Security defaults

[Cantor, Scott]

On 5/18/14, 4:37 AM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>I thought we were actually talking about encryption, since that's where
>it's enumerated right now.  There aren't algorithm lists for decryption
>(and validation), just whitelists and blacklists.  I would assume that
>if we're going to blacklist RSA 1.5, we'd do it for for both encryption
>and decryption (just like you see right now for MD5, for both signing
>and validation).

Yeah, it's just the primary purpose of blacklisting it is decryption, to
prevent the IdP from compromising its own key by attempting a decrypt with
that algorithm. Blacklisting on the signing side is actually more of a
good citizen kind of thing, to avoid hurting others.

The SP doesn't have independent lists for all  the modes, it's just a big
list of identifiers for all algorithms.

-- Scott