Re: PGP signature of empty string
Lloyd Parkes <[email protected]> Tue, 5 Mar 2013 08:35:55 +1300
| Newsgroups | gmane.comp.encryption.cryptlib |
|---|---|
| Message-ID | <[email protected]> |
On 4/03/2013, at 10:01 PM, Peter Gutmann <[email protected]> wrote: > Florian Mutter <[email protected]> writes: > >> I have a problem with signing and checking a detached pgp signature of an >> empty string. > > Hmm, why are you trying to sign an empty message? Forgery of such a signature > on a message is trivial, you can transfer the signature to any other empty > message and it'll still verify. I should hope it verifies. This is just the trivial case of two messages having identical content. Surely this is only a problem if the messages are encrypted and you aren't supposed to know that the message is empty, in which case, isn't this an encryption issue? Cheers, Lloyd _______________________________________________ Cryptlib mailing list [email protected] via Mail: [email protected] Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/ http://news.gmane.org/gmane.comp.encryption.cryptlib Posts from non-subscribed addresses are blocked to prevent spam, please subscribe in order to post messages.