[openpgp] Re: [Technical Errata Reported] RFC9580 (8466)
Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 28 August 2025 17:26 UTC
Return-Path: <dkg@fifthhorseman.net>
X-Original-To: openpgp@mail2.ietf.org
Delivered-To: openpgp@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 93D925A301D3 for <openpgp@mail2.ietf.org>; Thu, 28 Aug 2025 10:26:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b="Oaf7DPd4"; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b="wm7F+vgF"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id njkgd0oHoI7l for <openpgp@mail2.ietf.org>; Thu, 28 Aug 2025 10:26:39 -0700 (PDT)
Received: from che.mayfirst.org (che.mayfirst.org [IPv6:2001:470:1:116::7]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 039BB5A301BF for <openpgp@ietf.org>; Thu, 28 Aug 2025 10:26:38 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1756401998; h=from : to : cc : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=gRWKZPDIVAPi3q78vTx6+8ngGSZ2Wmd5xjeRw1FKoiU=; b=Oaf7DPd4gSoma8w8Y7+zphdQTB9ejpUijjOHK+ds59zWYWNXvJ0UXrvOPFqbLP4HnyV+n zwpAdPHc6QFe6ZIBA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1756401998; h=from : to : cc : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=gRWKZPDIVAPi3q78vTx6+8ngGSZ2Wmd5xjeRw1FKoiU=; b=wm7F+vgFPPW6ym8Fek9EAzPKAmn3uC4+D+oP5SUZalCFgkn+qR1sOHk/iGahYqj65gihe fp8UeRUQJTm/z+czpkpacn6EhcjWYLyQsCCviaEdlfUqEdj9tUhbyDLW6r+ymUMlAWslDgE /ZI1p2P72B38Gn/rgufKnEOaa5YNCa9amHVgi2+Ma0oCvfA0A/bIuNRuhyemXd3R2pCmNes 3gDCbyJIRxIrg1oCpxW4pIpQQJbGjjktA/gf6qnn18nNVzPa2qJmYFFBnEmxtWw4NZg7hfO LqDfdWxdWuVITHrYnbgBEyoJj41euUmuGMG0iaRzqiwwKpyHx8heSnY6He3A==
Received: from fifthhorseman.net (AMERICAN-CI.ear2.NewYork6.Level3.net [4.59.214.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id 33DF1F9B2; Thu, 28 Aug 2025 13:26:37 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id 635AD13F64B; Thu, 28 Aug 2025 13:26:33 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: RFC Errata System <rfc-editor@rfc-editor.org>, paul.wouters@aiven.io, d.huigens@protonmail.com, justus@sequoia-pgp.org, gniibe@fsij.org, debcooley1@gmail.com, paul.wouters@aiven.io, stephen.farrell@cs.tcd.ie
In-Reply-To: <20250618155825.0F77726BB0E@rfcpa.rfc-editor.org>
References: <20250618155825.0F77726BB0E@rfcpa.rfc-editor.org>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= xjMEZXEJyxYJKwYBBAHaRw8BAQdA5BpbW0bpl5qCng/RiqwhQINrplDMSS5JsO/YO+5Zi7HNFzxk a2dAZmlmdGhob3JzZW1hbi5uZXQ+wsARBBMWCgB5AwsJB0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcS78JIJ7JbALqPiKEmva7/Pp16WwXWm9hbe5+B/UvnfwMVCggCmwEC HgEWIQTUdwQMcMIValwphUm7fpEBSV5r9wUCZadfkAUJBdnwRQAKCRC7fpEBSV5r9yNXAP442N0c zvisBroQSKKpo+OWm2JpnEJWoVheeJvoRtkBGQEA+edHylby8IGcNccq7rmM2rAXdofvrU1o6qow V+mmDwbOMwRnio4OFgkrBgEEAdpHDwEBB0Cw9HzJFl9lZn3UBaUqSMSgxjcdbd0MwNVcGZ8t8wdN EcLAvwQYFgoBMQWCZ4qODgkQu36RAUlea/dHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9p YS1wZ3Aub3JnhcN+tn41cAg01Kk56zcAfpdsh8j98PDe00mqKPfFvaYCmwK+oAQZFgoAbwWCZ4qO DgkQeAuFTtnCtJZHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnxsD8Sk5P Wgx8c/Zseo6OlCjyDC+Ogm17gTaUUIpxjWYWIQRjrBGOWy5dZsiKhad4C4VO2cK0lgAAdcQA/1RG dmrmvVxkBY2qNPjtERNwPga8Pf4IdlenrZ03NXM4AQC+TDHMpD7d5obEvUy8GYI3oThzYItPP8vv ChY+wbaIBRYhBNR3BAxwwhVqXCmFSbt+kQFJXmv3AAAKbgD+K1MZXnRKPdmA8DgNysyGRZY8cSVH HQcC7ZAAtV3i2+wA/0CyOYrbFYbyTRALgoERR07OHFoP+fJopQLMNQARVUELzjgEZ4qN+RIKKwYB BAGXVQEFAQEHQDTGlR+Qmn334e+bPqvojJVdFsiBf0leAAHP+ESqop8NAwEIB8LAAAQYFgoAcgWC Z4qN+QkQu36RAUlea/dHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnA5Lw b3wOOcoodImuVNw4PYq1U65FDC1Q2JMFIcJXqF0CmwwWIQTUdwQMcMIValwphUm7fpEBSV5r9wAA 6egA/j3QANSmogZ5VTF5KlI+BBye9ud/w9j7RLcCHU6u8AA1AQC3FGaNuv+uWOSa+eeEoI/aZrGd X5el8b/m6aXDDxDjDg==
Message-ID: <87jz2ne4s6.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
X-MailFrom: dkg@fifthhorseman.net
X-Mailman-Rule-Hits: max-recipients
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-size; news-moderation; no-subject; digests; suspicious-header
Message-ID-Hash: PNANXBURDNRFGPEYGKYBJHOR35IKPBGV
X-Message-ID-Hash: PNANXBURDNRFGPEYGKYBJHOR35IKPBGV
X-Mailman-Approved-At: Fri, 29 Aug 2025 05:01:02 -0700
CC: heiko@schaefer.name, openpgp@ietf.org, rfc-editor@rfc-editor.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [openpgp] Re: [Technical Errata Reported] RFC9580 (8466)
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/PVGDGhVfwG6y1THE2tCwh8_r8cU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>
Date: Thu, 28 Aug 2025 17:26:39 -0000
X-Original-Date: Thu, 28 Aug 2025 13:26:33 -0400
This report is correct: the text is a holdover from RFC 6637 and
should have been updated with the new streamlined ECC formats added in
RFC 9580.
I think the text would be correct if we prefix the sentence with "For
ECDH (18), ECDSA (19) and EdDSALegacy (22) public key algorithms, …"
--dkg
On Wed 2025-06-18 08:58:25 -0700, RFC Errata System wrote:
> The following errata report has been submitted for RFC9580,
> "OpenPGP".
>
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid8466
>
> --------------------------------------
> Type: Technical
> Reported by: Heiko Schaefer <heiko@schaefer.name>
>
> Section: 11.2
>
> Original Text
> -------------
> A point on an elliptic curve will always be represented on the wire
> as an MPI.
>
> Corrected Text
> --------------
> TBD
>
> Notes
> -----
> This langauge doesn't acknowledge the native encoding of the new Ed/X 25519/448 variants.
> Various language in the following sections of chapter 11 also seem to imply that all EC data is encoded in MPI format.
>
> In particular, in 11.3, all three entries in the table "OpenPGP Elliptic Curve Scalar Encodings Registry" seem to imply variants of MPI encoding. The case of "native" fixed length encoding seems to be missing.
>
> Instructions:
> -------------
> This erratum is currently posted as "Reported". (If it is spam, it
> will be removed shortly by the RFC Production Center.) Please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party
> will log in to change the status and edit the report, if necessary.
>
> --------------------------------------
> RFC9580 (draft-ietf-openpgp-crypto-refresh-13)
> --------------------------------------
> Title : OpenPGP
> Publication Date : July 2024
> Author(s) : P. Wouters, Ed., D. Huigens, J. Winter, Y. Niibe
> Category : PROPOSED STANDARD
> Source : Open Specification for Pretty Good Privacy
> Stream : IETF
> Verifying Party : IESG
- [openpgp] [Technical Errata Reported] RFC9580 (84… RFC Errata System
- [openpgp] Re: [Technical Errata Reported] RFC9580… Daniel Kahn Gillmor
- [openpgp] Re: [Technical Errata Reported] RFC9580… Paul Wouters