From 26bfcb22a0b58fd5ac589e4a76ddc4ac39d697a6 Mon Sep 17 00:00:00 2001 From: Fabrizio T Date: Sat, 9 Nov 2024 18:06:11 +0100 Subject: [PATCH] slide 9-10-11 --- src/slides.md | 72 +++++++++++++++++++++++++++++++++++++++++++++++++++ src/theme.css | 2 +- 2 files changed, 73 insertions(+), 1 deletion(-) diff --git a/src/slides.md b/src/slides.md index 494f19e..a1b11df 100644 --- a/src/slides.md +++ b/src/slides.md @@ -136,6 +136,78 @@ img {width: 100%; height: 340px;} - RSA < 3072, DSA, ElGamal, MD5, SHA1, RIPEMD, IDEA, 3DES e altri; pacchetti ver. 2 e 3 - Molto altro ⇒ RFC 9580 Appendix B +--- + +# OpenPGP vs LibrePGP 1/3 + +- _A Critique on the OpenPGP Updates_ (LibrePGP) +https://librepgp.org/#critique +- _A Critique on “A Critique on the OpenPGP Updates”_ (A. Gallagher) +https://blog.pgpkeys.eu/critique-critique.html + +0. Questioni di metodo (consenso nel WG) +1. Symmetric Mode +GCM molto complesso da implementare in modo sicuro +2. Padding Packet +Introdurrebbe rischi di _covert channel_ a fronte di benefici non dimostrabili +3. Changes to the ECDH Encryption +4. Proliferation for Algorithms + +--- + +# OpenPGP vs LibrePGP: 2/3 + +- _A Critique on the OpenPGP Updates_ (LibrePGP) +https://librepgp.org/#critique +- _A Critique on “A Critique on the OpenPGP Updates”_ (A. Gallagher) +https://blog.pgpkeys.eu/critique-critique.html + +5. Removal of Useful Real-world Features +Es. _designated revoker_ +6. Removal of Security Fixes +Firma metadati dei file (nome, timestamp ultima modifica) +7. Salted Signature Issue +Introdurrebbe rischi di _covert channel_ a fronte di benefici non dimostrabili +8. Regression from Deployed Formats and Standard Behavior +Es. cifratura storage a lungo termine + +--- + +# OpenPGP vs LibrePGP 3/3 + +| Feature | OpenPGP | LibrePGP* | Note | +|--------------------------|-----------------------|----------------------|------| +| Versione pacchetti | 6 | 5 | molto simili (eccetto msg cifrati AEAD) | +| Algo firma default | Ed25519 | ECDSA | | +| Algo asimmetrico default | X25519 | ECDH | | +| Algo simmetrico default | AES128/OCB | AES128/OCB | implementati e serializzati diversamente | +| Algo hash default | SHA256 | SHA256 | | +| AEAD | OCB, EAX, GCM | OCB, EAX | implementati e serializzati diversamente | +| Memory-hard S2K | Argon2 | No | | +| Session-Key-Reuse | Sì1 | No | 1 Key derivation via HKDF | +| Firma non deterministica | Sì | No | | +| Firma metadati file | Opzionale2 | Sì |2 [draft-gallagher-openpgp-literal-metadata](https://datatracker.ietf.org/doc/draft-gallagher-openpgp-literal-metadata/) | +| Post-Quantum Crypto | altre RFC3 | ML-KEM4 |3 [draft-ietf-openpgp-pqc](https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/) (cifratura e firma)
4 Solo cifratura, mod. op. incompatibile | +| Altre funzionalità | altre RFC | Incluse | es. 1pa3pc, key flags vari, ... | + +* [Versione Draft settembre 2024](https://datatracker.ietf.org/doc/draft-koch-librepgp/) + --- # TODO diff --git a/src/theme.css b/src/theme.css index 6b1648e..256d97a 100644 --- a/src/theme.css +++ b/src/theme.css @@ -46,7 +46,7 @@ th { text-align: left; } -ul { +ul, ol { margin-top:15px; } li {