11 May
2022
11 May
'22
2:21 p.m.
On 11 May 2022, at 13:20, Anand Buddhdev <anandb@ripe.net> wrote:
Our main reason is that we do not have separate storage for the KSKs and ZSKs. They were all stored together on the signer. Additionally, our ECDSA KSKs and ZSKs were of the same size. Therefore, there is no additional protection offered by separating them, and so it is reasonable to use a CSK.
Makes sense. Like everything else you do. Thanks Anand.