[openpgp] Re: Encryption subkey selection

Am 10.04.25 um 09:39 schrieb Andrew Gallagher:
> On 10 Apr 2025, at 08:28, Falko Strenzke<[email protected]> wrote:
>> In general I think it will be better to specs for the mechanism for encryption subkey selection per certificate and the replacement key mechanism separate. The reason is that if they are linked to closely, it will be unclear what an implementation does when it supports one but not the other.
> Right now, the key replacement draft specifically says that when selecting encryption subkeys, the subkeys of the preferred certificate are considered first, then the first original, and so on. If this conflicts with what we want to do here, it would be best to sync the language before replacementkey goes to wglc…
>
> A

That's exactly what I mean: The replacement-key subpacket and and the 
encryption-subkey-selection should have a clearly separated scope. I 
think that is basically given by the wording of the replacement-key 
draft in Section 6. The only slight modification that I suggest is this:

Section 6 currently says: "/If there are no usable subkeys in the 
replacement certificate, then [...]/"

I would write instead "/If the subkeys in the replacement certificate 
are not useable, then [...]/"

The difference is that the proposed version leaves it open as to what is 
the exact requirement for the encryption subkeys of the certificate to 
be usable. The current version suggests the assumption that a single 
usable subkey is sufficient. However, the exact mechanism for 
per-certificate subkey selection would be left either to the 
implementation (as of now) or to a new explicitly specified mechanism.

Best regards,
Falko

> _______________________________________________
> openpgp mailing list [email protected]
> To unsubscribe send an email [email protected]
-- 

*MTG AG*
Dr. Falko Strenzke

Phone: +49 6151 8000 24
E-Mail: [email protected]
Web: mtg.de <https://www.mtg.de>

------------------------------------------------------------------------

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]