Re: Signature Subpacket 10?

Werner Koch <wk@gnupg.org> Thu, 30 June 2005 12:19 UTC

Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1Dny0l-0006Qm-JN for openpgp-archive@megatron.ietf.org; Thu, 30 Jun 2005 08:19:19 -0400
Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA04839 for <openpgp-archive@lists.ietf.org>; Thu, 30 Jun 2005 08:19:16 -0400 (EDT)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j5UBti0Z084896; Thu, 30 Jun 2005 04:55:44 -0700 (PDT) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j5UBtiAm084895; Thu, 30 Jun 2005 04:55:44 -0700 (PDT)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j5UBtgbM084877 for <ietf-openpgp@imc.org>; Thu, 30 Jun 2005 04:55:43 -0700 (PDT) (envelope-from wk@gnupg.org)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.34 #1 (Debian)) id 1DnwmZ-0001hG-7C for <ietf-openpgp@imc.org>; Thu, 30 Jun 2005 13:00:35 +0200
Received: from wk by localhost with local (Exim 4.34 #1 (Debian)) id 1Dnxal-0000MU-Nt; Thu, 30 Jun 2005 13:52:27 +0200
To: Ian Grigg <iang@systemics.com>
Cc: Ben Laurie <ben@algroup.co.uk>, OpenPGP <ietf-openpgp@imc.org>
Subject: Re: Signature Subpacket 10?
References: <42C3ACFC.9070905@algroup.co.uk> <87wtoc6sso.fsf@wheatstone.g10code.de> <200506301216.29338.iang@systemics.com>
From: Werner Koch <wk@gnupg.org>
Organisation: g10 Code GmbH
OpenPGP: id=5B0358A2; url=finger:wk@g10code.com
Date: Thu, 30 Jun 2005 13:52:27 +0200
In-Reply-To: <200506301216.29338.iang@systemics.com> (Ian Grigg's message of "Thu, 30 Jun 2005 12:16:26 +0100")
Message-ID: <877jgc6ozo.fsf@wheatstone.g10code.de>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>

On Thu, 30 Jun 2005 12:16:26 +0100, Ian Grigg said:

> at the time - indeed Loius Freeh stood up in
> front of Congress and used this very feature as
> proof that it was possible to force all crypto
> programs to escrow messages for the FBI...

I did not know that; interesting.  The ARR became known due to a bug
in the implementation at that time.

> not be documented in the standard.  I don't
> know if GPG implements it, or even if it the PGP

No, never did it.  We only have a warning for that bug:

    if ( type == SIGSUBPKT_ARR && !hashed ) {
        fprintf (listfp,
                 "\tsubpkt %d len %u (additional recipient request)\n"
                 "WARNING: PGP versions > 5.0 and < 6.5.8 will automagically "
                 "encrypt to this key and thereby reveal the plaintext to "
                 "the owner of this ARR key. Detailed info follows:\n",
                 type, (unsigned)length );
    }



Shalom-Salam,

   Werner