Hi,
My program needs to sign and verify a message. The message is very small
like 64 bytes only. Do I still need to create a message digest (Hash)
for this? Or hashing is just needed to reduce data size?
In other words, if I encrypt my message with private key to create
signature. And send it over to decrypt it with public key to verify by
comparing orignal message and decrypted. Will there be any threat to my
private key? Can someone know my private key provided plain message and
its signature info?
remember, the formula is,
s = m ^ d MOD N
and in this case s, m and N are known.
please inform, thanks.
susan
Mr. Skeptic - 21 Jan 2006 23:48 GMT
I believe the ISO 9796 standard may do what you want, although I don't
recall the details. And be aware of some crypto results on this
standard; a quick summary is
http://www.cryptomathic.com/company/newattacks.html.
Mike Amling - 23 Jan 2006 20:17 GMT
> Hi,
> My program needs to sign and verify a message. The message is very small
[quoted text clipped - 10 lines]
> s = m ^ d MOD N
> and in this case s, m and N are known.
This is a naive signature. If you use proper padding, such as PSS,
you can securely sign either a hash or a (short) message.
--Mike Amling