Re: [openpgp] Fingerprints

Werner Koch <wk@gnupg.org> Thu, 16 April 2015 07:11 UTC

Return-Path: <wk@gnupg.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 423A21B2AFF for <openpgp@ietfa.amsl.com>; Thu, 16 Apr 2015 00:11:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level:
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oea1FXiZ-qX9 for <openpgp@ietfa.amsl.com>; Thu, 16 Apr 2015 00:11:38 -0700 (PDT)
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68F331B2A1F for <openpgp@ietf.org>; Thu, 16 Apr 2015 00:11:38 -0700 (PDT)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.80 #2 (Debian)) id 1YidxY-0002LK-JP for <openpgp@ietf.org>; Thu, 16 Apr 2015 09:11:36 +0200
Received: from wk by vigenere.g10code.de with local (Exim 4.84 #3 (Debian)) id 1Yidvq-0007SL-6t; Thu, 16 Apr 2015 09:09:50 +0200
From: Werner Koch <wk@gnupg.org>
To: Christoph Anton Mitterer <calestyo@scientia.net>
References: <CAMm+LwhbB+-MnGRBCvprgAGOuu+5CJ2rgod7EBGOQR5UNVrspQ@mail.gmail.com> <87y4m0ozlt.fsf@vigenere.g10code.de> <20150415135105.GJ3106@singpolyma-liberty> <FE2717DC-3950-4536-B83D-BD005D2F26A6@callas.org> <1429128262.1702.41.camel@scientia.net>
Organisation: g10 Code GmbH
X-message-flag: Mails containing HTML will not be read! Please send only plain text.
OpenPGP: id=F2AD85AC1E42B367; url=finger:wk@g10code.com
Mail-Followup-To: Christoph Anton Mitterer <calestyo@scientia.net>, "openpgp\@ietf.org" <openpgp@ietf.org>
Date: Thu, 16 Apr 2015 09:09:49 +0200
In-Reply-To: <1429128262.1702.41.camel@scientia.net> (Christoph Anton Mitterer's message of "Wed, 15 Apr 2015 22:04:22 +0200")
Message-ID: <87egnk8s76.fsf@vigenere.g10code.de>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/IbvRvzd3z7uJOVpfHcrbEgQjOcA>
Cc: "openpgp@ietf.org" <openpgp@ietf.org>
Subject: Re: [openpgp] Fingerprints
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Apr 2015 07:11:40 -0000

On Wed, 15 Apr 2015 22:04, calestyo@scientia.net said:

> But shouldn't one define better the number to be either a string?
> Sure a one byte number with 255 possible future algorithms seem plenty

All algorithm identifiers have by spec values below 128.  If in any
future time this number space is not sufficient, we can resort to the
TLV or UTF-8 tricks of using the high bit to encode larger numbers.  It
keeps our fingerprints as short as possible but give theoretical space
to extend it.

Short fingerprints are important; if they are getting too long they
won't serve a purpose because the public key could be used directly.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.