RE; 192-bit signatures

2006-02-07 Thread Bob Mearns
I'm looking to generate a short digital signature, perhaps 192 bits or so, using an asymmetrical algorithm. DSA seems to have 320 bit signatures regardless of the key size used. Is this really the case, or am I missing something? Ignoring for the moment the wisdom of using signatures this

Re: RE; 192-bit signatures

2006-02-07 Thread Dr. Stephen Henson
On Tue, Feb 07, 2006, Bob Mearns wrote: I appreciate that the security of such a short signature is paltry. In my application, the signature length (keeping it short) is as important as the security (odd as that may seem). I've not found a way to generate signatures as short as I'd like

Re: RE; 192-bit signatures

2006-02-07 Thread Victor Duchovni
On Tue, Feb 07, 2006 at 10:39:01AM -0800, Bob Mearns wrote: I appreciate that the security of such a short signature is paltry. In my application, the signature length (keeping it short) is as important as the security (odd as that may seem). I've not found a way to generate signatures as

Re: RE; 192-bit signatures

2006-02-07 Thread Jason Resch
Bob Mearns wrote: I'm looking to generate a short digital signature, perhaps 192 bits or so, using an asymmetrical algorithm. DSA seems to have 320 bit signatures regardless of the key size used. Is this really the case, or am I missing something? Ignoring for the moment the wisdom of

Re: RE; 192-bit signatures

2006-02-07 Thread Alain Damiral
Out of pure curiosity - I have recently been told that all existing/used protocols had been designed without taking into account the eventual need to adapt to new hash lengths. How true is that ? It seems to be a topic of concern for some people since all commonly used hashes have been broken

Re: RE; 192-bit signatures

2006-02-07 Thread Kyle Hamilton
TLS uses an XOR of an MD5 over the first 128 bits, and then an unmodified remaining 32 bits for SHA-1. However, please note that a successful attack against TLS would require the ability to generate a plaintext that would make both the MD5 and the SHA1 come out to the same value. -Kyle H On

RE: 192 bit signatures

2006-02-06 Thread David Schwartz
I'm looking to generate a short digital signature, perhaps 192 bits or so, using an asymmetrical algorithm. DSA seems to have 320 bit signatures regardless of the key size used. Is this really the case, or am I missing something? Ignoring for the moment the wisdom of using signatures this