IETF Logo Mail Archive

Re: [openpgp] First 4880bis drafts

Aaron Zauner <azet@azet.org> Thu, 05 November 2015 18:19 UTC

Return-Path: <azet@azet.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 037DD1A1B2A for <openpgp@ietfa.amsl.com>; Thu, 5 Nov 2015 10:19:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bp1pL1k2GEod for <openpgp@ietfa.amsl.com>; Thu, 5 Nov 2015 10:19:08 -0800 (PST)
Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51A5A1A1B34 for <openpgp@ietf.org>; Thu, 5 Nov 2015 10:19:08 -0800 (PST)
Received: by wmll128 with SMTP id l128so21219811wml.0 for <openpgp@ietf.org>; Thu, 05 Nov 2015 10:19:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=azet.org; s=gmail; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=ZIrxL/gWhl5zzs6olS5so6PCwAgBrEVw/hcsoQaqheI=; b=VwVvrndDIK4TVrgymi1BsBhmzYkAREC2Drwr1b9xNfbrCZncoTiBuDvs8eI1Z+LnZd t6W2YS7dQCw8Whp0SgIeCoR09ClEHrOOBzi7YFQYVuWOQUVUS/YffxnpRAlqD3NeJ7CD h40i8/Om79GSvsXDzZ2KIOxgh3RDodo7O8Y4M=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-type; bh=ZIrxL/gWhl5zzs6olS5so6PCwAgBrEVw/hcsoQaqheI=; b=Dni95JlSYyb7gbSsglFyfbjdNxtDJfEaTh71Z+v0BBj2j+2sY2e4w72zcn01kFYPdD F0ovmbJfbwFQwW4b95kOuXQklrY6+Zn4hNNaNpPiEhKC7qpKyjTWXGXbWfZt88m/9Fna s/uXyZORXjih5XMQxCioxr8Jo4uqnSYe3dkach7KqLXRGXH5AlIqcUtqgs/a9z4faTzt 5Axy9cEwfl5ybqSa6zisJsy83N/P6I49I/LFJZenrrEU13MqcFvVPEUL0wQBSy78x2cl hG5FFYTvdOdYD7xFnvegedZUHvKbwUUbsxWPd/eJEynKb55/BrXpJafaavDzCKqNZjp/ K3NQ==
X-Gm-Message-State: ALoCoQkxrL0mae12UOUFgYX60TWEm/cCcZU35eUw0tb+7PULpiqDf1JnYgjmkqFu04Y3v82XMDRu
X-Received: by 10.28.216.7 with SMTP id p7mr5243725wmg.61.1446747546878; Thu, 05 Nov 2015 10:19:06 -0800 (PST)
Received: from [10.0.1.189] ([86.59.96.182]) by smtp.gmail.com with ESMTPSA id ki7sm8218298wjc.28.2015.11.05.10.19.05 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 05 Nov 2015 10:19:06 -0800 (PST)
Message-ID: <563B9D9B.6020603@azet.org>
Date: Thu, 05 Nov 2015 19:19:07 +0100
From: Aaron Zauner <azet@azet.org>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: "brian m. carlson" <sandals@crustytoothpaste.net>
References: <87lhaet2cq.fsf@vigenere.g10code.de> <20151104182705.86af2e43c8@baae13974eb4556> <20151105013051.GD3896@vauxhall.crustytoothpaste.net>
In-Reply-To: <20151105013051.GD3896@vauxhall.crustytoothpaste.net>
X-Enigmail-Version: 1.2.3
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="------------enig5D6A46E7E9EE9DE45B3F38E3"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/E7GSDJbBokeZTgXydWSJw1h59gQ>
Cc: Werner Koch <wk@gnupg.org>, openpgp@ietf.org
Subject: Re: [openpgp] First 4880bis drafts
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Nov 2015 18:19:10 -0000


brian m. carlson wrote:
> As Werner pointed out, Camellia has been around for some time.  It's
> also good to have enough diversity that if someone comes out with a
> major attack against AES, we're not totally sunk.  Camellia is a Feistel
> cipher, while AES is a substitution-permutation network, which means
> that attacks are unlikely to work against both.

Ok - so what's the threat model here? Are we really expecting AES to be
broken anytime soon? Really? And we're suggesting to keep ciphers around
that have seen far less cryptanalysis?

...

> I believe Google's End-to-End is using the NIST curves, and there are
> already keys using these curves.  I think Curve25519 and Goldilocks
> would be valuable due to their rigidity and the CFRG endorsement.

Wasn't aware that end2end already has a userbase (after all, for a very
long time the GitHub repo stated 'experimental code - do not use').
Likewise Curve25519 is available in GnuPG expert mode (it says use is
discouraged though - and keyservers won't accept it).

Aaron

v2.23.0 | Report a Bug | By Email