Re: [Openpgp-dt] first set of PRs created from step-by-step branch

[Paul Wouters <[e-mail]>]

On Jul 23, 2021, at 23:11, Daniel Kahn Gillmor <[e-mail]> wrote:
> 
> 
> With no hats on, I reviewed these branches, and i've tried to mark
> things as "approved" where they seem reasonable.
> 
> I think we already have v5 keys in the draft, so i think what you are
> calling "v5-keys" is actually "v5 SKESK".

Yes, i did.

> As i wrote over on
> https://gitlab.com/openpgp-wg/rfc4880bis/-/merge_requests/54, i think
> the v5 SKESK and "AEAD-style" S2K #253 really depend on our AEAD
> definition, and i think it'll be easier for us to have the AEAD
> conversation first.
> 
> If you'd like, i can try to propose an alternate, short series that just
> includes the current AEAD specification plus the AEAD-specific set of
> test vectors.  If we can get consensus on that, then moving through the
> v5 SKESK and #253 S2K should be simpler, bite-size pieces by comparison.

That would be good.

> If it would be useful, i can also propose a variant of AEAD with many
> fewer knobs as a comparison.  Each knob can cause negotiation failures
> and deprecation difficulties, and i'm worried that the current amount of
> flexibility could saddle future implementations with a lot of technical
> debt.

How would that interfere with current deployment ? I would like this to be a separate issue on the tracker.

> this makes sense, we can always review the outstanding changes in the
> step-by-step branch to pull them in once we've tackled the harder stuff

I’m still trying to get more text moved in, but yes we can always do that later.

Paul