Re: [openpgp] OpenPGP encryption block modes

[Daniel Huigens <[e-mail]>]

Hi Bruce,

> Since the proposed change is
> entirely incompatible with the present encryption, why is this even
> being considered as part of OpenPGP? Why is it not being developed as
> some sort of high performance, high reliably disk format standard? Why
> do we have to bother people doing messaging clients with all this
> extra and unneeded complexity?

OpenPGP is not only for messaging. Also, this change should be
relatively transparent for messaging clients, since it should be
handled by the OpenPGP implementation.

Also, you are talking to a mailing list with various implementers of
OpenPGP libraries and applications in it. I'll refrain from calling
consensus, but it is my impression that most of them are interested and
willing to implement some form of AEAD. The main discussions before
this have been about the packet format, key separation, and whether to
include GCM, but not whether to add AEAD at all. That is even included
in the current charter of the OpenPGP WG.

Many implementers were also in the OpenPGP Design Team, which also
contributed to the current design of AEAD in OpenPGP.

If an implementer steps up who says "we don't want to implement AEAD",
that would be interesting, but I don't think that has happened.

If you have some vested interest in AEAD not ending up in the spec,
it would be helpful if you would state what it is.

Other than that, you don't have to protect the implementers from us,
we are the implementers ;)

Best,
Daniel