lkml.org 
[lkml]   [2015]   [Jun]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [PATCH 16/20] PKCS#7: Add an optional authenticated attribute to hold firmware name [ver #5]
On Mon, Jun 1, 2015 at 8:50 AM, David Howells <dhowells@redhat.com> wrote:
> Andy Lutomirski <luto@amacapital.net> wrote:
>
>> > You can also fudge the signature (or a hash) by adding extra data to or
>> > modifying the data blob and by switching signature values between signature
>> > blobs.
>>
>> So there's another design error in PKCS#7? Great!
>
> No. This applies to *all* signatures where you're signing a hash.

What kind of fudging are you talking about here? I don't see what
not-intentionally-signed message can be generically fudged to look
like it's signed.

--Andy


\
 
 \ /
  Last update: 2015-06-01 19:41    [W:0.065 / U:0.780 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site