Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / January 2006

Tip: Looking for answers? Try searching our database.

Siging alogrithm!

Thread view: 
Suasana - 21 Jan 2006 12:44 GMT
Hi,
My program needs to sign and verify a message. The message is very small
like 64 bytes only. Do I still need to create a message digest (Hash)
for this? Or hashing is just needed to reduce data size?

In other words, if I encrypt my message with private key to create
signature. And send it over to decrypt it with public key to verify by
comparing orignal message and decrypted. Will there be any threat to my
private key? Can someone know my private key provided plain message and
its signature info?

remember, the formula is,
s = m ^ d MOD N
and in this case s, m and N are known.

please inform, thanks.
susan
Mr. Skeptic - 21 Jan 2006 23:48 GMT
I believe the ISO 9796 standard may do what you want, although I don't
recall the details. And be aware of some crypto results on this
standard; a quick summary is
http://www.cryptomathic.com/company/newattacks.html.
Mike Amling - 23 Jan 2006 20:17 GMT
> Hi,
> My program needs to sign and verify a message. The message is very small
[quoted text clipped - 10 lines]
> s = m ^ d MOD N
> and in this case s, m and N are known.

  This is a naive signature. If you use proper padding, such as PSS,
you can securely sign either a hash or a (short) message.

--Mike Amling


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.