Snapshot 1.0.4f & Klima/Rosa tests

Steve Beach asb4 at psu.edu
Wed Mar 28 01:12:03 CEST 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Sirs and Mesdames;

Thanks Werner for putting out a new snapshot.  It works for me, no
problems with the compile and/or function.

I'm a little bit paranoid about the Klima/Rosa attack.  Examining the
source code, it doesn't appear that there has been any change in the
verification of the secret keys in cipher/dsa.c or cipher/rsa.c.
Admittedly, each of these has one of the tests outlined by Klima/Rosa in
their paper, but why weren't the other ones added?  Florian had a patch to
do so, was there some reason it wasn't put in?  Am I missing something?

Thanks,

A. Stephen Beach

Penn State University Experimental Particle Astrophysics
104 Davey Lab, University Park, PA  16802
asb4 at psu.edu, http://pa43.phys.psu.edu

- ------------------------------------------------------------
|  Can't keep my mind from the circling sky                |
|  Tongue tied and twisted, just an earth bound misfit, I  |
- ------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Made with pgp4pine 1.75-6

iEYEARECAAYFAjrBEM0ACgkQoMzWr873tdcOjwCg1Y8L7Ti/rj2j/G5zfFagO4dq
pzsAoMBuvpNwwnKwBWZvZRcSVFM3Clwj
=RF4i
-----END PGP SIGNATURE-----





More information about the Gnupg-devel mailing list