Re: [openpgp] RSA-PSS and RSA-OAEP for v5

[Stephen Farrell <[e-mail]>]

Hiya,

On 28/02/2021 19:26, brian m. carlson wrote:
> 
> I think it's very clear, based on a history of CVEs, that as practically
> implemented, PKCS #1 padding is weak compared to PSS and OAEP.

FWIW, my impression is that that is not clear. Quite a few
people do have that position for sure, but equally, the views
expressed by e.g. Werner and Peter Gutmann also seem fairly
commonly held afaics.

(As chair) would it be worthwhile pushing this question off
for a while? It may become easier to handle later on - or
even if it's no easier later, it still might be better to
postpone the bun fight for a bit:-)

If pushing this to later made sense, I guess creating an
issue in gitlab would be the thing to do so's we don't lose
track of it. (Apologies if someone did that already, I didn't
go check just now.)

S.