Re: [openpgp] Summary of WG status

Werner Koch <wk@gnupg.org> Wed, 23 August 2017 09:53 UTC

Return-Path: <wk@gnupg.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C434132BDF for <openpgp@ietfa.amsl.com>; Wed, 23 Aug 2017 02:53:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.899
X-Spam-Level:
X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZwELo4jg6wLN for <openpgp@ietfa.amsl.com>; Wed, 23 Aug 2017 02:53:32 -0700 (PDT)
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C484F132BE1 for <openpgp@ietf.org>; Wed, 23 Aug 2017 02:53:31 -0700 (PDT)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.89 #1 (Debian)) id 1dkSLp-0002rO-8z for <openpgp@ietf.org>; Wed, 23 Aug 2017 11:53:29 +0200
Received: from wk by wheatstone.g10code.de with local (Exim 4.84 #3 (Debian)) id 1dkSHR-0004hm-7D; Wed, 23 Aug 2017 11:48:57 +0200
From: Werner Koch <wk@gnupg.org>
To: "brian m. carlson" <sandals@crustytoothpaste.net>
Cc: openpgp@ietf.org
References: <20170712223852.zmnvw4iwvziqsynq@genre.crustytoothpaste.net> <20170810014751.erufvruh2lm5cdpe@genre.crustytoothpaste.net> <1b68dbbb-38ac-6370-fe20-76be795b2634@sixdemonbag.org> <20170811202924.yiwzjom3tag3ivkk@genre.crustytoothpaste.net>
Organisation: The GnuPG Project
X-message-flag: Mails containing HTML will not be read! Please send only plain text.
OpenPGP: url=https://k.gnupg.net/80615870F5BAD690333686D0F2AD85AC1E42B367
Mail-Followup-To: "brian m. carlson" <sandals@crustytoothpaste.net>, openpgp@ietf.org
Date: Wed, 23 Aug 2017 11:48:56 +0200
In-Reply-To: <20170811202924.yiwzjom3tag3ivkk@genre.crustytoothpaste.net> (brian m. carlson's message of "Fri, 11 Aug 2017 20:29:24 +0000")
Message-ID: <87mv6qty0n.fsf@wheatstone.g10code.de>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=Syria_Fortezza_64_Vauxhall_Cross_fundamentalist_INSCOM_counter=intel"; micalg=pgp-sha256; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/ApDggtljG_iIEGqFgCPegn_6q9A>
Subject: Re: [openpgp] Summary of WG status
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Aug 2017 09:53:34 -0000

On Fri, 11 Aug 2017 22:29, sandals@crustytoothpaste.net said:

> Okay.  Let me offer a fingerprint proposal, then: SHA-256.  Basically,
> identical to Werner's proposal, except with the full SHA-256.  That

I am a bit surprised that 5 months after the proposal and 6 weeks after
-02 we now get back to the fingerprint thing.  Given the lack of
comments I assumed we agreed on that.

Anyway, to move forward I agree to modify this and remove the
truncation.  I just pushed the commit below.


Salam-Shalom,

   Werner

======
commit b95774fb924743198c228d3b02a2e2263dca751d
Author: Werner Koch <wk@gnupg.org>
Date:   Wed Aug 23 11:46:29 2017 +0200

    Use all 32 octets of a V5 fingerprint.

	Modified   middle.mkd
diff --git a/middle.mkd b/middle.mkd
index ec864c4..65c91a0 100644
--- a/middle.mkd
+++ b/middle.mkd
@@ -1280,11 +1280,11 @@ #### {5.2.3.14} Regular Expression
 
 #### {5.2.3.15} Revocation Key
 
-(1 octet of class, 1 octet of public-key algorithm ID, 20 or 25 octets
+(1 octet of class, 1 octet of public-key algorithm ID, 20 or 32 octets
 of fingerprint)
 
 V4 keys use the full 20 octet fingerprint; V5 keys use the
-leftmost 25 octets of the fingerprint
+full 32 octet fingerprint
 
 Authorizes the specified key to issue revocation signatures for this
 key.  Class octet must have bit 0x80 set.  If the bit 0x40 is set, then
@@ -1636,8 +1636,7 @@ #### Issuer Fingerprint
 64 bits of the fingerprint.
 
 Note that the length N of the fingerprint for a version 4 key is 20
-octets.  For a version 5 key the leftmost 25 octets of the fingerprint
-are used (N=25).
+octets; for a version 5 key N is 32.
 
 
 ### {5.2.4} Computing Signatures


-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.