diff options
Diffstat (limited to '')
| -rw-r--r-- | doc/DETAILS | 31 |
1 files changed, 12 insertions, 19 deletions
diff --git a/doc/DETAILS b/doc/DETAILS index e204b44b0..81b9dce5d 100644 --- a/doc/DETAILS +++ b/doc/DETAILS @@ -131,6 +131,9 @@ Key generation 8) Continue with step 4 if we did not find a prime in step 7. 9) Find a generator for that prime. + This algorithm is based on Lim and Lee's suggestion from the + Crypto '97 proceedings p. 260. + Layout of the TrustDB @@ -158,7 +161,9 @@ Record type 1: validity value from the dir record can be used. 1 u32 locked flags 1 u32 timestamp of trustdb creation - 1 u32 timestamp of last modification + 1 u32 timestamp of last modification which may affect the validity + of keys in the trustdb. This value is checked against the + validity timestamp in the dir records. 1 u32 timestamp of last validation (Used to keep track of the time, when this TrustDB was checked against the pubring) @@ -183,8 +188,9 @@ Record type 2: (directory record) 1 u32 cache record 1 byte ownertrust 1 byte dirflag - 1 byte validity of the key calucalted over all user ids - 19 byte reserved + 1 byte maximum validity of all the user ids + 4 byte time of last validity check. + 15 byte reserved Record type 3: (key record) @@ -247,7 +253,7 @@ Record type 6 (sigrec) 6 times 1 u32 Local_id of signators dir or shadow dir record 1 byte Flag: Bit 0 = checked: Bit 1 is valid (we have a real - directory record for this) + directory record for this) 1 = valid is set (but my be revoked) @@ -276,7 +282,7 @@ Record type 8: (shadow directory record) -Record type 9: (cache record) +Record type 9: (cache record) NOT USED -------------- Used to bind the trustDB to the concrete instance of keyblock in a pubring. This is used to cache information. @@ -298,13 +304,7 @@ Record type 9: (cache record) 1 byte number of marginal trusted signatures. 1 byte number of fully trusted signatures. (255 is stored for all values greater than 254) - 1 byte Trustlevel - 0 = undefined (not calculated) - 1 = unknown - 2 = not trusted - 3 = marginally trusted - 4 = fully trusted - 5 = ultimately trusted (have secret key too). + 1 byte Trustlevel (see trustdb.h) Record Type 10 (hash table) @@ -459,13 +459,6 @@ Other Notes to keep them small. -Supported targets: ------------------- - powerpc-unknown-linux-gnu (linuxppc) - hppa1.1-hp-hpux10.20 - - - |