IETF Logo Mail Archive

Re: [CFRG] Classic McEliece

John Mattsson <john.mattsson@ericsson.com> Fri, 20 October 2023 15:14 UTC

Return-Path: <john.mattsson@ericsson.com>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 25B66C14CE45 for <cfrg@ietfa.amsl.com>; Fri, 20 Oct 2023 08:14:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.109
X-Spam-Level:
X-Spam-Status: No, score=-7.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CiGNP_JM5Jj4 for <cfrg@ietfa.amsl.com>; Fri, 20 Oct 2023 08:14:52 -0700 (PDT)
Received: from EUR03-AM7-obe.outbound.protection.outlook.com (mail-am7eur03on2066.outbound.protection.outlook.com [40.107.105.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8585BC169539 for <cfrg@ietf.org>; Fri, 20 Oct 2023 08:14:32 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Rjf8LaIoHqyBaxA3QI8uiLVjp6Wlf2OmpPH2XUusfu2p1tETNSCBn7cwEJZeE4R9v2MKkCAABBiTj0kjyCM9dyirLGWfF9gLFQX6mQjZ93GTuKzNA7UAGXmR7B4x8I1+ZVYzf2AAO3mgWAs4GuDy4fs5xpzanxRreL9q+0OJG84AypTOfpVUxwaVWkE9ybapAICrHJkQY5Yi3HNbzcIi3XCQdaMfaxn4Ve46KKNvOypBB8mcCjqUO+Tj/WP8xN6M+PUZsgWokYag6a+EjTvxv9zO6xD57cspbf+YlDoFfgSIbOeLNtqOUQ7al65cKjlJYMtZCw2j8BwhdqPwkUDWCQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=oJ/acOpU6Lw+d6Ofh5YhhoA0yBtwcoD5PqvqIa8oWnU=; b=f0kcFJcxTUmP8WZZTFWM1Rjdx/ywAFVt6pjE9coRISa6LcO6pCoAiue+SFU5rhji747uyvB8lkQYdD3zWWL1v8zdr4JQgMx+tvKDvIPhKeMFtg65TKIJg1/oenY0cg76cQ0fB2q1CxopT+IfwbPjQ4zzjSorDghfxCWYJfwURQjlgMRFiES+xUDwcXj/xH5pevyfUI6w3FYEz1Npj+/FCijSk4v5EatEAWw6LAyBRkqbUvEbScTuTZ6pGH8mHCYjVo/crNiEfu5uELje+1ICOCU9ld8mGXJXBkPuq0gOEYA0eHrJGhefbYXd3gBE8csvbHAz2Aw9SwKyqITroNPptQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oJ/acOpU6Lw+d6Ofh5YhhoA0yBtwcoD5PqvqIa8oWnU=; b=nN55vLtNVbrb9SHxq3DYTMWkwoLFl3lD4r2o4Cj2ndwZV4icVwnofM6pNDLm7n3pDRRqfZY6KMw2zB+xsr1KV9JNBlcgbwKXMPCLADzTRbqYtlneaXZV8p7d7uXvApiv5+M/iNbT4bfhDuWqp5vT4x3ZP4VcAsP6I2bZZp12pMU=
Received: from GVXPR07MB9678.eurprd07.prod.outlook.com (2603:10a6:150:114::10) by AS8PR07MB8053.eurprd07.prod.outlook.com (2603:10a6:20b:358::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6907.26; Fri, 20 Oct 2023 15:14:30 +0000
Received: from GVXPR07MB9678.eurprd07.prod.outlook.com ([fe80::73ca:2e10:8406:1059]) by GVXPR07MB9678.eurprd07.prod.outlook.com ([fe80::73ca:2e10:8406:1059%3]) with mapi id 15.20.6907.025; Fri, 20 Oct 2023 15:14:30 +0000
From: John Mattsson <john.mattsson@ericsson.com>
To: Loganaden Velvindron <loganaden@gmail.com>
CC: "cfrg@ietf.org" <cfrg@ietf.org>, "D. J. Bernstein" <djb@cr.yp.to>
Thread-Topic: [CFRG] Classic McEliece
Thread-Index: AQHaA2fcSr+1iVtpB0S1jglcM1gtyw==
Date: Fri, 20 Oct 2023 15:14:30 +0000
Message-ID: <GVXPR07MB967890FEB9A6A1C623F479B689DBA@GVXPR07MB9678.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: GVXPR07MB9678:EE_|AS8PR07MB8053:EE_
x-ms-office365-filtering-correlation-id: 19762135-cf2a-45f5-ca4b-08dbd17f41fa
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:GVXPR07MB9678.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(6029001)(366004)(346002)(376002)(39860400002)(136003)(396003)(230922051799003)(1800799009)(186009)(451199024)(64100799003)(55016003)(76116006)(6916009)(66556008)(66946007)(64756008)(54906003)(66476007)(316002)(122000001)(478600001)(966005)(66446008)(82960400001)(86362001)(2906002)(33656002)(4744005)(8936002)(5660300002)(8676002)(4326008)(52536014)(83380400001)(44832011)(41300700001)(38100700002)(7696005)(9686003)(166002)(71200400001)(26005)(6506007)(38070700009); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_GVXPR07MB967890FEB9A6A1C623F479B689DBAGVXPR07MB9678eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: GVXPR07MB9678.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 19762135-cf2a-45f5-ca4b-08dbd17f41fa
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Oct 2023 15:14:30.1014 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: z/SxAxPf2CpeLrV6Njd6a6QFwu7sMM3v/kGwwMwENMQGKdHjIPLBNBlG8eyZnZOwiLpMSLrAeWYSzmDtWz8CSowcRxOOrOLpQ1wT0qC3EQQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR07MB8053
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/ADMtHuMgG20XTFM989ECtCYB1YQ>
Subject: Re: [CFRG] Classic McEliece
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Oct 2023 15:14:56 -0000

Loganaden Velvindron wrote:

>>I got several off-line questions about European government recommendations. Reading up what have been published lately, it seems like European recommendations for Classic McEliece might actually have declined a bit over the last year ...
>Thanks John. Is there a paper that describes the security issue(s) ?

Not specified why, but the Netherlands has lowered their guidelines on Classic McEliece (and FrodoKEM) from recommended to acceptable. Seems more like they have evaluated and increased their trust in ML-KEM rather than any security issue(s) with Classic McEliece or FrodoKEM.

ANSSI has published a paper stating that Classic McEliece seem to have fault injection vulnerabilities not present in the original McEliece. ANSSI has never recommended Classic McEliece as far as I know. Also here not specified why, but one possible reason is of course the very large public keys.
https://arxiv.org/pdf/2305.02855.pdf

Cheers,
John

v2.46.0 | Report a Bug | By Email | System Status