Re: [Gnu-arch-users] oh the heck with it -- tla-1.2pre0

[Florian Weimer]

Aaron Bentley wrote:

> On Wed, 2003-12-31 at 08:54, Andrew Suffield wrote:
> 
> > People have tried to abuse the encryption form for one-to-many
> > purposes before now (either via a shared secret, which defeats the
> > point, or via encrypting multiple times, which is an infeasible use of
> > resources). 
> 
> The classic description of public/private key architecture has the
> public key being used to encrypt a session key.  Couldn't the same
> session key be encrypted with multiple public keys?  Or is that the
> "infeasible use of resources"?

OpenPGP supports this pretty well.  It's not a big problem,
cryptographically speaking.  The biggest problem is key management, and
if you can solve that, you are fine.