Re: OpenPGP keys and Suite-B

[Werner Koch <wk@xxxxxxxxx>]

On Sat,  3 May 2008 23:11, openpgp@xxxxxxxxxxxx said:

> ===================================================================
>    A. Use key notations "suite-b-key@xxxxxxx"
>       with values "top secret" and "secret".
> ===================================================================

Fine with me, but I see no need to mention it in the standard.

> ===================================================================
>    B. Use feature bits of a key 0x02, 0x4 of
>       "5.2.3.24. Features" as follows:
>       0x02: The default symmetric alg. of the key is AES-128
>       0x04: The default symmetric alg. of the key is AES-256
>       These bits can be combined (i.e. they are not mutually
>       exclusive).
> ===================================================================

Too complicated.

> ===================================================================
>    C. Higher layers of application will govern compliance
>       with Suite B. "ECC in OpenPGP" document will define
>       reasonable superset of features required for Suite-B
>       or similar government documents, but exact
>       specification of the policies to use ECC in OpenPGP
>       is out of scope.
> ===================================================================

Okay.


Werner:
   A:
   B:
   C: x



Shalom-Salam,

   Werner



-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.