MIME-Version: 1.0
Sender: hallam@gmail.com
In-Reply-To: <29347FB0-BFF6-42C4-B489-302342F6F2C0@blighty.com>
References: <2793611.63lxTaCm4r@kitterma-e6430>
 <CAMm+Lwiu=bkQTmQsaaM6_-_kcPi6DEH3VPnJfB=3jDRtiGSyaQ@mail.gmail.com>
 <29347FB0-BFF6-42C4-B489-302342F6F2C0@blighty.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
Date: Thu, 22 Jun 2017 20:01:28 -0400
Message-ID: <CAMm+LwgcVbOxmd_BZXY=V0H3w5zZnsWYxvyZ1mM6H9vQL24Z9g@mail.gmail.com>
To: Steve Atkins <steve@blighty.com>
Cc: dcrup@ietf.org
Content-Type: multipart/alternative; boundary="001a113c239e957cc60552954dbb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dcrup/AMDkSwnPEYH3TtiOXM0KXk7K_Z8>
Subject: Re: [Dcrup] Hashed Key Records
Precedence: list

--001a113c239e957cc60552954dbb
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Thu, Jun 22, 2017 at 7:51 PM, Steve Atkins <steve@blighty.com> wrote:

>
> (and maybe be specific about what embedded whitespace means)
>
> These all seem good features..
>
> I'm reminded of the $1$... style password hashes. Immediately recognizabl=
e
> in
> general, but including enough embedded information that you know which
> spec to follow.
>

=E2=80=8BThe other thing I would like is the ability to truncate fingerprin=
ts to
arbitrary lengths by truncating the string specifying the fingerprint. In
all but a few applications, a fingerprint with a workfactor of 2^118 is
sufficient to prevent most attacks.=E2=80=8B That is 25 characters in my pr=
oposal
(since there is a one byte algorithm identifier prefix).

There are also some hacks that can be used for compressing the fingerprint
but I don't think these would be relevant here.

--001a113c239e957cc60552954dbb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:small">On =
Thu, Jun 22, 2017 at 7:51 PM, Steve Atkins <span dir=3D"ltr">&lt;<a href=3D=
"mailto:steve@blighty.com" target=3D"_blank">steve@blighty.com</a>&gt;</spa=
n> wrote:<br></div><div class=3D"gmail_extra"><div class=3D"gmail_quote"><b=
lockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px =
#ccc solid;padding-left:1ex"><span class=3D""><br>
</span>(and maybe be specific about what embedded whitespace means)<br>
<br>
These all seem good features..<br>
<br>
I&#39;m reminded of the $1$... style password hashes. Immediately recogniza=
ble in<br>
general, but including enough embedded information that you know which<br>
spec to follow.<br></blockquote><div><br></div><div class=3D"gmail_default"=
 style=3D"font-size:small">=E2=80=8BThe other thing I would like is the abi=
lity to truncate fingerprints to arbitrary lengths by truncating the string=
 specifying the fingerprint. In all but a few applications, a fingerprint w=
ith a workfactor of 2^118 is sufficient to prevent most attacks.=E2=80=8B T=
hat is 25 characters in my proposal (since there is a one byte algorithm id=
entifier prefix).</div><div class=3D"gmail_default" style=3D"font-size:smal=
l"><br></div><div class=3D"gmail_default" style=3D"font-size:small">There a=
re also some hacks that can be used for compressing the fingerprint but I d=
on&#39;t think these would be relevant here.</div></div></div></div>

--001a113c239e957cc60552954dbb--