Re: reference to attacks on a signed hash

Prateek,

Here are some references for attacks on signed hashes.  I haven't had a
chance to look at these in detail
myself, so I haven't formed an opinion about whether a message plus its
hash in the same signed packet
is an exposure or not, or under what circumstances.  I'm copying the list
in case anyone else is interested.

(See attached file: cryptobytes signature forgeries.pdf)
(See attached file: kaliski signature schemes.pdf)
(See attached file: pointcheval and stern signature proofs.pdf)
(See attached file: rogaway-bellare PSRG.pdf)
(See attached file: secure hash-and-sign.pdf)
(See attached file: twin signatures.pdf)
(See attached file: ghr99.pdf)

Here's a paper on attacks on signed encrypted text; the first two
references in this paper should also be consulted:

(See attached file: don-davis sign and encrypt.htm)


--bob

Bob Blakley (email:    phone: +1 512 436 1564)
Chief Scientist, Security and Privacy, Tivoli Systems, Inc.