slide 9-10-11

This commit is contained in:
Fabrizio T. 2024-11-09 18:06:11 +01:00
parent ac36b0268a
commit 26bfcb22a0
2 changed files with 73 additions and 1 deletions

View file

@ -136,6 +136,78 @@ img {width: 100%; height: 340px;}
- RSA < 3072, DSA, ElGamal, MD5, SHA1, RIPEMD, IDEA, 3DES e altri; pacchetti ver. 2 e 3 - RSA < 3072, DSA, ElGamal, MD5, SHA1, RIPEMD, IDEA, 3DES e altri; pacchetti ver. 2 e 3
- Molto altro &rArr; RFC 9580 Appendix B - Molto altro &rArr; RFC 9580 Appendix B
---
<style scoped>
ol {font-size: 32px;}
ol li {margin-top: 10px}
ul {list-style-type: none; padding-left: 0;font-size:27px}
small {font-size: 25px; margin-top: 0px; display: block}
</style>
# OpenPGP vs LibrePGP 1/3
- _A Critique on the OpenPGP Updates_ (LibrePGP)
https://librepgp.org/#critique
- _A Critique on “A Critique on the OpenPGP Updates”_ (A. Gallagher)
https://blog.pgpkeys.eu/critique-critique.html
0. Questioni di metodo (consenso nel WG)
1. Symmetric Mode
<small>GCM molto complesso da implementare in modo sicuro</small>
2. Padding Packet
<small>Introdurrebbe rischi di _covert channel_ a fronte di benefici non dimostrabili</small>
3. Changes to the ECDH Encryption
4. Proliferation for Algorithms
---
<style scoped>
ol {font-size: 32px;}
ol li {margin-top: 10px}
ul {list-style-type: none; padding-left: 0; font-size:27px}
small {font-size: 25px; margin-top: 0px; display: block}
</style>
# OpenPGP vs LibrePGP: 2/3
- _A Critique on the OpenPGP Updates_ (LibrePGP)
https://librepgp.org/#critique
- _A Critique on “A Critique on the OpenPGP Updates”_ (A. Gallagher)
https://blog.pgpkeys.eu/critique-critique.html
5. Removal of Useful Real-world Features
<small>Es. _designated revoker_</small>
6. Removal of Security Fixes
<small>Firma metadati dei file (nome, timestamp ultima modifica)</small>
7. Salted Signature Issue
<small>Introdurrebbe rischi di _covert channel_ a fronte di benefici non dimostrabili</small>
8. Regression from Deployed Formats and Standard Behavior
<small>Es. cifratura storage a lungo termine</small>
---
<style scoped>
table {font-size: 20px; width: 100%; margin: 15px 0 0 0}
tr td:nth-child(4){font-size:17px;}
p {margin-top:0;}
em {font-size: 20px}
em sup {display: inline-block; margin-left: 10px; font-size: 16px}
</style>
# OpenPGP vs LibrePGP 3/3
| Feature | OpenPGP | LibrePGP<sup>*</sup> | Note |
|--------------------------|-----------------------|----------------------|------|
| Versione pacchetti | 6 | 5 | molto simili (eccetto msg cifrati AEAD) |
| Algo firma default | Ed25519 | ECDSA | |
| Algo asimmetrico default | X25519 | ECDH | |
| Algo simmetrico default | AES128/OCB | AES128/OCB | implementati e serializzati diversamente |
| Algo hash default | SHA256 | SHA256 | |
| AEAD | OCB, EAX, GCM | OCB, EAX | implementati e serializzati diversamente |
| Memory-hard S2K | Argon2 | No | |
| Session-Key-Reuse | Sì<sup>1</sup> | No | <sup>1</sup> Key derivation via HKDF |
| Firma non deterministica | Sì | No | |
| Firma metadati file | Opzionale<sup>2</sup> | Sì |<sup>2</sup> [draft-gallagher-openpgp-literal-metadata](https://datatracker.ietf.org/doc/draft-gallagher-openpgp-literal-metadata/) |
| Post-Quantum Crypto | altre RFC<sup>3</sup> | ML-KEM<sup>4</sup> |<sup>3</sup> [draft-ietf-openpgp-pqc](https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/) (cifratura e firma)<br><sup>4</sup> Solo cifratura, mod. op. incompatibile |
| Altre funzionalità | altre RFC | Incluse | es. 1pa3pc, key flags vari, ... |
<em><sup>*</sup> [Versione Draft settembre 2024](https://datatracker.ietf.org/doc/draft-koch-librepgp/)</em>
--- ---
# TODO # TODO

View file

@ -46,7 +46,7 @@ th {
text-align: left; text-align: left;
} }
ul { ul, ol {
margin-top:15px; margin-top:15px;
} }
li { li {