[Nym3-devel] SIG size for control messages sent to the nymserver.

[Laurent Fousse]

* Laurent Fousse [2005-04-11]:
> I'll write patches for nym-spec.txt summarizing our recent
> discussion about keysize and proof-of-work, post them there for
> review and commit them to the tree after that.

Here's the patch. I changed the key length requirement to a key
modulus size requirement because I don't see how the former could
follow from the later (remember we're dealing with the size of the
ASN.1 encoded key).

Index: nym-spec.txt
===================================================================
--- nym-spec.txt	(revision 182)
+++ nym-spec.txt	(working copy)
@@ -604,7 +604,8 @@
 
    The body of a CREATE command has the following structure:
          NNym  Number of candidate nyms  (1 octet)
-         PW    Proof of work             (??? octets)
+	 PWL   Proof of work Length	 (1 octet)
+         PW    Proof of work             (variable length; PWL octets)
        Sequence of:
          NL    Candidate Nym Length      (1 octet)
          Nym   Candidate Nym             (variable length; NL octets)
@@ -616,7 +617,9 @@
    given in the NEWPK command.  The nymserver replies with a CREATED
    command, which the nymholder confirms with a CREATE2 command.)
 
-   [XXXX specify a proof-of-work system.]
+   The PW field MUST be empty and the corresponding PWL field set to
+   0. Future version of the protocol MAY understand a non-empty PW
+   field.
 
 4.3.2. CREATE2 [0x01]
 
@@ -645,8 +648,8 @@
      ID   Identity key          (variable length; ID_L octets)
      ENC  Encryption key        (variable length; remainder of command)
 
-   The key length fields MUST be 128 or 256.  The key fields hold
-   ASN.1 encoded RSA public keys.  Their exponents must be 65537.
+   The key fields hold ASN.1 encoded RSA public keys.  Their exponents
+   must be 65537. Their modulus must have a size of 2048 bits.
 
    Because the nymserver may not receive the message, the nymholder
    should continue to sign commands with its previous identity key
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.noreply.org/pipermail/nym3-devel/attachments/20050411/ca501ff9/attachment.pgp