Re: [openpgp] AEAD Chunk Size

[Tobias Mueller <[e-mail]>]

Hi Neal,

On Mon, 2019-03-18 at 09:51 +0100, Neal H. Walfield wrote:
> I think Sebastian is using "can" to mean "it is possible", not "may".
> 
> That is, 
> 
>   The advantage of smaller
>   chunks is that *it is possible* to cache the plaintext until the
> chunk's auth tag
>   is validated *whereas it is not necessarily possible to cache the
>   plaintext with larger chunks*.
I think I see what you mean.  But assuming that partial plaintexts are
of little to no value, because you have used an AEAD cipher after all,
then you can achieve the very same thing even today, with a message of
arbitrary size, because you can stream out partial plaintext.

Now you seem to find some value in partially authenticated plaintexts.
But I haven't understood why you find them so appealing that you want to
force them onto each and every user.


Cheers,
  Tobi