IETF Logo Mail Archive

Re: [openpgp] Fingerprint requirements for OpenPGP

Werner Koch <wk@gnupg.org> Wed, 13 April 2016 16:00 UTC

Return-Path: <wk@gnupg.org>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26ED912D762 for <openpgp@ietfa.amsl.com>; Wed, 13 Apr 2016 09:00:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level:
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xOIOAtPBWRRo for <openpgp@ietfa.amsl.com>; Wed, 13 Apr 2016 09:00:29 -0700 (PDT)
Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [IPv6:2001:aa8:fff1:100::22]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1D0A12D1A4 for <openpgp@ietf.org>; Wed, 13 Apr 2016 09:00:28 -0700 (PDT)
Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.80 #2 (Debian)) id 1aqNDP-0004gq-1i for <openpgp@ietf.org>; Wed, 13 Apr 2016 18:00:27 +0200
Received: from wk by wheatstone.g10code.de with local (Exim 4.84 #3 (Debian)) id 1aqNC7-0007M2-GF; Wed, 13 Apr 2016 17:59:07 +0200
From: Werner Koch <wk@gnupg.org>
To: Derek Atkins <derek@ihtfp.com>
References: <87vb3nslqh.fsf@alice.fifthhorseman.net> <sjmbn5e3na2.fsf@securerf.ihtfp.org> <87d1pug303.fsf@wheatstone.g10code.de> <85d83d5bac518c53d7a78d5d049a73ed.squirrel@mail2.ihtfp.org> <87wpo2ehch.fsf@wheatstone.g10code.de> <sjmk2k11t53.fsf@securerf.ihtfp.org>
Organisation: g10 Code GmbH
X-message-flag: Mails containing HTML will not be read! Please send only plain text.
OpenPGP: url=https://k.gnupg.net/80615870F5BAD690333686D0F2AD85AC1E42B367
Mail-Followup-To: Derek Atkins <derek@ihtfp.com>, IETF OpenPGP <openpgp@ietf.org>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Date: Wed, 13 Apr 2016 17:59:07 +0200
In-Reply-To: <sjmk2k11t53.fsf@securerf.ihtfp.org> (Derek Atkins's message of "Wed, 13 Apr 2016 10:27:04 -0400")
Message-ID: <87zisxa4ac.fsf@wheatstone.g10code.de>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/USyroFxkuLKQxYF3pRmgnOZHNpE>
Cc: IETF OpenPGP <openpgp@ietf.org>, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Subject: Re: [openpgp] Fingerprint requirements for OpenPGP
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Apr 2016 16:00:31 -0000

On Wed, 13 Apr 2016 16:27, derek@ihtfp.com said:

> We already, to some degree, have that issue.  There's the keyID and
> there's the fingerprint.  They are different (although with v4 one is
> derived from the other).

In GnuPG 2.1 we removed support for v3 keys and thus we do not need to
care about the difference between keyid and fingerprints anymore.  This
takes away a lot of burden we had with them (in particular storing the
keyid for fast lookups).  Using a truncated fingerprint for the keyid, as
we have in v4, is easier. 

> I think we need to step back again and keep in mind that the (human)
> authenticaton fingerprint may (should?) be different from the (internal
> or external) database identifer string.

Okay.  But the new scheme should allow to derive the human
authentication fingerprint from the internal fingerprint w/o the need
for additional input.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

v2.46.0 | Report a Bug | By Email | System Status