Re: Verifying Authenticity of IBIS Models

>> From: cer@Cadence.COM (Chrisopher E. Reid)
>> To: ibis@vhdl.org
>> Subject: Re: Verifying Authenticity of IBIS Models

>> I like the idea. How about creating a field in the Ibis
>> model itself for the public key?

>> Chris

The problem there is that a disreputable person might generate a NEW
public/secret key pair, use the secret key to sign the bogus model
file, and then include the matching public key in the file. The
signature verifier would pass the resulting bogus file...

Hence the need for publicly-readable tables of public keys, which ONLY
trusted authorities can write and update.

--Eric
Received on Mon Sep 19 07:29:21 1994