From nobody Mon Apr 9 11:51:16 2018 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FD35127876 for ; Mon, 9 Apr 2018 11:51:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ksbL849o0xK3 for ; Mon, 9 Apr 2018 11:51:10 -0700 (PDT) Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF8731273B1 for ; Mon, 9 Apr 2018 11:51:09 -0700 (PDT) Received: from fifthhorseman.net (unknown [38.109.115.130]) by che.mayfirst.org (Postfix) with ESMTPSA id 05D2DF99A; Mon, 9 Apr 2018 14:51:06 -0400 (EDT) Received: by fifthhorseman.net (Postfix, from userid 1000) id 0F90820415; Mon, 9 Apr 2018 14:51:04 -0400 (EDT) From: Daniel Kahn Gillmor To: Werner Koch , IETF OpenPGP Cc: NIIBE Yutaka , gnupg-devel@gnupg.org, Vincent Breitmoser In-Reply-To: <87woxgtj6m.fsf@wheatstone.g10code.de> References: <20180211120549.GA23215@calamity> <87o9ktxdbz.fsf@wheatstone.g10code.de> <20180213220358.GA31022@calamity> <87r2pop9sz.fsf@iwagami.gniibe.org> <878tbw5f2b.fsf@fsij.org> <87po51oy7l.fsf@wheatstone.g10code.de> <87bmglkkvs.fsf@fifthhorseman.net> <87woxgtj6m.fsf@wheatstone.g10code.de> Mail-Followup-To: IETF OpenPGP Date: Mon, 09 Apr 2018 14:51:03 -0400 Message-ID: <87lgdwxlgo.fsf@fifthhorseman.net> MIME-Version: 1.0 Content-Type: text/plain Archived-At: Subject: Re: [openpgp] cv25519 scalar byte order X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Apr 2018 18:51:12 -0000 Over in https://lists.gnupg.org/pipermail/gnupg-devel/2018-February/033437.html, a discussion was started about scalar byte order for OpenPGP curve 25519 keys: On Mon 2018-04-09 18:53:53 +0200, Werner Koch wrote: > On Mon, 19 Feb 2018 17:24, dkg@fifthhorseman.net said: > [ gniibe wrote: ] >>> That would be incorrect. The prefix (e.g. 0x40) indicates a _point_ >>> format and not the format of a scalar. Thus skey[3] MAY not have this >>> prefix. >> >> what does this "MAY NOT" mean? if this is an attempt at RFC 2119 >> language, i don't understand it. Do you mean "MUST NOT" ? > > I was thinking SHOULD NOT but indeed it MUST be MUST NOT. > >> What steps are needed to clarify the documentation here so that we can >> have interoperable implementations? > > I can't remember an open issue regaring this in the WG. Should be > handled there anyway, I'm moving this discussion to the WG :) --dkg From nobody Sat Apr 21 03:09:45 2018 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FD5612DDD0 for ; Sat, 21 Apr 2018 03:09:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ruhr-uni-bochum.de Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5OpiOVRSPzWC for ; Sat, 21 Apr 2018 03:09:42 -0700 (PDT) Received: from out2.mail.ruhr-uni-bochum.de (out2.mail.ruhr-uni-bochum.de [134.147.42.229]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A93E6126B6D for ; Sat, 21 Apr 2018 03:09:41 -0700 (PDT) Received: from mx2.mail.ruhr-uni-bochum.de (localhost [127.0.0.1]) by out2.mail.ruhr-uni-bochum.de (Postfix mo-ext) with ESMTP id 40SpNz5hNWz4x7N for ; Sat, 21 Apr 2018 12:09:39 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ruhr-uni-bochum.de; s=mail-2017; t=1524305379; bh=AQqQMQPRhzsx0w2EuOhqId2R49+wBS1tQNuHgqHpThs=; h=To:From:Subject:Date:From; b=ovKqam3ewkevDmV4AR6hoseVjkTs1d/dhMNDqeavrUi2oHkHIrrUb/kI2HctGYPnu vxnpiLYFFNdS9P75+ZLRi67XVgFmxpOZlw+HqAuZqL6rSvyUGttHI4D7C8eVmjujj6 0HauixZrAOrS48e4BFRO4W6LBDfu4IUg6pETWWSc= Received: from out2.mail.ruhr-uni-bochum.de (localhost [127.0.0.1]) by mx2.mail.ruhr-uni-bochum.de (Postfix idis) with ESMTP id 40SpNz4vr6z4x7W for ; Sat, 21 Apr 2018 12:09:39 +0200 (CEST) X-Envelope-Sender: X-RUB-Notes: Internal origin=134.147.42.227 Received: from mail1.mail.ruhr-uni-bochum.de (mail1.mail.ruhr-uni-bochum.de [134.147.42.227]) by out2.mail.ruhr-uni-bochum.de (Postfix mi-int) with ESMTP id 40SpNz4Yr5z4x7N for ; Sat, 21 Apr 2018 12:09:39 +0200 (CEST) Received: from [192.168.142.139] (p5B0495EC.dip0.t-ipconnect.de [91.4.149.236]) by mail1.mail.ruhr-uni-bochum.de (Postfix) with ESMTPSA id 40SpNz0gdGzybJ for ; Sat, 21 Apr 2018 12:09:39 +0200 (CEST) To: IETF OpenPGP From: Marcus Brinkmann Openpgp: preference=signencrypt Autocrypt: addr=marcus.brinkmann@ruhr-uni-bochum.de; prefer-encrypt=mutual; keydata= xsFNBFZU6WABEADoVonKbB/tV0v25cm39DaSZyN7it70RhTZHLESbpDiHCwiAMi74MK/HB/q VR9LZDkTDF1x5xUnxxMHa2rpxO329dlk5dQFq1iELxIC/yBCEh5HMLT5MkWqwb8UkINYpaFU csQdPvdC2RzZ4Wt5/xX/6mvSnA4g7hSmUKwIiDX6489Fj5jHK3i0UQFnzKty3O7mqSbedTHs ym2q6fPcIlEOvU6unzxJRK4bgfW2NBM6aMqgLeQkKYIkd1Q/OXEWCXC4hQJepak+n34ChIrV RRHIBJ0GHRkEgHQgQUqPLS0fJlMYCaSZFmOAaqmigxVn1ErG3jTnFQPbPkfE5SCssFP2grNV N1ikJzOEpBLYA/4pOaJzSnZ0xx9aKPdUsyBksKmCsLQNiRt4ZTNFpJ2DJ8NbXYAFkrcu15og lrB//CVQj3CfkzUbpyfcwJHAho1K6XaPybI14znuorTJF3ml0qDd3XDkcmnF58s4hfvGHQtz +CEW+85gUF+T9jKLpwNGcNdBhbvdE6d3cSbR7dXeZsxiA4AmqqEhH6SnVmkSqmhX4+k6RksE MrHJnzefTyA4kXIR2QvD60nZXqta35VhhCzIcpkUpxcwABBR7C8nCxiGV7wNmGECgHv+Zl/O hQhWF1Ld1G93xCg7D+Nz0RerRdwtBOUatmCp+2HRTcRXNOW8jQARAQABzSNNYXJjdXMgQnJp bmttYW5uIDxtYXJjdXNAZ251cGcub3JnPsLBjgQTAQgAOBYhBDyw6EQWrVL34YZUGIiwjVpX tiFABQJYvsfeAhsDBQsJCAcCBhUICQoLAgQWAgMBAh4BAheAAAoJEIiwjVpXtiFAYdQP/jvj o7gm3tcDn8E2Pj2aOd8ajpKEajc3GZ4iDDXngTSPjvuQwB2PgUtfpzpOZW065OMXzMi3+XN9 ZY77Vp4xKhVh2+wxXd3b7jJArTfEave4RfVGlkWJXTrg2zbbwad/suZUT1Nqla4j0S6X7mtR oDVUFVivl7/9dGF4Ctldzms9uE0YktQs9xDl72igOhJX+RtGmM1rTgyncaSPam8KBQPYvLA+ bdTao/bB5wsW7PFBv2r2QOZthe/FGWbWanLuj2nQwdOvfr8RXKabTOzqPmBZwWCNSIfkzjCK m2KzpDkXghiJfK9jOgBSE4tGPieInZj6RSB2r848Uykshmwp0tFFMLIuJbn24czCLRwOuKbg IiWR9SzgENJwDqalBOjOS9jEGVsCzM0YctY6gMURbfv7RNevI7Q4rS6Tw4PmgCN4e8B69O5n Z0Ipf+brUfWL9rcsd9+Ugm8fpK8vykQpcRqYt+pSo5l6acZGgAa2AA8cxh87qbWQihB0ZiRo 2EH0t2DF8NDo32XHnQcuOR0R7JxhcJ3XCUaJr0SNSS3j4BVSE7Yso8T2hP7JdpwdFU88SUgC lX7DJspHtOYAIFldejMaFN3BDVx8+SgqDyEpGCHH04p3X95Wsev8ThRNpQ0dPqheOj2UKJWy ceddqC3VkGUpuTS9Q7xQBdwsX1Inp06rzsFNBFZU6WABEAC3meKoeQn4r37Z1WCvl/lRVgwY LIEwGX94WCZODxPPEy2zTWStj45yv1ZrSI0HyAqssZzXPelOFJzlM8M+iccxIMRgjnnGJJR0 YqYUdraf1Z2YQk/x2WjYNUg0blChdyeqwBhLAQKtnPOKkTPZBBGzPjsS+JeB8yN5r4vouFGM G+CmYFUy4oCmcmuUrdLm9NlzM5ituyTJsPG9CDO834e4qlZsNW/yEzyPsYDW0PxJxgEe/WjL sDJ0aiwaDhBpR8/i2FfEUTGXl+6wvdXR9lhddBoiUCVlNRu9jiKVxv2JVJepcZa9B/atJwcs DAkZJgnjP0qRybixx/wo14KromgWVBGwpZ89sFEgZF6HcxPMKuWtieIORzs9kb0jpMFi1hW9 xi60UBHikrpDG9MnwA35d1lg/9kUlrF1nqTnyoz43UxntlgQejl6JcBR2Poaaib3ZtCR34yx slFz4znXBermA2eEvusEmjYJlxPWozW18grbSYUr1tCmjvKZAIMrspVx37+WSm/4fy8Mq9iq hkIweFQM10GL+fRQOGJTpSY/KiGxmkaTPtj9iaovJOcGAjUzzreGhi4toIrWWULPNKS6vuV4 VgMBF4XxIcVqC9I43yzJ6/cYciwL9bxoWQ4EpHuIG3sewvOWbceeDO9j9DRSd9E6GX67Nzrr uDPXOoge2QARAQABwsFfBBgBAgAJBQJWVOlgAhsMAAoJEIiwjVpXtiFAHBwP/3x5953X/1jR 2AegR6oHSF0HAD8kMnKLP5cwLqrOzUpCwqzFGBCbYdvxrWG106jyvcZdUvtBSGd8n1FuE2Wr pQrKgNjdRG65cN2kduk/w66Oq57EqSuO/r6OnadG9hgVZ1YP/QUsL6n4oF7coD0CJiH98UyL w1yP3Em1ONX8ditvMVHNudVC1VoEN1BFjIX9VWqWoU843vPct9wKi6jLYHHAX3UpnEJtfqLH Cj554s+0yhMhoaAIfNQZWU9iKzldM6Y0j8DJ/YBSThhw9S/TX7mClhXArJ/iPJSr6FPhlQMM cZRQaSiQu1gDL76I5G03SkBWCnXbSpeNtTeMiSpsA58c8rpr2T4giCiV29FPgEj4We2/jBrB cwWA/XjSLE2RNOnF2G65dVxHAlaCc84lC2+bh9kVU+Tb+9YDWfHyNO+pNk/Lpaef2Kg6ScKm te6+wVkWQZFTU8mgkHZqFvQk29RnV02phRTM0ryvWWldNgf3vzztS3iyD3GrJCPcxjm24cAf lp+7JfQ4qV/ec598k++HI4r3SfmSFKFcsxh+073p+oVjs5kIHxM0SExdjKewLOE3BKQYjn1r 17xWXogKlIGbTEluQ4Odyh4n88/iA8ZLNPKjvjno7UuwBsZyJxdaTOXlQYt+ZRZNfIBSWqv0 U9fYtp9qPuy4vCfkycCucIgO Message-ID: Date: Sat, 21 Apr 2018 12:09:38 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-Virus-Scanned: clamav-milter 0.99.4 at mail1.mail.ruhr-uni-bochum.de X-Virus-Status: Clean Archived-At: Subject: [openpgp] 25519 curve identifiers X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Apr 2018 10:09:44 -0000 Hi, currently, RFC4480bis specifies these curve identifiers: 1.3.6.1.4.1.11591.15.1 Ed25519 1.3.6.1.4.1.3029.1.5.1 Curve25519 These identifiers are a patchwork of private enterprise identifiers (Werner Koch/GNU and Peter Gutmann/cryptlib resp.). A more consistent effort is currently underway to specify curve identifiers for these and two more variants in: Algorithm Identifiers for Ed25519, Ed448, X25519 and X448 for use in the Internet X.509 Public Key Infrastructure https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix id-X25519 OBJECT IDENTIFIER ::= { 1 3 101 110 } id-X448 OBJECT IDENTIFIER ::= { 1 3 101 111 } id-Ed25519 OBJECT IDENTIFIER ::= { 1 3 101 112 } id-Ed448 OBJECT IDENTIFIER ::= { 1 3 101 113 } Maybe the working group can consider adopting these along with clarifying the interpretation of the byte order in cv25519 (see mail from Apr 9th). Thanks, Marcus From nobody Sun Apr 22 05:10:29 2018 Return-Path: X-Original-To: openpgp@ietfa.amsl.com Delivered-To: openpgp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B94D124234 for ; Sun, 22 Apr 2018 05:10:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.99 X-Spam-Level: X-Spam-Status: No, score=-1.99 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ihtfp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HfJwL3AOMVm7 for ; Sun, 22 Apr 2018 05:10:25 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 716BD1204DA for ; Sun, 22 Apr 2018 05:10:25 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id B943FE2047; Sun, 22 Apr 2018 08:10:17 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 02941-03; Sun, 22 Apr 2018 08:10:14 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [77.241.229.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 1CFC2E203A; Sun, 22 Apr 2018 08:10:13 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ihtfp.com; s=default; t=1524399014; bh=obxc+yHTnxfOobfoGyNSO9cvH+6Qlj5CXPwSk/WjebU=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=J/CgY/bItf4KfSHX+zeE/auv/+FhNUDo97epi84wpBI7PiUL13hz6J+JMyaOoda0S UeR+K3fUr06+zEkoaTWNX/WBKwvFeACpQ1JZBLg8o64nNB00EDVJMqplRhgepNw/GH RMz5uvzP1yfqWPbCKNp7NrPY8yuhGabERNnGABJQ= Received: (from warlord@localhost) by securerf.ihtfp.org (8.15.2/8.15.2/Submit) id w3MCABlU021074; Sun, 22 Apr 2018 08:10:11 -0400 From: Derek Atkins To: Marcus Brinkmann Cc: IETF OpenPGP References: Date: Sun, 22 Apr 2018 08:10:11 -0400 In-Reply-To: (Marcus Brinkmann's message of "Sat, 21 Apr 2018 12:09:38 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Subject: Re: [openpgp] 25519 curve identifiers X-BeenThere: openpgp@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Ongoing discussion of OpenPGP issues." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 22 Apr 2018 12:10:28 -0000 Marcus, Marcus Brinkmann writes: [snip] > id-X25519 OBJECT IDENTIFIER ::= { 1 3 101 110 } > id-X448 OBJECT IDENTIFIER ::= { 1 3 101 111 } > id-Ed25519 OBJECT IDENTIFIER ::= { 1 3 101 112 } > id-Ed448 OBJECT IDENTIFIER ::= { 1 3 101 113 } > > Maybe the working group can consider adopting these along with I see no harm in adding this. My view is that we should add these, but of course still allow the old versions as well. -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant