Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Jeff Johnson
On Apr 5, 2011, at 12:46 PM, Daniel Kahn Gillmor wrote: > On 04/05/2011 11:35 AM, Jeff Johnson wrote: >> The current V4 scheme (from memory, see RFC 4880 for specifics) to assign >> a fingerprint to a pubkey (including all of RSA/DSA/ECC) involves running >> a SHA1 digest across conventionally de

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Daniel Kahn Gillmor
On 04/05/2011 11:35 AM, Jeff Johnson wrote: > The current V4 scheme (from memory, see RFC 4880 for specifics) to assign > a fingerprint to a pubkey (including all of RSA/DSA/ECC) involves running > a SHA1 digest across conventionally defined plaintext that involves the > alogrithm > parameters and

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Jeff Johnson
On Apr 5, 2011, at 11:07 AM, Daniel Kahn Gillmor wrote: > On 04/05/2011 09:33 AM, Jean-Jacques Brucker wrote: >> I didn't know that fingerprint was calculated with a timestamp. Do you have >> any idea of the reason(s) to do that ? > > You should read RFC 4880 (or just skim it and read the parts

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Daniel Kahn Gillmor
On 04/05/2011 09:33 AM, Jean-Jacques Brucker wrote: > I didn't know that fingerprint was calculated with a timestamp. Do you have > any idea of the reason(s) to do that ? You should read RFC 4880 (or just skim it and read the parts that most interest you): https://tools.ietf.org/html/rfc4880

Re: [Sks-devel] about ECC and collisions

2011-04-05 Thread Jean-Jacques Brucker
Thanks for all. I didn't know that fingerprint was calculated with a timestamp. Do you have any idea of the reason(s) to do that ? (that change lot of things, and I'd also like to know if there is a way to query for specific keys). (thanks for the link but i don't even know the difference betw

Re: [Sks-devel] about ECC and collisions

2011-04-04 Thread Daniel Kahn Gillmor
On 04/04/2011 06:40 AM, Jean-Jacques Brucker wrote: > 1- As ECC crypto is soon available in gnupg, I am asking if sks key servers > won't have problems managing them. > > (That is a great feature I am waiting for to use gpg with signing chains) > > But the ECC curves are smaller than RSA or DSA

[Sks-devel] about ECC and collisions

2011-04-04 Thread Jean-Jacques Brucker
I have 3 questions : 1- As ECC crypto is soon available in gnupg, I am asking if sks key servers won't have problems managing them. (That is a great feature I am waiting for to use gpg with signing chains) But the ECC curves are smaller than RSA or DSA keys, full collisions have more chances