On Sun, May 06, 2001 at 04:49:18PM +0200, Oskar Sandberg wrote:
> Steven is right about this, the extra hash is simply unnecessary.
> make_key(data + padding) is fine.

It doesn't really matter and it makes the code simpler with the extra hash.

> Also note that it only applies to CHKs,
> for SSKs we should have 
> 
> encryption key = subset_global_key XOR make_key ( document_name )
> 
> (and the subset_global_key should created and appended to the URI by
> default, since the fact that it is almsot never used currently is really
> quite a large security issue).

and encryption key = make_key (document_name) for KSKs

> > * Storable.Document-header = DocHeadData zero padded to power of 2
> 
> You mean encrypted, right?

Yep - as in Tavin's post.

AGL

-- 
I never let my schooling get in the way of my education.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: not available
URL: 
<https://emu.freenetproject.org/pipermail/devl/attachments/20010506/64c13450/attachment.pgp>

Reply via email to