TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

About the "OpenPGP Schism"

37 点作者 upofadown超过 1 年前

1 comment

twiss超过 1 年前
The primary reason for adding GCM to the crypto refresh was not efficiency, but rather FIPS compliance (as GCM is the only AEAD mode specified by NIST).<p>Then, some changes were made to how the AEAD modes (OCB, GCM, and EAX) are used, particularly to provide key separation between the various modes. In the old version, or what is now called &quot;LibrePGP&quot;, the same session key can&#x2F;could be used with different AEAD modes, and - if any of the AEAD modes turns out to be secure - a downgrade attack is possible. Furthermore, a downgrade attack from AEAD to non-AEAD could potentially be possible (à la [1]). All of that has been completely prevented in the crypto refresh, which indeed required a change in how AEAD is used.<p>However, it&#x27;s GnuPG&#x27;s choice not to implement those changes, not the IETF working group&#x27;s choice to make changes, that caused this rift. IETF drafts change all the time, and in fact should change, in the face of possible security issues.<p>Note that v5, and the &quot;LibrePGP&quot; flavor of AEAD, has not been specified in an RFC (so far). Normally, it&#x27;s a bad idea to generate messages according to a draft. GnuPG has done so, and now they&#x27;re stuck with having to support it. Now, writing an RFC to describe that older format is also fine, but none of this should&#x27;ve caused a rift, and blaming that on the crypto refresh is silly.<p>---<p>Regarding EAX, it was discussed a couple times to remove it but some people wanted to keep it, so it was kept - as optional to implement. This shouldn&#x27;t cause any implementation burden on those who don&#x27;t want to implement it, and those who do want to use it can. I do agree it&#x27;s a bit inelegant to have three AEAD modes in the spec, but again, it shouldn&#x27;t cause any issues.<p>[1]: <a href="https:&#x2F;&#x2F;www.ndss-symposium.org&#x2F;wp-content&#x2F;uploads&#x2F;2017&#x2F;09&#x2F;10_4_0.pdf" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.ndss-symposium.org&#x2F;wp-content&#x2F;uploads&#x2F;2017&#x2F;09&#x2F;10...</a>
评论 #38636928 未加载
评论 #38635860 未加载