41:01 2001
On Fri, 10 Aug 2001 09:25:36 -0700, Jon Callas said:
> Can someone who is an implementer answer this? What do I need to do to put
> in the next draft? I'm going to put out another draft in the next couple of
Algorithm Specific Fields for ElGamal signatures:
- MPI of ElGamal value a = g**k mod p.
- MPI of ElGamal value b = (h-a*x)/k mod p-1.
The hash h is PKCS-1 padded exactly the same way as for the above
described RSA signatures.
Please add a reference to section 12.5 [ElGamal] and make clear that
the use of ElGamal signatures is not suggested.
> days -- there's time here at HAL -- and if I can clarify, I will.
Hope you had a nice time.
Werner
--
Werner Koch Omnis enim res, quae dando non deficit, dum habetur
g10 Code GmbH et non datur, nondum habetur, quomodo habenda est.
Privacy Solutions -- Augustinus