IETF Logo Mail Archive

Re: [openpgp] OpenPGP private certification [was: Re: Manifesto - who is the new OpenPGP for?]

Phillip Hallam-Baker <phill@hallambaker.com> Wed, 01 April 2015 17:38 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 930DB1A01C6 for <openpgp@ietfa.amsl.com>; Wed, 1 Apr 2015 10:38:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XCHUFEjaMUAw for <openpgp@ietfa.amsl.com>; Wed, 1 Apr 2015 10:38:29 -0700 (PDT)
Received: from mail-lb0-x229.google.com (mail-lb0-x229.google.com [IPv6:2a00:1450:4010:c04::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A102A1A01AE for <openpgp@ietf.org>; Wed, 1 Apr 2015 10:38:29 -0700 (PDT)
Received: by lbbzk7 with SMTP id zk7so25568418lbb.0 for <openpgp@ietf.org>; Wed, 01 Apr 2015 10:38:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=WSj92eRgUF1dFn8E1fKrSa9JfHoN7XUJdYCtowd9Brk=; b=c/Yg/hSPD0n0mJ9aTau2KgKze79f45BW/gHtZumaPVe+YUGAgO73Zf69qZeX18DU0+ uOou28CHsNyvO3JwDNGYx2lV9eQh/NvaP1vBjCsuPQ01cBbkO6tt5IoRFIbCYbekiHfB SIv1rwLDofJf05KC8/4Tj1rg8WUfgLUX6kQ2hympRo72ZBZ/6x2AxVwBVYYuXCGRIMa3 Qj2aX0nQFIxvJKqSmLU8yzzGoT2hWnfUIDustV3TM4YdNgj2zEJusi6H89rNBTINlBvt KbOhT5caxQX5/Ag2Jhdq33YsFiMod3br8xcvcclAOFHZR20g07bkegwgTRL9w7sZDjIn 3i0w==
MIME-Version: 1.0
X-Received: by 10.112.161.66 with SMTP id xq2mr36888011lbb.103.1427909908011; Wed, 01 Apr 2015 10:38:28 -0700 (PDT)
Sender: hallam@gmail.com
Received: by 10.112.147.165 with HTTP; Wed, 1 Apr 2015 10:38:27 -0700 (PDT)
In-Reply-To: <87ego3g3v8.fsf@alice.fifthhorseman.net>
References: <CAA7UWsUz65C0GAQo8Yf7ZOeT9BYy+NLV5pbbPg+Ok0-72ca1eA@mail.gmail.com> <1426721882.4249.72.camel@scientia.net> <5510578A.80304@iang.org> <1427140788.10191.75.camel@scientia.net> <5510B7CF.8060308@iang.org> <1427168189.10191.241.camel@scientia.net> <5511FE82.6010807@iang.org> <1427243451.10191.375.camel@scientia.net> <5512F137.80702@iang.org> <CAHBU6isgirHnx+gHP+OiHuvhzD+1OTCShCHEkhWcqEmUn9qnzQ@mail.gmail.com> <CAMm+LwiXKf1DvgbHaZoJnKdCVbak-jderv6Z8KDs9xPEbUuYQQ@mail.gmail.com> <1427343948.23692.14.camel@scientia.net> <CAMm+Lwi5bVTujuazTXw7oRty7n5RtsObEfNrJzmbtPiOb-X25g@mail.gmail.com> <m27fu3fsom.fsf@usma1mc-0csx92.kendall.corp.akamai.com> <CAMm+LwjBuZfP4NwRCy23_d9eRtcfUiLKdyZOu+jYT72HfB0g9g@mail.gmail.com> <87vbhlt8tg.fsf@alice.fifthhorseman.net> <CAMm+Lwjo5eyCHNahqWcwUBoaevCw2s3WAeq-2=maW=JEpCFWxA@mail.gmail.com> <87ego3g3v8.fsf@alice.fifthhorseman.net>
Date: Wed, 01 Apr 2015 13:38:27 -0400
X-Google-Sender-Auth: U3FQyhJTDPq1iHNhsI9yn-uXgfk
Message-ID: <CAMm+Lwh3CiHV4L0PJFFnXdjo3prFOY=OZn5yTwW15BXQWU4RFw@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/7Q4lQkXaoo9e3cfOTU9qnsz4MFk>
Cc: Christoph Anton Mitterer <calestyo@scientia.net>, Brian Sniffen <bsniffen@akamai.com>, IETF OpenPGP <openpgp@ietf.org>
Subject: Re: [openpgp] OpenPGP private certification [was: Re: Manifesto - who is the new OpenPGP for?]
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Apr 2015 17:38:31 -0000

On Wed, Apr 1, 2015 at 1:22 PM, Daniel Kahn Gillmor
<dkg@fifthhorseman.net> wrote:
> On Sat 2015-03-28 15:24:38 -0400, Phillip Hallam-Baker wrote:
>> By that I mean fixed in time. I agree that it does not need to be
>> public. Only the hash needs to be enrolled.
>
> Normal e-mail addresses are low-entropy, right?  this would suggest that
> they're reversible in most cases without a lot of effort (e.g. consider
> nsec3-walker, which has similar properties [0]).  how does enrolling
> only the hash address the privacy considerations effectively?
>
>      --dkg
>
> [0] http://dnscurve.org/nsec3walker.html

I was planning to enroll the hash of the keysigning which would
include the signature at minimum.

If we are doing DSA then it isn't really a problem as the signatures
are non deterministic. You can get into issues with RSA though (but
not in this case).

v2.23.0 | Report a Bug | By Email