[Top] [All Lists]  Re: Suggestion for the signing subkey problem
2003-06-25 11:29:56  Hmm, can subkeys have subkeys?   David Shaw
<dshaw(_at_)jabberwocky(_dot_)com> writes:  Hi everyone,  I was
thinking about the "stolen signing subkey" problem, and a
slightly different solution popped up:  What if we create a new
"signature in a signature" subpacket that is defined as a
regular signature contained in a subpacket?  All signing subkeys
MUST contain such a subpacket in their binding self-signature.
The "subpacket signature" in this case is made by the signing
subkey, and on the primary key, hashed as if for a 1F signature.
The end result is that the signing subkey has a binding self-
signature issued by the primary key as we do now, and that
binding self-signature has an embedded 1F signature on the
primary key data issued by the signing subkey itself.  One of
the nice benefits of using a subpacket here, rather than some
other scheme is that we can set the critical bit of the
subpacket if we want to "break" th