[openpgp] Re: Fwd: I-D list for Open Specification for Pre tty Good Privacy notification: Changes to draft-gallagher-openp gp-code-point-exhaustion

Justus Winter <[email protected]> Thu, 20 Mar 2025 10:57:48 +0100

Newsgroups	gmane.ietf.openpgp
Message-ID	<[email protected]>

Hi Heiko :)

Heiko Schäfer <[email protected]> writes:

> I'm sure much discussion would be needed to positively decide in favor
> of the scheme proposed in
> draft-gallagher-openpgp-code-point-exhaustion.
>
> However, as I understand it, the only immediate question that this
> draft is effectively asking is: "do we want to reserve bit 8, for
> now?"
>
> I have not seen any compelling argument against this proposition, so
> far.

I think this solution is hasting (maybe to the point of creating) the
problem it is trying to solve.

Further, the proposed solution (for which reserving one bit now is the
precondition, so I think it is fair to also consider it), seems to
complicate parsing (and there is precedence on how OpenPGP very cleverly
encodes things like packet body lengths, S2K hash counts, S2K mechanism
type, AEAD block sizes), and I like parsing to become simpler, not more
complicated.

And, I believe section 5 of
draft-gallagher-openpgp-code-point-exhaustion-00 to be overly optimistic
regarding its completeness: attackers seem to be a clever bunch, and the
analysis missed or does not discuss not being able to compute
fingerprints for secret key packets.

Best,
Justus

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

signature.asc (application/pgp-signature, 584 B)