Re: [CFRG] Psychic Signatures

Peter Gutmann <pgut001@cs.auckland.ac.nz> Fri, 22 April 2022 09:10 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C70933A10BA for <cfrg@ietfa.amsl.com>; Fri, 22 Apr 2022 02:10:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, LOTS_OF_MONEY=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lpIG21R_vyRt for <cfrg@ietfa.amsl.com>; Fri, 22 Apr 2022 02:10:16 -0700 (PDT)
Received: from au-smtp-delivery-117.mimecast.com (au-smtp-delivery-117.mimecast.com [103.96.21.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22A693A1104 for <cfrg@irtf.org>; Fri, 22 Apr 2022 02:10:15 -0700 (PDT)
Received: from AUS01-SY4-obe.outbound.protection.outlook.com (mail-sy4aus01lp2172.outbound.protection.outlook.com [104.47.71.172]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id au-mta-61-myPpqLCkNxCm9xzvSDen5A-1; Fri, 22 Apr 2022 19:10:10 +1000
X-MC-Unique: myPpqLCkNxCm9xzvSDen5A-1
Received: from SY4PR01MB6251.ausprd01.prod.outlook.com (2603:10c6:10:10b::10) by SY4PR01MB6281.ausprd01.prod.outlook.com (2603:10c6:10:109::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5186.15; Fri, 22 Apr 2022 09:10:09 +0000
Received: from SY4PR01MB6251.ausprd01.prod.outlook.com ([fe80::b1ff:c012:f28a:c1a0]) by SY4PR01MB6251.ausprd01.prod.outlook.com ([fe80::b1ff:c012:f28a:c1a0%9]) with mapi id 15.20.5186.015; Fri, 22 Apr 2022 09:10:09 +0000
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: IRTF CFRG <cfrg@irtf.org>, David Jacobson <david@dmjacobson.com>
Thread-Topic: [CFRG] Psychic Signatures
Thread-Index: AQHYVNnTrRXxz2Yo1UGZx8lZbXvhuaz55yCOgAAJFQCAAEecDYAAuaaAgABVGwCAAGC+Kg==
Date: Fri, 22 Apr 2022 09:10:09 +0000
Message-ID: <SY4PR01MB62519B1EE1177740A9FE4C22EEF79@SY4PR01MB6251.ausprd01.prod.outlook.com>
References: <SY4PR01MB62519FEA53D39AABAF0BD0F4EEF49@SY4PR01MB6251.ausprd01.prod.outlook.com> <2CBA5AE5-DF84-4E9C-85DA-4DC38464710A@ericlagergren.com> <SY4PR01MB6251CA4D5F7C83FA564FD204EEF49@SY4PR01MB6251.ausprd01.prod.outlook.com> <2438a7cd-e0f7-685b-ad47-e9ba5995a5a0@mail.muni.cz> <87FFD633-DAF5-44B8-A2BF-55B547616560@dmjacobson.com>
In-Reply-To: <87FFD633-DAF5-44B8-A2BF-55B547616560@dmjacobson.com>
Accept-Language: en-NZ, en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 166b2164-fc9b-4894-fbfd-08da243fe6a2
x-ms-traffictypediagnostic: SY4PR01MB6281:EE_
x-ms-exchange-atpmessageproperties: SA|SL
x-microsoft-antispam-prvs: <SY4PR01MB62813BC7EC12C45E17E0275AEEF79@SY4PR01MB6281.ausprd01.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SY4PR01MB6251.ausprd01.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(76116006)(66946007)(55016003)(186003)(9686003)(26005)(83380400001)(6506007)(7696005)(122000001)(66476007)(66556008)(64756008)(110136005)(8676002)(66446008)(33656002)(38100700002)(38070700005)(86362001)(2906002)(52536014)(316002)(8936002)(786003)(4744005)(71200400001)(508600001)(5660300002); DIR:OUT; SFP:1101
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: gYhI+U354UQxZJUKBqQ3Djkgj1ketSllUhmF/GGoBEJuVuFQfpFefombwo+PgVB1GrRBCZs1q26uB9jLUsCW/QBXBkfeWD7TpaHptkgbqywYfue/2S6L+RZTUhTfGYQLegWOBben1ZTWBTR3wBkRvJ4Bwm01IkJgC4HGWYXSkS8XfyXV5DamR5al/DAG0eBuZ6UKuKRc0TQOhPbGqdKEoFEs6udUY4AE6rSp2+5S5Qmss62T8058nBB0HOsT9yVeyHr/BN8OcJgmuu8TOIcBLETvk2kedvwfDs7wd+3PKSyA1Fy2S1/GWF4RURI9Zr17rAhu9DrEtrHZ0tx182kA+9hnth/7ugBlPz8AlsraHLzM6TWlMcEAfyyxrwf1u0vs7zkObgpEYINT+0UmRrOuCIBbi4KRak+hjD5HFzRvozI97gZ2TobRLb5mh+u6w+qiOlzyNFU48VYfD+JBNbeIu3kmqhawanPirO7b93k/6LdhlrXQLGjouJj+CDZaBm0vWORb+JXanp6WqI0ugfoUbyVnz8GdMWkd5y7r5f+djCD0B0gCBOXz+bbxdmU7bjYNb/H/tjMuPyadIOIkj/XvSrQYTxDtG/SKBxlfLFY93ysXHDFA7eOmbgSmuPJFC4K3SBOJr0YsxV1ICyIusXuZ95XHx3a6p/bCt9pEmGvc6qHLcvLpSOqc4BSIwSzna1rAsT7XcCBWQQxkHD0fNABGF6Nq+LnqJcxtGz59feI404T+BoTf/PLt5AYWJvMDTpGcRla5cNrmodrnnyusfNI1NnSjD/Nn5+ps+fsRklu8GCXj/cBumcpQRIE38uwoTtNDfRDkfVVC0CglnI6mRX5UOsvWj9pwW5w3ygrzSmfNjgxKQ3A/jESyIJStwe849XLA0aXBGPoYCZBlXMC4Bty7z5QzBvR+G7b15bYXqcAwZ3s9fJ8PaqIX/F+I51ap/b/imlepiwmZZqVE4ImAOcrMraa4UaAFrFc81k7DYCqKPz98jwAgpb3L4sE2TdxJjbNh5AJAG69TDwPZ2lvuP7jF2vXGqzMZOe27qR55sxJr6QPh2om1DhYl9lgDs3lkEpnDO6iHTVvPOaAFM0GV9ZQYiIoXnpM5rR8vZsItWeRbRVp/gyOWlADubXpc84tGyJPGMX2HH9SCCOGIWK8AQ/h6j47e58JqF4QI3UVQSRnfmH4DkHWgVyqhRoo1tXR7uNLbYW3xCfnNf8k2DIXIsNTX+g1Hw6lr2rL8bjCznvq9eRhVd1TpjflkJ3qnb/hxJbwCUSOfYxOJdfZngXdoE5FZe/5hI+1h9vV0OWfMe5BIl7gczSprATXUEXroWcIqsSrFxKWjMXDxEcPTX+XrQsM4tHSm9h3u9Kw/f4Qfu2Y1EbIebX5MWlYuTkPfXxn5xpYFECyA4IIWTH7fmgAoOeda7Dk4Cg6i/Yy9CSEDZfIJ39Ou9pvtvXX6Vmcqqq5y5/LtdLkiKn7OZqzyUMqBge6MxwA8Fj3trYWIkU5YKMRsrpTPun1zRZSPKPecpEQxQuN26GJmotiu124WlONYAAtk+dIw9pwVPI8LHpykbYH6T6vpkeZflbSLi5AEir1ZWGjd/sj2jHvr8evCx/Vb9db3hA91TNRVI9zynoFMd3aR4ukRthi4ez5LVXE6qSEG5FXaS+YZoqdbOa6XYmtKoO9WWYsqYnxqDH39re093SakGffhtioFVwbvxeWisGU4TNvAGroavUXJnYXXWXhwP48f8W6ei9CC6SF/9N+7yRfsDtk=
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SY4PR01MB6251.ausprd01.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 166b2164-fc9b-4894-fbfd-08da243fe6a2
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Apr 2022 09:10:09.7014 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: WfJU0IS0UhmGdUUmyp2Y8prawK4KQOkmGsSs0r3VAHxNvU4yHv5rlKLRKFDwZ1hvLYlk7ceEJgD4ZndB2FwkDCecC2Ub3gPGgUHB4+hSplM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SY4PR01MB6281
Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CAU17A13 smtp.mailfrom=pgut001@cs.auckland.ac.nz
X-Mimecast-Spam-Score: 0
X-Mimecast-Originator: cs.auckland.ac.nz
Content-Language: en-NZ
Content-Type: text/plain; charset="WINDOWS-1252"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/r2LFe9jb9UNWnh6nJ-KrkrAy_Wk>
Subject: Re: [CFRG] Psychic Signatures
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Apr 2022 09:10:19 -0000

David Jacobson <david=40dmjacobson.com@dmarc.ietf.org> writes:

>I suspect that the reason for the library requiring a separate validation
>function was patent US 7215773.

It'd be interesting to hear from people working on embedded crypto libraries,
but I think it'd be due to a different reason.  In terms of the patent I
suspect most people don't even know that it exists (I didn't until now) and
even if they did, having the input verification function in the library right
next to the public/private-key function isn't doing anything to avoid it.

I assumed it was because the verification operations are quite expensive for a
process that's already slow (compared to RSA's much-faster-than-signing
signature verification), and building the input verification into the
signature verification would make it even slower.  By skipping the input
verification you can appear to be faster than your competitors/RSA/some
arbitrary line in the sand.

Peter.