[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Recipient-verifiable messages, was: forwarding an encrypted P GP message is useless
> Hal Finney <hal@xxxxxxxxxx>:
> > Adam Back writes:
> >> What we proposed is related. Rather
> >> than the normal encrypted signed message:
> >> Encrypt_Bob(K), Encrypt(K, Sign_Alice(Hash(msg)), msg)
> >> we proposed:
> >> Encrypt_Bob(K), Encrypt(K, Sign_Alice(Hash(K||Bob_PK)), msg)
> >> with the additional restriction that the encryption mode
> should be one
> >> of the MDC modes (ie appended MAC with K outside encryption, or
> >> appended hash of msg inside encryption).
What a wonderful solution. Hello everybody, we go ahead and change
the next version of the protocol to this. Ok?