Re: Outstanding question - rule on cleartext signing last line

Ian G <iang@systemics.com> Mon, 26 December 2005 16:32 UTC

Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EqvH6-0002ZW-4T for openpgp-archive@megatron.ietf.org; Mon, 26 Dec 2005 11:32:40 -0500
Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA03386 for <openpgp-archive@lists.ietf.org>; Mon, 26 Dec 2005 11:31:30 -0500 (EST)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id jBQGLBle089956; Mon, 26 Dec 2005 08:21:11 -0800 (PST) (envelope-from owner-ietf-openpgp@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id jBQGLBpr089955; Mon, 26 Dec 2005 08:21:11 -0800 (PST)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f
Received: from mailgate.enhyper.net ([80.168.109.121]) by above.proper.com (8.12.11/8.12.9) with ESMTP id jBQGLBYw089949 for <ietf-openpgp@imc.org>; Mon, 26 Dec 2005 08:21:11 -0800 (PST) (envelope-from iang@systemics.com)
Received: from [IPv6:::1] (localhost [127.0.0.1]) by mailgate.enhyper.net (Postfix) with ESMTP id 37607416B2; Mon, 26 Dec 2005 16:21:10 +0000 (GMT)
Message-ID: <43B0184C.6010505@systemics.com>
Date: Mon, 26 Dec 2005 16:20:28 +0000
From: Ian G <iang@systemics.com>
Organization: http://financialcryptography.com/
User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050921)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: David Shaw <dshaw@jabberwocky.com>
Cc: OpenPGP <ietf-openpgp@imc.org>
Subject: Re: Outstanding question - rule on cleartext signing last line
References: <43980274.2080404@iang.org> <20051208104150.GA14918@epointsystem.org> <43981C74.1070403@systemics.com> <87bqzrhj6i.fsf@wheatstone.g10code.de> <20051208145205.GA5943@jabberwocky.com> <43AFE21B.1000102@algroup.co.uk> <20051226153615.GB7066@jabberwocky.com>
In-Reply-To: <20051226153615.GB7066@jabberwocky.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-openpgp@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-openpgp/mail-archive/>
List-Unsubscribe: <mailto:ietf-openpgp-request@imc.org?body=unsubscribe>
List-ID: <ietf-openpgp.imc.org>
Content-Transfer-Encoding: 7bit

David Shaw wrote:

> Can you give an example of why you feel this is a bug?

I think it is a bug if we decide that the
process of cleartext signing is reversable.

So, if the process of verification creates
a file that is the pre-signed version, then
it has to decide whether the final CRLF has
to be preserved or stripped in the unsigned
output.

So, does this output as a line terminated
string or as an unterminated string? :

-----BEGIN PGP SIGNED MESSAGE-----

my signed text
-----BEGIN PGP SIGNATURE-----
xxxxx
-----END PGP SIGNATURE-----

Now, if we decide that the process of signing
is not one that is deterministically reversable,
it is not an issue.  In practice, verification
is possibly all we need - and we have that.

(I have been unable to convince myself that we
need reversibility - I can't think of a case
where I would want it... but that's just me!)

iang