Re: [Trustedjava-support] How to Encrypt by the private part of AIK

[FADY F. <fad...@ya...>]

Dear Ronald
Thank U for your response

My Question is 
If we have two entities 1 and 2 with Keys AIK1 and AIK2 respectively
can entity 1 sign by AIK1private then encrypt by AIK2public
  so entity 2 decrypt by AIK2private then by AIK1public?

If this cant not be done, can we make two binding keys where there parents are 
AIK1 and AIK2 respectively, and do by these binding keys what we try to do by 
AIKs in the first question?

Thanks 



________________________________
From: Ronald Tögl <ron...@ia...>
To: tru...@li...
Cc: FADY FADY <fad...@ya...>
Sent: Mon, October 18, 2010 10:10:07 AM
Subject: Re: [Trustedjava-support] How to Encrypt by the private part of AIK

Hi,

I'm not quite sure what your question is. In case that you'd like to use the AIK 
private part for decryption, I doubt that this is a legal operation for this 
signing-type key. If you need to encrypt data to an TPM-identified remote host, 
you can use Binding together with certification of the Binding key.

hth,
Ronald

On 10/17/2010 11:24 AM, FADY FADY wrote: 

>I use the public part of AIK Key to encrypt a data and it works, I just ask how 
>can I do it but by the private part of AIK.
>


--  Dipl.-Ing. Ronald Tögl          phone +43 316/873-5502 Secure and Correct 
Systems      fax   +43 316/873-5520 IAIK                            
ron...@ia... Graz University of Technology   
http://www.iaik.tugraz.at