[45236] in cryptography@c2.net mail archive
RE: Exponent 3 damage spreads...
daemon@ATHENA.MIT.EDU (Peter Gutmann)
Thu Sep 21 15:58:27 2006
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: pgut001@cs.auckland.ac.nz (Peter Gutmann)
To: cryptography@metzdowd.com, daw@cs.berkeley.edu,
pgut001@cs.auckland.ac.nz, Ulrich.Kuehn@telekom.de
In-Reply-To: <490A625B3DFD8A45B4A7F1ABA8DEA8B401C30A50@S4DE9JSAAMU.ost.t-com.de>
Date: Thu, 21 Sep 2006 20:52:09 +1200
"Kuehn, Ulrich" <Ulrich.Kuehn@telekom.de> writes:
>But the PKCS#1 spec talks about building up the complete padded signature
>input at the verifier, and then comparing it.
Uhh, did you actually read the rest of my post? *One variant of the PKCS #1
spec, that didn't exist at the time the the affected other standards were
created*, talks about ..., not "the PKCS #1 spec" as a whole. I even quoted
the original text of the spec in my message.
Peter.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com