Re: Regarding ideas to replace gpgv with sqv

[Justus Winter <justus@sequoia-pgp.org>]

Julian Andres Klode <jak@debian.org> writes:

> On Tue, Feb 02, 2021 at 04:12:19PM +0100, Julian Andres Klode wrote:
>
>> [...] issues like the inability to deprecate MD5 or SHA1 for ages.

Are you absolutely sure that this is the metric by which you want to
judge protocols?

> and a proof of concept at
>
> https://gist.github.com/julian-klode/4514ce39d3dc62647b502e5a8cf6a3ef

https://gist.github.com/julian-klode/4514ce39d3dc62647b502e5a8cf6a3ef#file-inrelease-L10
https://gist.github.com/julian-klode/4514ce39d3dc62647b502e5a8cf6a3ef#file-inrelease-L927
https://cdimage.debian.org/debian-cd/current-live/amd64/bt-hybrid/MD5SUMS.sign
https://cdimage.debian.org/debian-cd/current-live/amd64/bt-hybrid/SHA1SUMS.sign
https://releases.ubuntu.com/bionic/MD5SUMS-metalink.gpg

In all seriousness, of course OpenPGP has deprecated these hashes (MD5:
[0], SHA1: [1]), and sane implementations reject signatures based on
them (MD5: [2], SHA1: [3]).

0: https://tools.ietf.org/html/rfc4880#section-9.4
1: https://tools.ietf.org/html/draft-ietf-openpgp-rfc4880bis-08#section-9.5
2: https://tests.sequoia-pgp.org/#Detached_Sign-Verify_roundtrip_with_key__Bob___MD5
3: https://tests.sequoia-pgp.org/#Detached_Sign-Verify_roundtrip_with_key__Bob___SHA1

Cheers,
Justus