Skip to content
This repository has been archived by the owner on Apr 24, 2020. It is now read-only.

Reverse the order of signatures in roll-over #113

Closed
bifurcation opened this issue Apr 4, 2016 · 0 comments
Closed

Reverse the order of signatures in roll-over #113

bifurcation opened this issue Apr 4, 2016 · 0 comments
Milestone
WGLC

Comments

@bifurcation
Copy link
Contributor

As discussed in the thread about Karthik's analysis, we can have a fairly clean recovery story (assuming a MAC key can be provisioned. As a first step, we should reverse the order of the signatures in the roll-over request object.

OLD: Sign(K_old_priv, Sign(K_new_priv, Fingerprint(K_old_pub)))
NEW: Sign(K_new_priv, Sign(K_old_priv, Fingerprint(K_new_pub)))
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
WGLC
Development

No branches or pull requests
1 participant
@bifurcation