Re: [openpgp] Partial review of the crypto refresh

[Daniel Huigens <[e-mail]>]

Hi Andrew,

> I’m not convinced this makes it any clearer. Maybe “the process is
> repeated a large number of times”?

But what process? This still sounds to me like multiple hashes are
created, each one containing the salt and passphrase once, or something
like that. But that's not what actually happens, there is only one hash
that's created (well - unless the hash output is too short, but that's
not what this paragraph is about) and the data is passed to that
multiple times. So I think it's important to clarify that it's the hash
input that's repeated, not the entire hashing process.

> IMO this should be kept in. Even if it is not currently true, it may
> become true again during the lifetime of this standard.

Sure, but.. this applies to any standard that makes use of encryption.
Do other standards contain such warnings? And should we really warn
about this, given that - if the warning is heeded - it sounds like the
course of action would be to reduce security to comply with the
"government control"? It doesn't really sound like a security
consideration to me, in any case.

Best,
Daniel