A signed nonce is enough to prove private key ownership - as far as it can. Replay attack is unavoidable. Uuid is useful for tracking.
But how feasible is this? Here (Hungary, Eastern Europe) we have drugs packed in preprinted boxes, and the serial ids are just pushed into the paper. Per-box personalized aztec code would push up the packaging price significantly. But for dangerous/pricey drugs this may be acceptable. But this is not Go related yet, so maybe we should move this to somewhere else. -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.