> 
> Why not?  It's exactly the same situation as putting it at the beginning
> of the document itself, we're just moving it a few bytes earlier in
> the message.
Oh, you mean the key.  The key has to go absolutely first in the
decryption/encryption, otherwise you don't have an IV and an IV is a
requirement for a feedback cipher.

> > Thats not necessary, you can just throw random bytes in the message's
> > trailing field.
> 
> Ah, but for CHKs the routing key is a function of the storables, and
> we want to do it in such a way as to encourage CHK collisions.
True.  But you can use all zeros too if you want.

PGP signature

Reply via email to