Re: [saag] Another bad day at the hash function factory

[Eric Rescorla <ekr@xxxxxxxx>]

Jean-Marc Desperrier <jmdesp@xxxxxxx> writes:

> Dr Stephen Henson wrote:
>
>> Eric Rescorla wrote:
>>
>>> We have available:
>>>
>>> * A certificate containing key A (retained by the CA)
>>> * A certificate containing key B (retained by the relying party)
>>
> As I said initially I think it may happen, thought not very likely,
> that the relying party think it's safe enough to keep only the
> identification of the certificat for key B, and not the whole
> certificate.
>
> In that case, it would very sensible to the attack.

Well, we know now that people ought not to do that.

-Ekr