[saag] OpenPGP met [was: Re: OPENPGP will meet later...]
Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 15 March 2021 23:32 UTC
Return-Path: <dkg@fifthhorseman.net>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1])
by ietfa.amsl.com (Postfix) with ESMTP id B76953A12DE
for <saag@ietfa.amsl.com>; Mon, 15 Mar 2021 16:32:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral
reason="invalid (unsupported algorithm ed25519-sha256)"
header.d=fifthhorseman.net header.b=LHJtpOB9; dkim=pass (2048-bit key)
header.d=fifthhorseman.net header.b=JmFMJEga
Received: from mail.ietf.org ([4.31.198.44])
by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 58-70Ilzmd4I for <saag@ietfa.amsl.com>;
Mon, 15 Mar 2021 16:32:44 -0700 (PDT)
Received: from che.mayfirst.org (che.mayfirst.org [IPv6:2001:470:1:116::7])
(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by ietfa.amsl.com (Postfix) with ESMTPS id DEB673A12E1
for <saag@ietf.org>; Mon, 15 Mar 2021 16:32:44 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple;
d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019;
t=1615851161; h=from : to : subject : in-reply-to : references : date
: message-id : mime-version : content-type : from;
bh=7m+zC4tYG9Y0Tk6K/VCZPFuETiAqO2YkaZ/cQ8xnUU4=;
b=LHJtpOB9eHs46E1MfZHHo54gwEHEOL86coiSl8vKbDwY+XMn+9i39fjFLToLtZl1uwEf1
EQhrqOB7JJ8PoW3BQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net;
i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1615851161; h=from : to
: subject : in-reply-to : references : date : message-id :
mime-version : content-type : from;
bh=7m+zC4tYG9Y0Tk6K/VCZPFuETiAqO2YkaZ/cQ8xnUU4=;
b=JmFMJEgaCYDAqN967UEYlZ4aRLUjApv0DLSRyTkRMNk4QcNdpPagvmVYwE1shlqtO2pok
kFwC4aDyn7JxsoPDMyw43QXtvR2PvMGYMLcAUJTsFRQR6ppZpju2bU/Sx3opEFJEkz7eauh
xXwCsHXQkx3C1Y6ztpWTVl8I3VA47gckC1yFz1FhaJY5AidzeQys7UTNaN+fo2utmti+nmx
a1Q7IbnpXT7nnvQqqL3reImBe+mpD9zZj21lihHXLTWmzTSwn4Eg8JVsQNk9nzre9NQGB96
XUrJV4COHOXPqrRZfDUIelI5E2vFMjc1rBdRMwyNiOszGA0N3sVdsy0Nm/iQ==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(No client certificate requested)
by che.mayfirst.org (Postfix) with ESMTPSA id A623EF9A6
for <saag@ietf.org>; Mon, 15 Mar 2021 19:32:41 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000)
id 2E1A2209A3; Mon, 15 Mar 2021 19:29:15 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: saag@ietf.org
In-Reply-To: <77ea4d65-1ae1-cf99-c692-bfb2b22a96e5@cs.tcd.ie>
References: <77ea4d65-1ae1-cf99-c692-bfb2b22a96e5@cs.tcd.ie>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata=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Date: Mon, 15 Mar 2021 19:29:14 -0400
Message-ID: <87tupc6lo5.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha256; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/MTDRRd9y_r3GkKwbsklqbklF1wQ>
Subject: [saag] OpenPGP met [was: Re: OPENPGP will meet later...]
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>,
<mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>,
<mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Mar 2021 23:32:47 -0000
On Thu 2021-03-11 12:00:13 +0000, Stephen Farrell wrote: > [1] https://datatracker.ietf.org/meeting/110/materials/agenda-110-openpgp-02 We met! We discussed attacks against secret key material that are facilitated by corruption of the associated public keys. This is research work by Bruseghini, Paterson, and Huigens. We also had a presentation of the OpenPGP Interoperability Test Suite by Winter, identifying places where interoperability is solid, and places where more guidance is likely to be needed. See https://tests.sequoia-pgp.org/ for more detail from this ongoing project. Finally, Niibe presented some of the historical warts of ECC wire representation within OpenPGP, and proposed an argument for a normalization of ECC representation for future curves, including CFRG's "heavy-duty" curve Curve448. --dkg
- [saag] OPENPGP will meet later... Stephen Farrell
- [saag] OpenPGP met [was: Re: OPENPGP will meet la… Daniel Kahn Gillmor