Re: [DNSOP] [dnsext] New Version Notification for draft-mcgrew-tss-02 (fwd)

2009-03-11 Thread Michael StJohns
I've got one. I modified an implementation of Shoup by Steve Weis which does raw RSA sigs to do PKCS1-v1.5 RSA signatures and from those to do DNSSEC signing. It allows the generation and wrapping of shares under remotely generated public keys - e.g. share holder public keys. When

Re: [DNSOP] [dnsext] New Version Notification for draft-mcgrew-tss-02 (fwd)

2009-03-11 Thread Michael StJohns
At 06:27 PM 3/11/2009, David McGrew wrote: Hi Mike, Hi Alfred - A better scheme for threshold signing for the root might be the Shoup paper: Practical Threshold Signatures, Victor Shoup (s...@zurich.ibm.com ), IBM Research Paper RZ3121, 4/30/99 The major difference between the two is that the

Re: [DNSOP] [dnsext] New Version Notification for draft-mcgrew-tss-02 (fwd)

2009-03-11 Thread David McGrew
Hi Mike, Hi Alfred - A better scheme for threshold signing for the root might be the Shoup paper: Practical Threshold Signatures, Victor Shoup (s...@zurich.ibm.com ), IBM Research Paper RZ3121, 4/30/99 The major difference between the two is that the Shamir system (which you describe)