FW:

2010-01-05 Thread Bolcina Ivan
Hi. I have a encrypted xml. I managed to decrypt xml with this key Alias=|Tomaz 3 Grenko's Encryption Certificate| is certificate=|CN=Tomaz 3 Grenko, O=TestCA, C=si is private key=|true key=RSAPrivateKey [size=2048 bits, type=Exchange, container=4|3|1|0|X8AQID1iQeev7AsBo6NoVQ==] key.algor

Re: [REPORT] Santuario

2010-01-05 Thread Sean Mullan
Sounds good to me, nothing further to add. --Sean Raul Benito wrote: Hello, I'm going to send the report for this month, do you have anything to tell? Regards, Raul -- Just normal bug fixing. Quiet quarter. Regards, Raul

Re: FW:

2010-01-05 Thread Arshad Noor
Not with well-behaved software that conform to PKIX standards. Signing keys are meant to only sign objects, while "Exchange" keys are meant for encryption/decryption. That is the reason why decryption works with the first, but not with the second. Arshad Noor StrongAuth, Inc. Bolcina Ivan wrot

RE: FW:

2010-01-05 Thread Scott Cantor
Arshad Noor wrote on 2010-01-05: > Not with well-behaved software that conform to PKIX standards. > > Signing keys are meant to only sign objects, while "Exchange" > keys are meant for encryption/decryption. That is the reason > why decryption works with the first, but not with the second. Out o

Re: FW:

2010-01-05 Thread Arshad Noor
In the software that I write, Scott, I enforce this. From experience, I also know that browsers and S/MIME User Agents (Outlook, Thunderbird) also enforce this. While I presume that cryptographic frameworks such as JCE, CAPI, CNG, etc. also enforce this, I do not make assumptions about the degre

RE: FW:

2010-01-05 Thread Scott Cantor
Arshad Noor wrote on 2010-01-05: > In the software that I write, Scott, I enforce this. From > experience, I also know that browsers and S/MIME User Agents > (Outlook, Thunderbird) also enforce this. Those are applications. If they want to enforce it, that's fine, but it doesn't belong in an XML