Question about signing & verifying

[Oğuz]

On 3/13/10, ilter yüksel <ilteryuksel at gmail.com> wrote:
> Hello,
>
> I've question about signing especially for signing router-descriptor;
>
> Is the router "signing-key" using to prepare a router's signature with
> digest algorithm? If so then does an OR sign it's router descriptor with
> it's signature? Finally can we say right for below sequence?
>
> "signing-key" ---- digest algorithm --- > "router-signature"
> initial "router-descriptor" ----- sign with "router-signature" --- > signed
> "router-descriptor"

Selamlar İlter,

Actually it is

descriptor ---> digest function
                        |
                        v
private key --->  RSA engine ----> signature

> After that how a directory authority verify whether the router descriptor is
> self-signed?

signature
    |
    v
RSA engine  ---> recovered digest  ?=?  digest function <--- descriptor
    ^
    |
public key (signing-key)

To demonstrate, in Java you might do something like:
http://pastebin.com/fvtS3Uyv.

Regards
Oğuz

-------------------------------
You have not experienced Tor documentation until you have read them in
the original Klingon
***********************************************************************
To unsubscribe, send an e-mail to majordomo at torproject.org with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/