FW: DSS action on hash based signatures

["Nick Pope" <pope@secstan.com>]

I am forwarding conclusions from John & Trevor regarding the impact of
supporting the use of hash / digest based signatures through the DSS
protocol.

Any othjer views?

Nick

-----Original Message-----
From: jmessing [mailto:jmessing@law-on-line.com]
Sent: 11 November 2003 22:06
To: Nick Pope; John Messing; Steve Gray; Trevor Perrin; Trevor Perrin
Cc: Juan Carlos Cruellas
Subject: Re: DSS action on hash based signatures


---------- Original Message ----------------------------------
From: Trevor Perrin <trevp@trevp.net>
Date:  Tue, 11 Nov 2003 13:19:52 -0800

>At 09:06 PM 11/11/2003 +0000, Nick Pope wrote:
>
>>John, Steve,Trevor,
>>
>>To help on progressing the action on outlining the implication of
supporting
>>the hash based signatures in DSS the following are the issues that I
believe
>>that need to be answered for this technique to be supported by DSS:
>>
>>a) Does this require a change in the scope of DSS to incorporate
technoiques
>>other than digitial signatures ?
>
>I don't think so.
>
>
>
>>b) Is the existing core specification sufficiently flexible to cover this
>>case ?
>
>I think so.
>
>
>
>>c) Is the resulting signature a form of XML Signature or some other
>>structure?
>
>John, have the people you mentioned, I think the state courts, got to this
>level of detail?
>
No.
>
>>d) Is there need for a profile to be defined for support of hash based
>>signatures?  Is this work to be carried out within DSS or elsewhere?
>
>John or Steve, do you know of anyone who'd be interested in such a
>profile?  I.e., willing to join DSS and participate in making one?
>
>
I can ask the LegalXML Court Filing TC.
>
>>e) Does the DSS need to give guidance on the security implications of
using
>>hash based signatures?
>
>I think that could be left to a profile.
Agreed.
>
>Trevor
>
>