Re: [Privacy-pass] RFC 4055 PSS encoding

Watson Ladd <watsonbladd@gmail.com> Thu, 27 April 2023 21:47 UTC

Return-Path: <watsonbladd@gmail.com>
X-Original-To: privacy-pass@ietfa.amsl.com
Delivered-To: privacy-pass@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC84DC14F749 for <privacy-pass@ietfa.amsl.com>; Thu, 27 Apr 2023 14:47:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4juEh_zfu1Ww for <privacy-pass@ietfa.amsl.com>; Thu, 27 Apr 2023 14:47:22 -0700 (PDT)
Received: from mail-oa1-x2c.google.com (mail-oa1-x2c.google.com [IPv6:2001:4860:4864:20::2c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C1B8C14E515 for <privacy-pass@ietf.org>; Thu, 27 Apr 2023 14:47:22 -0700 (PDT)
Received: by mail-oa1-x2c.google.com with SMTP id 586e51a60fabf-187993bab0cso7332265fac.3 for <privacy-pass@ietf.org>; Thu, 27 Apr 2023 14:47:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1682632041; x=1685224041; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=bQB6JZU8Gydo5gMQOuZm+XZwQ8TYxm3IJphQkHhC8kk=; b=o1eLH1lZEqC4qpEDkjb7zMvJMGQLkqq853sPwzxwllcLgNCnD9LCeHR5KHtooXXHsH i3pZ3WlmAHMbwi9lSdm2dxABpHgDqEwfLj/uPdAwo9xJOrYkVFmTG5l7kSTgtp5ZqQNz LGwnvRzRGI/fD0Kq+GOhFrzCCefST1Ooau8u7qPI8hlZMSPCHRlboLkjpUGI+6NfL+P2 wuunCxRJKc28xNrFLYaB9fbAGkMGUpKivIBz2UT0Dr4/u7Hs23+eLpGG7ewz6F7hik/5 Re/g4NHgHFb+OpmvGOYTBeezaYvCJu/Rm5+RW5SXYo1i0lrZhfXSPErjVrVX8e9yXhM2 Ix4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682632041; x=1685224041; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=bQB6JZU8Gydo5gMQOuZm+XZwQ8TYxm3IJphQkHhC8kk=; b=l0yMkuDU6GlAjrmrno0srmqFw1equyJjg3tLCc5v0kwmlkpKO/N1gxnHiolfagFgby hO72pTt/xRe9MDsJmzTZP09W1MtrXROARN47YhpZMmwdw2YXrqQoIYZRr1jf74Z2JYoP cy8aHQeCUeO94QAdVLKXHgCVbK8MwLVc0366XfcCxT/rwlx7yB0lmt36ES7SahEpaC+q ZoKKPQCkU8Hc9b3iKJcVMYTaykYQlIwz/BBz/vbun30i5CVXulHbCHXFtDNFC1APZcKX 7h6lbPVixQAES2ijUeCq3KEY0wqHrbxxnALNSxENRdT9C1M+6fCEMsyfkUKfPc6yC/pl pLqw==
X-Gm-Message-State: AC+VfDx3Zq1ZfT5GfFY7lD312Xm7jW4/W1p5Sfhv/098c981nBUuxy7g fspmRPPJysX/MfSbo93vBhdv0g6+2xQOzbjUvZqg3cpr
X-Google-Smtp-Source: ACHHUZ4GBlVpS8+riDXAwYK71hsCEfw6H+OPxGJJ6rAM4Eb2+kTwKSqQ4o9RvdfwyQRC3uz5xfxuA8VygJi/Es6oIyI=
X-Received: by 2002:a05:6870:442:b0:178:e1f2:7f22 with SMTP id i2-20020a056870044200b00178e1f27f22mr1386674oak.30.1682632040973; Thu, 27 Apr 2023 14:47:20 -0700 (PDT)
MIME-Version: 1.0
References: <CACsn0cm0Hx45+bPXAke6yVS=gHRKEii--uVNd=_86akKw=p2Ng@mail.gmail.com> <1826A5F9-4C17-456B-B928-874F1DD909B1@heapingbits.net>
In-Reply-To: <1826A5F9-4C17-456B-B928-874F1DD909B1@heapingbits.net>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Thu, 27 Apr 2023 14:47:09 -0700
Message-ID: <CACsn0c=PC7HOni-5JgVJxBiSF=8YGiP6LSEHO098BFPoTySOCg@mail.gmail.com>
To: Christopher Wood <caw@heapingbits.net>
Cc: privacy-pass@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/privacy-pass/1jNstYzX5Hnm9KMjliPa4NRZeNA>
Subject: Re: [Privacy-pass] RFC 4055 PSS encoding
X-BeenThere: privacy-pass@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Privacy Pass Protocol <privacy-pass.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/privacy-pass>, <mailto:privacy-pass-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/privacy-pass/>
List-Post: <mailto:privacy-pass@ietf.org>
List-Help: <mailto:privacy-pass-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/privacy-pass>, <mailto:privacy-pass-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Apr 2023 21:47:22 -0000

On Wed, Apr 26, 2023 at 6:13 PM Christopher Wood <caw@heapingbits.net> wrote:
>
> Hi Watson,
>
> There are some implementations that will not parse DER encoded blobs with the NULL fields explicitly included, which is why the spec is as it is. I think it’s reasonable to be rigid about key ID format, if for no other reason that avoiding the situation where different implementations of the protocol don’t agree on the key ID when computed directly from the public key (as opposed to being computed from the DER encoding).

There is that. However, baking it into the standard means we'll have
to deal with it for all time.

>
> Best,
> Chris

-- 
Astra mortemque praestare gradatim