| ▲ | simoncion 6 hours ago | |||||||||||||||||||||||||
At the time of this writing, the subtitle of the submission here on HN is
Notably, this subtitle doesn't appear on the blog post.Anyway. I only see claims that the public key can be determined from license barcodes, not that a signing key can be determined. What am I missing or misunderstanding? To head off one potential retort: While it's true that one can use a public key to encrypt data for the recipient that has the private half of that key or verify that data has been signed by the possessor of the private half of that key, I'm almost 100% certain that it's not possible to use that public key to sign data would validate to other folks as being signed by the private half of that key. It has been more than a decade since I've thought about any of this, but isn't the entire point of public-key cryptography that the public part can be distributed to your worst enemy without causing you any trouble at all? | ||||||||||||||||||||||||||
| ▲ | trollbridge 6 hours ago | parent | next [-] | |||||||||||||||||||||||||
Yes. The subtitle is wrong. He recovers the public key, due to the way EDCSA signing works. | ||||||||||||||||||||||||||
| ▲ | kccqzy 5 hours ago | parent | prev [-] | |||||||||||||||||||||||||
Yup. The person who submitted this to HN is probably way less knowledgeable on this topic than the writer of the article. The article clearly labels the recovered keys as “recovered public keys” at the top. | ||||||||||||||||||||||||||
| ||||||||||||||||||||||||||