On the other hand a checksum in cryptography is used quite liberally, and can be used interchangeably with one-way-hash/message digest/digital fingerprint etc.
Unh, no. Those three terms you separated by a slash are used interchangeably, but while you might rarely see "cryptographic checksum", you should never see the raw term "checksum" used in the literature. Perhaps you'll believe the MD5 author? See http://www.faqs.org/rfcs/rfc1321.html
Especially while describing the use of SHA1/MD5 for Intrusion Detection, I have seen the phrase "MD5 checksum of the hard drive" more often than "MD5 message digest of the HardDrive"
They'd be much better off using the term "fingerprint" than calling MD5 a checksum.
Nevertheless I value your suggestion, and will use the word "message digest" instead.
And we've only wasted a day's worth of traffic. And you still haven't addressed the real bug in your diagram.
Good luck with your project, I've run out of time here. /r$ -- Rich Salz, Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway http://www.datapower.com/products/xs40.html XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]