Re: [openpgp] The Argon2 proposal seems incomplete (Draft 6)

[Daniel Kahn Gillmor <[e-mail]>]

On Mon 2022-10-03 02:25:18 +0200, Ángel wrote:
> I think this deserves a security note in the document about the need of
> enforcing _some_ limit. Options available to implementations include
> setting an arbitrary limit to the memory they are willing to use for
> S2K (hardcoded or in config), dynamically compute an "appropriate
> limit", to support processing packets larger than those limits but
> requesting user confirmation for potentially using lots of memory…

I agree with you, Ángel, that this is reasonable guidance to offer to
implementers.  If we can help implementations avoid a classic footgun,
that would be great.

I'd welcome a concrete suggestion of text to this effect, as well as
where specifically to put it in the draft (or just a patch against the
markdown source).

Thanks,

        --dkg