[Cfrg] post-quantum cryptography

[David McGrew <[e-mail]>]

Hi Quynh,

On 01/08/2014 01:39 PM, Dang, Quynh wrote:
> NIST is interested in post-quantum cryptography research and standardization efforts. NIST would consider to help the IETF in these areas depending on specific topics.

That would be great.  Many IETF participants closely track NIST 
standards and guidelines, and input or coordination from NIST would be 
very positive in establishing the viability and role for post-quantum 
standards.    My guess is that there is substantial interest in the 
post-quantum work, but it will also take a good bit of effort, so let's 
let other people chime in on what work they would prioritize.

As far as post-quantum work goes, I think hash-based signatures will be 
easiest to realize, because they are fairly well understood, and it 
should not be too hard to get a signature system about which people have 
good confidence.   So it would make sense to do signatures first.   My 
$0.02 anyway.

David

> Quynh.
> _______________________________________________
> Cfrg mailing list
> [e-mail]
> http://www.irtf.org/mailman/listinfo/cfrg
>