From owner-ietf-openpgp@mail.imc.org Wed Jun 4 14:02:24 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 09C1D3A6849 for ; Wed, 4 Jun 2008 14:02:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.49 X-Spam-Level: X-Spam-Status: No, score=-1.49 tagged_above=-999 required=5 tests=[AWL=1.110, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G4ehNELtIGlj for ; Wed, 4 Jun 2008 14:02:19 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 5BAE23A6B3E for ; Wed, 4 Jun 2008 14:02:19 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m54KlNvL015051 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 4 Jun 2008 13:47:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m54KlNxj015050; Wed, 4 Jun 2008 13:47:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m54KlJqt015035 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 4 Jun 2008 13:47:21 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id EB70B4501F; Wed, 4 Jun 2008 13:47:16 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id DB1404802E; Wed, 4 Jun 2008 13:47:16 -0700 (PDT) Date: Wed, 4 Jun 2008 13:47:16 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: David Shaw Cc: ietf-openpgp@imc.org, len.sassaman@esat.kuleuven.be Subject: Re: Whirlpool In-Reply-To: <20080411201821.GB1546@jabberwocky.com> Message-ID: References: <117bad160804111101v6a5294f2u582d776cf7ebf1e5@mail.gmail.com> <20080411201821.GB1546@jabberwocky.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 11 Apr 2008, David Shaw wrote: > > On Fri, Apr 11, 2008 at 07:01:24PM +0100, David Crick wrote: > > > > I've seen mention several times on this list (and others) > > of Whirlpool's apparent pending inclusion into OpenPGP, > > but have yet to see any actual drafts on here about it. > > > > Is anyone willing to admit they are working on one? :) > > I think Len was working on one. > > Len, you're welcome to the XML from my Camellia draft. With that XML, > a Whirlpool draft is pretty much cut and paste. Hi David, That would be really helpful. I have it mostly finished, but set it aside because of some deadlines I had. My next week is already overbooked, but after that I should have a few hours to finish it up, especially thanks to your offer of the XML. (Please send it to len.sassaman@esat.kuleuven.be). Thanks again! --Len. From c.koenig@bindewald.de Fri Jun 6 04:34:32 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5CA493A6B10; Fri, 6 Jun 2008 04:34:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -75.115 X-Spam-Level: X-Spam-Status: No, score=-75.115 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_TR=0.935, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id efthfS-cjFRV; Fri, 6 Jun 2008 04:34:28 -0700 (PDT) Received: from dsl88-244-39251.ttnet.net.tr (unknown [88.224.153.83]) by core3.amsl.com (Postfix) with SMTP id 648193A6A78; Fri, 6 Jun 2008 04:34:12 -0700 (PDT) X-Originating-IP: 208.220.208.246 by smtp.88.224.153.83; Fri, 06 Jun 2008 07:34:21 -0500 Message-ID: From: "Morgan Neff" Reply-To: "Morgan Neff" To: omcast@ietf.org Subject: Affordable replica watches Date: Fri, 06 Jun 2008 07:34:21 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit The new Porsche Design watches originated from the novel Titanium Chronograph from the 1970's, an absolutely unique creation due to the perfection of its workmanship. Based on its design, the Porsche Design Company developed an appealing, stylish, sporty and highly accurate watch. Unfortunately, these timepieces come with a high price tag. http://luwusodytil35.blogspot.com/ That's why a clever group of European manufacturers decided to offer the same exact functionality and style at greatly reduced prices: the Porsche Design replica watches. These replicas are so similar to the brand name pieces that it is practically impossible to tell them apart, other than by their price. They look the same, they function the same and they definitely don't have the same prices :) How would you like to browse through an amazing collection of these watches and marvel yourself with their low prices? Visit Prestige Replicas and see for yourself why sometimes replicas are so much better than the originals! http://luwusodytil35.blogspot.com/ From c.hennequin@agencehemispheresud.com Fri Jun 6 13:02:18 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7E68B3A67EF; Fri, 6 Jun 2008 13:02:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -79.551 X-Spam-Level: X-Spam-Status: No, score=-79.551 tagged_above=-999 required=5 tests=[BAYES_95=3, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_EQ_MODEMCABLE=0.768, RCVD_IN_PBL=0.905, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xV-g3+aNYQsy; Fri, 6 Jun 2008 13:02:17 -0700 (PDT) Received: from Dynamic-IP-190159115166.cable.net.co (unknown [190.159.115.166]) by core3.amsl.com (Postfix) with SMTP id 1B9FA3A68BA; Fri, 6 Jun 2008 13:02:10 -0700 (PDT) X-Originating-IP: 220.92.11.216 by smtp.190.159.115.166; Fri, 06 Jun 2008 16:02:20 -0500 Message-ID: From: "Brain Coon" Reply-To: "Brain Coon" To: omcast@ietf.org Subject: Take a look at the latest replica watches Date: Fri, 06 Jun 2008 16:02:20 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Since 1884 Bvlgari watches have drawn inspiration from the timeless beauty of Greek and Roman art. The time pieces that they produce are as much works of art, as a way to tell time, and now you can possess one of these splendid time pieces for a very affordable price, at Prestige Replicas. http://fadobewaliv55.blogspot.com/ This store has the finest collection of Bvlgari replica watches, and you will be astounded at the difference in price as well as amazed at the quality of their timepieces. Prestige Replicas works hard to make sure that your purchase is shipped as fast as your order is processed, and also that your private information is protected. And with the new redesign of the Prestige Replicas website, we are offering 15% off on your purchase of watches! http://fadobewaliv55.blogspot.com/ From c.kopp@glantschnig.co.at Fri Jun 6 14:35:46 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 525253A6911; Fri, 6 Jun 2008 14:35:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -49.504 X-Spam-Level: X-Spam-Status: No, score=-49.504 tagged_above=-999 required=5 tests=[BAYES_95=3, FB_REPLICA_ROLEX=3.157, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, REPLICA_WATCH=3.396, SARE_RECV_SPEEDY_AR=0.808, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_GENREP=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H-w-lARVfIeM; Fri, 6 Jun 2008 14:35:45 -0700 (PDT) Received: from 190-172-167-217.speedy.com.ar (unknown [190.172.167.217]) by core3.amsl.com (Postfix) with SMTP id AE6953A680D; Fri, 6 Jun 2008 14:35:20 -0700 (PDT) X-Originating-IP: 253.226.136.70 by smtp.190.172.167.217; Fri, 06 Jun 2008 17:35:30 -0500 Message-ID: From: "Herminia Mora" Reply-To: "Herminia Mora" To: multi6-archive@megatron.ietf.org Subject: New replica watches delivered fast Date: Fri, 06 Jun 2008 17:35:30 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit When it comes down to getting a replica Rolex watch, there is just one place that offers its visitors and customers the highest quality available: Prestige Replicas. This unparalleled online store specializes in top of the line replica watches with unsurpassed performance, and bearing every marking that the genuine timepieces have. Every replica watch that Prestige Replicas carries, is made of solid stainless steel and features a sapphire crystal glass. What's more, every Rolex in store displays the green Rolex sticker with model number and logo on it. Just because you're buying a replica, don't settle for a low quality product. There are only a handful of online stores that offer the highest quality Rolex replica watches and Prestige Replicas is among them, and with the lowest available prices! http://dotekymeryz86.blogspot.com/ From c.hebing@dimension4.net Fri Jun 6 19:56:15 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 940C03A67EC; Fri, 6 Jun 2008 19:56:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -68.382 X-Spam-Level: X-Spam-Status: No, score=-68.382 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_IPADDR2=4.395, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_RECV_SPEEDY_AR=0.808, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aMS92JsLBsBo; Fri, 6 Jun 2008 19:56:14 -0700 (PDT) Received: from 190-50-122-122.speedy.com.ar (unknown [190.50.122.122]) by core3.amsl.com (Postfix) with SMTP id 0C26C3A677E; Fri, 6 Jun 2008 19:56:02 -0700 (PDT) X-Originating-IP: 104.238.192.104 by smtp.190.50.122.122; Fri, 06 Jun 2008 22:56:13 -0500 Message-ID: From: "Damon Singleton" Reply-To: "Damon Singleton" To: omcast@ietf.org Subject: Watches for him, her and you Date: Fri, 06 Jun 2008 22:56:13 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is now bigger and better than ever before! I'm sure you're familiar with this popular replica store, so I'm glad to announce that Prestige Replicas has been completely redesigned and now offers not only the highest quality replica watches but also handbags and jewelry! In addition, they're running a 15% special these days when you buy two watches! There's never been a better time to buy a replica watch, especially a Tag Heuer! With prices as low as $200, and the store unmatched privacy assurance guarantee, I'm sure you won't want to wait to get your superior quality Tag Heuer replica! http://foxehepefyr47.blogspot.com/ From c.riegler@lichtagent.co.at Fri Jun 6 20:11:20 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5DD4B3A67EC; Fri, 6 Jun 2008 20:11:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -67.388 X-Spam-Level: X-Spam-Status: No, score=-67.388 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, HELO_DYNAMIC_IPADDR2=4.395, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_RECV_SPEEDY_AR=0.808, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2NwUXhdMvB14; Fri, 6 Jun 2008 20:11:19 -0700 (PDT) Received: from 190-51-127-62.speedy.com.ar (unknown [190.51.127.62]) by core3.amsl.com (Postfix) with SMTP id B323B3A67AA; Fri, 6 Jun 2008 20:11:08 -0700 (PDT) X-Originating-IP: 112.22.92.80 by smtp.190.51.127.62; Fri, 06 Jun 2008 23:11:19 -0500 Message-ID: From: "Darcy Lyons" Reply-To: "Darcy Lyons" To: ccamp-archive@megatron.ietf.org Subject: Replicas will save you thousands Date: Fri, 06 Jun 2008 23:11:19 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is now bigger and better than ever before! I'm sure you're familiar with this popular replica store, so I'm glad to announce that Prestige Replicas has been completely redesigned and now offers not only the highest quality replica watches but also handbags and jewelry! In addition, they're running a 15% special these days when you buy two watches! There's never been a better time to buy a replica watch, especially a Tag Heuer! With prices as low as $200, and the store unmatched privacy assurance guarantee, I'm sure you won't want to wait to get your superior quality Tag Heuer replica! http://kahyfyrycic50.blogspot.com/ From c.lee@teresabevin.com Sun Jun 8 07:23:18 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 10B9F3A6B19; Sun, 8 Jun 2008 07:23:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -83.61 X-Spam-Level: X-Spam-Status: No, score=-83.61 tagged_above=-999 required=5 tests=[BAYES_95=3, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_DSL=1.129, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3E+fMbN-GnZR; Sun, 8 Jun 2008 07:23:16 -0700 (PDT) Received: from adsl190-26140072.dyn.etb.net.co (unknown [190.26.140.72]) by core3.amsl.com (Postfix) with SMTP id BB3DF3A6862; Sun, 8 Jun 2008 07:23:07 -0700 (PDT) X-Originating-IP: 232.144.44.48 by smtp.190.26.140.72; Sun, 08 Jun 2008 10:23:23 -0500 Message-ID: From: "Scot Good" Reply-To: "Scot Good" To: ootippm-archive@ietf.org Subject: Trim line or sport watch? You choose Date: Sun, 08 Jun 2008 10:23:23 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit An IWC watch is a uniquely handcrafted time piece that combines a classical element with a timeless elegance. Its appeal comes from their traditional beauty and their superb performance. But this sophistication has always come with a high price tag. Except of course, when you buy an IWC replica. And Prestige Replicas has dozens of IWC replica watches at prices so incredibly low that you can rest assured they won't last long! So, why not head over to Prestige Replicas right now and take a look at their IWC watches? After all, isn't it time you wore a splendid wristwatch without having to spend a fortune? http://hawetyceloc41.blogspot.com/ From c.j.wilson@media-innovations.ltd.uk Sun Jun 8 08:23:57 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 797133A6B45; Sun, 8 Jun 2008 08:23:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -69.861 X-Spam-Level: X-Spam-Status: No, score=-69.861 tagged_above=-999 required=5 tests=[BAYES_60=1, FB_REPLICA_ROLEX=3.157, FS_REPLICA=0.994, GB_ROLEX=5, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_DYNAMIC=1.144, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, REPLICA_WATCH=3.396, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_REP=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pgnz7Pf03DJd; Sun, 8 Jun 2008 08:23:56 -0700 (PDT) Received: from 25.pool85-50-130.dynamic.orange.es (25.pool85-50-130.dynamic.orange.es [85.50.130.25]) by core3.amsl.com (Postfix) with SMTP id 6CCE33A6B19; Sun, 8 Jun 2008 08:23:47 -0700 (PDT) X-Originating-IP: 97.232.104.192 by smtp.85.50.130.25; Sun, 08 Jun 2008 11:24:03 -0500 Message-ID: From: "Gladys Cline" Reply-To: "Gladys Cline" To: omcast@ietf.org Subject: Replica or Original? Date: Sun, 08 Jun 2008 11:24:03 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit When it comes down to getting a replica Rolex watch, there is just one place that offers its visitors and customers the highest quality available: Prestige Replicas. This unparalleled online store specializes in top of the line replica watches with unsurpassed performance, and bearing every marking that the genuine timepieces have. Every replica watch that Prestige Replicas carries, is made of solid stainless steel and features a sapphire crystal glass. What's more, every Rolex in store displays the green Rolex sticker with model number and logo on it. Just because you're buying a replica, don't settle for a low quality product. There are only a handful of online stores that offer the highest quality Rolex replica watches and Prestige Replicas is among them, and with the lowest available prices! http://hupumubapuc61.blogspot.com/ From cad-news@inter-networld.de Sun Jun 8 15:17:14 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60A1A3A68C5; Sun, 8 Jun 2008 15:17:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -51.34 X-Spam-Level: X-Spam-Status: No, score=-51.34 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_ROLEX=5, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_BAYES_5x7=0.6, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PLn-eIVd21ag; Sun, 8 Jun 2008 15:17:13 -0700 (PDT) Received: from 131-130-22-190.adsl.terra.cl (131-130-22-190.adsl.terra.cl [190.22.130.131]) by core3.amsl.com (Postfix) with SMTP id 95CE43A685C; Sun, 8 Jun 2008 15:17:04 -0700 (PDT) X-Originating-IP: 136.248.78.222 by smtp.190.22.130.131; Sun, 08 Jun 2008 18:17:30 -0500 Message-ID: From: "Candy Mcmullen" Reply-To: "Candy Mcmullen" To: ccamp-archive@megatron.ietf.org Subject: You and a Rolex watch Date: Sun, 08 Jun 2008 18:17:30 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Prestige Replicas is a one of a kind store: the online place where you can find the highest quality replica watches at the best prices in the world! Forget about flying to China to get a mockup Cartier watch... You can now get European quality Cartier replicas at deeply discounted prices at Prestige Replicas! The best part is that our watches are so finely crafted that even the most experienced connoisseur would have a hard time telling our watches from the real deal. http://gypekyrorad52.blogspot.com/ Visit Prestige Replicas today and discover a wide range of top quality Cartier replica watches offered at unbelievable prices, with a 15% discount when you buy two! http://gypekyrorad52.blogspot.com/ From c.heil@egz-landau.de Mon Jun 9 00:51:17 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A6A13A688E; Mon, 9 Jun 2008 00:51:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -45.657 X-Spam-Level: X-Spam-Status: No, score=-45.657 tagged_above=-999 required=5 tests=[BAYES_95=3, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, SARE_SUB_PERFECT=0.725, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gXXTnsFFMK6Q; Mon, 9 Jun 2008 00:51:16 -0700 (PDT) Received: from 19-115-188-190.cab.prima.net.ar (unknown [190.188.115.19]) by core3.amsl.com (Postfix) with SMTP id 0B0833A6B29; Mon, 9 Jun 2008 00:50:39 -0700 (PDT) X-Originating-IP: 240.116.192.211 by smtp.190.188.115.19; Mon, 09 Jun 2008 03:51:04 -0500 Message-ID: From: "Elizabeth Maurer" Reply-To: "Elizabeth Maurer" To: ccamp-archive@megatron.ietf.org Subject: Replica watch is a perfect gift Date: Mon, 09 Jun 2008 03:51:04 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Prestige Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://wobusygugot37.blogspot.com/ Prestige Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://wobusygugot37.blogspot.com/ From c.meloni@spedit.it Mon Jun 9 08:09:02 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 707753A6BD5; Mon, 9 Jun 2008 08:09:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -79.16 X-Spam-Level: X-Spam-Status: No, score=-79.16 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SUBJECT_FUZZY_TION=0.156, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MIDuYEGFuE05; Mon, 9 Jun 2008 08:09:01 -0700 (PDT) Received: from 99-105-18-190.fibertel.com.ar (unknown [190.18.105.99]) by core3.amsl.com (Postfix) with SMTP id 524703A6C98; Mon, 9 Jun 2008 08:08:49 -0700 (PDT) X-Originating-IP: 120.52.92.93 by smtp.190.18.105.99; Mon, 09 Jun 2008 11:09:06 -0500 Message-ID: From: "Taylor Atkinson" Reply-To: "Taylor Atkinson" To: omcast@ietf.org Subject: Inexpensive Louis Vuitton bags Date: Mon, 09 Jun 2008 11:09:06 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Breitling watch is a statement not just of wealth, but of sophistication... it's a way to show the world that you are a man in charge of your life and that you know exactly what you want. Surely, among those things you do want is a bigger budget. So, why not kill two birds with one stone? Getting a replica Breitling wristwatch and keeping your budget practically untouched! http://takunodyhen75.blogspot.com/ Thanks to Prestige Replicas it is now possible! With an astonishing collection of replica Breitling timepieces at rock bottom prices, Selissia will make the delights of quality watches lovers. It offers excellent quality timepieces at unsurpassed prices; a privacy-assured guarantee, incomparable customer service, and what's better: 15% off when you buy two watches! http://takunodyhen75.blogspot.com/ From c.zwijsen@leprastichting.nl Mon Jun 9 08:10:53 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B1D513A69AA; Mon, 9 Jun 2008 08:10:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -72.276 X-Spam-Level: X-Spam-Status: No, score=-72.276 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DIALUP=0.862, HELO_EQ_DSL=1.129, HOST_EQ_DIALUP=0.862, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x5fx7qrCoOh9; Mon, 9 Jun 2008 08:10:52 -0700 (PDT) Received: from r190-134-130-109.dialup.adsl.anteldata.net.uy (r190-134-130-109.dialup.adsl.anteldata.net.uy [190.134.130.109]) by core3.amsl.com (Postfix) with SMTP id 6E8223A6C99; Mon, 9 Jun 2008 08:10:24 -0700 (PDT) X-Originating-IP: 244.2.152.55 by smtp.190.134.130.109; Mon, 09 Jun 2008 11:10:50 -0500 Message-ID: From: "Stefan Babcock" Reply-To: "Stefan Babcock" To: ccamp-archive@megatron.ietf.org Subject: Spring quality watches offer Date: Mon, 09 Jun 2008 11:10:50 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit An IWC watch is a uniquely handcrafted time piece that combines a classical element with a timeless elegance. Its appeal comes from their traditional beauty and their superb performance. But this sophistication has always come with a high price tag. Except of course, when you buy an IWC replica. And Prestige Replicas has dozens of IWC replica watches at prices so incredibly low that you can rest assured they won't last long! So, why not head over to Prestige Replicas right now and take a look at their IWC watches? After all, isn't it time you wore a splendid wristwatch without having to spend a fortune? http://bivitewufyp52.blogspot.com/ From c.stummer@snr-solutions.com Mon Jun 9 16:12:49 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 175E73A6879; Mon, 9 Jun 2008 16:12:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -65.211 X-Spam-Level: X-Spam-Status: No, score=-65.211 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_REPLICA_ROLEX=3.157, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, GB_ROLEX=5, HELO_DYNAMIC_IPADDR=2.426, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, REPLICA_WATCH=3.396, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_REP=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UMjZXyZHTwFK; Mon, 9 Jun 2008 16:12:48 -0700 (PDT) Received: from pc-188-127-86-200.cm.vtr.net (pc-188-127-86-200.cm.vtr.net [200.86.127.188]) by core3.amsl.com (Postfix) with SMTP id 50A473A67D4; Mon, 9 Jun 2008 16:11:51 -0700 (PDT) X-Originating-IP: 148.52.120.96 by smtp.200.86.127.188; Mon, 09 Jun 2008 19:12:18 -0500 Message-ID: From: "Marion Holliday" Reply-To: "Marion Holliday" To: ccamp-archive@megatron.ietf.org Subject: Get one of these awesome replicas Date: Mon, 09 Jun 2008 19:12:18 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit When it comes down to getting a replica Rolex watch, there is just one place that offers its visitors and customers the highest quality available: Prestige Replicas. This unparalleled online store specializes in top of the line replica watches with unsurpassed performance, and bearing every marking that the genuine timepieces have. Every replica watch that Prestige Replicas carries, is made of solid stainless steel and features a sapphire crystal glass. What's more, every Rolex in store displays the green Rolex sticker with model number and logo on it. Just because you're buying a replica, don't settle for a low quality product. There are only a handful of online stores that offer the highest quality Rolex replica watches and Prestige Replicas is among them, and with the lowest available prices! http://gyzywarezax23.blogspot.com/ From c3bi@bpsarabia.com.sa Tue Jun 10 04:14:49 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1BDB43A6765; Tue, 10 Jun 2008 04:14:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -56.532 X-Spam-Level: X-Spam-Status: No, score=-56.532 tagged_above=-999 required=5 tests=[BAYES_80=2, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S9I1NKXQrjUe; Tue, 10 Jun 2008 04:14:48 -0700 (PDT) Received: from 201-213-168-21.net.prima.net.ar (201-213-168-21.net.prima.net.ar [201.213.168.21]) by core3.amsl.com (Postfix) with SMTP id BCFD23A688F; Tue, 10 Jun 2008 04:14:34 -0700 (PDT) X-Originating-IP: 0.8.77.175 by smtp.201.213.168.21; Tue, 10 Jun 2008 07:14:54 -0500 Message-ID: From: "Jamar Rhodes" Reply-To: "Jamar Rhodes" To: omcast@ietf.org Subject: Watches made to impress Date: Tue, 10 Jun 2008 07:14:54 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Prestige Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://kefobyvywas31.blogspot.com/ Prestige Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://kefobyvywas31.blogspot.com/ From c.preissner@tv1.de Tue Jun 10 04:35:26 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3C5E03A68E1; Tue, 10 Jun 2008 04:35:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -55.816 X-Spam-Level: X-Spam-Status: No, score=-55.816 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_REPLICA_ROLEX=3.157, FH_HOST_EQ_D_D_D_D=0.765, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, GB_ROLEX=5, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, REPLICA_WATCH=3.396, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_GENREP=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_REP=1.666, SARE_SUB_PERFECT=0.725, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i4iCMYB6XDE6; Tue, 10 Jun 2008 04:35:22 -0700 (PDT) Received: from ppp-42-170.32-151.iol.it (ppp-42-170.32-151.iol.it [151.32.170.42]) by core3.amsl.com (Postfix) with SMTP id 1EE603A6A3E; Tue, 10 Jun 2008 04:35:07 -0700 (PDT) X-Originating-IP: 199.12.247.175 by smtp.151.32.170.42; Tue, 10 Jun 2008 07:35:31 -0500 Message-ID: From: "Bobbie Bryson" Reply-To: "Bobbie Bryson" To: multi6-archive@megatron.ietf.org Subject: Replica watch is a perfect gift Date: Tue, 10 Jun 2008 07:35:31 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit When it comes down to getting a replica Rolex watch, there is just one place that offers its visitors and customers the highest quality available: Prestige Replicas. This unparalleled online store specializes in top of the line replica watches with unsurpassed performance, and bearing every marking that the genuine timepieces have. Every replica watch that Prestige Replicas carries, is made of solid stainless steel and features a sapphire crystal glass. What's more, every Rolex in store displays the green Rolex sticker with model number and logo on it. Just because you're buying a replica, don't settle for a low quality product. There are only a handful of online stores that offer the highest quality Rolex replica watches and Prestige Replicas is among them, and with the lowest available prices! http://gusitihoryv87.blogspot.com/ From cabo@polyclinique.org Tue Jun 10 20:29:53 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 355D43A6919; Tue, 10 Jun 2008 20:29:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -84.198 X-Spam-Level: X-Spam-Status: No, score=-84.198 tagged_above=-999 required=5 tests=[BAYES_60=1, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, J_CHICKENPOX_24=0.6, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ty-sVNVzxjEf; Tue, 10 Jun 2008 20:29:52 -0700 (PDT) Received: from pc-27-106-83-200.cm.vtr.net (pc-27-106-83-200.cm.vtr.net [200.83.106.27]) by core3.amsl.com (Postfix) with SMTP id 534733A6868; Tue, 10 Jun 2008 20:29:15 -0700 (PDT) X-Originating-IP: 8.140.75.239 by smtp.200.83.106.27; Tue, 10 Jun 2008 23:29:34 -0500 Message-ID: From: "Vicente Gibson" Reply-To: "Vicente Gibson" To: omcast@ietf.org Subject: Impressive Glashutte timepieces Date: Tue, 10 Jun 2008 23:29:34 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Bvlgari watch is an extraordinary masterpiece that is born from the marriage of watch making and jewelry expertise. Only the most discriminating and sophisticated watch users dare put a Bv1gari on their wrists, but once the metal touches their skin, they are bound forever... How would you like to become one of the lucky few that have experienced the pleasure of sporting a Bvlgari timepiece? Now you can, and at a very reduced cost! Prestige Replicas offers a tremendous collection of Bvlgari replicas starting just a little above $200... So now there is no reason why you can't have your very own Bvlgari today! http://tilebybyboc17.blogspot.com/ From c.jaekel@schuetz-dental.de Wed Jun 11 05:14:05 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4587E3A68D2; Wed, 11 Jun 2008 05:14:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -91.093 X-Spam-Level: X-Spam-Status: No, score=-91.093 tagged_above=-999 required=5 tests=[BAYES_95=3, RCVD_IN_XBL=3.033, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eq8MmhsGzkJk; Wed, 11 Jun 2008 05:14:04 -0700 (PDT) Received: from cust-17-153.on4.ontelecoms.gr (cust-17-153.on4.ontelecoms.gr [92.118.17.153]) by core3.amsl.com (Postfix) with SMTP id 9156D3A689D; Wed, 11 Jun 2008 05:13:50 -0700 (PDT) X-Originating-IP: 102.156.32.50 by smtp.92.118.17.153; Wed, 11 Jun 2008 08:14:14 -0500 Message-ID: From: "Ulysses Bullock" Reply-To: "Ulysses Bullock" To: ootippm-archive@ietf.org Subject: Get 15% off these watches Date: Wed, 11 Jun 2008 08:14:14 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Since 1884 Bvlgari watches have drawn inspiration from the timeless beauty of Greek and Roman art. The time pieces that they produce are as much works of art, as a way to tell time, and now you can possess one of these splendid time pieces for a very affordable price, at Prestige Replicas. http://lapofuvavas38.blogspot.com/ This store has the finest collection of Bvlgari replica watches, and you will be astounded at the difference in price as well as amazed at the quality of their timepieces. Prestige Replicas works hard to make sure that your purchase is shipped as fast as your order is processed, and also that your private information is protected. And with the new redesign of the Prestige Replicas website, we are offering 15% off on your purchase of watches! http://lapofuvavas38.blogspot.com/ From caaguazu@caaguazu.com.ar Wed Jun 11 08:57:14 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3784F3A67E6; Wed, 11 Jun 2008 08:57:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -63.79 X-Spam-Level: X-Spam-Status: No, score=-63.79 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FB_REPLICA_ROLEX=3.157, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, REPLICA_WATCH=3.396, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MOf1akZEriit; Wed, 11 Jun 2008 08:57:13 -0700 (PDT) Received: from 190-76-115-64.dyn.movilnet.com.ve (190-76-115-64.dyn.movilnet.com.ve [190.76.115.64]) by core3.amsl.com (Postfix) with SMTP id CA8473A68E3; Wed, 11 Jun 2008 08:56:40 -0700 (PDT) X-Originating-IP: 90.28.187.141 by smtp.190.76.115.64; Wed, 11 Jun 2008 11:57:03 -0500 Message-ID: From: "Cleo Preston" Reply-To: "Cleo Preston" To: omcast@ietf.org Subject: Beautiful Rado watches for less Date: Wed, 11 Jun 2008 11:57:03 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit How about making your friends jealous and saving a lot of money doing it? Forget about spending thousands of dollars on a new Rolex watch! Instead, visit the newly redesigned Prestige Replicas and buy yourself a beautiful, one of a kind Rolex Datejust watch! http://kucucomafuc62.blogspot.com/ Of course, we're talking about replica watches, not the overpriced originals... After all, our Rolex Datejusts offer the same precise functionality and exact look than their costly counterparts, but you can buy yours for just a couple of hundred bucks. So, come aboard Prestige Replicas and take advantage of our extensive collection of replica Rolex watches, our superb customer service and our super low prices! http://kucucomafuc62.blogspot.com/ From c.guyon@idtsoft.fr Thu Jun 12 14:51:01 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED8083A6AF6; Thu, 12 Jun 2008 14:51:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -87.198 X-Spam-Level: X-Spam-Status: No, score=-87.198 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_HOST_EQ_D_D_D_D=0.765, HELO_DYNAMIC_IPADDR=2.426, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_NJABL_PROXY=1.643, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id csD0pzL+rQjN; Thu, 12 Jun 2008 14:51:01 -0700 (PDT) Received: from host109.200-43-104.telecom.net.ar (host109.200-43-104.telecom.net.ar [200.43.104.109]) by core3.amsl.com (Postfix) with SMTP id 96EBB3A696A; Thu, 12 Jun 2008 14:50:32 -0700 (PDT) X-Originating-IP: 112.38.107.217 by smtp.200.43.104.109; Thu, 12 Jun 2008 17:51:01 -0500 Message-ID: From: "Lakisha Green" Reply-To: "Lakisha Green" To: multi6-archive@megatron.ietf.org Subject: Spring quality watches offer Date: Thu, 12 Jun 2008 17:51:01 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit The new Porsche Design watches originated from the novel Titanium Chronograph from the 1970's, an absolutely unique creation due to the perfection of its workmanship. Based on its design, the Porsche Design Company developed an appealing, stylish, sporty and highly accurate watch. Unfortunately, these timepieces come with a high price tag. http://lofupudaxos40.blogspot.com/ That's why a clever group of European manufacturers decided to offer the same exact functionality and style at greatly reduced prices: the Porsche Design replica watches. These replicas are so similar to the brand name pieces that it is practically impossible to tell them apart, other than by their price. They look the same, they function the same and they definitely don't have the same prices :) How would you like to browse through an amazing collection of these watches and marvel yourself with their low prices? Visit Prestige Replicas and see for yourself why sometimes replicas are so much better than the originals! http://lofupudaxos40.blogspot.com/ From owner-ietf-openpgp@mail.imc.org Sat Jun 14 07:08:16 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B7B93A680A for ; Sat, 14 Jun 2008 07:08:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.044 X-Spam-Level: X-Spam-Status: No, score=-2.044 tagged_above=-999 required=5 tests=[AWL=0.555, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gu+7FHYFRwl3 for ; Sat, 14 Jun 2008 07:08:15 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 11E583A67E3 for ; Sat, 14 Jun 2008 07:08:14 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5EDpptu004914 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 14 Jun 2008 06:51:51 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5EDppg3004913; Sat, 14 Jun 2008 06:51:51 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5EDpmMZ004906 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 14 Jun 2008 06:51:49 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id 485544518B; Sat, 14 Jun 2008 06:51:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id 2AD464804D; Sat, 14 Jun 2008 06:51:42 -0700 (PDT) Date: Sat, 14 Jun 2008 06:51:42 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: ietf-openpgp@imc.org Cc: len.sassaman@esat.kuleuven.be Subject: Other OpenPGP tasks Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: I was not paying attention for the discussion about the WG shutting down, and would have brought this up then, but it seems that shouldn't affect us much anyway. In addition to the remaining drafts that have been mentioned recently (including my WHIRLPOOL draft, which is blocking on a good, free citation, though that should be fixed next week), I see a need for IETF guidance in two other areas. 1. The trust calculations on key rings, AKA "the web of trust." This is currently treated as out of scope of OpenPGP's message format and up to the implementor. While I agree it doesn't belong in 4880, I think that we would benefit from having a standardized trust metric algorithm. The one in PGP is pretty sound, in my opinion, but has some arcane nits that aren't obvious at first. I don't know if GnuPG calculates trust the same way -- I'm pretty sure there are differences. Minor differences in trust calculations are unlikely to lead to problems -- it doesn't affect interoperability, and should only rarely cause noticeable differences in behavior between implementations for the same keyrings. Those aren't my concerns, though I'm sure that implementors would like the ability to do trust calculations the way that the leading implementations do them. I am, however, concerned about a 4880 implementation that decides to use a really broken trust calculation, such as one that trusts keys six hops away on the signing chain, for instance. So, an ID for Trust Calculation in OpenPGP seems like a good thing, both from a "best practices" standpoint and a documentation of current behavior. 2. Key servers. Last I visited this topic was about eight years ago; Rodney Thayer and I had part of an ID written up describing HKP, the NAI LDAP and LDAPS schemas, etc. I still have it if it useful, though it may be mostly irrelevant now. But the question remains: as an implementor, if I want to talk to the key servers, how do I do it? I'm sadly out of touch with the key server operators community these days, and am not even sure what the dominant key server software is (aside from the Global Directory, which is a special case), but I think this issue warrants further work. We've had quite a long time to come up with a stable key server interface; let's document it so that it remains that way. Thoughts? Best, Len From owner-ietf-openpgp@mail.imc.org Sun Jun 15 19:59:04 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8BAD83A685E for ; Sun, 15 Jun 2008 19:59:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.73 X-Spam-Level: X-Spam-Status: No, score=0.73 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_HOST_EQ_D_D_D_D=0.765, HELO_MISMATCH_ORG=0.611, HOST_MISMATCH_NET=0.311, MISSING_HEADERS=1.292, RDNS_DYNAMIC=0.1, URIBL_GREY=0.25] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RzZ5exwfDCDK for ; Sun, 15 Jun 2008 19:59:03 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 557893A683D for ; Sun, 15 Jun 2008 19:59:03 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5G2nWTt061611 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 15 Jun 2008 19:49:32 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5G2nWfh061610; Sun, 15 Jun 2008 19:49:32 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from brainhub.org (h-66-134-92-50.snvacaid.covad.net [66.134.92.50]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5G2nUpJ061594 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 15 Jun 2008 19:49:31 -0700 (MST) (envelope-from openpgp@brainhub.org) Received: from localhost.localdomain ([192.168.0.141]) by brainhub.org (8.14.2/8.14.1) with ESMTP id m5G2nTKi007720 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 15 Jun 2008 19:49:30 -0700 Message-ID: <4855D4B9.1090701@brainhub.org> Date: Sun, 15 Jun 2008 19:49:29 -0700 From: Andrey Jivsov User-Agent: Thunderbird 2.0.0.14 (X11/20080501) MIME-Version: 1.0 CC: OpenPGP Subject: Re: OpenPGP keys and Suite-B References: <481CD4EB.2020309@brainhub.org> In-Reply-To: <481CD4EB.2020309@brainhub.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Greeting! As we agreed earlier on the list, I significantly trimmed references to Suite-B. Some of us wanted completely remove Suite-B, while others felt that it should exist to add valuable endorsement. I think the middle ground is to leave informative references to Suite B, which tell how to use the specification with each level of security. These references are limited to "protocol level" of Suite-B compliance. I would like to believe that once we settle this thread, the technical content of the document will be largely complete. The other pending issue is Curve ID v.s. OID, which would have required significant re-write of the document, because IDs presently appear in many packets, profiles, and data that we hash. However, it looks to me that this issue has "coin toss" / "don't care" status for most, so I would like to avoid the burden of re-editing. In summary, Suite B is the only notable change in the following latest version: http://brainhub.googlepages.com/draft-jivsov-openpgp-ecc-01-pre-00.txt The same version is available in other formats that support cross-references as navigation links here: http://brainhub.googlepages.com/pgp I intend to submit this edition as -01 revision of the IETF draft as soon as there are no contentions. I will wait until at least June 25th. Thank you. From owner-ietf-openpgp@mail.imc.org Wed Jun 18 08:35:28 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4F68B3A67DD for ; Wed, 18 Jun 2008 08:35:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8S0zU+vHNBsS for ; Wed, 18 Jun 2008 08:35:22 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 9D93C3A687E for ; Wed, 18 Jun 2008 08:35:21 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5IF1uS1048119 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 18 Jun 2008 08:01:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5IF1uTJ048118; Wed, 18 Jun 2008 08:01:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5IF1rMh048094 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Wed, 18 Jun 2008 08:01:55 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K8zIc-0008PB-AG for ; Wed, 18 Jun 2008 17:10:14 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K8z77-0005aB-OF; Wed, 18 Jun 2008 16:58:21 +0200 From: Werner Koch To: Andrey Jivsov Cc: OpenPGP Subject: Re: OpenPGP keys and Suite-B References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Wed, 18 Jun 2008 16:58:21 +0200 In-Reply-To: <4855D4B9.1090701@brainhub.org> (Andrey Jivsov's message of "Sun, 15 Jun 2008 19:49:29 -0700") Message-ID: <87fxravlgy.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Mon, 16 Jun 2008 04:49, openpgp@brainhub.org said: > The other pending issue is Curve ID v.s. OID, which would have > required significant re-write of the document, because IDs presently > appear in many packets, profiles, and data that we hash. However, it > looks to me that this issue has "coin toss" / "don't care" status for > most, so I would like to avoid the burden of re-editing. Well, it depends on how you define "most". If "most" refers to the WG members, you might be right. But we need to look at the user base and that is not as US centric as these curves. In fact, with the current definition this OpenPGP draft for ECC is useless for Germany (and I assume also for most of Europe). The catalogue of allowed algorithms and the technical guideline TR-03111 of the BSI [1] do not include the NIST curves and explictly recommend the curves defined by the ECC Brainpool working groop [2]. I already remarked that I do not consider these curves as MUST items. But a way to optionally use other curves is paramount to allow OpenPGP with ECC in Europe. Without that ECC in OpenPGP and thus eventually OpenPGP will be dead. If it is a goal to keep OpenPGP alive we need to have a way to allow the use of other curves. The most flexible way would be the use of OIDs. However if you really don't want this, an alternative would be to define further algorithms ids - at least for the Brainpool curves (An ID is availabe [3]). But wait, what about other countries? Shouldn't we be nice to them and allow them the use of their own curves - technically this is possible and it won't pose an interop problem: If they can't use their curves they won't use OpenPGP at all and go only with X.509. Recall what happened with Camellia: It is now a year since David Shaw implemented that cipher in GnuPG but we are still not able to enable this because the RFC process has not been finished. We have not even agreed within the WG on algorithm identifiers. Taking a year for such a simple change - even with consensus in the WG that we want to have Camellia in OpenPGP - is not really a useful way to get going with a new cipher or a new curve. OIDS nicely solve this problem for curves. We should not drop a better technical better solution just for the benefit that it is less work. If you need help, just send me the source of your ID and I do the editing. I'd really like to get an ECC draft out so that we can get ECDSA into GnuPG to start experimenting with it. (DSA 2048bit is a bit slow and a transient interop problem) Salam-Shalom, Werner [1] Federal Office for Information Security (www.bsi.bund.de) [2] http://www.ecc-brainpool.org/ecc-standard.htm [3] http://www.ietf.org/internet-drafts/draft-lochter-pkix-brainpool-ecc-01.txt -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. From owner-ietf-openpgp@mail.imc.org Thu Jun 19 15:32:04 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 61ADB3A69E6 for ; Thu, 19 Jun 2008 15:32:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YHYbBlHl6y3U for ; Thu, 19 Jun 2008 15:32:03 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 76D173A693A for ; Thu, 19 Jun 2008 15:31:59 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5JMFbQk080798 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 19 Jun 2008 15:15:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5JMFbpC080797; Thu, 19 Jun 2008 15:15:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5JMFZhN080791 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 19 Jun 2008 15:15:37 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id 1740F45032; Thu, 19 Jun 2008 15:15:34 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id F38DA48046; Thu, 19 Jun 2008 15:15:33 -0700 (PDT) Date: Thu, 19 Jun 2008 15:15:33 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: Werner Koch Cc: Andrey Jivsov , OpenPGP Subject: algorithm IDs (was: Re: OpenPGP keys and Suite-B) In-Reply-To: <87fxravlgy.fsf@wheatstone.g10code.de> Message-ID: References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Wed, 18 Jun 2008, Werner Koch wrote: > Recall what happened with Camellia: It is now a year since David Shaw > implemented that cipher in GnuPG but we are still not able to enable > this because the RFC process has not been finished. We have not even > agreed within the WG on algorithm identifiers. Taking a year for such a > simple change - even with consensus in the WG that we want to have > Camellia in OpenPGP - is not really a useful way to get going with a new > cipher or a new curve. OIDS nicely solve this problem for curves. I really don't like OIDs, given the potential for format-based attacks that they introduce, but we're already using them anyway. I would like to see them phased out by v5 though. However, I see a very large problem here with the "it takes a year to get an algorithm ID" situation. What's holding that up? And while we're at it, can we get an algorithm ID assigned for WHIRLPOOL? > We should not drop a better technical better solution just for the > benefit that it is less work. If you need help, just send me the source > of your ID and I do the editing. I'd really like to get an ECC draft > out so that we can get ECDSA into GnuPG to start experimenting with it. > (DSA 2048bit is a bit slow and a transient interop problem) How was PGP 7.5 handling this? Just one specified curve, or? --Len. From owner-ietf-openpgp@mail.imc.org Thu Jun 19 17:56:05 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E43993A688F for ; Thu, 19 Jun 2008 17:56:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NkZ91muJ7dQT for ; Thu, 19 Jun 2008 17:56:05 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 962893A6879 for ; Thu, 19 Jun 2008 17:56:04 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K0beDd030245 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 19 Jun 2008 17:37:40 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5K0be1H030244; Thu, 19 Jun 2008 17:37:40 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from merrymeet.com (merrymeet.com [66.93.68.160]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K0bcU6030236 for ; Thu, 19 Jun 2008 17:37:39 -0700 (MST) (envelope-from jon@callas.org) Received: from keys.merrymeet.com (keys.merrymeet.com [66.93.68.161]) (Authenticated sender: jon) by merrymeet.com (Postfix) with ESMTP id 30C2410873DB for ; Thu, 19 Jun 2008 17:37:38 -0700 (PDT) Received: from sabbott-x1a.corp.pgp.com ([64.1.215.241]) by keys.merrymeet.com (PGP Universal service); Thu, 19 Jun 2008 17:37:37 -0700 X-PGP-Universal: processed; by keys.merrymeet.com on Thu, 19 Jun 2008 17:37:37 -0700 Cc: Werner Koch , Andrey Jivsov , OpenPGP Message-Id: <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> From: Jon Callas To: Len Sassaman In-Reply-To: Mime-Version: 1.0 (Apple Message framework v924) Subject: Re: algorithm IDs (was: Re: OpenPGP keys and Suite-B) Date: Thu, 19 Jun 2008 17:37:35 -0700 References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> X-Mailer: Apple Mail (2.924) X-PGP-Encoding-Format: Partitioned X-PGP-Encoding-Version: 2.0.2 X-Content-PGP-Universal-Saved-Content-Transfer-Encoding: 7bit X-Content-PGP-Universal-Saved-Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7BIT Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > I really don't like OIDs, given the potential for format-based attacks > that they introduce, but we're already using them anyway. I would > like to > see them phased out by v5 though. On the one hand, an OID is just a bit string. It's no worse than UTF-8. Consider the way we do it to be ISO Latin1, and OIDs to be Unicode. On the other hand, you're right. I don't see that an OID actually solves the problem. The problem is that the bureaucracy of IANA needs to assign the bit string. It doesn't matter if the bit string is an OID or one of our constants. It's a process issue, not a format issue. > > > However, I see a very large problem here with the "it takes a year > to get > an algorithm ID" situation. What's holding that up? And while we're > at it, > can we get an algorithm ID assigned for WHIRLPOOL? Make one up. Ditto for Camellia. Pick the obvious right number, and we all agree we'll start using it. Then we tell IANA to assign that number. I leave the solution to the obvious error condition (what if IANA picks a different one) as an exercise for the reader. If you want, I'll tell you my workaround. Jon -----BEGIN PGP SIGNATURE----- Version: PGP Universal 2.6.3 Charset: US-ASCII wj8DBQFIWvvRsTedWZOD3gYRAmV2AKC2FVKlsFBfOWlG4E6AR4cZs5olowCffC5P 8/7VKMl8WLhTGEKMPh3xmHo= =6+2J -----END PGP SIGNATURE----- From owner-ietf-openpgp@mail.imc.org Fri Jun 20 01:31:18 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AB3A03A68BE for ; Fri, 20 Jun 2008 01:31:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DanzDTiP8bHN for ; Fri, 20 Jun 2008 01:31:18 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 3B7F928C104 for ; Fri, 20 Jun 2008 01:31:16 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8Gvcd084943 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 01:16:57 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5K8Gv7v084942; Fri, 20 Jun 2008 01:16:57 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8GtYa084919 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 20 Jun 2008 01:16:56 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K9bvp-0000FL-CN for ; Fri, 20 Jun 2008 10:25:17 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K9bld-0008GT-HC; Fri, 20 Jun 2008 10:14:45 +0200 From: Werner Koch To: Len Sassaman Cc: Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Fri, 20 Jun 2008 10:14:45 +0200 In-Reply-To: (Len Sassaman's message of "Thu, 19 Jun 2008 15:15:33 -0700 (PDT)") Message-ID: <87od5wjzey.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008 00:15, rabbi@abditum.com said: > I really don't like OIDs, given the potential for format-based attacks > that they introduce, but we're already using them anyway. I would like to > see them phased out by v5 though. You assume arbitrary OIDs. I am talking about changing a one byte value to a multi byte value. They both get assigned by IANA for OpenPGP use and thus it does not make a difference. > How was PGP 7.5 handling this? Just one specified curve, or? I don't know about PGP 7.5. The practical problem with DSA 2048 is that you create a key, ask people to sign it and the majority of people are not able to sign it because there software can't handle that. We do not have a way to specify preferences for algorithm lengths (that would in theory only be possible for subkeys). Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. From owner-ietf-openpgp@mail.imc.org Fri Jun 20 01:33:48 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0679D3A69D0 for ; Fri, 20 Jun 2008 01:33:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QA6gQ9awyfNh for ; Fri, 20 Jun 2008 01:33:47 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id A13473A68BE for ; Fri, 20 Jun 2008 01:33:46 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8BwmH082824 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 01:11:58 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5K8Bwu6082823; Fri, 20 Jun 2008 01:11:58 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8Bt58082795 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 20 Jun 2008 01:11:57 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K9bqz-0007JQ-La for ; Fri, 20 Jun 2008 10:20:17 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K9bf4-0008Fw-SL; Fri, 20 Jun 2008 10:07:58 +0200 From: Werner Koch To: Jon Callas Cc: Len Sassaman , Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Fri, 20 Jun 2008 10:07:58 +0200 In-Reply-To: <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> (Jon Callas's message of "Thu, 19 Jun 2008 17:37:35 -0700") Message-ID: <87skv8jzq9.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008 02:37, jon@callas.org said: > I don't see that an OID actually solves the problem. The problem is > that the bureaucracy of IANA needs to assign the bit string. It > doesn't matter if the bit string is an OID or one of our constants. It solves the problem that one can start using an OID even if it is not registered with IANA for OpenPGP use. If that OID eventually gets registered, all works as expected and there is no need to start from scratch with a new OID or AlgoID. If that OID won't get registered the existing keys and messages can still be used for testing purposes. In that sense it is nothing else than our 100--110 range of algorithms IDs used for testing. However it is more practical. We can deploy applications and as soon as an OID gets approved for OpenPGP we can tell users to enable the hidden option xy and everything works. If another OID get assigned we need to get out a new version. Compare that to algorithm IDs: We could do the same of course - but what are we supposed to do if the assumed ID gets assigned to a another curve and yet another ID get assigned to our curve. That is not easy to handle and hard to document and explain. Spending a few extra bytes for an OID is justified - they don't create noicable larger signatures or keys. > Make one up. Ditto for Camellia. Pick the obvious right number, and we We do have one for Camellia - however it has changed over the last year and it is still only desribed in an ID. We can assume that IANA will eventually assign the suggested algorithm IDs but we can't be sure. Salam-Shalom, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. From owner-ietf-openpgp@mail.imc.org Fri Jun 20 04:04:48 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CFB53A68B3 for ; Fri, 20 Jun 2008 04:04:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iX4IU8P5076V for ; Fri, 20 Jun 2008 04:04:47 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 32A5E3A6A07 for ; Fri, 20 Jun 2008 04:04:46 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAkbOC052733 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 03:46:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5KAkbln052732; Fri, 20 Jun 2008 03:46:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAkYMf052691 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 20 Jun 2008 03:46:36 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id EE26B45027; Fri, 20 Jun 2008 03:46:33 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id DA3BF48053; Fri, 20 Jun 2008 03:46:33 -0700 (PDT) Date: Fri, 20 Jun 2008 03:46:33 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: Jon Callas Cc: Werner Koch , Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs (was: Re: OpenPGP keys and Suite-B) In-Reply-To: <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> Message-ID: References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Thu, 19 Jun 2008, Jon Callas wrote: > On the one hand, an OID is just a bit string. It's no worse than > UTF-8. Consider the way we do it to be ISO Latin1, and OIDs to be > Unicode. On the other hand, you're right. Ick, yeah. On the other hand, UTF-8 stuff is generally considered an attack vector; it's only recently that we've seen OID-based conditional jump attacks, etc. Maybe I'm naive, but I expect people to be careful with UTF-8; I don't necessarily expect them to be so careful with OIDs. > I don't see that an OID actually solves the problem. The problem is > that the bureaucracy of IANA needs to assign the bit string. It > doesn't matter if the bit string is an OID or one of our constants. What I thought Werner meant was that we'd use whatever OIDs were assigned *already* for a given curve; in his response, he mentioned that IANA would be assigning them for use in OpenPGP. So then I ask "why not use OpenPGP IDs for these?" If we have to deal with IANA, I don't see how OIDs are better than anything else. > Make one up. Ditto for Camellia. Pick the obvious right number, and we > all agree we'll start using it. Then we tell IANA to assign that number. That's easy enough. For WHIRLPOOL, I'm claiming ID 4 (unassigned in 4880, previously reserved for Double-width SHA). Please let me know if you think it should be something else. Best, Len From owner-ietf-openpgp@mail.imc.org Fri Jun 20 04:05:44 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E07453A6A07 for ; Fri, 20 Jun 2008 04:05:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wR0gGF4b+Tyw for ; Fri, 20 Jun 2008 04:05:40 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 5913D3A697E for ; Fri, 20 Jun 2008 04:05:40 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAn1jc054002 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 03:49:01 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5KAn1cb054001; Fri, 20 Jun 2008 03:49:01 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAmxNt053994 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 20 Jun 2008 03:49:00 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id 6502E452B1; Fri, 20 Jun 2008 03:48:59 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id 5528948053; Fri, 20 Jun 2008 03:48:58 -0700 (PDT) Date: Fri, 20 Jun 2008 03:48:58 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: Werner Koch Cc: Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs In-Reply-To: <87od5wjzey.fsf@wheatstone.g10code.de> Message-ID: References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <87od5wjzey.fsf@wheatstone.g10code.de> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008, Werner Koch wrote: > You assume arbitrary OIDs. I am talking about changing a one byte value > to a multi byte value. They both get assigned by IANA for OpenPGP use > and thus it does not make a difference. Actually, my concern has to do with the fact that OIDs are of arbitrary length. X.509 got it wrong; we might too. > > How was PGP 7.5 handling this? Just one specified curve, or? > > I don't know about PGP 7.5. I've got some 7.5 ECC keys I could look at, though I suspect it was just one curve. Jon or Hal could answer this better than I, though. > The practical problem with DSA 2048 is that you create a key, ask people > to sign it and the majority of people are not able to sign it because > there software can't handle that. We do not have a way to specify > preferences for algorithm lengths (that would in theory only be possible > for subkeys). I agree that's a problem, but isn't the solution "upgrade the client that can't handle the larger keys?" --Len. From owner-ietf-openpgp@mail.imc.org Fri Jun 20 05:01:32 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED8423A6A70 for ; Fri, 20 Jun 2008 05:01:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id alMSb6qsWIG4 for ; Fri, 20 Jun 2008 05:01:32 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id A62B93A6A6F for ; Fri, 20 Jun 2008 05:01:31 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KBfufO079779 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 04:41:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5KBfuVn079778; Fri, 20 Jun 2008 04:41:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KBfsqt079771 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 20 Jun 2008 04:41:56 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K9f8C-0002lD-Mb for ; Fri, 20 Jun 2008 13:50:16 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K9euQ-0004dc-Uz; Fri, 20 Jun 2008 13:36:03 +0200 From: Werner Koch To: Len Sassaman Cc: Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <87od5wjzey.fsf@wheatstone.g10code.de> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Fri, 20 Jun 2008 13:36:02 +0200 In-Reply-To: (Len Sassaman's message of "Fri, 20 Jun 2008 03:48:58 -0700 (PDT)") Message-ID: <871w2sibj1.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008 12:48, rabbi@abditum.com said: > Actually, my concern has to do with the fact that OIDs are of arbitrary > length. X.509 got it wrong; we might too. How can you get this wrong? You compare the length byte and the the data. That is trivial. Some folks might be tempted to use a BER parser but is overkill and a bad practise. We have far more complicated encoding schemes in OpenPGP packets than a length byte and some opaque data bytes as I suggest to use for the OID. > I agree that's a problem, but isn't the solution "upgrade the client that > can't handle the larger keys?" Sure, it is just a practical problem. The users need to ge a new version of the software. For GNU/Linux that may take half a year and the willingness to update to something new. Salam-Shalom, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. From c.mentasti@bianchistudio.it Fri Jun 20 14:35:18 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E5E93A6928; Fri, 20 Jun 2008 14:35:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -84.856 X-Spam-Level: X-Spam-Status: No, score=-84.856 tagged_above=-999 required=5 tests=[BAYES_80=2, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MY+78n6ZQXdK; Fri, 20 Jun 2008 14:35:17 -0700 (PDT) Received: from host-70-45-80-96.onelinkpr.net (host-70-45-80-96.onelinkpr.net [70.45.80.96]) by core3.amsl.com (Postfix) with SMTP id 11BF23A67D1; Fri, 20 Jun 2008 14:35:12 -0700 (PDT) X-Originating-IP: 184.216.108.46 by smtp.70.45.80.96; Fri, 20 Jun 2008 17:35:14 -0500 Message-ID: From: "Shanna Ochoa" Reply-To: "Shanna Ochoa" To: omcast@ietf.org Subject: One of a kind replicas Date: Fri, 20 Jun 2008 17:35:14 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Diamond Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://gozigilagek11.blogspot.com/ As you are probably aware of, Diamond Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Diamond Replicas today! http://gozigilagek11.blogspot.com/ From owner-ietf-openpgp@mail.imc.org Fri Jun 20 23:07:30 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A7D5F3A681F for ; Fri, 20 Jun 2008 23:07:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cu+XPqJCv4y9 for ; Fri, 20 Jun 2008 23:07:30 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 6BBEA3A680B for ; Fri, 20 Jun 2008 23:07:29 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5L5sbqi099184 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 22:54:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5L5sbSL099182; Fri, 20 Jun 2008 22:54:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5L5sYM6099137 for ; Fri, 20 Jun 2008 22:54:36 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 9474318709; Sat, 21 Jun 2008 17:54:33 +1200 (NZST) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ozYSfPs2g1IK; Sat, 21 Jun 2008 17:54:33 +1200 (NZST) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id E4561186BE; Sat, 21 Jun 2008 17:54:25 +1200 (NZST) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 675A519EC0BA; Sat, 21 Jun 2008 17:54:19 +1200 (NZST) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1K9w3H-0002Ua-9G; Sat, 21 Jun 2008 17:54:19 +1200 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: rabbi@abditum.com, wk@gnupg.org Subject: Re: algorithm IDs Cc: ietf-openpgp@imc.org, openpgp@brainhub.org In-Reply-To: <871w2sibj1.fsf@wheatstone.g10code.de> Message-Id: Date: Sat, 21 Jun 2008 17:54:19 +1200 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Werner Koch writes: >On Fri, 20 Jun 2008 12:48, rabbi@abditum.com said: >> Actually, my concern has to do with the fact that OIDs are of arbitrary >> length. X.509 got it wrong; we might too. >How can you get this wrong? You compare the length byte and the the data. >That is trivial. Some folks might be tempted to use a BER parser but is >overkill and a bad practise. You don't even check the length byte, you just have a table of encoded OIDs and walk down them doing a memcmp() of the full encoded form. Also, while they *can* be of arbitrary length, unless you design a pathologically stupid one it's going to be in the region 5-15 bytes. (You can also optimise the check by comparing an integer checksum of the OID with a stored integer checksum as a quick-reject check, so an OID match search is just a walk down a list of ints followed by a single memcmp()). Peter. From c.hannosset@ainenn.org Sat Jun 21 05:50:35 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B6FAF3A68F0; Sat, 21 Jun 2008 05:50:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -72.149 X-Spam-Level: X-Spam-Status: No, score=-72.149 tagged_above=-999 required=5 tests=[BAYES_80=2, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, HOST_EQ_USERONOCOM=1.444, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JPf7G3Gz4Hsa; Sat, 21 Jun 2008 05:50:35 -0700 (PDT) Received: from 81.203.84.149.dyn.user.ono.com (81.203.84.149.dyn.user.ono.com [81.203.84.149]) by core3.amsl.com (Postfix) with SMTP id 33B843A68B4; Sat, 21 Jun 2008 05:50:27 -0700 (PDT) X-Originating-IP: 123.248.192.36 by smtp.81.203.84.149; Sat, 21 Jun 2008 08:50:32 -0500 Message-ID: From: "Dolores Helms" Reply-To: "Dolores Helms" To: omcast@ietf.org Subject: April promo on watches Date: Sat, 21 Jun 2008 08:50:32 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Diamond Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://lafipurahyf76.blogspot.com/ As you are probably aware of, Diamond Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Diamond Replicas today! http://lafipurahyf76.blogspot.com/ From cab@cabeyer.com Sat Jun 21 16:56:40 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 36F873A695B; Sat, 21 Jun 2008 16:56:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -42.373 X-Spam-Level: X-Spam-Status: No, score=-42.373 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, GB_ROLEX=5, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sR8u0Ev-4NY2; Sat, 21 Jun 2008 16:56:38 -0700 (PDT) Received: from 201-236-157-90.adsl.tie.cl (201-236-157-90.adsl.tie.cl [201.236.157.90]) by core3.amsl.com (Postfix) with SMTP id B36863A6958; Sat, 21 Jun 2008 16:56:17 -0700 (PDT) X-Originating-IP: 90.44.122.72 by smtp.200.58.69.42; Sat, 21 Jun 2008 19:55:35 -0500 Message-ID: From: "Diego Maher" Reply-To: "Diego Maher" To: ccamp-archive@megatron.ietf.org Subject: Affordable replica watches Date: Sat, 21 Jun 2008 19:55:35 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Diamond Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://mulotozuzys12.blogspot.com/ Diamond Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://mulotozuzys12.blogspot.com/ From owner-ietf-openpgp@mail.imc.org Sun Jun 22 21:47:17 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 93A5A3A67FE for ; Sun, 22 Jun 2008 21:47:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.562 X-Spam-Level: X-Spam-Status: No, score=-0.562 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_HOST_EQ_D_D_D_D=0.765, HELO_MISMATCH_ORG=0.611, HOST_MISMATCH_NET=0.311, RDNS_DYNAMIC=0.1, URIBL_GREY=0.25] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id txkh6fjPYJfh for ; Sun, 22 Jun 2008 21:47:16 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 50C0B3A67C1 for ; Sun, 22 Jun 2008 21:47:12 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N4Xrn2046986 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 22 Jun 2008 21:33:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5N4XrgW046985; Sun, 22 Jun 2008 21:33:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from brainhub.org (h-66-134-92-50.snvacaid.covad.net [66.134.92.50]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N4Xp18046978 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 22 Jun 2008 21:33:52 -0700 (MST) (envelope-from openpgp@brainhub.org) Received: from localhost.localdomain ([192.168.0.141]) by brainhub.org (8.14.2/8.14.1) with ESMTP id m5N4Xiag007501 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 22 Jun 2008 21:33:45 -0700 Message-ID: <485F27A8.7060101@brainhub.org> Date: Sun, 22 Jun 2008 21:33:44 -0700 From: Andrey Jivsov User-Agent: Thunderbird 2.0.0.14 (X11/20080501) MIME-Version: 1.0 To: OpenPGP CC: Werner Koch Subject: Re: OpenPGP keys and Suite-B, new revision References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> In-Reply-To: <87fxravlgy.fsf@wheatstone.g10code.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Greetings! In the interest of moving forward with the specification I changed the document to use OIDs for curves. Please take a look at latest http://brainhub.googlepages.com/draft-jivsov-openpgp-ecc-01-pre-01.txt (also available in other formats here: http://brainhub.googlepages.com/pgp) * I treated OIDs as binary arrays throughout document, as we discussed. ASN.1 parser is not required to identify the curve. * The "curve OID" used to identify a curve is a portion of OID, as Werner suggested. We drop two bytes from ASN.1 DER representation of OID. The method to create "curve OID" is defined in section 10. * This edition also includes Suite-B changes that I posted earlier in ...01-pre-00.txt. I will wait until at least July 6 before submitting this as a second revisions of the draft to IETF. I will appreciate your comments. Thank you. From c.ryan@virtualbookkeeping.ca Mon Jun 23 01:19:41 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6D26A3A692D; Mon, 23 Jun 2008 01:19:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -81.227 X-Spam-Level: X-Spam-Status: No, score=-81.227 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_EQ_DYNAMIC=1.144, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hFYIfZGfAAyf; Mon, 23 Jun 2008 01:19:40 -0700 (PDT) Received: from host83-97-dynamic.30-79-r.retail.telecomitalia.it (host83-97-dynamic.30-79-r.retail.telecomitalia.it [79.30.97.83]) by core3.amsl.com (Postfix) with SMTP id A2A163A697A; Mon, 23 Jun 2008 01:19:12 -0700 (PDT) X-Originating-IP: 24.106.48.172 by smtp.79.30.97.83; Mon, 23 Jun 2008 04:19:13 -0500 Message-ID: From: "Mathew Parker" Reply-To: "Mathew Parker" To: omcast@ietf.org Subject: Impressive Glashutte timepieces Date: Mon, 23 Jun 2008 04:19:13 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Did you watch the last 007 flick, Casino Royale? If you did, you probably noticed that all throughout the movie, James Bond wears an spectacularly beautiful Omega watch... and he even brags about it! How would you like to be wearing that same exact model watch? The good news is that YOU can! Because now, you don't have to spend thousands of dollars to sport an Omega watch! When you visit Diamond Replicas, you will be able to browse through dozens of Omega replica watches, and pick the one of your dreams for just a couple of hundred dollars. Our watches are of such undeniably high quality, and offer such superior performance, that you'll fall in love with them, and what's best: stay in love with them for years to come! Come inside Diamond Replicas and pick your new Omega today! http://hipedadosir76.blogspot.com/ From c.just@shapeline.at Mon Jun 23 01:50:33 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D5BAA3A6816; Mon, 23 Jun 2008 01:50:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -78.777 X-Spam-Level: X-Spam-Status: No, score=-78.777 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RpUYmJfhRKk5; Mon, 23 Jun 2008 01:50:33 -0700 (PDT) Received: from cable201-233-191-147.epm.net.co (cable201-233-191-147.epm.net.co [201.233.191.147]) by core3.amsl.com (Postfix) with SMTP id D997D3A676A; Mon, 23 Jun 2008 01:49:51 -0700 (PDT) X-Originating-IP: 128.28.84.55 by smtp.201.233.191.147; Mon, 23 Jun 2008 04:49:52 -0500 Message-ID: From: "Janie Anthony" Reply-To: "Janie Anthony" To: omcast@ietf.org Subject: Spring quality watches offer Date: Mon, 23 Jun 2008 04:49:52 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Tag Heuer watch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Diamond Replicas, the web's most comprehensive collection of brand name replica watches. In Diamond Replicas, any Tag Heuer is available for just over $200. http://zikuhexupum32.blogspot.com/ For those of us who have always dreamed of wearing a Tag Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Diamond Replicas. Here you will find the most prestigious replica Tag Heuers, at an unbeatable price. Come inside now... your Tag Heuer watch is waiting for you at Diamond Replicas. http://zikuhexupum32.blogspot.com/ From owner-ietf-openpgp@mail.imc.org Mon Jun 23 01:57:47 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 917E93A68DA for ; Mon, 23 Jun 2008 01:57:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.474 X-Spam-Level: X-Spam-Status: No, score=-2.474 tagged_above=-999 required=5 tests=[AWL=-0.125, BAYES_00=-2.599, URIBL_GREY=0.25] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lU0Fb4d+DT6K for ; Mon, 23 Jun 2008 01:57:46 -0700 (PDT) Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 3056A3A67ED for ; Mon, 23 Jun 2008 01:57:45 -0700 (PDT) Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N8lDYP086649 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 23 Jun 2008 01:47:13 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5N8lDQM086648; Mon, 23 Jun 2008 01:47:13 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N8lA2H086642 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Mon, 23 Jun 2008 01:47:12 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1KAhpk-0007tP-DX for ; Mon, 23 Jun 2008 10:55:32 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1KAhdQ-00017Q-M1; Mon, 23 Jun 2008 10:42:48 +0200 From: Werner Koch To: Andrey Jivsov Cc: OpenPGP Subject: Re: OpenPGP keys and Suite-B, new revision References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <485F27A8.7060101@brainhub.org> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Mon, 23 Jun 2008 10:42:48 +0200 In-Reply-To: <485F27A8.7060101@brainhub.org> (Andrey Jivsov's message of "Sun, 22 Jun 2008 21:33:44 -0700") Message-ID: <87tzfkbkzb.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Mon, 23 Jun 2008 06:33, openpgp@brainhub.org said: > http://brainhub.googlepages.com/draft-jivsov-openpgp-ecc-01-pre-01.txt I have no more concerns about this versions. Thanks, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. From cacqaaaaaenaxj7g@equifax-ac.b.tep1.com Mon Jun 23 16:19:19 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4F0B63A69DB; Mon, 23 Jun 2008 16:19:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -76.245 X-Spam-Level: X-Spam-Status: No, score=-76.245 tagged_above=-999 required=5 tests=[BAYES_80=2, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ytdef57DJmj; Mon, 23 Jun 2008 16:19:17 -0700 (PDT) Received: from 196-190-223-201.adsl.terra.cl (196-190-223-201.adsl.terra.cl [201.223.190.196]) by core3.amsl.com (Postfix) with SMTP id 2BAFE3A688B; Mon, 23 Jun 2008 16:19:08 -0700 (PDT) X-Originating-IP: 0.126.86.247 by smtp.201.223.190.196; Mon, 23 Jun 2008 19:19:10 -0500 Message-ID: From: "Dorothea Sheridan" Reply-To: "Dorothea Sheridan" To: omcast@ietf.org Subject: Get 15% off these watches Date: Mon, 23 Jun 2008 19:19:10 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Diamond Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://xuvawaliner66.blogspot.com/ As you are probably aware of, Diamond Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Diamond Replicas today! http://xuvawaliner66.blogspot.com/ From c.unger@taborhome.org Tue Jun 24 02:18:13 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 668DC3A6861; Tue, 24 Jun 2008 02:18:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -86.154 X-Spam-Level: X-Spam-Status: No, score=-86.154 tagged_above=-999 required=5 tests=[BAYES_95=3, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1C6ECam64JKl; Tue, 24 Jun 2008 02:18:12 -0700 (PDT) Received: from bl10-189-218.dsl.telepac.pt (bl10-189-218.dsl.telepac.pt [85.243.189.218]) by core3.amsl.com (Postfix) with SMTP id A65613A67EB; Tue, 24 Jun 2008 02:17:33 -0700 (PDT) X-Originating-IP: 206.0.55.126 by smtp.85.243.189.218; Tue, 24 Jun 2008 05:17:27 -0500 Message-ID: From: "Shelly Reed" Reply-To: "Shelly Reed" To: ccamp-archive@megatron.ietf.org Subject: Why get an original watch? Date: Tue, 24 Jun 2008 05:17:27 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Tag Heuer watch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Diamond Replicas, the web's most comprehensive collection of brand name replica watches. In Diamond Replicas, any Tag Heuer is available for just over $200. http://hizyzomigex08.blogspot.com/ For those of us who have always dreamed of wearing a Tag Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Diamond Replicas. Here you will find the most prestigious replica Tag Heuers, at an unbeatable price. Come inside now... your Tag Heuer watch is waiting for you at Diamond Replicas. http://hizyzomigex08.blogspot.com/ From c.scott@kedington.co.uk Tue Jun 24 21:28:25 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 11A3E3A68D6; Tue, 24 Jun 2008 21:28:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -66.13 X-Spam-Level: X-Spam-Status: No, score=-66.13 tagged_above=-999 required=5 tests=[BAYES_95=3, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, GB_ROLEX=5, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cc1JNqXvKIKz; Tue, 24 Jun 2008 21:28:24 -0700 (PDT) Received: from 65-128-20-190.adsl.terra.cl (65-128-20-190.adsl.terra.cl [190.20.128.65]) by core3.amsl.com (Postfix) with SMTP id 4BBFC3A69CF; Tue, 24 Jun 2008 21:27:57 -0700 (PDT) X-Originating-IP: 120.112.241.52 by smtp.190.20.128.65; Wed, 25 Jun 2008 00:27:54 -0500 Message-ID: From: "Arron Mcknight" Reply-To: "Arron Mcknight" To: multi6-archive@megatron.ietf.org Subject: Rolex replica is a ultimate gift Date: Wed, 25 Jun 2008 00:27:54 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Tag Heuer watch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Diamond Replicas, the web's most comprehensive collection of brand name replica watches. In Diamond Replicas, any Tag Heuer is available for just over $200. http://www.geocities.com/bartonrimod For those of us who have always dreamed of wearing a Tag Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Diamond Replicas. Here you will find the most prestigious replica Tag Heuers, at an unbeatable price. Come inside now... your Tag Heuer watch is waiting for you at Diamond Replicas. http://www.geocities.com/bartonrimod No virus found in this outgoing message Checked by PC Tools AntiVirus (4.0.0.26 - 10.063.005). http://www.pctools.com/free-antivirus/ From c.weiss@fluorchemie.de Tue Jun 24 21:38:31 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1168C3A6882; Tue, 24 Jun 2008 21:38:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -64.421 X-Spam-Level: X-Spam-Status: No, score=-64.421 tagged_above=-999 required=5 tests=[BAYES_60=1, FB_QUALITY_REPLICA=10.357, GB_ROLEX=5, HELO_EQ_MINDSPRING=0.45, HELO_EQ_MODEMCABLE=0.768, HOST_EQ_MINDSPRING=2.2, HOST_EQ_MODEMCABLE=1.368, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AEQ2Red+qahe; Tue, 24 Jun 2008 21:38:30 -0700 (PDT) Received: from user-387hllp.cable.mindspring.com (user-387hllp.cable.mindspring.com [208.120.214.185]) by core3.amsl.com (Postfix) with SMTP id 8803028C12B; Tue, 24 Jun 2008 21:38:26 -0700 (PDT) X-Originating-IP: 232.4.192.138 by smtp.208.120.214.185; Wed, 25 Jun 2008 00:38:30 -0500 Message-ID: From: "Morgan Cobb" Reply-To: "Morgan Cobb" To: omcast@ietf.org Subject: Affordable brand name watches Date: Wed, 25 Jun 2008 00:38:30 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Diamond Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://www.geocities.com/wagnerxehul Diamond Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://www.geocities.com/wagnerxehul From c.fredericksen@sx0.com Wed Jun 25 04:58:53 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7C3A93A6A7D; Wed, 25 Jun 2008 04:58:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -79.246 X-Spam-Level: X-Spam-Status: No, score=-79.246 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sFFss8TJg0Pv; Wed, 25 Jun 2008 04:58:52 -0700 (PDT) Received: from dynamic-66-243-245-4.ellensburg.fairpoint.net (dynamic-66-243-245-4.ellensburg.fairpoint.net [66.243.245.4]) by core3.amsl.com (Postfix) with SMTP id D9DF23A6A78; Wed, 25 Jun 2008 04:58:42 -0700 (PDT) X-Originating-IP: 28.243.170.107 by smtp.85.56.75.205; Wed, 25 Jun 2008 07:57:52 -0500 Message-ID: From: "Claudia Lunsford" Reply-To: "Claudia Lunsford" To: ccamp-archive@megatron.ietf.org Subject: Spring quality watches offer Date: Wed, 25 Jun 2008 07:57:52 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Did you watch the last 007 flick, Casino Royale? If you did, you probably noticed that all throughout the movie, James Bond wears an spectacularly beautiful Omega watch... and he even brags about it! How would you like to be wearing that same exact model watch? The good news is that YOU can! Because now, you don't have to spend thousands of dollars to sport an Omega watch! When you visit Diamond Replicas, you will be able to browse through dozens of Omega replica watches, and pick the one of your dreams for just a couple of hundred dollars. Our watches are of such undeniably high quality, and offer such superior performance, that you'll fall in love with them, and what's best: stay in love with them for years to come! Come inside Diamond Replicas and pick your new Omega today! http://www.geocities.com/pratherxykofer From cacogidajbonal@jbonal.e.telefonica.net Wed Jun 25 16:48:50 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 614433A68CF; Wed, 25 Jun 2008 16:48:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -60.094 X-Spam-Level: X-Spam-Status: No, score=-60.094 tagged_above=-999 required=5 tests=[BAYES_80=2, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, GB_ROLEX=5, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CUSy8uSaEPDs; Wed, 25 Jun 2008 16:48:49 -0700 (PDT) Received: from cable201-233-63-49.epm.net.co (cable201-233-63-49.epm.net.co [201.233.63.49]) by core3.amsl.com (Postfix) with SMTP id 9AB5D3A6AE5; Wed, 25 Jun 2008 16:48:06 -0700 (PDT) X-Originating-IP: 204.240.207.120 by smtp.201.233.63.49; Wed, 25 Jun 2008 19:47:59 -0500 Message-ID: From: "Olen Key" Reply-To: "Olen Key" To: ccamp-archive@megatron.ietf.org Subject: The discreet replica store Date: Wed, 25 Jun 2008 19:47:59 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Diamond Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://livatonezar27.blogspot.com/ Diamond Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://livatonezar27.blogspot.com/ From c21@bradm.com Thu Jun 26 05:14:14 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 898B13A6A90; Thu, 26 Jun 2008 05:14:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -57.226 X-Spam-Level: X-Spam-Status: No, score=-57.226 tagged_above=-999 required=5 tests=[BAYES_80=2, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, HOST_EQ_STATIC=1.172, HOST_EQ_USERONOCOM=1.444, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RCVD_NUMERIC_HELO=2.067, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ONjfHYOsnEkI; Thu, 26 Jun 2008 05:14:13 -0700 (PDT) Received: from 84.124.12.213.static.user.ono.com (84.124.12.213.static.user.ono.com [84.124.12.213]) by core3.amsl.com (Postfix) with SMTP id 3788F3A6A99; Thu, 26 Jun 2008 05:14:02 -0700 (PDT) X-Originating-IP: 235.198.144.80 by smtp.84.124.12.213; Thu, 26 Jun 2008 08:14:07 -0500 Message-ID: From: "Devon Askew" Reply-To: "Devon Askew" To: omcast@ietf.org Subject: Affordable replica watches Date: Thu, 26 Jun 2008 08:14:07 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit If the only thing standing between you and a luxurious Cartier watch is money, then today is your lucky day! Diamond Replicas, the world-famous replica watches dealer, is offering a 15% discount during these spring months for two or more watches, making their whole Cartier collection even more affordable. http://vubibugycib87.blogspot.com/ As you are probably aware of, Diamond Replicas has one of the most extensive collections of Cartier replica watches in the whole wide web. Who cares if they are not legitimate? These replicas are of such high quality that not even a connoisseur would be able to distinguish them from an original Cartier. And with their online delivery guarantee you will be enjoying your new watch in just a couple of days! So, what are you waiting for? Visit Diamond Replicas today! http://vubibugycib87.blogspot.com/ From c.neumann@neschencorp.com Thu Jun 26 07:50:48 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC9823A697A; Thu, 26 Jun 2008 07:50:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -55.48 X-Spam-Level: X-Spam-Status: No, score=-55.48 tagged_above=-999 required=5 tests=[BAYES_99=3.5, DNS_FROM_OPENWHOIS=1.13, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, FS_REPLICA=0.994, FS_REPLICAWATCH=10.357, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HELO_EQ_TELESP=1.245, HOST_EQ_BR=1.295, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SARE_RECV_SPAM_DOMN02=1.666, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id brZCmq+0VS4n; Thu, 26 Jun 2008 07:50:45 -0700 (PDT) Received: from 189-18-189-212.dsl.telesp.net.br (189-18-189-212.dsl.telesp.net.br [189.18.189.212]) by core3.amsl.com (Postfix) with SMTP id EBDAE3A6904; Thu, 26 Jun 2008 07:50:20 -0700 (PDT) X-Originating-IP: 24.0.172.27 by smtp.189.18.189.212; Thu, 26 Jun 2008 10:50:13 -0500 Message-ID: From: "Rosemarie Murray" Reply-To: "Rosemarie Murray" To: ccamp-archive@megatron.ietf.org Subject: Why replica watches are better Date: Thu, 26 Jun 2008 10:50:13 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Did you watch the last 007 flick, Casino Royale? If you did, you probably noticed that all throughout the movie, James Bond wears an spectacularly beautiful Omega watch... and he even brags about it! How would you like to be wearing that same exact model watch? The good news is that YOU can! Because now, you don't have to spend thousands of dollars to sport an Omega watch! When you visit Diamond Replicas, you will be able to browse through dozens of Omega replica watches, and pick the one of your dreams for just a couple of hundred dollars. Our watches are of such undeniably high quality, and offer such superior performance, that you'll fall in love with them, and what's best: stay in love with them for years to come! Come inside Diamond Replicas and pick your new Omega today! http://vyzubecikof37.blogspot.com/ From c.hall@tntedm.com Thu Jun 26 08:13:48 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4FB923A68FD; Thu, 26 Jun 2008 08:13:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -56.992 X-Spam-Level: X-Spam-Status: No, score=-56.992 tagged_above=-999 required=5 tests=[BAYES_95=3, FB_QUALITY_REPLICA=10.357, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, GB_ROLEX=5, HELO_DYNAMIC_IPADDR2=4.395, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX=1.666, SARE_SPEC_ROLEX_HIQLT=1.666, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, SARE_SPEC_ROLEX_REP=1.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BDedNiWyWZIZ; Thu, 26 Jun 2008 08:13:44 -0700 (PDT) Received: from 201-212-52-188.cab.prima.net.ar (201-212-52-188.cab.prima.net.ar [201.212.52.188]) by core3.amsl.com (Postfix) with SMTP id BB4F33A67D0; Thu, 26 Jun 2008 08:13:34 -0700 (PDT) X-Originating-IP: 208.51.62.30 by smtp.201.212.52.188; Thu, 26 Jun 2008 11:13:27 -0500 Message-ID: From: "Darcy Vasquez" Reply-To: "Darcy Vasquez" To: ccamp-archive@megatron.ietf.org Subject: Beautiful Rado watches for less Date: Thu, 26 Jun 2008 11:13:27 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit X-Antivirus: avast! (VPS 080626-1, 26/06/2008), Outbound message X-Antivirus-Status: Clean Have you always wanted a Rolex, but don't want to pay high prices for a brand name watch? Then you need to visit Diamond Replicas, a website dedicated exclusively to high quality replicas, with the most extensive inventory on the web and a proven track record of satisfied customers. http://gywazyxohaf68.blogspot.com/ Diamond Replicas offers hundreds of Rolex replica watches starting just above $100, and during this spring season, their already low prices have been slashed by 15 percent if you buy two or more watches! No matter which model Rolex you choose, their 15% discount applies to them all! But don't let this limited time offer go by... spring is ending and it's time to impress your friends with a realistic, high quality Rolex replica watch, that will look and perform just like the real deal! http://gywazyxohaf68.blogspot.com/ From c.rodriguez@aytosanandres.org Thu Jun 26 18:58:42 2008 Return-Path: X-Original-To: ietfarch-openpgp-archive@core3.amsl.com Delivered-To: ietfarch-openpgp-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7853A3A6AA9; Thu, 26 Jun 2008 18:58:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -73.579 X-Spam-Level: X-Spam-Status: No, score=-73.579 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_SPEC_REPLICA_OBFU=1.812, SARE_SPEC_ROLEX_NOV5A=1.062, SARE_SPEC_ROLEX_NOV5F=0.666, TVD_RCVD_IP=1.931, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FCzqqbKXpc6q; Thu, 26 Jun 2008 18:58:41 -0700 (PDT) Received: from 92-143-246-201.adsl.terra.cl (92-143-246-201.adsl.terra.cl [201.246.143.92]) by core3.amsl.com (Postfix) with SMTP id 9A3313A679F; Thu, 26 Jun 2008 18:58:32 -0700 (PDT) X-Originating-IP: 240.73.112.61 by smtp.201.246.143.92; Thu, 26 Jun 2008 21:58:38 -0500 Message-ID: From: "Federico Lowry" Reply-To: "Federico Lowry" To: omcast@ietf.org Subject: Watches for him, her and you Date: Thu, 26 Jun 2008 21:58:38 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit A Tag Heuer watch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Diamond Replicas, the web's most comprehensive collection of brand name replica watches. In Diamond Replicas, any Tag Heuer is available for just over $200. http://holenihidoz45.blogspot.com/ For those of us who have always dreamed of wearing a Tag Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Diamond Replicas. Here you will find the most prestigious replica Tag Heuers, at an unbeatable price. Come inside now... your Tag Heuer watch is waiting for you at Diamond Replicas. http://holenihidoz45.blogspot.com/ Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N8lDYP086649 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 23 Jun 2008 01:47:13 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5N8lDQM086648; Mon, 23 Jun 2008 01:47:13 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N8lA2H086642 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Mon, 23 Jun 2008 01:47:12 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1KAhpk-0007tP-DX for ; Mon, 23 Jun 2008 10:55:32 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1KAhdQ-00017Q-M1; Mon, 23 Jun 2008 10:42:48 +0200 From: Werner Koch To: Andrey Jivsov Cc: OpenPGP Subject: Re: OpenPGP keys and Suite-B, new revision References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <485F27A8.7060101@brainhub.org> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Mon, 23 Jun 2008 10:42:48 +0200 In-Reply-To: <485F27A8.7060101@brainhub.org> (Andrey Jivsov's message of "Sun, 22 Jun 2008 21:33:44 -0700") Message-ID: <87tzfkbkzb.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Mon, 23 Jun 2008 06:33, openpgp@brainhub.org said: > http://brainhub.googlepages.com/draft-jivsov-openpgp-ecc-01-pre-01.txt I have no more concerns about this versions. Thanks, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N4Xrn2046986 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 22 Jun 2008 21:33:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5N4XrgW046985; Sun, 22 Jun 2008 21:33:53 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from brainhub.org (h-66-134-92-50.snvacaid.covad.net [66.134.92.50]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5N4Xp18046978 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 22 Jun 2008 21:33:52 -0700 (MST) (envelope-from openpgp@brainhub.org) Received: from localhost.localdomain ([192.168.0.141]) by brainhub.org (8.14.2/8.14.1) with ESMTP id m5N4Xiag007501 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 22 Jun 2008 21:33:45 -0700 Message-ID: <485F27A8.7060101@brainhub.org> Date: Sun, 22 Jun 2008 21:33:44 -0700 From: Andrey Jivsov User-Agent: Thunderbird 2.0.0.14 (X11/20080501) MIME-Version: 1.0 To: OpenPGP CC: Werner Koch Subject: Re: OpenPGP keys and Suite-B, new revision References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> In-Reply-To: <87fxravlgy.fsf@wheatstone.g10code.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Greetings! In the interest of moving forward with the specification I changed the document to use OIDs for curves. Please take a look at latest http://brainhub.googlepages.com/draft-jivsov-openpgp-ecc-01-pre-01.txt (also available in other formats here: http://brainhub.googlepages.com/pgp) * I treated OIDs as binary arrays throughout document, as we discussed. ASN.1 parser is not required to identify the curve. * The "curve OID" used to identify a curve is a portion of OID, as Werner suggested. We drop two bytes from ASN.1 DER representation of OID. The method to create "curve OID" is defined in section 10. * This edition also includes Suite-B changes that I posted earlier in ...01-pre-00.txt. I will wait until at least July 6 before submitting this as a second revisions of the draft to IETF. I will appreciate your comments. Thank you. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5L5sbqi099184 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 22:54:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5L5sbSL099182; Fri, 20 Jun 2008 22:54:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5L5sYM6099137 for ; Fri, 20 Jun 2008 22:54:36 -0700 (MST) (envelope-from pgut001@cs.auckland.ac.nz) Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 9474318709; Sat, 21 Jun 2008 17:54:33 +1200 (NZST) X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ozYSfPs2g1IK; Sat, 21 Jun 2008 17:54:33 +1200 (NZST) Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id E4561186BE; Sat, 21 Jun 2008 17:54:25 +1200 (NZST) Received: from wintermute01.cs.auckland.ac.nz (wintermute01.cs.auckland.ac.nz [130.216.34.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 675A519EC0BA; Sat, 21 Jun 2008 17:54:19 +1200 (NZST) Received: from pgut001 by wintermute01.cs.auckland.ac.nz with local (Exim 4.63) (envelope-from ) id 1K9w3H-0002Ua-9G; Sat, 21 Jun 2008 17:54:19 +1200 From: pgut001@cs.auckland.ac.nz (Peter Gutmann) To: rabbi@abditum.com, wk@gnupg.org Subject: Re: algorithm IDs Cc: ietf-openpgp@imc.org, openpgp@brainhub.org In-Reply-To: <871w2sibj1.fsf@wheatstone.g10code.de> Message-Id: Date: Sat, 21 Jun 2008 17:54:19 +1200 Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Werner Koch writes: >On Fri, 20 Jun 2008 12:48, rabbi@abditum.com said: >> Actually, my concern has to do with the fact that OIDs are of arbitrary >> length. X.509 got it wrong; we might too. >How can you get this wrong? You compare the length byte and the the data. >That is trivial. Some folks might be tempted to use a BER parser but is >overkill and a bad practise. You don't even check the length byte, you just have a table of encoded OIDs and walk down them doing a memcmp() of the full encoded form. Also, while they *can* be of arbitrary length, unless you design a pathologically stupid one it's going to be in the region 5-15 bytes. (You can also optimise the check by comparing an integer checksum of the OID with a stored integer checksum as a quick-reject check, so an OID match search is just a walk down a list of ints followed by a single memcmp()). Peter. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KBfufO079779 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 04:41:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5KBfuVn079778; Fri, 20 Jun 2008 04:41:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KBfsqt079771 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 20 Jun 2008 04:41:56 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K9f8C-0002lD-Mb for ; Fri, 20 Jun 2008 13:50:16 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K9euQ-0004dc-Uz; Fri, 20 Jun 2008 13:36:03 +0200 From: Werner Koch To: Len Sassaman Cc: Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <87od5wjzey.fsf@wheatstone.g10code.de> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Fri, 20 Jun 2008 13:36:02 +0200 In-Reply-To: (Len Sassaman's message of "Fri, 20 Jun 2008 03:48:58 -0700 (PDT)") Message-ID: <871w2sibj1.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008 12:48, rabbi@abditum.com said: > Actually, my concern has to do with the fact that OIDs are of arbitrary > length. X.509 got it wrong; we might too. How can you get this wrong? You compare the length byte and the the data. That is trivial. Some folks might be tempted to use a BER parser but is overkill and a bad practise. We have far more complicated encoding schemes in OpenPGP packets than a length byte and some opaque data bytes as I suggest to use for the OID. > I agree that's a problem, but isn't the solution "upgrade the client that > can't handle the larger keys?" Sure, it is just a practical problem. The users need to ge a new version of the software. For GNU/Linux that may take half a year and the willingness to update to something new. Salam-Shalom, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAn1jc054002 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 03:49:01 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5KAn1cb054001; Fri, 20 Jun 2008 03:49:01 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAmxNt053994 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 20 Jun 2008 03:49:00 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id 6502E452B1; Fri, 20 Jun 2008 03:48:59 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id 5528948053; Fri, 20 Jun 2008 03:48:58 -0700 (PDT) Date: Fri, 20 Jun 2008 03:48:58 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: Werner Koch Cc: Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs In-Reply-To: <87od5wjzey.fsf@wheatstone.g10code.de> Message-ID: References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <87od5wjzey.fsf@wheatstone.g10code.de> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008, Werner Koch wrote: > You assume arbitrary OIDs. I am talking about changing a one byte value > to a multi byte value. They both get assigned by IANA for OpenPGP use > and thus it does not make a difference. Actually, my concern has to do with the fact that OIDs are of arbitrary length. X.509 got it wrong; we might too. > > How was PGP 7.5 handling this? Just one specified curve, or? > > I don't know about PGP 7.5. I've got some 7.5 ECC keys I could look at, though I suspect it was just one curve. Jon or Hal could answer this better than I, though. > The practical problem with DSA 2048 is that you create a key, ask people > to sign it and the majority of people are not able to sign it because > there software can't handle that. We do not have a way to specify > preferences for algorithm lengths (that would in theory only be possible > for subkeys). I agree that's a problem, but isn't the solution "upgrade the client that can't handle the larger keys?" --Len. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAkbOC052733 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 03:46:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5KAkbln052732; Fri, 20 Jun 2008 03:46:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5KAkYMf052691 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Fri, 20 Jun 2008 03:46:36 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id EE26B45027; Fri, 20 Jun 2008 03:46:33 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id DA3BF48053; Fri, 20 Jun 2008 03:46:33 -0700 (PDT) Date: Fri, 20 Jun 2008 03:46:33 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: Jon Callas Cc: Werner Koch , Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs (was: Re: OpenPGP keys and Suite-B) In-Reply-To: <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> Message-ID: References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Thu, 19 Jun 2008, Jon Callas wrote: > On the one hand, an OID is just a bit string. It's no worse than > UTF-8. Consider the way we do it to be ISO Latin1, and OIDs to be > Unicode. On the other hand, you're right. Ick, yeah. On the other hand, UTF-8 stuff is generally considered an attack vector; it's only recently that we've seen OID-based conditional jump attacks, etc. Maybe I'm naive, but I expect people to be careful with UTF-8; I don't necessarily expect them to be so careful with OIDs. > I don't see that an OID actually solves the problem. The problem is > that the bureaucracy of IANA needs to assign the bit string. It > doesn't matter if the bit string is an OID or one of our constants. What I thought Werner meant was that we'd use whatever OIDs were assigned *already* for a given curve; in his response, he mentioned that IANA would be assigning them for use in OpenPGP. So then I ask "why not use OpenPGP IDs for these?" If we have to deal with IANA, I don't see how OIDs are better than anything else. > Make one up. Ditto for Camellia. Pick the obvious right number, and we > all agree we'll start using it. Then we tell IANA to assign that number. That's easy enough. For WHIRLPOOL, I'm claiming ID 4 (unassigned in 4880, previously reserved for Double-width SHA). Please let me know if you think it should be something else. Best, Len Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8Gvcd084943 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 01:16:57 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5K8Gv7v084942; Fri, 20 Jun 2008 01:16:57 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8GtYa084919 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 20 Jun 2008 01:16:56 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K9bvp-0000FL-CN for ; Fri, 20 Jun 2008 10:25:17 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K9bld-0008GT-HC; Fri, 20 Jun 2008 10:14:45 +0200 From: Werner Koch To: Len Sassaman Cc: Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Fri, 20 Jun 2008 10:14:45 +0200 In-Reply-To: (Len Sassaman's message of "Thu, 19 Jun 2008 15:15:33 -0700 (PDT)") Message-ID: <87od5wjzey.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008 00:15, rabbi@abditum.com said: > I really don't like OIDs, given the potential for format-based attacks > that they introduce, but we're already using them anyway. I would like to > see them phased out by v5 though. You assume arbitrary OIDs. I am talking about changing a one byte value to a multi byte value. They both get assigned by IANA for OpenPGP use and thus it does not make a difference. > How was PGP 7.5 handling this? Just one specified curve, or? I don't know about PGP 7.5. The practical problem with DSA 2048 is that you create a key, ask people to sign it and the majority of people are not able to sign it because there software can't handle that. We do not have a way to specify preferences for algorithm lengths (that would in theory only be possible for subkeys). Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8BwmH082824 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 20 Jun 2008 01:11:58 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5K8Bwu6082823; Fri, 20 Jun 2008 01:11:58 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K8Bt58082795 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Fri, 20 Jun 2008 01:11:57 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K9bqz-0007JQ-La for ; Fri, 20 Jun 2008 10:20:17 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K9bf4-0008Fw-SL; Fri, 20 Jun 2008 10:07:58 +0200 From: Werner Koch To: Jon Callas Cc: Len Sassaman , Andrey Jivsov , OpenPGP Subject: Re: algorithm IDs References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Fri, 20 Jun 2008 10:07:58 +0200 In-Reply-To: <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> (Jon Callas's message of "Thu, 19 Jun 2008 17:37:35 -0700") Message-ID: <87skv8jzq9.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 20 Jun 2008 02:37, jon@callas.org said: > I don't see that an OID actually solves the problem. The problem is > that the bureaucracy of IANA needs to assign the bit string. It > doesn't matter if the bit string is an OID or one of our constants. It solves the problem that one can start using an OID even if it is not registered with IANA for OpenPGP use. If that OID eventually gets registered, all works as expected and there is no need to start from scratch with a new OID or AlgoID. If that OID won't get registered the existing keys and messages can still be used for testing purposes. In that sense it is nothing else than our 100--110 range of algorithms IDs used for testing. However it is more practical. We can deploy applications and as soon as an OID gets approved for OpenPGP we can tell users to enable the hidden option xy and everything works. If another OID get assigned we need to get out a new version. Compare that to algorithm IDs: We could do the same of course - but what are we supposed to do if the assumed ID gets assigned to a another curve and yet another ID get assigned to our curve. That is not easy to handle and hard to document and explain. Spending a few extra bytes for an OID is justified - they don't create noicable larger signatures or keys. > Make one up. Ditto for Camellia. Pick the obvious right number, and we We do have one for Camellia - however it has changed over the last year and it is still only desribed in an ID. We can assume that IANA will eventually assign the suggested algorithm IDs but we can't be sure. Salam-Shalom, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K0beDd030245 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 19 Jun 2008 17:37:40 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5K0be1H030244; Thu, 19 Jun 2008 17:37:40 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from merrymeet.com (merrymeet.com [66.93.68.160]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5K0bcU6030236 for ; Thu, 19 Jun 2008 17:37:39 -0700 (MST) (envelope-from jon@callas.org) Received: from keys.merrymeet.com (keys.merrymeet.com [66.93.68.161]) (Authenticated sender: jon) by merrymeet.com (Postfix) with ESMTP id 30C2410873DB for ; Thu, 19 Jun 2008 17:37:38 -0700 (PDT) Received: from sabbott-x1a.corp.pgp.com ([64.1.215.241]) by keys.merrymeet.com (PGP Universal service); Thu, 19 Jun 2008 17:37:37 -0700 X-PGP-Universal: processed; by keys.merrymeet.com on Thu, 19 Jun 2008 17:37:37 -0700 Cc: Werner Koch , Andrey Jivsov , OpenPGP Message-Id: <5E8CE82E-5D82-4BBC-896E-4F1020DA8BFD@callas.org> From: Jon Callas To: Len Sassaman In-Reply-To: Mime-Version: 1.0 (Apple Message framework v924) Subject: Re: algorithm IDs (was: Re: OpenPGP keys and Suite-B) Date: Thu, 19 Jun 2008 17:37:35 -0700 References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> X-Mailer: Apple Mail (2.924) X-PGP-Encoding-Format: Partitioned X-PGP-Encoding-Version: 2.0.2 X-Content-PGP-Universal-Saved-Content-Transfer-Encoding: 7bit X-Content-PGP-Universal-Saved-Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7BIT Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > I really don't like OIDs, given the potential for format-based attacks > that they introduce, but we're already using them anyway. I would > like to > see them phased out by v5 though. On the one hand, an OID is just a bit string. It's no worse than UTF-8. Consider the way we do it to be ISO Latin1, and OIDs to be Unicode. On the other hand, you're right. I don't see that an OID actually solves the problem. The problem is that the bureaucracy of IANA needs to assign the bit string. It doesn't matter if the bit string is an OID or one of our constants. It's a process issue, not a format issue. > > > However, I see a very large problem here with the "it takes a year > to get > an algorithm ID" situation. What's holding that up? And while we're > at it, > can we get an algorithm ID assigned for WHIRLPOOL? Make one up. Ditto for Camellia. Pick the obvious right number, and we all agree we'll start using it. Then we tell IANA to assign that number. I leave the solution to the obvious error condition (what if IANA picks a different one) as an exercise for the reader. If you want, I'll tell you my workaround. Jon -----BEGIN PGP SIGNATURE----- Version: PGP Universal 2.6.3 Charset: US-ASCII wj8DBQFIWvvRsTedWZOD3gYRAmV2AKC2FVKlsFBfOWlG4E6AR4cZs5olowCffC5P 8/7VKMl8WLhTGEKMPh3xmHo= =6+2J -----END PGP SIGNATURE----- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5JMFbQk080798 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 19 Jun 2008 15:15:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5JMFbpC080797; Thu, 19 Jun 2008 15:15:37 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5JMFZhN080791 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 19 Jun 2008 15:15:37 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id 1740F45032; Thu, 19 Jun 2008 15:15:34 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id F38DA48046; Thu, 19 Jun 2008 15:15:33 -0700 (PDT) Date: Thu, 19 Jun 2008 15:15:33 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: Werner Koch Cc: Andrey Jivsov , OpenPGP Subject: algorithm IDs (was: Re: OpenPGP keys and Suite-B) In-Reply-To: <87fxravlgy.fsf@wheatstone.g10code.de> Message-ID: References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> <87fxravlgy.fsf@wheatstone.g10code.de> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Wed, 18 Jun 2008, Werner Koch wrote: > Recall what happened with Camellia: It is now a year since David Shaw > implemented that cipher in GnuPG but we are still not able to enable > this because the RFC process has not been finished. We have not even > agreed within the WG on algorithm identifiers. Taking a year for such a > simple change - even with consensus in the WG that we want to have > Camellia in OpenPGP - is not really a useful way to get going with a new > cipher or a new curve. OIDS nicely solve this problem for curves. I really don't like OIDs, given the potential for format-based attacks that they introduce, but we're already using them anyway. I would like to see them phased out by v5 though. However, I see a very large problem here with the "it takes a year to get an algorithm ID" situation. What's holding that up? And while we're at it, can we get an algorithm ID assigned for WHIRLPOOL? > We should not drop a better technical better solution just for the > benefit that it is less work. If you need help, just send me the source > of your ID and I do the editing. I'd really like to get an ECC draft > out so that we can get ECDSA into GnuPG to start experimenting with it. > (DSA 2048bit is a bit slow and a transient interop problem) How was PGP 7.5 handling this? Just one specified curve, or? --Len. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5IF1uS1048119 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 18 Jun 2008 08:01:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5IF1uTJ048118; Wed, 18 Jun 2008 08:01:56 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from kerckhoffs.g10code.com (kerckhoffs.g10code.com [217.69.77.222]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5IF1rMh048094 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Wed, 18 Jun 2008 08:01:55 -0700 (MST) (envelope-from wk@gnupg.org) Received: from uucp by kerckhoffs.g10code.com with local-rmail (Exim 4.50 #1 (Debian)) id 1K8zIc-0008PB-AG for ; Wed, 18 Jun 2008 17:10:14 +0200 Received: from wk by localhost with local (Exim 4.62 #1 (Debian)) id 1K8z77-0005aB-OF; Wed, 18 Jun 2008 16:58:21 +0200 From: Werner Koch To: Andrey Jivsov Cc: OpenPGP Subject: Re: OpenPGP keys and Suite-B References: <481CD4EB.2020309@brainhub.org> <4855D4B9.1090701@brainhub.org> Organisation: g10 Code GmbH OpenPGP: id=5B0358A2; url=finger:wk@g10code.com Date: Wed, 18 Jun 2008 16:58:21 +0200 In-Reply-To: <4855D4B9.1090701@brainhub.org> (Andrey Jivsov's message of "Sun, 15 Jun 2008 19:49:29 -0700") Message-ID: <87fxravlgy.fsf@wheatstone.g10code.de> User-Agent: Gnus/5.110007 (No Gnus v0.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Mon, 16 Jun 2008 04:49, openpgp@brainhub.org said: > The other pending issue is Curve ID v.s. OID, which would have > required significant re-write of the document, because IDs presently > appear in many packets, profiles, and data that we hash. However, it > looks to me that this issue has "coin toss" / "don't care" status for > most, so I would like to avoid the burden of re-editing. Well, it depends on how you define "most". If "most" refers to the WG members, you might be right. But we need to look at the user base and that is not as US centric as these curves. In fact, with the current definition this OpenPGP draft for ECC is useless for Germany (and I assume also for most of Europe). The catalogue of allowed algorithms and the technical guideline TR-03111 of the BSI [1] do not include the NIST curves and explictly recommend the curves defined by the ECC Brainpool working groop [2]. I already remarked that I do not consider these curves as MUST items. But a way to optionally use other curves is paramount to allow OpenPGP with ECC in Europe. Without that ECC in OpenPGP and thus eventually OpenPGP will be dead. If it is a goal to keep OpenPGP alive we need to have a way to allow the use of other curves. The most flexible way would be the use of OIDs. However if you really don't want this, an alternative would be to define further algorithms ids - at least for the Brainpool curves (An ID is availabe [3]). But wait, what about other countries? Shouldn't we be nice to them and allow them the use of their own curves - technically this is possible and it won't pose an interop problem: If they can't use their curves they won't use OpenPGP at all and go only with X.509. Recall what happened with Camellia: It is now a year since David Shaw implemented that cipher in GnuPG but we are still not able to enable this because the RFC process has not been finished. We have not even agreed within the WG on algorithm identifiers. Taking a year for such a simple change - even with consensus in the WG that we want to have Camellia in OpenPGP - is not really a useful way to get going with a new cipher or a new curve. OIDS nicely solve this problem for curves. We should not drop a better technical better solution just for the benefit that it is less work. If you need help, just send me the source of your ID and I do the editing. I'd really like to get an ECC draft out so that we can get ECDSA into GnuPG to start experimenting with it. (DSA 2048bit is a bit slow and a transient interop problem) Salam-Shalom, Werner [1] Federal Office for Information Security (www.bsi.bund.de) [2] http://www.ecc-brainpool.org/ecc-standard.htm [3] http://www.ietf.org/internet-drafts/draft-lochter-pkix-brainpool-ecc-01.txt -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5G2nWTt061611 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 15 Jun 2008 19:49:32 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5G2nWfh061610; Sun, 15 Jun 2008 19:49:32 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from brainhub.org (h-66-134-92-50.snvacaid.covad.net [66.134.92.50]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5G2nUpJ061594 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 15 Jun 2008 19:49:31 -0700 (MST) (envelope-from openpgp@brainhub.org) Received: from localhost.localdomain ([192.168.0.141]) by brainhub.org (8.14.2/8.14.1) with ESMTP id m5G2nTKi007720 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 15 Jun 2008 19:49:30 -0700 Message-ID: <4855D4B9.1090701@brainhub.org> Date: Sun, 15 Jun 2008 19:49:29 -0700 From: Andrey Jivsov User-Agent: Thunderbird 2.0.0.14 (X11/20080501) MIME-Version: 1.0 CC: OpenPGP Subject: Re: OpenPGP keys and Suite-B References: <481CD4EB.2020309@brainhub.org> In-Reply-To: <481CD4EB.2020309@brainhub.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Greeting! As we agreed earlier on the list, I significantly trimmed references to Suite-B. Some of us wanted completely remove Suite-B, while others felt that it should exist to add valuable endorsement. I think the middle ground is to leave informative references to Suite B, which tell how to use the specification with each level of security. These references are limited to "protocol level" of Suite-B compliance. I would like to believe that once we settle this thread, the technical content of the document will be largely complete. The other pending issue is Curve ID v.s. OID, which would have required significant re-write of the document, because IDs presently appear in many packets, profiles, and data that we hash. However, it looks to me that this issue has "coin toss" / "don't care" status for most, so I would like to avoid the burden of re-editing. In summary, Suite B is the only notable change in the following latest version: http://brainhub.googlepages.com/draft-jivsov-openpgp-ecc-01-pre-00.txt The same version is available in other formats that support cross-references as navigation links here: http://brainhub.googlepages.com/pgp I intend to submit this edition as -01 revision of the IETF draft as soon as there are no contentions. I will wait until at least June 25th. Thank you. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5EDpptu004914 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 14 Jun 2008 06:51:51 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m5EDppg3004913; Sat, 14 Jun 2008 06:51:51 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m5EDpmMZ004906 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Sat, 14 Jun 2008 06:51:49 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id 485544518B; Sat, 14 Jun 2008 06:51:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id 2AD464804D; Sat, 14 Jun 2008 06:51:42 -0700 (PDT) Date: Sat, 14 Jun 2008 06:51:42 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: ietf-openpgp@imc.org Cc: len.sassaman@esat.kuleuven.be Subject: Other OpenPGP tasks Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: I was not paying attention for the discussion about the WG shutting down, and would have brought this up then, but it seems that shouldn't affect us much anyway. In addition to the remaining drafts that have been mentioned recently (including my WHIRLPOOL draft, which is blocking on a good, free citation, though that should be fixed next week), I see a need for IETF guidance in two other areas. 1. The trust calculations on key rings, AKA "the web of trust." This is currently treated as out of scope of OpenPGP's message format and up to the implementor. While I agree it doesn't belong in 4880, I think that we would benefit from having a standardized trust metric algorithm. The one in PGP is pretty sound, in my opinion, but has some arcane nits that aren't obvious at first. I don't know if GnuPG calculates trust the same way -- I'm pretty sure there are differences. Minor differences in trust calculations are unlikely to lead to problems -- it doesn't affect interoperability, and should only rarely cause noticeable differences in behavior between implementations for the same keyrings. Those aren't my concerns, though I'm sure that implementors would like the ability to do trust calculations the way that the leading implementations do them. I am, however, concerned about a 4880 implementation that decides to use a really broken trust calculation, such as one that trusts keys six hops away on the signing chain, for instance. So, an ID for Trust Calculation in OpenPGP seems like a good thing, both from a "best practices" standpoint and a documentation of current behavior. 2. Key servers. Last I visited this topic was about eight years ago; Rodney Thayer and I had part of an ID written up describing HKP, the NAI LDAP and LDAPS schemas, etc. I still have it if it useful, though it may be mostly irrelevant now. But the question remains: as an implementor, if I want to talk to the key servers, how do I do it? I'm sadly out of touch with the key server operators community these days, and am not even sure what the dominant key server software is (aside from the Global Directory, which is a special case), but I think this issue warrants further work. We've had quite a long time to come up with a stable key server interface; let's document it so that it remains that way. Thoughts? Best, Len Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m54KlNvL015051 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 4 Jun 2008 13:47:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id m54KlNxj015050; Wed, 4 Jun 2008 13:47:23 -0700 (MST) (envelope-from owner-ietf-openpgp@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-openpgp@mail.imc.org using -f Received: from thetis.deor.org (thetis.deor.org [207.106.86.210]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id m54KlJqt015035 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 4 Jun 2008 13:47:21 -0700 (MST) (envelope-from rabbi@abditum.com) Received: by thetis.deor.org (Postfix, from userid 500) id EB70B4501F; Wed, 4 Jun 2008 13:47:16 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thetis.deor.org (Postfix) with ESMTP id DB1404802E; Wed, 4 Jun 2008 13:47:16 -0700 (PDT) Date: Wed, 4 Jun 2008 13:47:16 -0700 (PDT) From: Len Sassaman X-X-Sender: rabbi@thetis.deor.org To: David Shaw Cc: ietf-openpgp@imc.org, len.sassaman@esat.kuleuven.be Subject: Re: Whirlpool In-Reply-To: <20080411201821.GB1546@jabberwocky.com> Message-ID: References: <117bad160804111101v6a5294f2u582d776cf7ebf1e5@mail.gmail.com> <20080411201821.GB1546@jabberwocky.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-openpgp@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: On Fri, 11 Apr 2008, David Shaw wrote: > > On Fri, Apr 11, 2008 at 07:01:24PM +0100, David Crick wrote: > > > > I've seen mention several times on this list (and others) > > of Whirlpool's apparent pending inclusion into OpenPGP, > > but have yet to see any actual drafts on here about it. > > > > Is anyone willing to admit they are working on one? :) > > I think Len was working on one. > > Len, you're welcome to the XML from my Camellia draft. With that XML, > a Whirlpool draft is pretty much cut and paste. Hi David, That would be really helpful. I have it mostly finished, but set it aside because of some deadlines I had. My next week is already overbooked, but after that I should have a few hours to finish it up, especially thanks to your offer of the XML. (Please send it to len.sassaman@esat.kuleuven.be). Thanks again! --Len.