Are names unique in EGO?
TheJackiMonster <[email protected]> Sat, 18 Apr 2020 22:25:44 +0200
| Newsgroups | gmane.network.gnunet.general |
|---|---|
| Message-ID | <[email protected]> |
Hey, I would like to add authentication and encryption to a chat-client with CADET. If I understood the docs correctly then the messages are only signed by the key from a peer. I thought I could use EGO for that but I'm not sure if the names get checked for doubles before creation of an ego. I would guess they aren't and if they weren't I would ask how some of you would think about this procedure: 1. Alice asks Bob for his public-PGP-key and his public-EGO-key. 2. Bob responds with his key. 3. Alice sends her public-PGP-key and related email-address of her PGP-keypair, encrypted with Bobs public-PGP-key. 4. Bob sends a mail encrypted with Alices public-PGP-key and signed with his private-PGP-key. The content of the mail is a token only Alice can read. 5. Alice sends the token (only if it was Bobs signature) to Bob and her public-EGO-key, encrypted with Bobs public-EGO-key. 6. Bob sends (only if the token matches) a symmetric key back for further communication, encrypted with Alices public-EGO-key and remembers Alice-EGO-key matching to her email-address. * So in later stages Alice would not need any email-traffic for verification her key belongs to her and she could use an EGO-key which could be deleted much safer to make sure of forward-secrecy. Maybe this is unnecessary or I miss a flaw in this model. So a response would be great then I could start implementing a solution. Best regards, Tobias Frisch PS: I would probably use GPGMe to implement the custom procedure because it has a pretty good API like GNUnet.
signature.asc
(application/pgp-signature, 313 B)
-----BEGIN PGP SIGNATURE----- iLUEABMKAB0WIQS38CYx4UdSFRm8EMrYUKX3cuiA+QUCXptiSAAKCRDYUKX3cuiA +Xu2Af46RyRv62Ai3iGtYFGBliiyBdoNg9fIuRO9ZqWuDeiEvPsmI0MIUXQYL3UX MQVmJvYFZGtPTSHgXJm5WklWxe8uAgCVbfybdLNCNgT/WhYaSDmwIRtVSksJMTIH aFWrR59BDgGH9Pb8R/d6qDUcGpGaBBzUtvlXbclhlsL91qLl+V3p =xYAT -----END PGP SIGNATURE-----