A note on vendor reaction speed to the e=3 problem

>  > Anyway, the attack applies even if you throw away
the
>  > ASN.1 data.
> 
> If you ignore the ASN.1 data you expect the hash to be
> in a fixed byte position, so the attack does not apply.

It's correct that the attack doesn't apply if you expect
the hash to be in a fixed byte position. I would say that
it's incorrect that there was no chance of it being screwed

up in the absence of ASN.1. But I'm happy to agree to
disagree at this point.

William

------------------------------------------------------------
---------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe
cryptography" to majordomometzdowd.com