ACTION-257: Randomized Hashing (RMX) and Signing (RSA-PSS) provide a Proposal
Randomized Hashing (RMX) and Signing (RSA-PSS) provide a Proposal
- State:
- closed
- Person:
- Konrad Lanz
- Due on:
- April 14, 2009
- Created on:
- April 7, 2009
- Related emails:
- RE: Konrad's actions (ACTION-485) (from PRATIK.DATTA@oracle.com on 2010-02-25)
- Agenda - Distributed Meeting 2010-02-16 (from frederick.hirsch@nokia.com on 2010-02-12)
- Re: Konrad's actions (ACTION-485) (from frederick.hirsch@nokia.com on 2010-02-12)
- Konrad's actions (ACTION-485) (from tlr@w3.org on 2010-02-09)
- HMAC output length erratum for XML Signature 1.0 (Re: Is ACTION-297 the impact of ISSUE-105 (HMAC output length is defined on bits base64 on octets) on the XMLDSig 1.0 errata ? (see also: ACTION-298 and ACTION-320)) (from tlr@w3.org on 2009-12-07)
- Draft minutes for Sep 8 (from cantor.2@osu.edu on 2009-09-08)
- Is ACTION-297 the impact of ISSUE-105 (HMAC output length is defined on bits base64 on octets) on the XMLDSig 1.0 errata ? (see also: ACTION-298 and ACTION-320) (from Konrad.Lanz@iaik.tugraz.at on 2009-09-08)
- Agenda: Distributed Meeting 2009-09-08 (from frederick.hirsch@nokia.com on 2009-09-04)
- Draft minutes for September 01 (from John_Wray@notesdev.ibm.com on 2009-09-01)
- Agenda: Distributed Meeting 2009-09-01 v2 (resend) (from frederick.hirsch@nokia.com on 2009-08-31)
- Agenda: Distributed Meeting 2009-09-01 v2 (from Frederick.Hirsch@nokia.com on 2009-08-31)
- Agenda: Distributed Meeting 2009-09-01 (from frederick.hirsch@nokia.com on 2009-08-17)
- Randomized hashing work item - proposal and decision for 1.1 (from frederick.hirsch@nokia.com on 2009-08-17)
- [ACTION-257] unified proposal for changes to support randomized hashing and signing (from Konrad.Lanz@iaik.tugraz.at on 2009-06-09)
- F2F Minutes updated - revision for approval (from frederick.hirsch@nokia.com on 2009-06-02)
- Draft minutes from May 13 (from pratik.datta@oracle.com on 2009-05-21)
- Re: April 28 2009 draft minutes (from shivarammysore@yahoo.com on 2009-04-29)
Related notes:
ds:Reference level (Randomized Hashing): http://www.w3.org/2007/xmlsec/ws/papers/11-mcintosh-ibm
ds:SignatureMethod level (RSA-PSS): http://www.w3.org/2007/xmlsec/ws/papers/08-lanz-iaik/
my action is to unify the two proposals
a second step would be to push back on checking whether the salt in the various places may be substituted by using only one salt in all the places, as the main advantage of the salt is to move from an off-line attack to an on-line attack
[fjh2]: we defer randomized hashing for 2.0
13 May 2009, 20:56:37Only outstanding issue is: "Whether salt can or should be reused"!
Follow up and provide unified proposal for changes to support randomized hashing and signing.
Display change log.