Re: [imi] Question regarding encryption

[Mario Ivkovic <mario.ivkovic@a-sit.at>]

John Bradley schrieb:

> What users public key?   In IMI there isn't one except for p-cards.

The public key corresponding to the private key that was used to sign 
the consent message. In our case the key pair is stored on a smart card 
and the signature is a qualified one. The RP can then verify the consent 
message.

> Presenting the consent message in the selector requires more changes.

I know, I've already implemented this as proof of concept.


Mario


-- 

Mario Ivkovic
A-SIT, Secure Information Technology Center - Austria
Inffeldgasse 16a, A-8010 Graz, Austria
Tel.: +43 (316) 873-5528  Fax.: +43 (316) 873-105521
Mario.Ivkovic@a-sit.at