> You don't even have to do that. > > By definition, you can make the key for the metadata the complement of the > key for the data file. So, if a chk is binary 10101, the metadata is 01010. > > If you know one, you can derive the other.
That's true, and the ability to derive one from the other is nice. However, you would in effect be making the metadata key a KSK, not a CHK. I would prefer to use a CHK because then you have validation of the file's integrity. Really, the only reason not to put the embed the metadata key is that it will make CHKs longer. I don't see this as being a serious problem, or even noticable at all. _______________________________________________
