> - I should the word "sign" intead of encryption, when encrypting using
> Private Key to encrypt the checksum. That is good suggestion.
yeah, that's what misled me before.
> The other question I have is - Should I send the digital signature as a
> seperate message, or should take the checksum of the data, attach it to the
> end of the data and then encrypt whole thing using the sender's private key.
If you're doing about 9 bytes of data, encrypting the signature adds
about 256 bytes. If you're just adding a digest to the end of your
message, then that adds 20 bytes (SHA1). Are you worried about data
corruption such that an a non-signed hash is actually buying you anything?
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
