diff --git a/book/source/about.md b/book/source/about.md index d585bf3..f7dfe1c 100644 --- a/book/source/about.md +++ b/book/source/about.md @@ -5,7 +5,7 @@ SPDX-License-Identifier: CC-BY-SA-4.0 # Introducing OpenPGP -This documentation project is designed to provide a comprehensive understanding of OpenPGP, highlighting its functionalities and applications for software developers. While this document predominantly references [OpenPGP version 6, as outlined in the latest RFC](https://datatracker.ietf.org/doc/draft-ietf-openpgp-crypto-refresh/), it is important to note that the fundamental principles and functionalities of OpenPGP have remained consistent across its versions since its first release as an open standard in RFC 2440 in 1998. +This documentation project is designed to provide a comprehensive understanding of OpenPGP, highlighting its functionalities and applications for software developers. While this document predominantly references [OpenPGP version 6, as specified in RFC 9580](https://www.rfc-editor.org/rfc/rfc9580.html), it is important to note that the fundamental principles and functionalities of OpenPGP have remained consistent across its versions since its first release as an open standard in RFC 2440 in 1998. This documentation project seeks to introduce all OpenPGP concepts and functionalities to application developers who wish to use it in their projects. @@ -33,14 +33,13 @@ Instead, this document is mainly aimed at the second group, application develope The document may also serve as a useful supplement to the RFC for implementers of OpenPGP libraries (or other software that directly handles internal OpenPGP data structures). -With the emergence of a new crop of modern, high-quality OpenPGP libraries, and the imminent release of the updated [OpenPGP version 6 specification](https://datatracker.ietf.org/doc/draft-ietf-openpgp-crypto-refresh/), we think that now is a great time to implement OpenPGP functionality in applications or to modernize existing OpenPGP subsystems. +With the emergence of a new crop of modern, high-quality OpenPGP libraries, and the release of the updated [OpenPGP RFC 9580](https://www.rfc-editor.org/rfc/rfc9580.html), we think that now is a great time to implement OpenPGP functionality in applications or to modernize existing OpenPGP subsystems. The goal of this document is to offer an implementation-independent introduction to the OpenPGP technology, assisting software developers in quickly familiarizing themselves and serving as a pathway to relevant information in the RFC. ## Why not just use the OpenPGP RFC? -The [OpenPGP RFC](https://datatracker.ietf.org/doc/draft-ietf-openpgp-crypto-refresh/) -defines *the message formats used in OpenPGP.* That is, it describes the internal structure of OpenPGP data, which is crucial for OpenPGP library implementers. However, this level of detail is not required for software developers who use OpenPGP via a library. +The [OpenPGP RFC 9580](https://www.rfc-editor.org/rfc/rfc9580.html) defines *the message formats used in OpenPGP.* That is, it describes the internal structure of OpenPGP data, which is crucial for OpenPGP library implementers. However, this level of detail is not required for software developers who use OpenPGP via a library. This document describes OpenPGP concepts at the "library" level of abstraction, omitting unnecessary detail about the internal encoding of OpenPGP artifacts. Instead, we focus on the properties of these OpenPGP artifacts and how they are used, while adding context that is not elaborated on in the [RFC](https://en.wikipedia.org/wiki/Request_for_Comments). diff --git a/book/source/adv/certificates.md b/book/source/adv/certificates.md index 6c32eed..34b795e 100644 --- a/book/source/adv/certificates.md +++ b/book/source/adv/certificates.md @@ -369,7 +369,7 @@ Additional mechanisms [are upcoming](support-for-1pa3pc). This mechanism uses the *attested certifications* signature subpacket (type ID `37`), which currently only exists as a proposed feature in [draft-ietf-openpgp-rfc4880bis](https://www.ietf.org/archive/id/draft-ietf-openpgp-rfc4880bis-10.html#table-3)[^ac-draft]. -[^ac-draft]: Introducing the *attested certifications* signature subpacket (type ID `37`) was unfortunately not in scope of the chartered topics for the current "crypto-refresh" work of the OpenPGP working group. However, hopefully the working group can handle this feature in future rechartering. +[^ac-draft]: Introducing the *attested certifications* signature subpacket (type ID `37`) was unfortunately not in scope of the chartered topics for the recent "RFC 9580" work of the OpenPGP working group. However, hopefully the working group can handle this feature in future rechartering. (support-for-1pa3pc)= ### Support diff --git a/book/source/glossary.md b/book/source/glossary.md index 54d026b..609da42 100644 --- a/book/source/glossary.md +++ b/book/source/glossary.md @@ -555,7 +555,7 @@ Revocation Signature Packet Additionally, with the deprecated *Revocation Key* mechanism, {term}`third-party` *Key-* and *Subkey revocations* also exist. RFC - This document, unless noted otherwise, refers to the [OpenPGP version 6 specification](https://datatracker.ietf.org/doc/draft-ietf-openpgp-crypto-refresh/) when referring to *RFC*. + This document, unless noted otherwise, refers to [OpenPGP RFC 9580](https://www.rfc-editor.org/rfc/rfc9580.html) when referring to *RFC*. SEIPD See {term}`Symmetrically Encrypted Integrity Protected Data`. diff --git a/book/source/migration.md b/book/source/migration.md index 7b514b0..b342c1b 100644 --- a/book/source/migration.md +++ b/book/source/migration.md @@ -11,7 +11,7 @@ Some of these changes might be subtle, like the addition of a new hash algorithm This makes it necessary to migrate both implementations and existing user keys and certificates. -In this chapter, we want to explore possible steps to migrate from OpenPGP v4 as defined by RFC4880 to v6 (crypto-refresh). +In this chapter, we want to explore possible steps to migrate from OpenPGP v4 as defined by RFC4880 to OpenPGP v6 as defined by RFC 9580 (crypto-refresh). ## Adoption of new features diff --git a/book/source/openpgp.md b/book/source/openpgp.md index 4fab2e2..8b06a35 100644 --- a/book/source/openpgp.md +++ b/book/source/openpgp.md @@ -108,6 +108,6 @@ There is [ongoing work](https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/ OpenPGP data is internally structured as "packets." We'll look into examples of this internal structure in a series of chapters at the end of this document. -Getting familiar with the internal format of OpenPGP data provides practical insight into the [RFC](https://datatracker.ietf.org/doc/draft-ietf-openpgp-crypto-refresh/), which describes the internal structure of OpenPGP {term}`packets` in full detail, and may also come in handy for debugging issues. +Getting familiar with the internal format of OpenPGP data provides practical insight into [RFC 9580](https://www.rfc-editor.org/rfc/rfc9580.html), which describes the internal structure of OpenPGP {term}`packets` in full detail, and may also come in handy for debugging issues. (Most of the time, however, we will look at OpenPGP artifacts at a higher level of abstraction.)