Re: [openpgp] SHA3 algorithm ids.

Peter Gutmann <pgut001@cs.auckland.ac.nz> Wed, 19 August 2015 09:45 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A550B1B29B5 for <openpgp@ietfa.amsl.com>; Wed, 19 Aug 2015 02:45:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOccn6KQBSr0 for <openpgp@ietfa.amsl.com>; Wed, 19 Aug 2015 02:45:34 -0700 (PDT)
Received: from mx4.auckland.ac.nz (mx4.auckland.ac.nz [130.216.125.248]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37EEB1B29B6 for <openpgp@ietf.org>; Wed, 19 Aug 2015 02:45:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=@auckland.ac.nz; q=dns/txt; s=mail; t=1439977534; x=1471513534; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=0QX0Qnizx8SdhhmvbjjtwpvDHbfZgEr+Oxb/WQJtfQA=; b=qMa9Z7rswGZm/Px6+mwFVMQLWHnkGEbxxvHC4VNWf60mNB0eB37ezkYS NxvDhgHXoC/NIcDe8RQ94+AjTbOs6TZUWs/c0t0JZJEZReegsXFydmk+M FwXnOOzeMI8My5Uhtp6v/97KrXUwlqEy2W14XFLVT6JbZrJLJvxwG/bhb ++0shSY/G2w9hoE84gtw2P98G86pkzAVz+4+AQkRZ57SNa6P0hS63eH9W JJufwKA5eKTpypgMP/naHuuuhmFzILEvxbr3iPQ59pmEZTrmY9AC6Sogf LyuvHqCK4dozwgJam3XjVKIcPoatKCGOfB85MA6XGDHOFh6rXxHbefDwu Q==;
X-IronPort-AV: E=Sophos;i="5.15,709,1432555200"; d="scan'208";a="36205847"
X-Ironport-HAT: MAIL-SERVERS - $RELAYED
X-Ironport-Source: 130.216.4.125 - Outgoing - Outgoing
Received: from uxchange10-fe3.uoa.auckland.ac.nz ([130.216.4.125]) by mx4-int.auckland.ac.nz with ESMTP/TLS/AES128-SHA; 19 Aug 2015 21:45:32 +1200
Received: from UXCN10-5.UoA.auckland.ac.nz ([169.254.5.48]) by uxchange10-fe3.UoA.auckland.ac.nz ([169.254.143.234]) with mapi id 14.03.0174.001; Wed, 19 Aug 2015 21:45:32 +1200
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: Andrey Jivsov <openpgp@brainhub.org>, "openpgp@ietf.org" <openpgp@ietf.org>
Thread-Topic: [openpgp] SHA3 algorithm ids.
Thread-Index: AQHQ0bwwjUQponxgXEGSKRaVthfi2J4SRUaAgADeZnI=
Date: Wed, 19 Aug 2015 09:45:31 +0000
Message-ID: <9A043F3CF02CD34C8E74AC1594475C73F4ADF89F@uxcn10-5.UoA.auckland.ac.nz>
References: <87y4hmi19i.fsf@vigenere.g10code.de>, <55D43E0F.6080201@brainhub.org>
In-Reply-To: <55D43E0F.6080201@brainhub.org>
Accept-Language: en-NZ, en-GB, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [130.216.158.4]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/r8KebqFwWjfszQMQt407hwkNDQw>
Subject: Re: [openpgp] SHA3 algorithm ids.
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Aug 2015 09:45:39 -0000

Andrey Jivsov <openpgp@brainhub.org> quoted Werner Koch:

> Note that I ordered SHA3-224 first; when we did SHA2 we forgot about 224
> and thus it ended up out of order.

And that's pretty much what the -224 hashes are, forgettable (and -384 only
slightly less so).  There's an obvious need for -256, and then you need -512
for people who need hashes that go to 11, but what's the point of -224 and
-384 in OpenPGP?  Are users really going to say "well, everyone else is using
-256 and I like to be different, but -512 is too big, and -384 just doesn't go
with the tie I'm wearing, so I'm really glad there's -224 as well"?  It's just
more bloat in the spec (and implementations) that'll never be used by anyone.
It was forgotten in 4880, it should be forgotten in x880 as well (along with
the equally useless -384).

Peter.