Re: Recipient-verifiable messages, was: forwarding an encrypted PGP message is useless

[Bodo Moeller <moeller@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

On Sun, May 26, 2002 at 03:28:41PM +0000, Bodo Moeller wrote:
> Hal Finney <hal@xxxxxxxxxx>:
>> Adam Back writes:

>>> we proposed:
>>>
>>> 	Encrypt_Bob(K), Encrypt(K, Sign_Alice(Hash(K||Bob_PK)), msg)

>> I see, that seems to work well too.  [...]

> Does it?  If Bob is willing to reveal  K  and additional data such as
> padding used for RSA encryption, can't everyone verify that this is
> indeed a valid signature by Alice on 'msg'?

Oops, I've been parsing the parentheses incorrectly.


-- 
Bodo Möller <moeller@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
PGP http://www.informatik.tu-darmstadt.de/TI/Mitarbeiter/moeller/0x36d2c658.html
* TU Darmstadt, Theoretische Informatik, Alexanderstr. 10, D-64283 Darmstadt
* Tel. +49-6151-16-6628, Fax +49-6151-16-6036