RE: Algorithm Selections

Joseph,

Sorry for the long delay, but I wanted to discuss your question with others
in the Energy Industry before responding.

Regarding,

> So with respect to your request of "support" PGP, could you be
> specific so I
> can include it in [2]? Are you advocating it be the mandatory
> algorithm in
> one or more of the algorithm types, or a particular key structure?
>
> [0]
> http://search.ietf.org/internet-drafts/draft-blake-wilson-xmldsig-
> ecdsa-00.txt
> [1] http://www.w3.org/TR/2000/CR-xmldsig-core-20001031/
> [2] http://www.w3.org/2000/11/15-xml-encryption-req.html


The main requirement for the Energy industry is the ability to utilize the
installed base of PGP keys for both encryption and
digital signature purposes. XMLDsig [1] already supports PGP keys for
signing XML content. It appears the Energy industry requirements are already
represented in [2] under the section titled "Processing", subsection
"Transforms":

" Signature Transform
  The specification must address how to use XML Signature with XML
Encryption such that multiple parties may selectively
  encrypt and sign portions of documents that may already be signed and
encrypted."

Hal's involvement in these discussions leads me to believe that PGP will
ultimately provide the functionality defined by XML Dsig and XML encryption.
Fair assumption Hal?

Thanks,

Dick Brooks (co-chair Gas Industry Standards Board Electronic Delivery
Mechanism Committee)
Group 8760
110 12th Street North
Birmingham, AL 35203
dick@8760.com
205-250-8053
Fax: 205-250-8057
http://www.8760.com/

InsideAgent - Empowering e-commerce solutions

Received on Sunday, 17 December 2000 11:53:47 UTC