Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question: authenticated message encryption #83

Open
stan-janssen opened this issue Jun 27, 2023 · 3 comments
Open

Question: authenticated message encryption #83

stan-janssen opened this issue Jun 27, 2023 · 3 comments
Assignees
Milestone

Comments

@stan-janssen
Copy link

In appendix 4 of the documentation (page 68 in the PDF), it mentions two sets of keys:

  • Digital Signatures
  • Authenticated message Encryption

The document goes on to explain how to use the digital signatures (used to seal an XML message of type PayloadMessage using the private key into a blob of bytes that can be unsealed by using the corresponding public key), but it does not explain when and how to use the authenticated message encryption.

I looked through the source code of the Shapeshifter implementation but could not find references to the message encryption.

What is the intended purpose of the authenticated message encryption, and where should I use it?

@capacious
Copy link
Contributor

@stan-janssen I don't know of an implementation that has implemented this; Good question, we can discuss this with the rest of the contributors to see what they think about it.

@tomwetjens @KoviaX Do you know of an implementation that uses this?
What do we want to do with this? Do we think we still need this?

The wording is indeed confusing and not really clear,

@tomwetjens
Copy link

tomwetjens commented Aug 29, 2023

@capacious I am not aware of any implementation that uses the encryption. Currently only signing is used afaik.

@RobbenRiksen RobbenRiksen added this to the 3.1.0 milestone Aug 29, 2023
@capacious capacious self-assigned this Aug 29, 2023
@KoviaX
Copy link
Contributor

KoviaX commented Aug 31, 2023

Indeed, as @tomwetjens mentioned, current implementations only use signing to my knowledge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants