signature construct (was: Re: [ietf-dkim] DKIM BOF -- draft charter and agenda)

[Earl Hood]

On October 14, 2005 at 12:08, Stephen Farrell wrote:

> PS: Just so's I can reconstruct it for myself later, the construct
> might end up something like:
>    body-hash = Hash1(nonce, body)
>    sig-bits  = Private-key(Hash2(nonce,header-stuff, body-hash))

Actually the "data" hash would be more like:

  data-hash = Hash1(nonce, header-stuff, body)
  sig-bits  = Private-key(Hash2(nonce, DKIM-Signature-field))

I.e. The digital signature is only on the DKIM-Signature field,
nothing else.

--ewh