IETF Logo Mail Archive

[openpgp] Re: WGLC for draft-ietf-openpgp-pqc

Simo Sorce <simo@redhat.com> Wed, 14 May 2025 21:00 UTC

Return-Path: <simo@redhat.com>
X-Original-To: openpgp@mail2.ietf.org
Delivered-To: openpgp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 349D928A4C9B for <openpgp@mail2.ietf.org>; Wed, 14 May 2025 14:00:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=redhat.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WOYlXAlS_3Zl for <openpgp@mail2.ietf.org>; Wed, 14 May 2025 14:00:33 -0700 (PDT)
Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A4F4628A4C91 for <openpgp@ietf.org>; Wed, 14 May 2025 14:00:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1747256433; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=gU9xswliumfeWsNEVCBfw2eSNMLDhizbLttXhlEZdt8=; b=KpAbdsSOk0QCtzFDDodwjA3ZivPFGUHjTRXfjsBkmiel7jiifTC9cSZ5R2Fsyf3ycfwLPA k53nK15fjkFWamdE9E5UTKwyeZQ1wMdYn0ACSCFx6B43lskILt+mTG2UjZH1lK4frdYN56 TmGSHCYVgIvPv8NhGNEYbEHQzUMeYoQ=
Received: from mail-qk1-f198.google.com (mail-qk1-f198.google.com [209.85.222.198]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-608-oZUlnsFGN8-4fn6d_Stelg-1; Wed, 14 May 2025 17:00:22 -0400
X-MC-Unique: oZUlnsFGN8-4fn6d_Stelg-1
X-Mimecast-MFC-AGG-ID: oZUlnsFGN8-4fn6d_Stelg_1747256421
Received: by mail-qk1-f198.google.com with SMTP id af79cd13be357-7c5cd0f8961so54634385a.1 for <openpgp@ietf.org>; Wed, 14 May 2025 14:00:22 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747256421; x=1747861221; h=mime-version:user-agent:content-transfer-encoding:organization :references:in-reply-to:date:to:from:subject:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=gU9xswliumfeWsNEVCBfw2eSNMLDhizbLttXhlEZdt8=; b=PB8azx5bjSim5UXRiL1v6xHfs1I2hxhgGy+8qQWwdk6bIpogi0Mbod8Y1siScPCyqW d0gsUa/msUIO9vbGrnpBSGQVXzegqqy7MtXepprivuER24m6/oA9Z+G3c+Fx47laABgu x/Ur7pazuCY19DhMkfImbGhWTQ8SyE3raoHAryT3mlhQG7PN9E19UCqnsl59zBXBeDKC Jf0FSfqfeJFB7RgQujS5ZJTGDNV73NPY9MYgQuaz2C0II+YFUF+z5x8T2F2Vh3LTQ10t dqMXE44f3mLA7W7zEtoD9+gc9vdihEzbwl3+E05FQ+czT8Z/HmyiL8tmaJLS3OFDzS6B hDHA==
X-Forwarded-Encrypted: i=1; AJvYcCU/9ovfjzRQ/0b+zc0w7LX2Iw6B6aXEYsWxWkCL7UH2lijx/E2oCnYywDBjJ9qgHXw9TDQS00rr@ietf.org
X-Gm-Message-State: AOJu0YzYOdUO9HcinE299ewWTRDsMO8mjdncwhxmy9NNSz+TLB9HobSZ GysBmZGp6V7IxE0fbwQsfxQOEcQXasN/EyagMfS9SM7XcpX56bMeLI/MH3fUvJ0rimUzClUC8LO TO3Yn3siqUaVfayMOYymfmigoBD9XvMJxJdWqtvJf4c4pu6Xw5BrxUw==
X-Gm-Gg: ASbGnct08bYx5mdECAsgd1McRs0ym8dJhYeVtkY6mKODAu+1DF4RRXaNdplstOaSeut mvAI/Yxso2XEm2JAbUJhM9JOHXVAWLkH5v2MYU4aTZKTavMEzRo8ubKOkdqGbMQG2AcpDHbeljN e5nojBPvSIzAgjcQaBbF0ugwfGhGndLXNjzO4HlHrL/z3vuh1U0t8ixZvJT8mxHzOtGgmIzscru Ai0l17NzW4MTdCymKl3ooBsSyNG8X+Kah6pm0k28BIStoAxsVKLtXh9265u6yc+7WEhbXlAzWWR fe7FMA==
X-Received: by 2002:a05:620a:19aa:b0:7c7:bb07:af07 with SMTP id af79cd13be357-7cd287e2236mr609607385a.22.1747256421487; Wed, 14 May 2025 14:00:21 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IGgIE8o2A5PUdl7CYAe2hDtqDWF+k9RLbQoNGNISRnajiGMBmLPyyAF+7zkBrO5AbaJi7B7Vg==
X-Received: by 2002:a05:6214:27cb:b0:6f5:11a9:51fe with SMTP id 6a1803df08f44-6f896ea686bmr93724766d6.36.1747256410263; Wed, 14 May 2025 14:00:10 -0700 (PDT)
Received: from m8.users.ipa.redhat.com ([2603:7000:9400:fe80::18e]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6f6e3a523b7sm85592576d6.95.2025.05.14.14.00.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 May 2025 14:00:09 -0700 (PDT)
Message-ID: <0991ab64738bb8a01cf9f57168e24037d2aa8446.camel@redhat.com>
From: Simo Sorce <simo@redhat.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>, openpgp@ietf.org
Date: Wed, 14 May 2025 17:00:08 -0400
In-Reply-To: <0676f05f-dfaf-4316-b289-b921c46302ad@cs.tcd.ie>
References: <174470653269.1286532.14892820163225351018@dt-datatracker-64c5c9b5f9-hz6qg> <LSicuu3DyGQdz5FlANti-HGJ6GuAucc5BKufbsCa603EsSZ0q1XMXYvt_OubLd0UQkg0gh2F--9y9WpoqWfQu5XU-KEcJ15GG66cSFk9ByU=@wussler.it> <87wmblcr8i.fsf@fifthhorseman.net> <87ikm5eoey.fsf@fifthhorseman.net> <1a15934d-50be-46dc-8300-189834c70e3f@cs.tcd.ie> <d7cab02150ce1153b257a5036708302c64b5ffe9.camel@redhat.com> <0676f05f-dfaf-4316-b289-b921c46302ad@cs.tcd.ie>
Organization: Red Hat
User-Agent: Evolution 3.56.1 (3.56.1-1.fc42)
MIME-Version: 1.0
X-Mimecast-Spam-Score: 0
X-Mimecast-MFC-PROC-ID: 686T_L7dm2yHctUBoEhNUimIIc76T5U9FwnecDhaPW0_1747256421
X-Mimecast-Originator: redhat.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: UKWD7ELJZM54AZHNBES6UOH5D5M5AKHL
X-Message-ID-Hash: UKWD7ELJZM54AZHNBES6UOH5D5M5AKHL
X-MailFrom: simo@redhat.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: WGLC for draft-ietf-openpgp-pqc
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/-QnUlqBY0r9kjmB2FLTfM6dbI40>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>

On Wed, 2025-05-14 at 17:44 +0100, Stephen Farrell wrote:
> Hiya,
> 
> On 14/05/2025 17:35, Simo Sorce wrote:
> > When using HW tokens with small storage it may be required to be able
> > to use the same private key for multiple signature schemes
> 
> Is that really a real use-case?
> 
> Modern tokens can store many private keys, so it seems a bit of
> a stretch to me. (And using the same private value with different
> alg ids seems ickky.)

Things may have changed, but until recently I could store only up to 3
openpgp keys on a Yubikey.

But even if this limitation goes away I do not see a way to enforce
such a rule with a MUST so it is kind of academic to me.

Simo.

-- 
Simo Sorce
Distinguished Engineer
RHEL Crypto Team
Red Hat, Inc

v2.31.3 | Report a Bug | By Email | System Status