Why do we use a different key to sign than to encrypt

Lists.gnupg at mephisto.fastmail.net Lists.gnupg at mephisto.fastmail.net
Tue Mar 1 15:34:52 CET 2011


On Tue, Mar 01, 2011 at 01:13:16PM +0000 Also sprach Guy Halford-Thompson:
>Not GPG specific, but I was wondering if someone could point me in the
>direction of some resources that explain why we use different keys to
>sign and encrypt (for cases where the same key _could_ do both e.g.
>RSA).  

This may not be the whole story, but I did manage to find this:

http://www.di-mgt.com.au/rsa_alg.html#weaknesses

-- 
"Le hasard favorise l'esprit préparé."
                       --Louis Pasteur
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 670 bytes
Desc: not available
URL: </pipermail/attachments/20110301/8fa7dde3/attachment.pgp>


More information about the Gnupg-users mailing list