Re: [openpgp] AEAD Chunk Size

On Thu, 14 Mar 2019 14:47, neal(_at_)walfield(_dot_)org said:

> Are you arguing like Werner that catching transmission errors is
> enough and that we shouldn't bother with ciphertext integrity?
I never said this.  My point was that you are discussing a certain
programming pattern on how to implement AEAD modes and I remarked that
the OpenPGP standard is about a protocol and not an implementation.

BTW, OpenPGP provides ciphertext integrity for more than 15 years.
Experience showed that transmission errors are the major cause for false
MDC triggered alarms.  We want to detect them earlier and not only at
the end of the transmission to support real world use cases.  The move
from CFB+SHA1 to OCB can also be seen in the light of required
performance improvements.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

signature.asc
Description: PGP signature

_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp