[Curdle] Server Fingerprints using UDF

[Phillip Hallam-Baker <[e-mail]>]

One of the things I am trying to persuade groups writing crypto
applications is that we should adopt a common format for fingerprints, Why?

1) Because having a standard approach is the right thing to do

2) Because a direct trust mechanism (i.e. a fingerprint) is useful in every
crypto application

  * OpenPGP Key fingerprints
  * SSH server keys AND it would be nice to do public keys one day
  * Roots of trust for PKIX and S/MIME

3) Because simply taking SHA-2 of 'stuff' opens possibilities for semantic
substitution attacks

4) Adopting a common format encourages innovation that can benefit all
applications that share that format.

5) Adopting a single fingerprint format encourages the development of
applications to manage them across applications - like the Mathematical
Mesh which I am working on.


We are not going to get to one true representation of keys. But I think we
could get to a fingerprint format that every application can use without
the risk of semantic substitution attacks.

I am not too bothered about the possibility that someone generates an
OpenPGP key and somehow persuades S/MIME to send a message using the same
key. If I am being really strict, I can see it is not ideal.

What does worry me however is that if Mallet gives Alice his key
fingerprint for OpenPGP, she puts it in her 'trusted key ring' and it turns
out that when the SSH app interprets the sequence of bits that were
fingerprinted they have some different semantics.


My current proposal is in:

https://tools.ietf.org/html/draft-hallambaker-udf-03

This allows use SHA-2-512 and SHA-3-512 as the hash algorithms. The default
presentation is as a text string encoded in BASE32 encoding with spacing
every 5 characters to promote readability.

So a SSH server fingerprint might look like:  MB2GK-6DUF5-YGYYL-JNY5E-RWSHZ


One of the things I find rather difficult with SSH is that the key files
for the applications I have seen in the wild do not comply with the spec,
lines don't wrap at 72 characters. Rather worse, the files have the full
public key in them which makes them a real pain to use when configuring
files.

I would really like to be able to configure my GitHub accounts without
having to cut and paste lines with a thousand characters of text. It would
be nice if the SSH config files could use fingerprints rather than the
actual keys.