[OTR-users] RSA key support + Larger DH keys

Ian Goldberg ian at cypherpunks.ca
Mon Mar 28 19:32:02 EST 2005


On Mon, Mar 28, 2005 at 07:22:46PM -0500, Jason Cohen wrote:
> Quoting Ian Goldberg
> 
> >In this version of the protocol, the only key exchange method defined is
> > DSA, and the only key agreement is 1536-bit DH.  This may change in a
> > later version, at the cost of incompatibility with clients that don't
> > understand it.
> 
> Are there plans to change the protocol to support RSA keys or larger
> DH keys, or is this just a hypothetical at this point?

I don't think there's any point to using RSA encryption where DH is used
now, but different DH groups may be possible.  But yes, it's
hypothetical at this time.

There *is* a plausible reason to use RSA signatures instead of DSA in
the initial key exchange, but that's also hypothetical.

   - Ian



More information about the OTR-users mailing list