[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: comments on Photuris
>I still prefer the option of signing nonces chosen by the other party.
>It is more secure (time sync considerations, granularity of frshness, etc.)
>However, for parties that periodically refresh their keys there is no reason
>not to maintain a nonce sent in the previous refreshment round; in that case
Suppose I add a rule to Photuris that says you should use an existing
SAID whenever possible to encrypt the exchanges that create a new
SAID. Would this give you some of the same sort of protection against
partial compromises that you get with explicit key refreshment?
Phil
References: