mirror of
https://codeberg.org/openpgp/notes.git
synced 2024-11-27 01:52:06 +01:00
ch4: zooming in, add subkey dumps
This commit is contained in:
Heiko Schaefer
parent
5fdb9be451
commit
b1acb31ed0
1 changed files with 202 additions and 6 deletions
|
|
@ -593,17 +593,213 @@ A minimal OpenPGP public certificate, visualized
|
|||
|
||||
In the following examples, we will only look at OpenPGP keys that include the private key material. The corresponding "certificate" variants, which only contain the public key material, are easy to imagine: like here, their packet type is changed from a Secret-Key to a Public-Key variant, and they leave out the private key material.
|
||||
|
||||
### Subkeys
|
||||
### Encryption subkey
|
||||
|
||||
```{admonition} TODO
|
||||
:class: warning
|
||||
Now we'll look at a subkey in Alice's key. In the split version of Alice's key, the encryption subkey is in `alice.priv-4--SecretSubkey`, and the binding self-signature for the subkey in `alice.priv-5--Signature`.
|
||||
|
||||
The following text is unfinished and still needs processing/writing.
|
||||
```text
|
||||
$ sq packet dump --hex alice.priv-4--SecretSubkey
|
||||
Secret-Subkey Packet, new CTB, 2 header bytes + 75 bytes
|
||||
Version: 6
|
||||
Creation time: 2023-09-29 15:17:58 UTC
|
||||
Pk algo: X25519
|
||||
Pk size: 256 bits
|
||||
Fingerprint: C0A58384A438E5A14F73712426A4D45DBAEEF4A39E6B30B09D5513F978ACCA94
|
||||
KeyID: C0A58384A438E5A1
|
||||
|
||||
**This point marks the end of the material that should be read/edited.**
|
||||
Secret Key:
|
||||
|
||||
Unencrypted
|
||||
|
||||
00000000 c7 CTB
|
||||
00000001 4b length
|
||||
00000002 06 version
|
||||
00000003 65 16 ea a6 creation_time
|
||||
00000007 19 pk_algo
|
||||
00000008 00 00 00 20 public_len
|
||||
0000000c d1 ae 87 d7 x25519_public
|
||||
00000010 cc 42 af 99 34 c5 c2 5c ca fa b7 4a c8 43 fc 86
|
||||
00000020 35 2a 46 01 f3 cc 00 f5 4a 09 3e 3f
|
||||
0000002c 00 s2k_usage
|
||||
0000002d 28 7d cd x25519_secret
|
||||
00000030 da 26 16 37 8d ea 24 c7 ce e7 70 c7 9b e5 6f 0a
|
||||
00000040 c9 77 fb bd 23 41 73 c9 57 5a bf 7c 4c
|
||||
```
|
||||
|
||||
From here on, we'll look at the dumps in shorter format (you can see more detail by copying the certificates into the [Sequoia OpenPGP Packet dumper](https://dump.sequoia-pgp.org/) and checking the "HexDump" checkbox).
|
||||
Notice that the structure of this *Secret-Subkey packet* is exactly the same as the *Secret-Key Packet*, above. The packet tag (`CTB`) is set to packet type 7, here (*Secret-Subkey packet*).
|
||||
|
||||
The `pk_algo` value is set to 0x19 (or decimal) 25, which [corresponds to](https://www.ietf.org/archive/id/draft-ietf-openpgp-crypto-refresh-10.html#name-public-key-algorithms) X25519.
|
||||
|
||||
|
||||
```text
|
||||
$ sq packet dump --hex alice.priv-5--Signature
|
||||
Signature Packet, new CTB, 2 header bytes + 171 bytes
|
||||
Version: 6
|
||||
Type: SubkeyBinding
|
||||
Pk algo: Ed25519
|
||||
Hash algo: SHA512
|
||||
Hashed area:
|
||||
Signature creation time: 2023-09-29 15:17:58 UTC (critical)
|
||||
Key expiration time: P1095DT62781S (critical)
|
||||
Key flags: EtEr (critical)
|
||||
Issuer Fingerprint: AAA18CBB254685C58358320563FD37B67F3300F9FB0EC457378CD29F102698B3
|
||||
Unhashed area:
|
||||
Issuer: AAA18CBB254685C5
|
||||
Digest prefix: 2289
|
||||
Level: 0 (signature over data)
|
||||
|
||||
00000000 c2 CTB
|
||||
00000001 ab length
|
||||
00000002 06 version
|
||||
00000003 18 type
|
||||
00000004 1b pk_algo
|
||||
00000005 0a hash_algo
|
||||
00000006 00 00 00 32 hashed_area_len
|
||||
0000000a 05 subpacket length
|
||||
0000000b 82 subpacket tag
|
||||
0000000c 65 16 ea a6 sig creation time
|
||||
00000010 05 subpacket length
|
||||
00000011 89 subpacket tag
|
||||
00000012 05 a4 8f bd key expiry time
|
||||
00000016 02 subpacket length
|
||||
00000017 9b subpacket tag
|
||||
00000018 0c key flags
|
||||
00000019 22 subpacket length
|
||||
0000001a 21 subpacket tag
|
||||
0000001b 06 version
|
||||
0000001c aa a1 8c bb issuer fp
|
||||
00000020 25 46 85 c5 83 58 32 05 63 fd 37 b6 7f 33 00 f9
|
||||
00000030 fb 0e c4 57 37 8c d2 9f 10 26 98 b3
|
||||
0000003c 00 00 00 0a unhashed_area_len
|
||||
00000040 09 subpacket length
|
||||
00000041 10 subpacket tag
|
||||
00000042 aa a1 8c bb 25 46 85 c5 issuer
|
||||
0000004a 22 digest_prefix1
|
||||
0000004b 89 digest_prefix2
|
||||
0000004c 20 salt_len
|
||||
0000004d 0b 0c 89 salt
|
||||
00000050 b5 ab 15 e3 7f e4 4d b9 a7 ef 71 48 14 3b ab 26
|
||||
00000060 5f 34 7f 6d 48 2e 9f 78 48 58 6d 9a fb
|
||||
0000006d 6d b2 db ed25519_sig
|
||||
00000070 2f 97 8e c8 12 fc 57 7f 85 aa d1 59 bc 80 40 0b
|
||||
00000080 be 2e f0 e1 23 2d bf 4b 71 7e d0 e4 c0 36 e4 d2
|
||||
00000090 cf b2 9f b4 a8 4f 3e 2a 21 89 74 c2 33 55 af ac
|
||||
000000a0 41 36 1b 2b 60 09 f2 d9 19 f4 41 12 0b
|
||||
```
|
||||
|
||||
### Signing subkey
|
||||
|
||||
```text
|
||||
$ sq packet dump --hex alice.priv-6--SecretSubkey
|
||||
Secret-Subkey Packet, new CTB, 2 header bytes + 75 bytes
|
||||
Version: 6
|
||||
Creation time: 2023-09-29 15:17:58 UTC
|
||||
Pk algo: Ed25519
|
||||
Pk size: 256 bits
|
||||
Fingerprint: D07B24EC91A14DD240AC2D53E6C8A9E054949A41222EA738576ED19CAEA3DC99
|
||||
KeyID: D07B24EC91A14DD2
|
||||
|
||||
Secret Key:
|
||||
|
||||
Unencrypted
|
||||
|
||||
00000000 c7 CTB
|
||||
00000001 4b length
|
||||
00000002 06 version
|
||||
00000003 65 16 ea a6 creation_time
|
||||
00000007 1b pk_algo
|
||||
00000008 00 00 00 20 public_len
|
||||
0000000c 33 8c d4 f5 ed25519_public
|
||||
00000010 1a 73 39 ef ce d6 0f 21 8d a0 58 a2 3c 3d 44 a8
|
||||
00000020 59 e9 13 1f 12 9c 6f 19 d0 3d 40 a0
|
||||
0000002c 00 s2k_usage
|
||||
0000002d 0e cb d1 ed25519_secret
|
||||
00000030 c9 bc 81 82 aa 77 1f a8 12 a6 2a 74 a4 20 c1 74
|
||||
00000040 76 f3 86 24 fb a8 25 a5 62 dd d6 a2 91
|
||||
```
|
||||
|
||||
```text
|
||||
$ sq packet dump --hex alice.priv-7--Signature
|
||||
Signature Packet, new CTB, 3 header bytes + 325 bytes
|
||||
Version: 6
|
||||
Type: SubkeyBinding
|
||||
Pk algo: Ed25519
|
||||
Hash algo: SHA512
|
||||
Hashed area:
|
||||
Signature creation time: 2023-09-29 15:17:58 UTC (critical)
|
||||
Key expiration time: P1095DT62781S (critical)
|
||||
Key flags: S (critical)
|
||||
Embedded signature: (critical)
|
||||
Signature Packet
|
||||
Version: 6
|
||||
Type: PrimaryKeyBinding
|
||||
Pk algo: Ed25519
|
||||
Hash algo: SHA512
|
||||
Hashed area:
|
||||
Signature creation time: 2023-09-29 15:17:58 UTC (critical)
|
||||
Issuer Fingerprint: D07B24EC91A14DD240AC2D53E6C8A9E054949A41222EA738576ED19CAEA3DC99
|
||||
Digest prefix: 5365
|
||||
Level: 0 (signature over data)
|
||||
|
||||
Issuer Fingerprint: AAA18CBB254685C58358320563FD37B67F3300F9FB0EC457378CD29F102698B3
|
||||
Unhashed area:
|
||||
Issuer: AAA18CBB254685C5
|
||||
Digest prefix: 841C
|
||||
Level: 0 (signature over data)
|
||||
|
||||
00000000 c2 CTB
|
||||
00000001 c0 85 length
|
||||
00000003 06 version
|
||||
00000004 18 type
|
||||
00000005 1b pk_algo
|
||||
00000006 0a hash_algo
|
||||
00000007 00 00 00 cc hashed_area_len
|
||||
0000000b 05 subpacket length
|
||||
0000000c 82 subpacket tag
|
||||
0000000d 65 16 ea sig creation time
|
||||
00000010 a6
|
||||
00000011 05 subpacket length
|
||||
00000012 89 subpacket tag
|
||||
00000013 05 a4 8f bd key expiry time
|
||||
00000017 02 subpacket length
|
||||
00000018 9b subpacket tag
|
||||
00000019 02 key flags
|
||||
0000001a 99 subpacket length
|
||||
0000001b a0 subpacket tag
|
||||
0000001c 06 19 1b 0a embedded sig
|
||||
00000020 00 00 00 29 05 82 65 16 ea a6 22 21 06 d0 7b 24
|
||||
00000030 ec 91 a1 4d d2 40 ac 2d 53 e6 c8 a9 e0 54 94 9a
|
||||
00000040 41 22 2e a7 38 57 6e d1 9c ae a3 dc 99 00 00 00
|
||||
00000050 00 53 65 20 42 03 ad 0c db fc b5 9a 98 a6 15 27
|
||||
00000060 e4 11 5e f5 f2 a0 3d bc ed 8d 94 27 41 09 f6 3c
|
||||
00000070 4b f8 8a e5 af 73 e1 7d 54 07 40 3f f3 29 34 c2
|
||||
00000080 e7 60 56 a5 e1 43 cb 08 ba 66 fe 8b 26 ce e7 cb
|
||||
00000090 a5 3a 46 bb a5 c8 5d e4 6a de ae 49 e1 3e 07 bf
|
||||
000000a0 c4 9e 98 14 2f 3e c5 f7 01 3e 3e 4f f6 18 2a ac
|
||||
000000b0 bd ed 52 0c
|
||||
000000b4 22 subpacket length
|
||||
000000b5 21 subpacket tag
|
||||
000000b6 06 version
|
||||
000000b7 aa a1 8c bb 25 46 85 c5 83 issuer fp
|
||||
000000c0 58 32 05 63 fd 37 b6 7f 33 00 f9 fb 0e c4 57 37
|
||||
000000d0 8c d2 9f 10 26 98 b3
|
||||
000000d7 00 00 00 0a unhashed_area_len
|
||||
000000db 09 subpacket length
|
||||
000000dc 10 subpacket tag
|
||||
000000dd aa a1 8c issuer
|
||||
000000e0 bb 25 46 85 c5
|
||||
000000e5 84 digest_prefix1
|
||||
000000e6 1c digest_prefix2
|
||||
000000e7 20 salt_len
|
||||
000000e8 23 3d b2 49 f3 02 4b 08 salt
|
||||
000000f0 93 af ba 08 89 f0 e0 91 0f ab 22 26 aa b3 56 57
|
||||
00000100 30 ea 95 29 06 60 6f 00
|
||||
00000108 be 44 a1 95 38 a9 6b 3a ed25519_sig
|
||||
00000110 3e 51 f0 55 09 b1 e2 91 a9 17 86 fa f5 1e 3f d0
|
||||
00000120 28 46 3c ce 6e 88 14 37 32 ec 3d fa c6 01 ca e5
|
||||
00000130 a9 4b b7 63 94 c3 0d 92 ab dc fa 23 50 71 60 31
|
||||
00000140 a6 73 c8 33 5a 9c d9 0a
|
||||
```
|
||||
|
||||
### User IDs
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue