Re: [openpgp] First 4880bis drafts

Aaron Zauner <> Thu, 05 November 2015 18:19 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 037DD1A1B2A for <>; Thu, 5 Nov 2015 10:19:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id bp1pL1k2GEod for <>; Thu, 5 Nov 2015 10:19:08 -0800 (PST)
Received: from ( [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 51A5A1A1B34 for <>; Thu, 5 Nov 2015 10:19:08 -0800 (PST)
Received: by wmll128 with SMTP id l128so21219811wml.0 for <>; Thu, 05 Nov 2015 10:19:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=gmail; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=ZIrxL/gWhl5zzs6olS5so6PCwAgBrEVw/hcsoQaqheI=; b=VwVvrndDIK4TVrgymi1BsBhmzYkAREC2Drwr1b9xNfbrCZncoTiBuDvs8eI1Z+LnZd t6W2YS7dQCw8Whp0SgIeCoR09ClEHrOOBzi7YFQYVuWOQUVUS/YffxnpRAlqD3NeJ7CD h40i8/Om79GSvsXDzZ2KIOxgh3RDodo7O8Y4M=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-type; bh=ZIrxL/gWhl5zzs6olS5so6PCwAgBrEVw/hcsoQaqheI=; b=Dni95JlSYyb7gbSsglFyfbjdNxtDJfEaTh71Z+v0BBj2j+2sY2e4w72zcn01kFYPdD F0ovmbJfbwFQwW4b95kOuXQklrY6+Zn4hNNaNpPiEhKC7qpKyjTWXGXbWfZt88m/9Fna s/uXyZORXjih5XMQxCioxr8Jo4uqnSYe3dkach7KqLXRGXH5AlIqcUtqgs/a9z4faTzt 5Axy9cEwfl5ybqSa6zisJsy83N/P6I49I/LFJZenrrEU13MqcFvVPEUL0wQBSy78x2cl hG5FFYTvdOdYD7xFnvegedZUHvKbwUUbsxWPd/eJEynKb55/BrXpJafaavDzCKqNZjp/ K3NQ==
X-Gm-Message-State: ALoCoQkxrL0mae12UOUFgYX60TWEm/cCcZU35eUw0tb+7PULpiqDf1JnYgjmkqFu04Y3v82XMDRu
X-Received: by with SMTP id p7mr5243725wmg.61.1446747546878; Thu, 05 Nov 2015 10:19:06 -0800 (PST)
Received: from [] ([]) by with ESMTPSA id ki7sm8218298wjc.28.2015. (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 05 Nov 2015 10:19:06 -0800 (PST)
Message-ID: <>
Date: Thu, 05 Nov 2015 19:19:07 +0100
From: Aaron Zauner <>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: "brian m. carlson" <>
References: <> <20151104182705.86af2e43c8@baae13974eb4556> <>
In-Reply-To: <>
X-Enigmail-Version: 1.2.3
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="------------enig5D6A46E7E9EE9DE45B3F38E3"
Archived-At: <>
Cc: Werner Koch <>,
Subject: Re: [openpgp] First 4880bis drafts
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 05 Nov 2015 18:19:10 -0000

brian m. carlson wrote:
> As Werner pointed out, Camellia has been around for some time.  It's
> also good to have enough diversity that if someone comes out with a
> major attack against AES, we're not totally sunk.  Camellia is a Feistel
> cipher, while AES is a substitution-permutation network, which means
> that attacks are unlikely to work against both.

Ok - so what's the threat model here? Are we really expecting AES to be
broken anytime soon? Really? And we're suggesting to keep ciphers around
that have seen far less cryptanalysis?


> I believe Google's End-to-End is using the NIST curves, and there are
> already keys using these curves.  I think Curve25519 and Goldilocks
> would be valuable due to their rigidity and the CFRG endorsement.

Wasn't aware that end2end already has a userbase (after all, for a very
long time the GitHub repo stated 'experimental code - do not use').
Likewise Curve25519 is available in GnuPG expert mode (it says use is
discouraged though - and keyservers won't accept it).