On 3/10/2017 12:33 PM, Chris Hawkins wrote:
> I did quite a bit of work with the Privacy CA for 1.2. The process, as
> described by Pritha, is how I understand it.

The one part I question is the client sending the blob with the AIK 
public key and EK certificate to the CA "encrypted with the public key 
of the Privacy CA".

1 - This means that the CA would have to use its signing private key in 
a decryption operation.  Such a dual purpose CA key would be unusual.

2 - It's unlikely that the CA (RSA) public key would be large enough to 
encrypt that blob.



------------------------------------------------------------------------------
Announcing the Oxford Dictionaries API! The API offers world-renowned
dictionary content that is easy and intuitive to access. Sign up for an
account today to start using our lexical data to power your apps and
projects. Get started today and enter our developer competition.
http://sdm.link/oxford
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to