From owner-ietf-openpgp@mail.imc.org Sat Jun 23 14:17:15 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA14717 for ; Sat, 23 Jun 2001 14:17:14 -0400 (EDT) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5NHck124947 for ietf-openpgp-bks; Sat, 23 Jun 2001 10:38:46 -0700 (PDT) Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5NHchk24943 for ; Sat, 23 Jun 2001 10:38:44 -0700 (PDT) Received: from uucp by kasiski.gnupg.de with local-rmail (Exim 3.22 #1 (Debian)) id 15Ds1W-0006yU-00; Sat, 23 Jun 2001 20:20:46 +0200 Received: from wk by alberti.gnupg.de with local (Exim 3.22 #1 (Debian)) id 15DrKn-0006ho-00; Sat, 23 Jun 2001 19:36:37 +0200 To: ietf-openpgp@imc.org Subject: Ping From: Werner Koch Organisation: g10 Code GmbH X-PGP-KeyID: 621CC013 X-Request-PGP: finger:wk@porta.u64.de Date: 23 Jun 2001 19:36:37 +0200 Message-ID: <871yob14ka.fsf@alberti.gnupg.de> Lines: 26 User-Agent: Gnus/5.090004 (Oort Gnus v0.04) Emacs/20.7 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Hi, the list seems to be really silent for several weeks now. There are still some open tasks: * Prepare the interoperabilty tests. * See whether there is a need to come together at the next IETF meeting. * Change the secret key packet format. * Assign identifiers for SHA-256 et al.? * Probably other topics I forgot. Ciao, Werner -- Werner Koch Omnis enim res, quae dando non deficit, dum habetur g10 Code GmbH et non datur, nondum habetur, quomodo habenda est. Privacy Solutions -- Augustinus From owner-ietf-openpgp@mail.imc.org Sat Jun 23 22:52:40 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id WAA22611 for ; Sat, 23 Jun 2001 22:52:40 -0400 (EDT) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5O2dC801751 for ietf-openpgp-bks; Sat, 23 Jun 2001 19:39:12 -0700 (PDT) Received: from mgo.iij.ad.jp (root@mgo.iij.ad.jp [202.232.15.6]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5O2dAk01746 for ; Sat, 23 Jun 2001 19:39:10 -0700 (PDT) Received: from ns.iij.ad.jp (ns.iij.ad.jp [192.168.2.8]) by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id LAA04723 for ; Sun, 24 Jun 2001 11:39:13 +0900 (JST) Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA08381 for ; Sun, 24 Jun 2001 11:39:12 +0900 (JST) Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA04922 for ; Sun, 24 Jun 2001 11:39:12 +0900 (JST) Date: Sun, 24 Jun 2001 11:39:18 +0900 (JST) Message-Id: <20010624.113918.125105644.kazu@iijlab.net> To: ietf-openpgp@imc.org Subject: Re: Ping From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) In-Reply-To: <871yob14ka.fsf@alberti.gnupg.de> References: <871yob14ka.fsf@alberti.gnupg.de> X-Mailer: Mew version 2.0 pre1 on Emacs 21.0 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Content-Transfer-Encoding: 7bit From: Werner Koch Subject: Ping > There are still some open tasks: > > * Prepare the interoperabilty tests. I'm waiting for this announce, too. --Kazu From owner-ietf-openpgp@mail.imc.org Mon Jun 25 17:56:14 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA28029 for ; Mon, 25 Jun 2001 17:56:13 -0400 (EDT) Received: by above.proper.com (8.11.3/8.11.3) id f5PLRW621817 for ietf-openpgp-bks; Mon, 25 Jun 2001 14:27:32 -0700 (PDT) Received: from fargonauten.de (fargonauten.de [212.8.198.132]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5PLRUk21812 for ; Mon, 25 Jun 2001 14:27:31 -0700 (PDT) Received: from localhost (t17.vpn.fargonauten.de [192.168.0.17]) by fargonauten.de (Postfix) with ESMTP id 7385DEDA8A for ; Mon, 25 Jun 2001 23:27:00 +0200 (CEST) Received: by localhost (Postfix, from userid 500) id 7128314A2; Mon, 25 Jun 2001 23:29:43 +0200 (CEST) Date: Mon, 25 Jun 2001 23:29:43 +0200 From: Ingo Luetkebohle To: ietf-openpgp@imc.org Subject: missing primes Message-ID: <20010625232943.A2157@blank.pages.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="1yeeQ81UyVL57Vl7" Content-Disposition: inline User-Agent: Mutt/1.2.5i Organization: Maybe when I grow up X-URL: http://blank.pages.de/ Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --1yeeQ81UyVL57Vl7 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, what are the primes in an OpenPGP RSA secret key packet used for? AFAICT, they are not needed for encryption and/or signing. Related to that: What will happen if they are omitted, e.g. because an underlying library can only supply exponent and modulus? Regards --=20 Ingo Luetkebohle / ingo@blank.pages.de / 95428014 / | Student of Computational Linguistics & Computer Science; | Fargonauten.DE sysadmin; Gimp Registry maintainer; | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B --1yeeQ81UyVL57Vl7 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE7N61HzZDBZDStzlsRAfDeAKCJCFUVCZutKDoUqm+QtDb/E+unbwCfTa+0 JzImBpl9kop/T3tiO+Nrx04= =Z/Jv -----END PGP SIGNATURE----- --1yeeQ81UyVL57Vl7-- From owner-ietf-openpgp@mail.imc.org Mon Jun 25 18:14:53 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id SAA28391 for ; Mon, 25 Jun 2001 18:14:52 -0400 (EDT) Received: by above.proper.com (8.11.3/8.11.3) id f5PLRW621817 for ietf-openpgp-bks; Mon, 25 Jun 2001 14:27:32 -0700 (PDT) Received: from fargonauten.de (fargonauten.de [212.8.198.132]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5PLRUk21812 for ; Mon, 25 Jun 2001 14:27:31 -0700 (PDT) Received: from localhost (t17.vpn.fargonauten.de [192.168.0.17]) by fargonauten.de (Postfix) with ESMTP id 7385DEDA8A for ; Mon, 25 Jun 2001 23:27:00 +0200 (CEST) Received: by localhost (Postfix, from userid 500) id 7128314A2; Mon, 25 Jun 2001 23:29:43 +0200 (CEST) Date: Mon, 25 Jun 2001 23:29:43 +0200 From: Ingo Luetkebohle To: ietf-openpgp@imc.org Subject: missing primes Message-ID: <20010625232943.A2157@blank.pages.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="1yeeQ81UyVL57Vl7" Content-Disposition: inline User-Agent: Mutt/1.2.5i Organization: Maybe when I grow up X-URL: http://blank.pages.de/ Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --1yeeQ81UyVL57Vl7 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, what are the primes in an OpenPGP RSA secret key packet used for? AFAICT, they are not needed for encryption and/or signing. Related to that: What will happen if they are omitted, e.g. because an underlying library can only supply exponent and modulus? Regards --=20 Ingo Luetkebohle / ingo@blank.pages.de / 95428014 / | Student of Computational Linguistics & Computer Science; | Fargonauten.DE sysadmin; Gimp Registry maintainer; | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B --1yeeQ81UyVL57Vl7 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE7N61HzZDBZDStzlsRAfDeAKCJCFUVCZutKDoUqm+QtDb/E+unbwCfTa+0 JzImBpl9kop/T3tiO+Nrx04= =Z/Jv -----END PGP SIGNATURE----- --1yeeQ81UyVL57Vl7-- From owner-ietf-openpgp@mail.imc.org Mon Jun 25 19:13:28 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id TAA29384 for ; Mon, 25 Jun 2001 19:13:27 -0400 (EDT) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5PMsG002166 for ietf-openpgp-bks; Mon, 25 Jun 2001 15:54:16 -0700 (PDT) Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5PMsEm02162 for ; Mon, 25 Jun 2001 15:54:14 -0700 (PDT) Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3) id SAA04229; Mon, 25 Jun 2001 18:54:01 -0400 To: Ingo Luetkebohle Cc: ietf-openpgp@imc.org Subject: Re: missing primes References: <20010625232943.A2157@blank.pages.de> From: Derek Atkins Date: 25 Jun 2001 18:54:00 -0400 In-Reply-To: Ingo Luetkebohle's message of "Mon, 25 Jun 2001 23:29:43 +0200" Message-ID: Lines: 49 X-Mailer: Gnus v5.5/Emacs 20.3 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: The primes are used for the Chinese Remainder Theorem, an RSA speed-up technique. -derek Ingo Luetkebohle writes: > --1yeeQ81UyVL57Vl7 > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > Content-Transfer-Encoding: quoted-printable > > Hello, > > what are the primes in an OpenPGP RSA secret key packet used for? > AFAICT, they are not needed for encryption and/or signing. > > Related to that: What will happen if they are omitted, e.g. because an > underlying library can only supply exponent and modulus? > > Regards > > --=20 > Ingo Luetkebohle / ingo@blank.pages.de / 95428014 > / > | Student of Computational Linguistics & Computer Science; > | Fargonauten.DE sysadmin; Gimp Registry maintainer; > | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B > > --1yeeQ81UyVL57Vl7 > Content-Type: application/pgp-signature > Content-Disposition: inline > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: Weitere Infos: siehe http://www.gnupg.org > > iD8DBQE7N61HzZDBZDStzlsRAfDeAKCJCFUVCZutKDoUqm+QtDb/E+unbwCfTa+0 > JzImBpl9kop/T3tiO+Nrx04= > =Z/Jv > -----END PGP SIGNATURE----- > > --1yeeQ81UyVL57Vl7-- -- Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory Member, MIT Student Information Processing Board (SIPB) URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH warlord@MIT.EDU PGP key available From owner-ietf-openpgp@mail.imc.org Tue Jun 26 14:08:27 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id OAA01446 for ; Tue, 26 Jun 2001 14:08:26 -0400 (EDT) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5QHVid05900 for ietf-openpgp-bks; Tue, 26 Jun 2001 10:31:44 -0700 (PDT) Received: from smtprelay2.adelphia.net (smtprelay2.adelphia.net [64.8.25.7]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5QHVgm05893 for ; Tue, 26 Jun 2001 10:31:42 -0700 (PDT) Received: from mwyoung ([24.48.51.230]) by smtprelay2.adelphia.net (Netscape Messaging Server 4.15) with SMTP id GFJSOW01.2M7 for ; Tue, 26 Jun 2001 13:31:44 -0400 Message-ID: <002e01c0fe65$a48f9880$53c52609@transarc.ibm.com> From: "Michael Young" To: References: <20010625232943.A2157@blank.pages.de> Subject: Re: missing primes Date: Tue, 26 Jun 2001 13:29:53 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- In addition to CRT-based optimizations (as Derek Atkins noted), consistency checks may (or should) look at the p,q, and u values, to detect modifications in the secret key packet. In the wake of an "attack" discovered by some Czech researchers recently, I expect most implementations to have such checks in place now. (No pun intended. :-) Consequently, a key without these fields will not be usable by most other implementations. -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.3 iQEVAwUBOzjGI2NDnIII+QUHAQFwfQf+Khw9dMXAxVxmkpmlwvyTxazGPfSONTuG ePOUR0NgI+7ekgyVODQmYux19e7eNlNZKQoMPOjgzFNF6TmvT45w0hh2GFdysXFe gumR0wzxgdXIUykL9dne22MlWO12op6ld83w3TwjMLayQ65/1XjkgrvfbU91P2sl wrTFoGYhgQZFriKtNNOLpZ2pgQnBeMkiCa6Y1bxzq4n9QZsjZ/R6WZNEOkRXpKaQ gfpVmgsWxdQLhUGItXxRjNcfIxk3Ppj+N3nSEYPTv+PJVpQHyBuOr2n4SF+26LyH DyjltSFBL96Bu6FVGCbwhZWMcFItbENQdcHzCYHXdYI8OPiosx4bpg== =IzcB -----END PGP SIGNATURE----- From owner-ietf-openpgp@mail.imc.org Tue Jun 26 17:36:58 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA22393 for ; Tue, 26 Jun 2001 17:36:57 -0400 (EDT) Received: by above.proper.com (8.11.3/8.11.3) id f5QLI0E12278 for ietf-openpgp-bks; Tue, 26 Jun 2001 14:18:00 -0700 (PDT) Received: from smtprelay1.adelphia.net (smtprelay1.adelphia.net [64.8.25.6]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5QLHwm12272 for ; Tue, 26 Jun 2001 14:17:58 -0700 (PDT) Received: from mwyoung ([24.48.51.230]) by smtprelay1.adelphia.net (Netscape Messaging Server 4.15) with SMTP id GFK33J00.6T2 for ; Tue, 26 Jun 2001 17:16:31 -0400 Message-ID: <003801c0fe85$14f0ba40$53c52609@transarc.ibm.com> From: "Michael Young" To: References: <20010625232943.A2157@blank.pages.de> Subject: Re: missing primes Date: Tue, 26 Jun 2001 17:15:08 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- > Related to that: What will happen if they are omitted, e.g. because an > underlying library can only supply exponent and modulus? I suppose I should have addressed the underlying issue -- you can always compute (p,q,u) from (n,e,d) and build a full packet anyway. Knowing e*d, you can generate a non-trivial square root of 1 (mod n), which will yield (p+-1) or (q+-1). Here's a quick draft of an algorithm: Compute z=(e*d-1) and find odd t such that z=t*2^s. Note that for all x relatively prime to n, x^(e*d)~=x, so x^z~=1. Choose random x (as above), and compute y=x^t. Continue squaring y until y^2==1 (mod n). Now, (y+1)(y-1)=p*q*k (for some k). If y is not +-1, then k is not zero, and there must be a factor of p in (y+1) or (y-1). Test gcd(y+-1, n). Try x values until you succeed; each try has a 50% chance of winning. -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.3 iQEVAwUBOzj7EGNDnIII+QUHAQGoTgf+O6Ttd5bP9Fbux3QcCx1DV2XTol9ms2aV Nr8RN19ps14ya5cL3CND0Z70J8+h1hyP9Gr/9wDENs0OxBcAJz3Yxk6Hf4EW/VNa 0RteTeTlDK70lAZF6f13ESIukqyIFDAQuhC/7jnB0rFJ2JDzndOewCcmDFrubJAt eNBvBLvXPIjksBaS78gGnL60WQAHajF96HnUyoXGlspmiZiSc/4iK3Vy86N/Bzkq 8VZ5fIfYZGR0BNwFwmXTNhkq9xXZq/z83EFzUN8Glph0I4QiLsb1lNZdgNhjfRPu 1B0SbPf0Et0tOpeZCyyEpkPt6rQrWCfNHjR2ueamWOqDQOM6CfftTA== =Ah3x -----END PGP SIGNATURE----- From owner-ietf-openpgp@mail.imc.org Wed Jun 27 07:00:00 2001 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id GAA23762 for ; Wed, 27 Jun 2001 06:59:59 -0400 (EDT) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5RAZvQ04656 for ietf-openpgp-bks; Wed, 27 Jun 2001 03:35:57 -0700 (PDT) Received: from fargonauten.de (fargonauten.de [212.8.198.132]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5RAZtm04649 for ; Wed, 27 Jun 2001 03:35:55 -0700 (PDT) Received: from localhost (t17.vpn.fargonauten.de [192.168.0.17]) by fargonauten.de (Postfix) with ESMTP id 1372DEDA8A; Wed, 27 Jun 2001 12:35:19 +0200 (CEST) Received: by localhost (Postfix, from userid 500) id 05A6E14A4; Wed, 27 Jun 2001 12:37:48 +0200 (CEST) Date: Wed, 27 Jun 2001 12:37:47 +0200 From: Ingo Luetkebohle To: Michael Young , warlord@mit.edu Cc: ietf-openpgp@imc.org Subject: Re: missing primes Message-ID: <20010627123747.E1241@blank.pages.de> References: <20010625232943.A2157@blank.pages.de> <002e01c0fe65$a48f9880$53c52609@transarc.ibm.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="r7U+bLA8boMOj+mD" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <002e01c0fe65$a48f9880$53c52609@transarc.ibm.com>; from mwy-opgp97@the-youngs.org on Tue, Jun 26, 2001 at 01:29:53PM -0400 Organization: Maybe when I grow up X-URL: http://blank.pages.de/ Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --r7U+bLA8boMOj+mD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, many thanks to Derek and Michael, their helpful explanations were very enlightening :) Regards --=20 Ingo Luetkebohle / ingo@blank.pages.de / 95428014 / | Student of Computational Linguistics & Computer Science; | Fargonauten.DE sysadmin; Gimp Registry maintainer; | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B --r7U+bLA8boMOj+mD Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE7Obd7zZDBZDStzlsRASaMAJ4tnCCWgODOAAuL5TrbCzV9tDfNhgCeP0Ru TUKw8Xi3fgoioga98jK9wkA= =pJ0d -----END PGP SIGNATURE----- --r7U+bLA8boMOj+mD-- Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5RAZvQ04656 for ietf-openpgp-bks; Wed, 27 Jun 2001 03:35:57 -0700 (PDT) Received: from fargonauten.de (fargonauten.de [212.8.198.132]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5RAZtm04649 for ; Wed, 27 Jun 2001 03:35:55 -0700 (PDT) Received: from localhost (t17.vpn.fargonauten.de [192.168.0.17]) by fargonauten.de (Postfix) with ESMTP id 1372DEDA8A; Wed, 27 Jun 2001 12:35:19 +0200 (CEST) Received: by localhost (Postfix, from userid 500) id 05A6E14A4; Wed, 27 Jun 2001 12:37:48 +0200 (CEST) Date: Wed, 27 Jun 2001 12:37:47 +0200 From: Ingo Luetkebohle To: Michael Young , warlord@mit.edu Cc: ietf-openpgp@imc.org Subject: Re: missing primes Message-ID: <20010627123747.E1241@blank.pages.de> References: <20010625232943.A2157@blank.pages.de> <002e01c0fe65$a48f9880$53c52609@transarc.ibm.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="r7U+bLA8boMOj+mD" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <002e01c0fe65$a48f9880$53c52609@transarc.ibm.com>; from mwy-opgp97@the-youngs.org on Tue, Jun 26, 2001 at 01:29:53PM -0400 Organization: Maybe when I grow up X-URL: http://blank.pages.de/ Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --r7U+bLA8boMOj+mD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, many thanks to Derek and Michael, their helpful explanations were very enlightening :) Regards --=20 Ingo Luetkebohle / ingo@blank.pages.de / 95428014 / | Student of Computational Linguistics & Computer Science; | Fargonauten.DE sysadmin; Gimp Registry maintainer; | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B --r7U+bLA8boMOj+mD Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE7Obd7zZDBZDStzlsRASaMAJ4tnCCWgODOAAuL5TrbCzV9tDfNhgCeP0Ru TUKw8Xi3fgoioga98jK9wkA= =pJ0d -----END PGP SIGNATURE----- --r7U+bLA8boMOj+mD-- Received: by above.proper.com (8.11.3/8.11.3) id f5QLI0E12278 for ietf-openpgp-bks; Tue, 26 Jun 2001 14:18:00 -0700 (PDT) Received: from smtprelay1.adelphia.net (smtprelay1.adelphia.net [64.8.25.6]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5QLHwm12272 for ; Tue, 26 Jun 2001 14:17:58 -0700 (PDT) Received: from mwyoung ([24.48.51.230]) by smtprelay1.adelphia.net (Netscape Messaging Server 4.15) with SMTP id GFK33J00.6T2 for ; Tue, 26 Jun 2001 17:16:31 -0400 Message-ID: <003801c0fe85$14f0ba40$53c52609@transarc.ibm.com> From: "Michael Young" To: References: <20010625232943.A2157@blank.pages.de> Subject: Re: missing primes Date: Tue, 26 Jun 2001 17:15:08 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -----BEGIN PGP SIGNED MESSAGE----- > Related to that: What will happen if they are omitted, e.g. because an > underlying library can only supply exponent and modulus? I suppose I should have addressed the underlying issue -- you can always compute (p,q,u) from (n,e,d) and build a full packet anyway. Knowing e*d, you can generate a non-trivial square root of 1 (mod n), which will yield (p+-1) or (q+-1). Here's a quick draft of an algorithm: Compute z=(e*d-1) and find odd t such that z=t*2^s. Note that for all x relatively prime to n, x^(e*d)~=x, so x^z~=1. Choose random x (as above), and compute y=x^t. Continue squaring y until y^2==1 (mod n). Now, (y+1)(y-1)=p*q*k (for some k). If y is not +-1, then k is not zero, and there must be a factor of p in (y+1) or (y-1). Test gcd(y+-1, n). Try x values until you succeed; each try has a 50% chance of winning. -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.3 iQEVAwUBOzj7EGNDnIII+QUHAQGoTgf+O6Ttd5bP9Fbux3QcCx1DV2XTol9ms2aV Nr8RN19ps14ya5cL3CND0Z70J8+h1hyP9Gr/9wDENs0OxBcAJz3Yxk6Hf4EW/VNa 0RteTeTlDK70lAZF6f13ESIukqyIFDAQuhC/7jnB0rFJ2JDzndOewCcmDFrubJAt eNBvBLvXPIjksBaS78gGnL60WQAHajF96HnUyoXGlspmiZiSc/4iK3Vy86N/Bzkq 8VZ5fIfYZGR0BNwFwmXTNhkq9xXZq/z83EFzUN8Glph0I4QiLsb1lNZdgNhjfRPu 1B0SbPf0Et0tOpeZCyyEpkPt6rQrWCfNHjR2ueamWOqDQOM6CfftTA== =Ah3x -----END PGP SIGNATURE----- Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5QHVid05900 for ietf-openpgp-bks; Tue, 26 Jun 2001 10:31:44 -0700 (PDT) Received: from smtprelay2.adelphia.net (smtprelay2.adelphia.net [64.8.25.7]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5QHVgm05893 for ; Tue, 26 Jun 2001 10:31:42 -0700 (PDT) Received: from mwyoung ([24.48.51.230]) by smtprelay2.adelphia.net (Netscape Messaging Server 4.15) with SMTP id GFJSOW01.2M7 for ; Tue, 26 Jun 2001 13:31:44 -0400 Message-ID: <002e01c0fe65$a48f9880$53c52609@transarc.ibm.com> From: "Michael Young" To: References: <20010625232943.A2157@blank.pages.de> Subject: Re: missing primes Date: Tue, 26 Jun 2001 13:29:53 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -----BEGIN PGP SIGNED MESSAGE----- In addition to CRT-based optimizations (as Derek Atkins noted), consistency checks may (or should) look at the p,q, and u values, to detect modifications in the secret key packet. In the wake of an "attack" discovered by some Czech researchers recently, I expect most implementations to have such checks in place now. (No pun intended. :-) Consequently, a key without these fields will not be usable by most other implementations. -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.3 iQEVAwUBOzjGI2NDnIII+QUHAQFwfQf+Khw9dMXAxVxmkpmlwvyTxazGPfSONTuG ePOUR0NgI+7ekgyVODQmYux19e7eNlNZKQoMPOjgzFNF6TmvT45w0hh2GFdysXFe gumR0wzxgdXIUykL9dne22MlWO12op6ld83w3TwjMLayQ65/1XjkgrvfbU91P2sl wrTFoGYhgQZFriKtNNOLpZ2pgQnBeMkiCa6Y1bxzq4n9QZsjZ/R6WZNEOkRXpKaQ gfpVmgsWxdQLhUGItXxRjNcfIxk3Ppj+N3nSEYPTv+PJVpQHyBuOr2n4SF+26LyH DyjltSFBL96Bu6FVGCbwhZWMcFItbENQdcHzCYHXdYI8OPiosx4bpg== =IzcB -----END PGP SIGNATURE----- Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5PMsG002166 for ietf-openpgp-bks; Mon, 25 Jun 2001 15:54:16 -0700 (PDT) Received: from rcn.ihtfp.org (me@ORANGE-TOUR.IHTFP.ORG [204.107.200.33]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5PMsEm02162 for ; Mon, 25 Jun 2001 15:54:14 -0700 (PDT) Received: (from warlord@localhost) by rcn.ihtfp.org (8.9.3) id SAA04229; Mon, 25 Jun 2001 18:54:01 -0400 To: Ingo Luetkebohle Cc: ietf-openpgp@imc.org Subject: Re: missing primes References: <20010625232943.A2157@blank.pages.de> From: Derek Atkins Date: 25 Jun 2001 18:54:00 -0400 In-Reply-To: Ingo Luetkebohle's message of "Mon, 25 Jun 2001 23:29:43 +0200" Message-ID: Lines: 49 X-Mailer: Gnus v5.5/Emacs 20.3 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: The primes are used for the Chinese Remainder Theorem, an RSA speed-up technique. -derek Ingo Luetkebohle writes: > --1yeeQ81UyVL57Vl7 > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > Content-Transfer-Encoding: quoted-printable > > Hello, > > what are the primes in an OpenPGP RSA secret key packet used for? > AFAICT, they are not needed for encryption and/or signing. > > Related to that: What will happen if they are omitted, e.g. because an > underlying library can only supply exponent and modulus? > > Regards > > --=20 > Ingo Luetkebohle / ingo@blank.pages.de / 95428014 > / > | Student of Computational Linguistics & Computer Science; > | Fargonauten.DE sysadmin; Gimp Registry maintainer; > | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B > > --1yeeQ81UyVL57Vl7 > Content-Type: application/pgp-signature > Content-Disposition: inline > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: Weitere Infos: siehe http://www.gnupg.org > > iD8DBQE7N61HzZDBZDStzlsRAfDeAKCJCFUVCZutKDoUqm+QtDb/E+unbwCfTa+0 > JzImBpl9kop/T3tiO+Nrx04= > =Z/Jv > -----END PGP SIGNATURE----- > > --1yeeQ81UyVL57Vl7-- -- Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory Member, MIT Student Information Processing Board (SIPB) URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH warlord@MIT.EDU PGP key available Received: by above.proper.com (8.11.3/8.11.3) id f5PLRW621817 for ietf-openpgp-bks; Mon, 25 Jun 2001 14:27:32 -0700 (PDT) Received: from fargonauten.de (fargonauten.de [212.8.198.132]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5PLRUk21812 for ; Mon, 25 Jun 2001 14:27:31 -0700 (PDT) Received: from localhost (t17.vpn.fargonauten.de [192.168.0.17]) by fargonauten.de (Postfix) with ESMTP id 7385DEDA8A for ; Mon, 25 Jun 2001 23:27:00 +0200 (CEST) Received: by localhost (Postfix, from userid 500) id 7128314A2; Mon, 25 Jun 2001 23:29:43 +0200 (CEST) Date: Mon, 25 Jun 2001 23:29:43 +0200 From: Ingo Luetkebohle To: ietf-openpgp@imc.org Subject: missing primes Message-ID: <20010625232943.A2157@blank.pages.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="1yeeQ81UyVL57Vl7" Content-Disposition: inline User-Agent: Mutt/1.2.5i Organization: Maybe when I grow up X-URL: http://blank.pages.de/ Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --1yeeQ81UyVL57Vl7 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, what are the primes in an OpenPGP RSA secret key packet used for? AFAICT, they are not needed for encryption and/or signing. Related to that: What will happen if they are omitted, e.g. because an underlying library can only supply exponent and modulus? Regards --=20 Ingo Luetkebohle / ingo@blank.pages.de / 95428014 / | Student of Computational Linguistics & Computer Science; | Fargonauten.DE sysadmin; Gimp Registry maintainer; | FP: 3187 4DEC 47E6 1B1E 6F4F 57D4 CD90 C164 34AD CE5B --1yeeQ81UyVL57Vl7 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE7N61HzZDBZDStzlsRAfDeAKCJCFUVCZutKDoUqm+QtDb/E+unbwCfTa+0 JzImBpl9kop/T3tiO+Nrx04= =Z/Jv -----END PGP SIGNATURE----- --1yeeQ81UyVL57Vl7-- Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5O2dC801751 for ietf-openpgp-bks; Sat, 23 Jun 2001 19:39:12 -0700 (PDT) Received: from mgo.iij.ad.jp (root@mgo.iij.ad.jp [202.232.15.6]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5O2dAk01746 for ; Sat, 23 Jun 2001 19:39:10 -0700 (PDT) Received: from ns.iij.ad.jp (ns.iij.ad.jp [192.168.2.8]) by mgo.iij.ad.jp (8.8.8/MGO1.0) with ESMTP id LAA04723 for ; Sun, 24 Jun 2001 11:39:13 +0900 (JST) Received: from fs.iij.ad.jp (root@fs.iij.ad.jp [192.168.2.9]) by ns.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA08381 for ; Sun, 24 Jun 2001 11:39:12 +0900 (JST) Received: from localhost (mine.iij.ad.jp [192.168.4.209]) by fs.iij.ad.jp (8.8.5/3.5Wpl7) with ESMTP id LAA04922 for ; Sun, 24 Jun 2001 11:39:12 +0900 (JST) Date: Sun, 24 Jun 2001 11:39:18 +0900 (JST) Message-Id: <20010624.113918.125105644.kazu@iijlab.net> To: ietf-openpgp@imc.org Subject: Re: Ping From: Kazu Yamamoto (=?iso-2022-jp?B?GyRCOzNLXE9CSScbKEI=?=) In-Reply-To: <871yob14ka.fsf@alberti.gnupg.de> References: <871yob14ka.fsf@alberti.gnupg.de> X-Mailer: Mew version 2.0 pre1 on Emacs 21.0 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: From: Werner Koch Subject: Ping > There are still some open tasks: > > * Prepare the interoperabilty tests. I'm waiting for this announce, too. --Kazu Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f5NHck124947 for ietf-openpgp-bks; Sat, 23 Jun 2001 10:38:46 -0700 (PDT) Received: from kasiski.gnupg.de (porta.u64.de [194.77.88.106]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f5NHchk24943 for ; Sat, 23 Jun 2001 10:38:44 -0700 (PDT) Received: from uucp by kasiski.gnupg.de with local-rmail (Exim 3.22 #1 (Debian)) id 15Ds1W-0006yU-00; Sat, 23 Jun 2001 20:20:46 +0200 Received: from wk by alberti.gnupg.de with local (Exim 3.22 #1 (Debian)) id 15DrKn-0006ho-00; Sat, 23 Jun 2001 19:36:37 +0200 To: ietf-openpgp@imc.org Subject: Ping From: Werner Koch Organisation: g10 Code GmbH X-PGP-KeyID: 621CC013 X-Request-PGP: finger:wk@porta.u64.de Date: 23 Jun 2001 19:36:37 +0200 Message-ID: <871yob14ka.fsf@alberti.gnupg.de> Lines: 26 User-Agent: Gnus/5.090004 (Oort Gnus v0.04) Emacs/20.7 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Hi, the list seems to be really silent for several weeks now. There are still some open tasks: * Prepare the interoperabilty tests. * See whether there is a need to come together at the next IETF meeting. * Change the secret key packet format. * Assign identifiers for SHA-256 et al.? * Probably other topics I forgot. Ciao, Werner -- Werner Koch Omnis enim res, quae dando non deficit, dum habetur g10 Code GmbH et non datur, nondum habetur, quomodo habenda est. Privacy Solutions -- Augustinus