[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: openssl-blacklist & two keys per one pid



On Monday 19 May 2008, Florian Weimer wrote:
> BTW, it appears that the same blacklist can be used for -3 and -F4
> keys. (Just in case you haven't checked that already.)

RSA keys with exponent 3 should probably not be used at all, because 
multiple implementations did not verify the signatures correctly.

http://www.kb.cert.org/vuls/id/845620
http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: