[openpgp] Issues from a novice reader

Stuart Schechter <stuart.schechter@gmail.com> Sat, 26 June 2021 02:57 UTC

Return-Path: <stuart.schechter@gmail.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 309C63A1A87 for <openpgp@ietfa.amsl.com>; Fri, 25 Jun 2021 19:57:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RLexdDDdgske for <openpgp@ietfa.amsl.com>; Fri, 25 Jun 2021 19:57:46 -0700 (PDT)
Received: from mail-ed1-x536.google.com (mail-ed1-x536.google.com [IPv6:2a00:1450:4864:20::536]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A2D13A1A8C for <openpgp@ietf.org>; Fri, 25 Jun 2021 19:57:46 -0700 (PDT)
Received: by mail-ed1-x536.google.com with SMTP id i24so16104080edx.4 for <openpgp@ietf.org>; Fri, 25 Jun 2021 19:57:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=TpxZu4vihWB4TC/3MXpXuvWAW9uBOmx+uSllM0T/9eU=; b=MleZIufD0FcJZLvxc2Lf9G+D84H1fVJKhQe1giQVrNQOhQ+dFay7jus1cCY/3xtH1s 2zA38+F2XfeOUE/brL0Tw6qGFaMS+W9zhwEZ3tjgyGEmA8OjjuDS25+9MuRNYiuc7fW/ PJ6E2l9VrISZKAAHpsr55mopKGn9k2bZlU1WCycrj2VOr+r2sJyp73umr3/4fk9jpLnY YnCHASRfg25D9vpt1ioPqhJP++/KxDba3HPZj5BSi4ecgnUuDd1NYdtREwEktNsmOLF3 oCptvVyXYoqnPS9Xw9tvpLV66OcAaatwT3Z+oL4v8D78eEza8J0AjSlfxhoLCshmHhzR Wwmw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=TpxZu4vihWB4TC/3MXpXuvWAW9uBOmx+uSllM0T/9eU=; b=AbWRINcuq+VqezmSERioZlo04poEupMweEtBZf1mmDpPqqrK9ZfUydee7+v1RQBaU+ mRu3L8Vmg0cIqvShHtmjXinUT7CpZYDkD04QfOrqJ6xgChxWbyYGiy8C8TiUje9fWeOI iXAW395QpzVM0b2vw3WSCGFiItABju9443iUByZbr9RSkBTQ3H6PFAZYLJeKUmYzP8D9 dtdLEz0rnKc+vyJu+V6rjanwXYnBTzy4JUig4+KqpYvW7YqDBoOZIaNGww6/MsIsUGUy f2n2QHsAvoPV8tdyFIzXSzrTirFYBGOeGLrVBs6S5gGxTvztDXd1vstXvktTeFc9xo31 2riw==
X-Gm-Message-State: AOAM531+1l/xnrDyxn0wBVFawf2jHYPeKArcLvXyJRsOAA0B1VFLmv/t LWliZknY3fB7V1WxOMEc6ARJX5+zEfITGjLDt7QDzHSTuZHNlg==
X-Google-Smtp-Source: ABdhPJzMFrZGjcUBu/1QC6PjX03/sFoInmeGTYj6Q5D/Hj+Q9GQE2G9iWSp1LLKPQqMrnJFtGRoxeHOOb1k09oiX7zM=
X-Received: by 2002:a05:6402:31f8:: with SMTP id dy24mr5357186edb.287.1624676263956; Fri, 25 Jun 2021 19:57:43 -0700 (PDT)
MIME-Version: 1.0
From: Stuart Schechter <stuart.schechter@gmail.com>
Date: Sat, 26 Jun 2021 11:57:32 +0900
Message-ID: <CAJio-2dhYvL1T9Mv1tz+P5zju+P8k--D1k4QJHnb7GaqB0ahng@mail.gmail.com>
To: openpgp@ietf.org
Content-Type: multipart/alternative; boundary="0000000000009694d105c5a26bc2"
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/8r541PM8mbKLEeBG5FUuxD3Wg3U>
X-Mailman-Approved-At: Sat, 26 Jun 2021 04:58:37 -0700
Subject: [openpgp] Issues from a novice reader
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 26 Jun 2021 03:09:42 -0000

Hi everyone.

I've been combing through the working spec as I try to add support for
transferring keys into PGP format into a crypto library (the DiceKeys
seeded cryptography library) and an app that generates keys from physical
randomness (DiceKeys).  This is my first time working with PGP keys and
with the spec so I have been trying to understand it with a fresh set of
eyes.

I've filed five issues based on points where I'm genuinely confused.  I
haven't engaged with an IETF group for over a decade so I hope you'll
excuse me if I'm doing so incorrectly.

The issues are:
   #32 <https://gitlab.com/openpgp-wg/rfc4880bis/-/issues/32>: an
inconsistency between the number of stated optional fields (4) and actual
optional fields (3).

   #33 <https://gitlab.com/openpgp-wg/rfc4880bis/-/issues/33>: ambiguity
about whether checksums are included in a v5 length packet

   #34 <https://gitlab.com/openpgp-wg/rfc4880bis/-/issues/34>: challenges
for the reader to identify which fields changed in v5 packets

   #35 <https://gitlab.com/openpgp-wg/rfc4880bis/-/issues/35>: ambiguity
about whether packet headers are included when a secret-key packet starts
with the contents of the corresponding public-key packet.

   #36 <https://gitlab.com/openpgp-wg/rfc4880bis/-/issues/36>: confusion
about if/how one SHOULD self-sign secret keys that cannot themselves be
used to create signatures (e.g., EC DH keys)

Thanks so much,

Stuart Schechter
DiceKeys / UC Berkeley