Re: [auth48] AUTH48: RFC-to-be 9380 <draft-irtf-cfrg-hash-to-curve-16> for your review

Sandy Ginoza <sginoza@amsl.com> Sat, 22 July 2023 22:43 UTC

Return-Path: <sginoza@amsl.com>
X-Original-To: auth48archive@ietfa.amsl.com
Delivered-To: auth48archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09943C151079; Sat, 22 Jul 2023 15:43:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_RATIO_08=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7J2e0OGslHSa; Sat, 22 Jul 2023 15:42:59 -0700 (PDT)
Received: from c8a.amsl.com (c8a.amsl.com [4.31.198.40]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C27AC15153F; Sat, 22 Jul 2023 15:42:59 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by c8a.amsl.com (Postfix) with ESMTP id 7E58B424B441; Sat, 22 Jul 2023 15:42:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from c8a.amsl.com ([127.0.0.1]) by localhost (c8a.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lXGv59E7RNcQ; Sat, 22 Jul 2023 15:42:59 -0700 (PDT)
Received: from smtpclient.apple (unknown [204.108.18.107]) by c8a.amsl.com (Postfix) with ESMTPSA id B849F424B440; Sat, 22 Jul 2023 15:42:58 -0700 (PDT)
From: Sandy Ginoza <sginoza@amsl.com>
Message-Id: <91CDC98E-DA71-4B5C-9156-F396088547BC@amsl.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_C3B6B575-2934-4598-AB8F-CEBADD6944E3"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.120.0.1.13\))
Date: Sat, 22 Jul 2023 15:42:18 -0700
In-Reply-To: <C586956B-8D0B-4E62-A7E2-D48CA6DB9F12@heapingbits.net>
Cc: "Stanislav V. Smyshlyaev" <smyshsv@gmail.com>, Armando Faz <armfazh@cloudflare.com>, IRSG <irsg@irtf.org>, Nick Sullivan <nick@cloudflare.com>, Nick Sullivan <nicholas.sullivan@gmail.com>, RFC Editor <rfc-editor@rfc-editor.org>, "Riad S. Wahby" <rsw@cs.stanford.edu>, Samuel Scott <sam.scott@cornell.edu>, auth48archive <auth48archive@rfc-editor.org>
To: Christopher Wood <caw@heapingbits.net>
References: <81F16154-75C1-4AE1-953F-2DC5E55BAF0A@heapingbits.net> <C586956B-8D0B-4E62-A7E2-D48CA6DB9F12@heapingbits.net>
X-Mailer: Apple Mail (2.3654.120.0.1.13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/auth48archive/bq5fCgTo3UR01jsX_taDv28wnuA>
Subject: Re: [auth48] AUTH48: RFC-to-be 9380 <draft-irtf-cfrg-hash-to-curve-16> for your review
X-BeenThere: auth48archive@rfc-editor.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Archiving AUTH48 exchanges between the RFC Production Center, the authors, and other related parties" <auth48archive.rfc-editor.org>
List-Unsubscribe: <https://mailman.rfc-editor.org/mailman/options/auth48archive>, <mailto:auth48archive-request@rfc-editor.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/auth48archive/>
List-Post: <mailto:auth48archive@rfc-editor.org>
List-Help: <mailto:auth48archive-request@rfc-editor.org?subject=help>
List-Subscribe: <https://mailman.rfc-editor.org/mailman/listinfo/auth48archive>, <mailto:auth48archive-request@rfc-editor.org?subject=subscribe>
X-List-Received-Date: Sat, 22 Jul 2023 22:43:04 -0000

Hi Chris,

Is there a tool you recommend for this?  The text wraps as expected in the text output, so a diff of the text isn’t helpful.  I'm assuming you want a diff of the outputs; we don’t have a good tool for this.  I searched for some html diff tools, but I didn’t find anything particularly helpful.  Robert Sparks mentioned one he finds less bad and will try to help us get it set up this week.  I’m looking at diff tools for PDFs, which might work.  I’m doing some testing.  I will also check in with the tools team to see when a fix might be available. 

In case I’m mistaken and you want to see diffs of the code, they are available here:

https://www.rfc-editor.org/authors/rfc9380_artwork_diff.html
https://www.rfc-editor.org/authors/rfc9380_artwork_zwsp_diff.html

These diffs compare the original html with the sample files mentioned below: rfc9380_artwork.html and rfc9380_artwork_zwsp.html

Both of the files use <artwork> and zwsp, but rfc9380_artwork uses zwsp sparingly and rfc9380_artwork_zwsp uses it more liberally.  

I’m attaching a few screenshots to give you an idea in the meantime. 

Thanks,
Sandy 


Example from rfc9380.pdf (the original output) that shows the text running off the page:






From rfc9380_artwork.pdf - uses zwsp p: and <artwork> for A' and B’ 







From rfc9380_artwork_zwsp.pdf - uses zwsp more liberally; uses <artwork> in the appendixes.





> On Jul 22, 2023, at 5:59 AM, Christopher Wood <caw@heapingbits.net> wrote:
> 
> Friendly bump!
> 
> Sent from my iPhone
> 
>> On Jul 18, 2023, at 2:51 PM, Christopher Wood <caw@heapingbits.net> wrote:
>> 
>> Hi Sandy,
>> 
>> Can you please show us a diff between all versions? It’s hard to assess otherwise.
>> 
>> Thanks,
>> Chris 
>> 
>> Sent from my iPhone
>> 
>>> On Jul 18, 2023, at 2:53 PM, Stanislav V. Smyshlyaev <smyshsv@gmail.com> wrote:
>>> 
>>> 
>>> Hi Sandy,
>>> 
>>> Please feel free to use nicholas.sullivan@gmail.com to contact Nick. 
>>> 
>>> Kind regards,
>>> Stanislav 
>>> 
>>> On Tue, 18 Jul 2023 at 21:47, Sandy Ginoza <sginoza@amsl.com> wrote:
>>> Hi again,
>>> 
>>> We are getting a “message wasn’t delivered” notice for Nick Sullivan <nick@cloudflare.com>.  Please let us know if you have an alternative address we can use to contact Nick.
>>> 
>>> Thanks,
>>> Sandy 
>>> 
>>> 
>>> > On Jul 18, 2023, at 11:34 AM, Sandy Ginoza <sginoza@amsl.com> wrote:
>>> > 
>>> > Greetings all,
>>> > 
>>> > IETF is approaching quickly - there is still a chance to publish before it starts.  Do you have a preference or input regarding the options below?  Another option would be to ask the tools team to prioritize a fix, but that likely will not happen in the next few days.  
>>> > 
>>> > Please let us know if you have any questions. 
>>> > 
>>> > Thanks,
>>> > Sandy 
>>> > 
>>> > 
>>> > 
>>> >> On Jul 14, 2023, at 12:33 PM, Sandy Ginoza <sginoza@amsl.com> wrote:
>>> >> 
>>> >> Hi Christopher, Authors,
>>> >> 
>>> >> I’ve decided to part ways with GitHub for now, as we’ll need to focus on the outputs to review these issues.  xml2rfc is not wrapping lines in the HTML and PDF properly (lines wrap okay in text).  Many of the lines run off the page, and information is lost.  See Sections 8.3 - 8.5, 8.7, and 8.8, and all of Appendix E.1 in the PDF (more prominent in the PDF).  We have added some notes to the existing GitHub issue 687.  
>>> >> 
>>> >> The files are available here:
>>> >>   https://www.rfc-editor.org/authors/rfc9380.xml
>>> >>   https://www.rfc-editor.org/authors/rfc9380.txt
>>> >>   https://www.rfc-editor.org/authors/rfc9380.html
>>> >>   https://www.rfc-editor.org/authors/rfc9380.pdf
>>> >> 
>>> >> 
>>> >> A workaround is to use <artwork>.  I have made test files so you can see what the output looks like using <artwork>.  I used <artwork> consistently for the same level of bullets/information (i.e., I used <artwork> for the same level of bullets even if there was no issue with the line lengths).  In an attempt to have the bullets have a similar look across sections, I also used &#8203; (zwsp) in Sections 8.8.1 (for bullet p:) and 8.8.2 (for bullet h_eff:).  
>>> >> 
>>> >> The test files are available here:
>>> >>  https://www.rfc-editor.org/authors/rfc9380_artwork.xml
>>> >>   https://www.rfc-editor.org/authors/rfc9380_artwork.txt
>>> >>   https://www.rfc-editor.org/authors/rfc9380_artwork.html
>>> >>   https://www.rfc-editor.org/authors/rfc9380_artwork.pdf
>>> >> 
>>> >> 
>>> >> A third version, which uses zwsp to get line breaks throughout section 8 and uses <arwtork> in Appendix E is also available.  I’m having trouble getting the second break in the "B =“ bullet in Section 8.4 - I’m still working on this.  The other breaks seem to be working as expected.  
>>> >> 
>>> >> The files associated with the third version are available here:
>>> >>  https://www.rfc-editor.org/authors/rfc9380_artwork_zwsp.xml
>>> >>   https://www.rfc-editor.org/authors/rfc9380_artwork_zwsp.txt
>>> >>   https://www.rfc-editor.org/authors/rfc9380_artwork_zwsp.html
>>> >>   https://www.rfc-editor.org/authors/rfc9380_artwork_zwsp.pdf
>>> >> 
>>> >> 
>>> >> Note: a problem with using &#8203; (zwsp) is the that copy & paste may pick up the invisible characters.  We could also use <br/>, but that will pick up render as a hard break.  
>>> >> 
>>> >> 
>>> >> Please review the files and let us know what you think of these options.  Also, please let us know if you have an alternative that we should try.  
>>> >> 
>>> >> Thanks,
>>> >> Sandy 
>>> >> 
>>> >> 
>>> >> 
>>> >> 
>>> >> 
>>> >> 
>>> >> 
>>> >> 
>>> >>> On Jul 13, 2023, at 7:03 AM, Christopher Wood <caw@heapingbits.net> wrote:
>>> >>> 
>>> >>> I don’t think any of the authors have strong opinions on artwork vs sourcecode. Whatever renders best is the right answer!
>>> >>> 
>>> >>>> On Jul 13, 2023, at 9:52 AM, Sandy Ginoza <sginoza@amsl.com> wrote:
>>> >>>> 
>>> >>>> Hi Christopher,
>>> >>>> 
>>> >>>> We’re almost there!  We ran into an issue while reviewing the output files.  I’ll be adding a PR for the XML file today to see if the workaround is acceptable.  I’ve also been reviewing the <artwork> vs <sourcecode> and wonder if the equations should be marked as <artwork> instead - will add a PR for that as well. 
>>> >>>> 
>>> >>>> Thanks!
>>> >>>> Sandy 
>>> >>>> 
>>> >>>>> On Jul 13, 2023, at 4:53 AM, Christopher Wood <caw@heapingbits.net> wrote:
>>> >>>>> 
>>> >>>>> Hi Sandy,
>>> >>>>> 
>>> >>>>> Thanks again for all your work on this (enormous) document! I think all issues should now be resolved. Please let us know if you need anything else from the editors at this point.
>>> >>>>> 
>>> >>>>> Best,
>>> >>>>> Chris
>>> >>>>> 
>>> >>>>>>> On Jul 3, 2023, at 4:26 PM, Sandy Ginoza <sginoza@amsl.com> wrote:
>>> >>>>>> 
>>> >>>>>> Greetings all,
>>> >>>>>> 
>>> >>>>>> We are seemingly close to finalizing the content of this document.  Please review the remaining open issue #8 and let us know if any updates are needed.  Once this item has been resolved, we will convert the file to XML and post the output for your review. 
>>> >>>>>> 
>>> >>>>>> Thank you,
>>> >>>>>> RFC Editor/sg
>>> >>>>>> 
>>> >>>>>> 
>>> >>>>>> 
>>> >>>>>>> On Jun 26, 2023, at 11:28 PM, Sandy Ginoza <sginoza@amsl.com> wrote:
>>> >>>>>>> 
>>> >>>>>>> Hi Chris,
>>> >>>>>>> 
>>> >>>>>>> There are a couple of remaining open items; see issue #8 and the discussion for PR #57.  
>>> >>>>>>> 
>>> >>>>>>> Assuming none of the authors object to any of the updates, we will convert the document to XML once these items have been addressed.  We will then post the output files so each author can review and approve the RFC for publication.  
>>> >>>>>>> 
>>> >>>>>>> Please let us know if you have any questions or concerns.  
>>> >>>>>>> 
>>> >>>>>>> Thanks,
>>> >>>>>>> Sandy 
>>> >>>>>>> 
>>> >>>>>>> 
>>> >>>>>>>> On Jun 26, 2023, at 7:51 AM, Christopher Wood <caw@heapingbits.net> wrote:
>>> >>>>>>>> 
>>> >>>>>>>> Hi folks,
>>> >>>>>>>> 
>>> >>>>>>>> I went through and approved all open PRs. Is there anything left to resolve at this point?
>>> >>>>>>>> 
>>> >>>>>>>> Thanks,
>>> >>>>>>>> Chris
>>> >>>>>>>> 
>>> >>>>>>>>> On Jun 20, 2023, at 3:05 PM, Lynne Bartholomew <lbartholomew@amsl.com> wrote:
>>> >>>>>>>>> 
>>> >>>>>>>>> Hi, Armando and Riad.
>>> >>>>>>>>> 
>>> >>>>>>>>> We have updated the text listed below as suggested (https://github.com/rfc-editor/draft-irtf-cfrg-hash-to-curve/pull/64).
>>> >>>>>>>>> 
>>> >>>>>>>>> Thank you!
>>> >>>>>>>>> 
>>> >>>>>>>>> RFC Editor/lb
>>> >>>>>>>>> 
>>> >>>>>>>>>> From: "Riad S. Wahby" <notifications@github.com>
>>> >>>>>>>>>> Subject: Re: [rfc-editor/draft-irtf-cfrg-hash-to-curve] Changes-for-issue-46 (PR #63)
>>> >>>>>>>>>> Date: June 19, 2023 at 3:01:49 PM PDT
>>> >>>>>>>>>> To: rfc-editor/draft-irtf-cfrg-hash-to-curve <draft-irtf-cfrg-hash-to-curve@noreply.github.com>
>>> >>>>>>>>>> Cc: lbartholomew-rpc <lbartholomew@amsl.com>, State change <state_change@noreply.github.com>
>>> >>>>>>>>>> Reply-To: rfc-editor/draft-irtf-cfrg-hash-to-curve <reply+AJTCOXWHYLWZ7ADK46437GWCTYBM3EVBNHHGSJ44AI@reply.github.com>
>>> >>>>>>>>>> 
>>> >>>>>>>>>> 
>>> >>>>>>>>>> @kwantam commented on this pull request.In draft-irtf-cfrg-hash-to-curve.md:
>>> >>>>>>>>>>> @@ -3034,7 +3034,7 @@ directly from the indifferentiability of H.
>>> >>>>>>>>>> For case (3), i.e., for H a Merkle-Damgaard hash function, indifferentiability
>>> >>>>>>>>>> follows from {{CDMP05}}, Theorem 3.5.
>>> >>>>>>>>>> In particular, expand\_message\_xmd computes b\_0 by prefixing the message
>>> >>>>>>>>>> -with one block of 0-bytes plus auxiliary information (length, counter, and DST).
>>> >>>>>>>>>> +with one block of zero bytes plus auxiliary information (length, counter, and DST).
>>> >>>>>>>>>> 
>>> >>>>>>>>>> Agreed that it would be good to avoid the garden path, "a block of bytes with length zero".
>>> >>>>>>>>> 
>>> >>>>>>>>> 
>>> >>>>>>>>> 
>>> >>>>>>>>>> From: Armando Faz <notifications@github.com>
>>> >>>>>>>>>> Subject: Re: [rfc-editor/draft-irtf-cfrg-hash-to-curve] Changes-for-issue-46 (PR #63)
>>> >>>>>>>>>> Date: June 19, 2023 at 2:08:11 PM PDT
>>> >>>>>>>>>> To: rfc-editor/draft-irtf-cfrg-hash-to-curve <draft-irtf-cfrg-hash-to-curve@noreply.github.com>
>>> >>>>>>>>>> Cc: lbartholomew-rpc <lbartholomew@amsl.com>, State change <state_change@noreply.github.com>
>>> >>>>>>>>>> Reply-To: rfc-editor/draft-irtf-cfrg-hash-to-curve <reply+AJTCOXUHVK7J62Q2WKLP5J6CTX3DXEVBNHHGSJ44AI@reply.github.com>
>>> >>>>>>>>>> 
>>> >>>>>>>>>> 
>>> >>>>>>>>>> @armfazh commented on this pull request.In draft-irtf-cfrg-hash-to-curve.md:
>>> >>>>>>>>>>> @@ -3034,7 +3034,7 @@ directly from the indifferentiability of H.
>>> >>>>>>>>>> For case (3), i.e., for H a Merkle-Damgaard hash function, indifferentiability
>>> >>>>>>>>>> follows from {{CDMP05}}, Theorem 3.5.
>>> >>>>>>>>>> In particular, expand\_message\_xmd computes b\_0 by prefixing the message
>>> >>>>>>>>>> -with one block of 0-bytes plus auxiliary information (length, counter, and DST).
>>> >>>>>>>>>> +with one block of zero bytes plus auxiliary information (length, counter, and DST).
>>> >>>>>>>>>> 
>>> >>>>>>>>>> ⬇️ Suggested change-with one block of zero bytes plus auxiliary information (length, counter, and DST).
>>> >>>>>>>>>> +with one block of zeros plus auxiliary information (length, counter, and DST).
>>> >>>>>>>>>> 
>>> >>>>>>>>>> Not sure, if the sentence can be interpreted as: "a block that has a length of zero bytes", instead of a block with all zeros.
>>> >>>>>>>> 
>>> >>>>>>> 
>>> >>>>>> 
>>> >>>>> 
>>> >>>> 
>>> >>> 
>>> >> 
>>> >