Problems with private keyring?
Taral
taral@taral.net
Fri Mar 23 00:47:05 2001
--VbJkn9YxBvnuCH5J
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Mar 23, 2001 at 12:38:53AM +0100, Florian Weimer wrote:
> As an added bonus, it protects against signature computation errors
> (due to overclocking or bugs in the MPI implementation), which
> was first proposed in this context by Lutz Donnerhacke. GnuPG
> calculates the signature in Z/pZ x Z/qZ instead of Z/nZ (which would
> be slower). If the computation in one component of the direct sum
> fails, the difference to the correct result is likely a multiple of
> p or q. (AFAIK, this is called a 'Bellcore attack' in German hacker
> circles.)
Maybe we should do our calculations in Z/nZ by default, providing an
'--enable-fast-signatures' option for those who aren't (as) concerned...
--=20
Taral <taral@taral.net>
Please use PGP/GPG to send me mail.
"Never ascribe to malice what can as easily be put down to stupidity."
--VbJkn9YxBvnuCH5J
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAjq6js0ACgkQ7rh4CE+nYElQWQCeMWOjkCDExwm3IgCCxf9VQTBc
DxoAnieXcs+LNf1DTVWheXMQSUOoWceb
=0U9+
-----END PGP SIGNATURE-----
--VbJkn9YxBvnuCH5J--