NODE ba0c7492Re: Commercial PGP: Verifying Trustworthiness
norm@netcom.com (Norman Hardy)Thu, 26 Aug 93 19:22:37 PDT
cdodhner@indirect.com (Christian D. Odhner) says:
> I could very well be wrong about this one, but since pgp uses a random
> idea session key each time you encrypt, wouldn't that in fact ensure that
> no two encryptions of the same file with the same public key are ever the
> same? Why then would random stuff be needed?
I knew that! I forgot that! Thanks for reminding me. Back to the drawing board!
A protocol where the user controlled the session key would be more awkward
but would solve that problem. On the otherhand that isn't the PGP protocol.