Re: [Cfrg] RFC 5742 conflict review for draft-dolmatov-kuznyechik

["Blumenthal, Uri - 0553 - MITLL" <[e-mail]>]

>>Likewise, I’d expect an informational RFC describing Kalyna (Ukrainian
>> contest winner), which looks somewhat more appealing.
>
>I see a problem with publishing descriptions of national ciphers without
>guidance on suitable use and relevant applicability statements.

The only guidance I see is: if you need "it" or are required to use "it" -
do so, but be aware that people outside of your policy domain may not
interoperate with you using “it” because they may not have “it”
implemented. Implementing “it” is not required to be <whatever
protocol>-compliant.

Do you envision some other kind of guidance?

P.S. I wouldn’t expect US government to use anything but AES, and I
wouldn’t expect Ukrainian government to use anything but Kalyna. As for US
businesses communicating to Ukrainian businesses - off-hand it’s a toss
security-wise, either one would do.

P.P.S. Quality-wise - on the first look Kalyna looks better than AES,
while Kuznechik doesn’t.