Re: [openpgp] V5 Fingerprint again

Thijs van Dijk <schnabbel@inurbanus.nl> Wed, 01 March 2017 19:42 UTC

Return-Path: <schnabbel@inurbanus.nl>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C91FB12968B for <openpgp@ietfa.amsl.com>; Wed, 1 Mar 2017 11:42:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.334
X-Spam-Level:
X-Spam-Status: No, score=-1.334 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=inurbanus.nl
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7OsQVX5oh9I4 for <openpgp@ietfa.amsl.com>; Wed, 1 Mar 2017 11:42:37 -0800 (PST)
Received: from mail-ua0-x235.google.com (mail-ua0-x235.google.com [IPv6:2607:f8b0:400c:c08::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBDFF129676 for <openpgp@ietf.org>; Wed, 1 Mar 2017 11:42:36 -0800 (PST)
Received: by mail-ua0-x235.google.com with SMTP id c11so2278238uaa.0 for <openpgp@ietf.org>; Wed, 01 Mar 2017 11:42:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inurbanus.nl; s=google-inurb; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=wDw7UbcyHPWTR+L8y6h29rKrkXAqBlAATOy/JuvFoeI=; b=Tbp7zAp5TXMrZ+tASoh5Up1shb7gKoZc5ydUJVJp/nJZ/KSDB/l4mazlvCP4LXidUg aIephTkLlBhH2E0EZrAE4zKpsebelLU+a5JUGUYJEotqw3/uOF11RP0Cl4gOIK27URnk 8bf6QsT/NDmtR7aiSbXJnkcK0oMYNp824xhoI=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=wDw7UbcyHPWTR+L8y6h29rKrkXAqBlAATOy/JuvFoeI=; b=TxUhHbrhvksn8+p01LICDXXabNZfITZ/m1vubR/pGpD0rrdBrIOeuYWBgqO9zzQSx9 eDVk0o2NCd7QszjFuwiPRZblag4Mj7Lh2iNnmtiYxauAJkFjWIEzenrRRPhXwidLWzGE pnjz7B/3xKJ5yRFJOkq61+IuO7MXDUGRgAwjwLG7seN0BLDoQuE1m4QM97Wih2xq+uRQ eWfUyNLtet//uyPYneCm1u03AfuSC/XiziFeltpdG2FsU7RApEuxPfsEKPHq8lpegFTN T1bKZn+FRBKticoX5UqNiz28EBrcmpqICI1mqi3IsWUyW3bC5AiJEwFd+kG60gDDcks0 NZ5w==
X-Gm-Message-State: AMke39lDv+RqgWOggap6nVmBf9gII4nshi/olAl6rc+rL5H4MNJI5RIc8gHLjLxMRH8AOZAcfGDRb/3CZ2TwWQ==
X-Received: by 10.31.133.16 with SMTP id h16mr1347061vkd.26.1488397356002; Wed, 01 Mar 2017 11:42:36 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.102.3 with HTTP; Wed, 1 Mar 2017 11:42:35 -0800 (PST)
In-Reply-To: <20170301180827.GD2@hashbang.sh>
References: <CAMm+Lwju5i5xHt=ma6Ush4_4dfZNwOi2=2km+6Qja+sDbkvbxg@mail.gmail.com> <20170301180827.GD2@hashbang.sh>
From: Thijs van Dijk <schnabbel@inurbanus.nl>
Date: Wed, 01 Mar 2017 20:42:35 +0100
Message-ID: <CADGaDpEZv4ngQ7=fsEXbLUi9X6e7CdR5SnYGLi=RtSCkag47iw@mail.gmail.com>
To: KellerFuchs <KellerFuchs@hashbang.sh>
Content-Type: multipart/alternative; boundary="001a11c0081ab084ad0549b083fb"
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/pbt1K8ZwylKScAhyfP_svu68nvk>
Cc: IETF OpenPGP <openpgp@ietf.org>
Subject: Re: [openpgp] V5 Fingerprint again
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Mar 2017 19:42:38 -0000

>
> > ###V5 Fingerprint value calculation
> >
> > The OpenPGP V5 fingerprint value is calculated as follows
> >
> > Fingerprint = <Version-ID> + H (<Content-ID>  + ‘:’ + H(<data>))
>
> Why a colon, rather than a NUL byte?
> (It's not obvious that Content-Type strings, esp. auxiliary parameters,
>  cannot contain colons)


Well, if it helps: if you look closely, the data is hashed twice, once
without the content ID and a second time with content ID prepended, so
there's no chance of ambiguity, if that's what you were worried about.
Anything from the question of "should there be any separator at all?"
onwards is a matter of personal preference, really.

-Thijs