Re: [openpgp] Backwards compatibility vs streaming verification of v6 clearsigned messages
Daniel Huigens <d.huigens@protonmail.com> Sat, 27 May 2023 16:36 UTC
Return-Path: <d.huigens@protonmail.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40B55C14F5E0 for <openpgp@ietfa.amsl.com>; Sat, 27 May 2023 09:36:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=protonmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2l6Sc_onRO_O for <openpgp@ietfa.amsl.com>; Sat, 27 May 2023 09:36:02 -0700 (PDT)
Received: from mail-40133.protonmail.ch (mail-40133.protonmail.ch [185.70.40.133]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD759C14CF13 for <openpgp@ietf.org>; Sat, 27 May 2023 09:29:57 -0700 (PDT)
Date: Sat, 27 May 2023 16:29:43 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com; s=protonmail3; t=1685204995; x=1685464195; bh=4Z9t0GGGypnx9/HpzBRLoPxGRB0ZF8tVVrHDCE+OTtw=; h=Date:To:From:Cc:Subject:Message-ID:In-Reply-To:References: Feedback-ID:From:To:Cc:Date:Subject:Reply-To:Feedback-ID: Message-ID:BIMI-Selector; b=ZHVsVSLy7H+vTIDooa7Iu7o+8bc4Go2gyueOpvWjKm9ZhhCMwwOcKcEYSXMVxwVaq G+74nWsj7ODtGTDYM3rg3DZecykkbi3M6bgtc85nOuq0Ei2ajLFB1hL/0wURQ7MCS9 X6fMy5qHm8XmQJwyGrCM8wQJecWTgFUEZb/55pwap0zLA79u7VWrmoSQdzgt2fNxY9 b6yv5/0qbIKyTjJ/72v46pdBF6HsxlRfrwxC2MF1nmBJ4nVPlHkOedY1EiZA9tqiDe jTokSiqgeYKcpzWe+rBHtNvrnDhp/S7+sDMT9D3x5a6TUQ6ttr16Scso+QTJDP8dER NaXL14UslN7MQ==
To: Paul Wouters <paul@nohats.ca>
From: Daniel Huigens <d.huigens@protonmail.com>
Cc: Justus Winter <justus@sequoia-pgp.org>, Vincent Breitmoser <look=40my.amazin.horse@dmarc.ietf.org>, openpgp@ietf.org
Message-ID: <ZPJqDDQfq2_-OQ_7G4yi5cXOLkVKBEZIMdLDZkt4QacEBQhmrwMg-ZwGtm8k-7YCm9lI93PA2lcU63__xnVGvMGbTZWu6PeoOM_lSLersEw=@protonmail.com>
In-Reply-To: <14BB059D-7E43-4788-BA47-CEAC206C3EA1@nohats.ca>
References: <87bki66zb5.fsf@thinkbox> <14BB059D-7E43-4788-BA47-CEAC206C3EA1@nohats.ca>
Feedback-ID: 2934448:user:proton
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/roKve_Y3aGJbeRLKC81IwFZcP3s>
Subject: Re: [openpgp] Backwards compatibility vs streaming verification of v6 clearsigned messages
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 27 May 2023 16:36:06 -0000
Hey Paul (and all), The SaltedHash header wasn't a thing before, it was introduced by the crypto refresh for v6. For v4, there's still the Hash header, though it's made optional by Justus's MR (which I'm OK with). And, I agree in general that the hash headers don't serve a very strong purpose, and I'm happy to remove them :) Best, Daniel ------- Original Message ------- On Saturday, May 27th, 2023 at 15:19, Paul Wouters <paul@nohats.ca> wrote: > On May 27, 2023, at 02:53, Justus Winter justus@sequoia-pgp.org wrote: > > > We talked about this at the OpenPGP email summit, and we agreed that > > this is a good solution. I have created a merge request where we can > > fine-tune the change: > > > > https://gitlab.com/openpgp-wg/rfc4880bis/-/merge_requests/313 > > > This PR seems to remove the definition of salted hash but as it is still allowed for v4, there should be a definition somewhere in the document I think ? > > Paul (read this before coffee, on a phone, just by looking at the diff, so perhaps I’m wrong. Will double check myself later) > _______________________________________________ > openpgp mailing list > openpgp@ietf.org > https://www.ietf.org/mailman/listinfo/openpgp
- [openpgp] Backwards compatibility vs streaming ve… Daniel Huigens
- Re: [openpgp] Backwards compatibility vs streamin… Daniel Kahn Gillmor
- Re: [openpgp] Backwards compatibility vs streamin… Daniel Huigens
- Re: [openpgp] Backwards compatibility vs streamin… Justus Winter
- Re: [openpgp] Backwards compatibility vs streamin… Andrew Gallagher
- Re: [openpgp] Backwards compatibility vs streamin… Andrew Gallagher
- Re: [openpgp] Backwards compatibility vs streamin… iang
- Re: [openpgp] Backwards compatibility vs streamin… vedaal
- Re: [openpgp] Backwards compatibility vs streamin… Vincent Breitmoser
- Re: [openpgp] Backwards compatibility vs streamin… Justus Winter
- Re: [openpgp] Backwards compatibility vs streamin… Vincent Breitmoser
- Re: [openpgp] Backwards compatibility vs streamin… Paul Wouters
- Re: [openpgp] Backwards compatibility vs streamin… Daniel Huigens
- Re: [openpgp] Backwards compatibility vs streamin… Daniel Kahn Gillmor
- Re: [openpgp] Backwards compatibility vs streamin… Daniel Kahn Gillmor
- Re: [openpgp] Backwards compatibility vs streamin… Andrew Gallagher
- Re: [openpgp] Backwards compatibility vs streamin… Daniel Kahn Gillmor
- Re: [openpgp] Backwards compatibility vs streamin… Andrew Gallagher
- Re: [openpgp] Backwards compatibility vs streamin… Paul Wouters