recently asked on sci.crypt:

What kind of signature scheme is this? The RSA envelope is filled with 00 || MD5-Hash(message) || 00 ... 00 (padded on the right with 00s up to the RSA modulus length).

David Wagner wrote: dw> I seem to remember that an early version of Digicash's dw> ecash protocol may have used this scheme Any recollection of whether this might be on the mark? http://groups.google.com/groups?selm=b7fkrv$ofg$1@agate.berkeley.edu http://groups.google.com/groups?selm=5a9000c2.0304140745.55ea14e2@posting.go... -- John Kane Boston, MA (eastern US) IETF-OpenPGP working group --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah@ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'