Re: [Cfrg] Adoption call for draft-barnes-cfrg-hpke

Oops, meant to reply all.

On Sat, Apr 27, 2019 at 5:11 PM Richard Barnes <rlb@ipv.sx> wrote:

> Thanks, John.  I certainly agree that if we do something here and it's not
> usable by at least ESNI and MLS, then we will have failed.
>
> Also agree about "hybrid".  For better or worse, some terms get
> overloaded, but they're still the right terms.
>
> --Richard
>
> On Sat, Apr 27, 2019 at 3:53 AM John Mattsson <john.mattsson@ericsson.com>
> wrote:
>
>> I support adoption. I think
>> https://tools.ietf.org/id/draft-barnes-cfrg-hpke should be modified (if
>> needed) so both ESNI and MLS want to use it.
>>
>>
>>
>> (See my five cents on the word hybrid below).
>>
>>
>>
>> John
>>
>>
>>
>> *From: *Cfrg <cfrg-bounces@irtf.org> on behalf of denis bider <
>> denisbider.ietf@gmail.com>
>> *Date: *Saturday, 27 April 2019 at 05:00
>> *To: *Dan Brown <danibrown@blackberry.com>
>> *Cc: *"cfrg@irtf.org" <cfrg@irtf.org>
>> *Subject: *Re: [Cfrg] Adoption call for draft-barnes-cfrg-hpke
>>
>>
>>
>> Minor comments:
>>
>> The word "hybrid" now has 3 distinct meanings in crypto, two of them
>> nearly
>> opposite.  The older meaning refers a system, with security relying on
>> both
>> components of the hybrid, i.e. weakest link.   This is what HPKE means:
>> both
>> ECDH and AES-GCM must be secure, for example.   A newer, nearly opposite,
>> meaning is defense-in-depth, redundancy, strongest-link, etc., for example
>> ECC+PQC.   (A third meaning refers to a type of security proof.)  Based on
>> its title, this document could be expected to be a how-to on combining
>> ECC+PQC+RSA+...  (Arguably, the older meaning of "hybrid" should have
>> precedence, and the newer meaning is infringing, etc.)  I recommend
>> changing
>> "hybrid" to something else, but suffer from writer's block for an
>> alternative (sorry).
>>
>>
>>
>> Hybrid has also been used in crypto to describe various “hybrid attacks”.
>> Given this I would say that hybrid in crypto is kind of used just as
>> defined in dictionaries “Hybrid = composed of different elements”.
>>
>>
>>
>> I think one important aspect is that people wanting to use this
>> construction should find the draft/RFC. Given that Wikipedia use the term
>> “hybrid cryptosystem” for KEM-DEM compositions, I think it might be best to
>> keep hybrid.
>>
>>
>>
>> https://en.wikipedia.org/wiki/Hybrid_cryptosystem
>>
>>
>> _______________________________________________
>> Cfrg mailing list
>> Cfrg@irtf.org
>> https://www.irtf.org/mailman/listinfo/cfrg
>>
>