IETF RFC 9580

[ACTIVE]

OpenPGP

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 166
Abstract: This document specifies the message formats used in OpenPGP. OpenPGP provides encryption with public key or symmetric cryptographic algorithms, digital signatures, compression, and key management. This document is maintained in order to publish all necessary information needed to develop interoperable applications based on the OpenPGP format. It is not a step-by-step cookbook for writing an application. It describes only the format and methods needed to read, check, generate, and write conforming packets crossing any network. It does not deal with storage and implementation questions. It does, however, discuss implementation issues necessary to avoid security flaws. This document obsoletes RFCs 4880 ("OpenPGP Message Format"), 5581 ("The Camellia Cipher in OpenPGP"), and 6637 ("Elliptic Curve Cryptography (ECC) in OpenPGP").
Publication Date: 2024-07-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9580
Link: https://doi.org/10.17487/RFC9580
Author(s): Paul Wouters
Daniel Huigens
Justus Winter
Niibe Yutaka
Keyword(s): Encryption, Digital Signatures, Key Management, PGP

Latest version of IETF RFC 9580

Document Versions — IETF RFC 9580

▶ IETF RFC 9580 (2024-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

10.1007-3-540-46877-3_35 — IDEA EXTERNAL
10.1109-TIT.1985.1057074 — ELGAMAL EXTERNAL
ISO.10118-3.1998 — RIPEMD-160 EXTERNAL
ISO 10646 [Active, Amended]
NIST FIPS 180-4 [Active]
NIST.FIPS.186-5 — NIST.FIPS.186-5 EXTERNAL
NIST FIPS 197 [Superseded]
NIST.FIPS.202 — FIPS202 EXTERNAL
NIST SP 800-38A [Active, Amended]
NIST.SP.800-38D — GCM EXTERNAL
NIST.SP.800-56A — NIST EXTERNAL
NIST.SP.800-67 — SP67 EXTERNAL
Bellare, M., Rogaway, P., and D. Wagner, "A Conventional Authenticated-Encryption Mode", April 2003, <https://seclab.cs.ucdavis.edu/papers/eax.pdf>. EXTERNAL
Schneier, B., "Description of a New Variable-Length Key, 64-Bit Block Cipher (Blowfish)", Fast Software Encryption, Cambridge Security Workshop Proceedings, pp. 191-204, December 1993, <https://www.schneier.com/academic/archives/1994/09/description_of_a_new.html>. EXTERNAL
bzip2, "bzip2 and libbzip2", 2010, <https://sourceware.org/bzip2/>. EXTERNAL
Schneier, B., Kelsey, J., Whiting, D., Wagner, D., Hall, C., and N. Ferguson, "Twofish: A 128-Bit Block Cipher", June 1998, <https://www.schneier.com/wp-content/uploads/2016/02/paper-twofish-paper.pdf>. EXTERNAL
IETF RFC 1321 [Active*]
IETF RFC 1950 [Active*]
IETF RFC 1951 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 2144 [Active*]
IETF RFC 2822 [Superseded*]
IETF RFC 3156 [Active*]
IETF RFC 3394 [Active*]
IETF RFC 3629 [Active*]
IETF RFC 3713 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4648 [Active*]
IETF RFC 5322 [Active, Amended*]
IETF RFC 6234 [Active*]
RFC7253 — RFC7253 EXTERNAL
IETF RFC 7748 [Active*]
IETF RFC 8017 [Active*]
IETF RFC 8018 [Active*]
IETF RFC 8032 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
RFC9106 — RFC9106 EXTERNAL
T-REC-T.871 — JFIF EXTERNAL

Bibliographic Reference(s)

10.1007-978-3-319-16715-2_12 — MRLG15 EXTERNAL
10.1137-0217019 — HAASTAD EXTERNAL
10.1145-2976749.2978395 — CHECKOWAY EXTERNAL
10.1145-3548606.3559363 — KOPENPGP EXTERNAL
10.2307-3618498 — KOBLITZ EXTERNAL
10.5555-3489212.3489316 — SHAMBLES EXTERNAL
GITHUB.cr-marcstevens.sha1collisiondetection — SHA1CD EXTERNAL
IEEE.STD1003.1.2017 — PAX EXTERNAL
ISBN.9781931971324 — USENIX-STUDY EXTERNAL
ISO 9899: 2018 [Active]
NIST.SP.800-57 — NIST.SP800-57 EXTERNAL
NIST.SP.800-131A — SP800-131 EXTERNAL
Mister, S. and R. Zuccherato, "An Attack on CFB Mode Encryption As Used By OpenPGP", Cryptology ePrint Archive, Paper 2005/033, February 2005, <http://eprint.iacr.org/2005/033>. EXTERNAL
Klíma, V. and T. Rosa, "Attack on Private Signature Keys of the OpenPGP Format, PGP(TM) Programs and Other Applications Compatible with OpenPGP", Cryptology ePrint Archive, Paper 2002/076, March 2001, <https://eprint.iacr.org/2002/076>. EXTERNAL
Free Software Foundation, "Comparing and Merging Files", 'Detailed Description of Unified Format', Section 2.2.2.2, January 2021, <https://www.gnu.org/software/diffutils/manual/html_node/Detailed-Unified.html>. EXTERNAL
Poddebniak, D., Somorovsky, J., Schinzel, S., Lochter, M., and P. Rösler, "Attacking Deterministic Signature Schemes using Fault Attacks", Cryptology ePrint Archive, Paper 2017/1014 , October 2017, <https://eprint.iacr.org/2017/1014>. EXTERNAL
regex, "Henry Spencer's regular expression libraries", <https://garyhouston.github.io/regex/>. EXTERNAL
Jallad, K., Katz, J., and B. Schneier, "Implementation of Chosen-Ciphertext Attacks against PGP and GnuPG", DOI 0.1007/3-540-45811-5_7, September 2002, <https://www.schneier.com/academic/archives/2002/01/implementation_of_ch.html>. EXTERNAL
Bleichenbacher, D., "Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1", CRYPTO '98: International Cryptology Conference Proceedings, Vol. 1462, pp. 1-12, August 1998, <http://archiv.infsec.ethz.ch/education/fs08/secsem/Bleichenbacher98.pdf>. EXTERNAL
Stevens, M., "Counter-cryptanalysis", Cryptology ePrint Archive, Paper 2013/358, June 2013, <https://eprint.iacr.org/2013/358>. EXTERNAL
Bleichenbacher, D., "Generating ElGamal Signatures Without Knowing the Secret Key", EUROCRYPT'96: International Conference on the Theory and Applications of Cryptographic Techniques Proceedings, Vol. 1070, pp. 10-18, May 1996. EXTERNAL
Poddebniak, D., Dresen, C., Müller, J., Ising, F., Schinzel, S., Friedberger, S., Somorovsky, J., and J. Schwenk, "Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels", Proceedings of the 27th USENIX Security Symposium, August 2018, <https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-poddebniak.pdf>. EXTERNAL
Pietig, A., "Functional Specification of the OpenPGP application on ISO Smart Card Operating Systems", Version 3.4.1, March 2020, <https://gnupg.org/ftp/specs/OpenPGP-smart-card-application-3.4.1.pdf>. EXTERNAL
IETF RFC 1991 [Superseded*]
IETF RFC 2440 [Superseded*]
IETF RFC 2978 [Active*]
IETF RFC 4880 [Superseded*]
IETF RFC 5581 [Superseded*]
RFC5639 — RFC5639 EXTERNAL
IETF RFC 5869 [Active*]
IETF RFC 6090 [Active*]
RFC6637 — RFC6637 EXTERNAL
SECG.SEC1.v2.2009-05 — SEC1 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9580.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9580, OpenPGP. Available at https://doi.org/10.17487/RFC9580

Snippet:

IETF RFC 9580, OpenPGP. Available at https://doi.org/10.17487/RFC9580

HTML (ISO 690 compliant)

Preview:

IETF RFC 9580, OpenPGP. Available at https://doi.org/10.17487/RFC9580

Snippet:

<span class="citation"><cite>IETF RFC 9580</cite>, OpenPGP. Available at <a href="https://doi.org/10.17487/RFC9580" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9580</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9580, OpenPGP
doi: 10.17487/RFC9580
url: https://doi.org/10.17487/RFC9580

Snippet:

<li>
<cite id="bib-rfc9580">IETF RFC 9580</cite>, OpenPGP
<span class="doi">10.17487/RFC9580</span>
</li>

Referenced By

IETF RFC 9788 [Active*]