[CFRG] Re: We would like to have your feedback!

[Bas Westerbaan <[e-mail]>]

Thanks for the heads up, Quynh. We sent the following comments.

Cloudflare appreciates the opportunity to comment on NIST’s proposal to
update SP 800-185.

NIST is considering whether to specify and approve one or more SHA-3
derived functions for AEAD. Currently approved encryption methods such as
AES-GCM are challenging and error-prone to deploy, primarily because of
strict limits of encryption when using random nonces. An approved AEAD that
can be used safely with random nonces would be of great benefit to us.


We do not have a preference whether this AEAD should be based on SHA-3 or
AES. If it would be based on SHA3, we suggest NIST uses the 12-round
permutation, put forward by the Keccak team in 2016 and reconfirmed [1] in
2022.


We agree with NIST’s proposal to add a streaming XOF specification. This
matches many modern use cases of XOFs.

[1]
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/t95kZqnbS4Q/m/E8VGP0juAwAJ


On Sat, Sep 7, 2024 at 12:02 PM Dang, Quynh H. (Fed) <quynh.dang=
[e-mail]> wrote:

> Hi SAAG and CFRG,
>
>
>
> NIST is considering whether to specify and approve one or more SHA-3
> derived functions for authenticated encryption with associated data in a
> new, separate Special Publication. The announcement is here :
> https://csrc.nist.gov/News/2024/proposal-to-update-fips-202-and-revise-sp-800-185
> .
>
>
>
> We would like to have your comments/suggestions by October 7, 2024.  They
> should be sent to [e-mail] with "Comments on FIPS
> 202 Decision Proposal" or “Comments on SP 800-185 Decision Proposal” in the
> subject line.
>
>
>
> More information is available on the website above.
>
>
>
> Regards,
>
> Quynh.
> _______________________________________________
> CFRG mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>