Re: Suggestion for the signing subkey problem

[Werner Koch <wk@xxxxxxxxx>]

On Wed, 25 Jun 2003 12:26:37 -0700, Hal Finney said:

> can issue signatures just fine, even if they don't usually do so; and the
> same with ElGamal encryption subkeys.  We have loaded up the spec with
> warnings about ElGamal signatures, but in fact those warnings mostly
> relate to chosen plaintext attacks.  In this case it is the key owner

A practical problem with ElGamal signatures is that verification is
really slow.

-- 
Werner Koch                                      <wk@xxxxxxxxx>
The GnuPG Experts                                http://g10code.com
Free Software Foundation Europe	                 http://fsfeurope.org