[Pkg-privacy-commits] [libotr] 06/20: Clarify the DSA computation in the protocol specs.

[Intrigeri]

This is an automated email from the git hooks/post-receive script.

intrigeri pushed a commit to annotated tag 4.1.1
in repository libotr.

commit 4b72b07d37f207329c2b25062f32cdb23fb9d778
Author: Ian Goldberg <iang at cs.uwaterloo.ca>
Date:   Thu Dec 18 16:45:30 2014 +0000

    Clarify the DSA computation in the protocol specs.
    
    Thanks to Adam Langley <agl at imperialviolet.org> and Hannes Mehnert
    <hannes at mehnert.org> for the report.
    
    Acked-by: Hannes Mehnert <hannes at mehnert.org>
    Acked-by: David Goulet <dgoulet at ev0ke.net>
    
    Fixes #61
---
 ChangeLog        | 5 +++++
 Protocol-v2.html | 4 ++--
 Protocol-v3.html | 4 ++--
 3 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 35c5f46..bcb35bf 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,6 +7,11 @@
 
 	* Protocol-v3.html: Remove a stray "DRAFT" from the <title> tag.
 
+	* Protocol-v2.html:
+	* Protocol-v3.html: Clarify the DSA computation in the protocol
+	specs.  Thanks to Adam Langley <agl at imperialviolet.org> and
+	Hannes Mehnert <hannes at mehnert.org> for the report.
+
 2014-11-29
 
 	* README:
diff --git a/Protocol-v2.html b/Protocol-v2.html
index 401a293..33277ae 100644
--- a/Protocol-v2.html
+++ b/Protocol-v2.html
@@ -471,8 +471,8 @@ following data, using the key m1:<dl>
 <dt>keyid<sub>B</sub> (INT)</dt>
 <dt>sig<sub>B</sub>(M<sub>B</sub>) (SIG)</dt>
 <dd>This is the signature, using the private part of the key
-pub<sub>B</sub>, of the 32-byte M<sub>B</sub> (which does not need to be
-hashed again to produce the signature).</dd>
+pub<sub>B</sub>, of the 32-byte M<sub>B</sub> (taken modulo q instead of
+being truncated (as described in FIPS-186), and not hashed again).</dd>
 </dl></li>
 <li>Encrypt X<sub>B</sub> using AES128-CTR with key c and initial
 counter value 0.</li>
diff --git a/Protocol-v3.html b/Protocol-v3.html
index a558315..629155c 100644
--- a/Protocol-v3.html
+++ b/Protocol-v3.html
@@ -508,8 +508,8 @@ following data, using the key m1:<dl>
 <dt>keyid<sub>B</sub> (INT)</dt>
 <dt>sig<sub>B</sub>(M<sub>B</sub>) (SIG)</dt>
 <dd>This is the signature, using the private part of the key
-pub<sub>B</sub>, of the 32-byte M<sub>B</sub> (which does not need to be
-hashed again to produce the signature).</dd>
+pub<sub>B</sub>, of the 32-byte M<sub>B</sub> (taken modulo q instead of
+being truncated (as described in FIPS-186), and not hashed again).</dd>
 </dl></li>
 <li>Encrypt X<sub>B</sub> using AES128-CTR with key c and initial
 counter value 0.</li>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/libotr.git