Check whether private key matches public key

nuts-foundation / nuts-registry

Distributed registry for storing and querying healthcare care providers their vendors and technical endpoints.

GNU General Public License v3.0

0 stars 0 forks source link

Open reinkrul opened 4 years ago

reinkrul commented 4 years ago

To detect errornous configuration, we should detect when we load or use a private key which doesn't match its registered public counterpart.

We should detect this since it can take a while to find out this is the case:

other parties might be encrypting data with the public key which can't be decrypted using our private key
we might be signing data with a private key which can't be verified by other parties

woutslakhorst commented 4 years ago

The hard part is for nodes that can only see the public key and thus do not know it's wrong.