[openpgp] Re: IETF 122 reportback (please confirm minutes)

[Daniel Huigens <[e-mail]>]

Hi dkg & all,

I made some edits / corrections to the minutes at
https://notes.ietf.org/notes-ietf-122-openpgp synchronously /
after you copy pasted them but before I saw this email.

Most were just clarifications of what was said in the meeting, but I
also have to note a correction to something I said in the meeting that
was wrong, namely that there's an HKDF step in the symmetric encryption
of session keys. I confused myself as there's an HKDF in various other
places in RFC9580, but there isn't one here.

I also don't think it's necessary as the AEAD mode is bound to the key
material in an encrypted private key, and I also don't think there's a
significant risk of reaching the maximum number of encryptions per key
(2^32 for GCM is the lowest, but even that is a lot).

But, let me know if anyone disagrees or thinks there should be an HKDF
step there. I'll also think a bit more about whether the above could
be a concern in some cases.

In any case, apologies for the confusion!

Best,
Daniel


On Thursday, March 20th, 2025 at 17:35, Daniel Kahn Gillmor wrote:

> Hey OpenPGP folks--
> 
> We just completed the IETF 122 OpenPGP WG meeting.
> 
> Thanks to Phillip Hallam-Baker and Benson Muite for taking notes.
> 
> Thanks to all the speakers, including Justus Winter, Falko Strenzke,
> Daniel Huigens, and Andrew Gallagher.
> 
> The notes are now recorded at
> https://datatracker.ietf.org/doc/minutes-122-openpgp-202503200800/
> 
> Please review, and let us know at [e-mail] if you want to
> suggest edits or clarifications to the minutes.
> 
> --dkg
> _______________________________________________
> openpgp mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]