From 8268aaa2cd619663efd8322ff912d14434c13bce Mon Sep 17 00:00:00 2001 From: Fabrizio T Date: Tue, 12 Nov 2024 09:17:07 +0100 Subject: [PATCH] =?UTF-8?q?vulnerabilit=C3=A0=20librepgp?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/slides.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/src/slides.md b/src/slides.md index 17e21a3..22fa11d 100644 --- a/src/slides.md +++ b/src/slides.md @@ -186,27 +186,27 @@ https://blog.pgpkeys.eu/critique-critique.html table {font-size: 24px; width: 100%; margin: 20px 0 0 0} tr td:nth-child(4){font-size:16px;} p {margin-top:0;} - em {font-size: 20px} - em sup {display: inline-block; margin-left: 10px; font-size: 16px} + small {font-size: 20px} # OpenPGP vs LibrePGP 3/3 | Feature | OpenPGP | LibrePGP* | Note | |--------------------------|-----------------------|----------------------|------| -| Versione pacchetti | 6 | 5 | molto simili (eccetto msg cifrati AEAD) | +| Versione chiavi e firme | 6 | 5+ | molto simili (eccetto msg cifrati AEAD) | | Algo firma default | Ed25519 | ECDSA | | | Algo asimmetrico default | X25519 | ECDH | | -| Algo simmetrico default | AES128/OCB | AES128/OCB | implementati e serializzati diversamente | +| Algo simmetrico default | AES128/OCB | AES128/OCB | implementati e serializzati diversamente | | Algo hash default | SHA256 | SHA256 | | -| AEAD | OCB, EAX, GCM | OCB, EAX | implementati e serializzati diversamente | -| Memory-hard S2K | Argon2 | No | | +| AEAD | OCB, EAX, GCM | OCB+, EAX| implementati e serializzati diversamente | +| Memory-hard S2K | Argon2 | No | | | Session-Key-Reuse | Sì1 | No | 1 Key derivation via HKDF | | Firma non deterministica | Sì | No | | | Firma metadati file | Opzionale2 | Sì |2 [draft-gallagher-openpgp-literal-metadata](https://datatracker.ietf.org/doc/draft-gallagher-openpgp-literal-metadata/) | | Post-Quantum Crypto | altre RFC3 | ML-KEM4 |3 [draft-ietf-openpgp-pqc](https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/) (cifratura e firma)
4 Solo cifratura, mod. op. incompatibile | | Altre funzionalità | altre RFC | Incluse | es. 1pa3pc, key flags vari, ... | -* [Versione Draft settembre 2024](https://datatracker.ietf.org/doc/draft-koch-librepgp/) +* [Versione Draft settembre 2024](https://datatracker.ietf.org/doc/draft-koch-librepgp/)_ ++_ A. Gallagher _[A Summary of Known Security Issues in LibrePGP](https://blog.pgpkeys.eu/security-issues-librepgp-2024-08.html)_ ---