On Sun, May 06, 2001 at 04:49:18PM +0200, Oskar Sandberg wrote:
> Steven is right about this, the extra hash is simply unnecessary.
> make_key(data + padding) is fine.
It doesn't really matter and it makes the code simpler with the extra hash.
> Also note that it only applies to CHKs,
> for SSKs we should have
>
> encryption key = subset_global_key XOR make_key ( document_name )
>
> (and the subset_global_key should created and appended to the URI by
> default, since the fact that it is almsot never used currently is really
> quite a large security issue).
and encryption key = make_key (document_name) for KSKs
> > * Storable.Document-header = DocHeadData zero padded to power of 2
>
> You mean encrypted, right?
Yep - as in Tavin's post.
AGL
--
I never let my schooling get in the way of my education.
PGP signature
