Subject: [Openpgp-dt] OpenPGP Design Team Meeting Notes 2021-10-25

From: Daniel Kahn Gillmor <[email-masked]>
Date: Mon, 25 Oct 2021 16:14:36 -0400

OpenPGP Design Team Meeting
2021-10-25

Present:
	* dkg
	* gniibe
	* justus
	* paul
	* daniel huigens

Agenda:
	* MTI

Many of our algorithms are likely to become FIPS-approved.  Paul expects this to be a storm on the main mailing list.
Paul: from a FIPS pov, we might want to wait.
Justus: do we know when it will be?
Paul: we don't know.

Paul: i recommend choosing MUSTs without considering FIPS; we'll tackle FIPS when it gets to the larger WG
Huigens: i'm ok with choosing minimal MUSTs without taking into account FIPS right now

all: seems to be a consensus for next steps: choose minimal MUSTs
without considering FIPS

MR !48 is MTI, but probably not up-to-date with the DT's expectations.

Paul: do we want to think about producing vs. consuming differently?  what would be useful in the standard?
dkg: what would implementers find useful?

- Sequoia has a policy object that consists of cutoff dates for algorithms
- OpenPGP.js throws errors on deprecated algorithms

Huigens volunteers to try to update !48 to cover the minimal MUSTs that the DT expects-- in particular ECDSA→EdDSA, plus specifying MTI curve choice (MUST Ed25519).

We might revisit deprecation strategies (weak signature verification, dangerous decryption, etc) as a followup.

	* OpenPGP meeting at IETF 112
	Paul will do a short summary of recent changes
	Huigens: upcoming MTI choices, and what's left before "done"
	dkg: presents sop (including hints at lang-specific changes)
	Justus: overview of how we'll use the interop test suite to cover the revised draft
	
TODO (all): review outstanding MRs, issues, and identify things that need resolving before we're done.  send to DT list, so huigens can incorporate in his presentation.

  * What is left?
     * Justus proposes adding a prefix salt for signatures: this might
       require placing the salt in both the one-pass signature packet
       and the signature packet (so that it can be detached).  He will
       propose some text for the DT to review.