[openpgp] OpenPGP sample artifacts [was: Re: reviewing sample v5 certificate: can't validate internal signatures]

[Daniel Kahn Gillmor <[e-mail]>]

On Fri 2022-11-25 15:44:23 +0000, Daniel Huigens wrote:
> While we're at it, it may be useful to have an example with a Padding
> packet, perhaps. (We haven't implemented that yet, though, but I guess
> it shouldn't be much work.) And, maybe also an example Curve448 key?
> (That might be a bit more work, though :').)

I can imagine a good appendix that offers several sample objects,
similar to draft-bre-openpgp-samples, but using all the new features.

I don't want us to block the RFC on a full and exhaustive bestiary
(that's more of a job for the interop test suite, i think), but I
encourage anyone who wants to offer something narrow, simple, and useful
to suggest the objects.

While a sample Curve448 key looks like it would be useful, i think that
a more important sample might be the exact same Transferable Secret Key
that we already have, but with both pieces of secret key material locked
with a simple passphrase using Argon2 as s2k and AEAD for encrypting the
secret material.  That way, an implementer can compare the locked key
with the unlocked version.

But again, i wouldn't block the RFC on either of those artifacts --
they're just things that all implementations will need to have access to
sooner or later.

     --dkg