Re: [Cfrg] I-D Action: draft-irtf-cfrg-xmss-hash-based-signatures-06.txt

Stephen Farrell <stephen.farrell@cs.tcd.ie> Mon, 25 July 2016 14:34 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52B9212D8CC for <cfrg@ietfa.amsl.com>; Mon, 25 Jul 2016 07:34:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.588
X-Spam-Level:
X-Spam-Status: No, score=-5.588 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.287, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zOEbGC4lP9A2 for <cfrg@ietfa.amsl.com>; Mon, 25 Jul 2016 07:34:28 -0700 (PDT)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 164E912D8CB for <cfrg@irtf.org>; Mon, 25 Jul 2016 07:34:28 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id D9D3DBE32; Mon, 25 Jul 2016 15:34:26 +0100 (IST)
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2ixZKMlPxogw; Mon, 25 Jul 2016 15:34:26 +0100 (IST)
Received: from [134.226.36.93] (bilbo.dsg.cs.tcd.ie [134.226.36.93]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 52391BE2D; Mon, 25 Jul 2016 15:34:26 +0100 (IST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1469457266; bh=PefxydNHJUHZc4heRTBgxo5QjLSSjZNDrlrFqkpaxR0=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=38f9r3Y8NBn/21zifqsOHLWAtCF9T0hyHvuKckxsFkUQqWN4cn/xTRgiKOnlW0yL7 Ct/737tUBlloGtVcdj2xyC7S7ppcEezJX3i7y86JyI/vkxxlmdJ92u8ln7aDz3MVGQ T2H5cb3UGgKUkmOqO2Q2YzkCZI/vVuv078gRvRPY=
To: Watson Ladd <watsonbladd@gmail.com>
References: <20160706144508.25995.18605.idtracker@ietfa.amsl.com> <577D1B6E.1020506@huelsing.net> <D3B93AC9.7187E%kenny.paterson@rhul.ac.uk> <994C5976EA09B556.08963792-86E6-4CE4-95FB-23F0F6046EC0@mail.outlook.com> <C6F5FDF9-6A09-4ECB-AAF5-985BF06F0F83@rhul.ac.uk> <69e0bf26-c079-75fb-0a5c-751bf3581016@cs.tcd.ie> <CACsn0cnU1UM1_4Y7at7ov0rr94-YWm0Boogs7R916P2Lk_BpPw@mail.gmail.com> <21d8f293-d302-6ead-66d9-cc05db238348@cs.tcd.ie> <454b1115-787b-f148-1448-58e7de1620c7@huelsing.net> <d8c335ef-f486-708f-5736-03a1a3a947f0@cs.tcd.ie> <CACsn0ck4GjifpM_u0tUTRjs_71dXde649aZhtd+9AWqJKwuodw@mail.gmail.com>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url=
Message-ID: <f720b8f4-045b-f0e4-812d-0d1631609ce7@cs.tcd.ie>
Date: Mon, 25 Jul 2016 15:34:25 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <CACsn0ck4GjifpM_u0tUTRjs_71dXde649aZhtd+9AWqJKwuodw@mail.gmail.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="------------ms020709010009010009030209"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/XaQoz5Nkigeq_iJ-C524p1iZX8U>
Resent-From: alias-bounces@ietf.org
Resent-To: <>
Cc: "cfrg@irtf.org" <cfrg@irtf.org>
Subject: Re: [Cfrg] I-D Action: draft-irtf-cfrg-xmss-hash-based-signatures-06.txt
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Jul 2016 14:34:29 -0000


On 25/07/16 14:52, Watson Ladd wrote:
> But your proposed language doesn't clearly differentiate between the
> security of the scheme and the deployability.

That's fair. I'd welcome better proposals but don't agree
with Kenny's IMO somewhat overly optimistic text. (Again
though, I personally do see value in this being done with
a generic bit of cautionary text, followed by some that is
specific to the content of the rest of the document, but
others may disagree with that approach.)

Cheers,
S.