IETF Logo Mail Archive

[CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid-kems-12 and draft-irtf-cfrg-concrete-hybrid-kems-04

Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de> Sat, 11 July 2026 07:11 UTC

Return-Path: <muhammad_usama.sardar@tu-dresden.de>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 54504114F43C8 for <cfrg@mail2.ietf.org>; Sat, 11 Jul 2026 00:11:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783753891; bh=V7G61ZOg/nvpJ+dEPMeb6634l98XF69OLfVyhfBDqu0=; h=Date:Subject:To:CC:References:From:In-Reply-To; b=Hvbjz3PElTXTnu0vuhk2t9EJ1T9pYLQf0pHXG4whYpLoauIQtxgVg0+/OchiopB8k 4+gJxMzMtIyZI6Kk2t88ial/aqDQJaaYQ7QgLCsVRWN+jNzDj6ffgq9cQABGW9pYrq ww/DwobMovmIbzFSEjF+QgCMeE18FBP/acqltLg8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.398
X-Spam-Level:
X-Spam-Status: No, score=-4.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=tu-dresden.de
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lAHqcVNS1usl for <cfrg@mail2.ietf.org>; Sat, 11 Jul 2026 00:11:30 -0700 (PDT)
Received: from mailout3.zih.tu-dresden.de (mailout3.zih.tu-dresden.de [141.30.67.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 77D03114F43B2 for <cfrg@irtf.org>; Sat, 11 Jul 2026 00:11:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tu-dresden.de; s=dkim2022; h=Content-Type:In-Reply-To:From:References:CC:To :Subject:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=HruRrf0iGo/vHHaAFOq1AsPlFoa3jVczZE6Qpn7Hiuk=; b=HkDLeVbHGiJSmY4rw4+IzUC4Or 1Nf2UzGI8J+zjiTW7QvkuzGJ7CvIInyUN66PlAqCYVAxTkxKU0RUsa6OdyvJ20aVJR/WP8V07UAQX k/FKEhrrFz2l7ZDN9Yq/R1UrxuUhOrr1i3YFsEa6nFmnq4eWz1K1/w+TpCJ3E6SVtnffLw879Hg6c /SJrtJrDgZqZGnTUbAZUzfSfp4DjOvnSNPr587YVph/ws7ggsSGP45Irf5DUDvEB8XyVUEvgplxFg zGHuf+d3UwSewg0QRqSoOSkzSffmif4QB1Eddhy30UtK1Yy1s88d5Zic3JeF6SGYv3XQoizpuHxcV WYsbXf2Q==;
Received: from msx-t422.msx.ad.zih.tu-dresden.de ([172.26.35.139] helo=msx.tu-dresden.de) by mailout3.zih.tu-dresden.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <muhammad_usama.sardar@tu-dresden.de>) id 1wiRs1-0079Yu-23; Sat, 11 Jul 2026 09:11:29 +0200
Received: from [10.12.5.228] (141.76.13.149) by msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Sat, 11 Jul 2026 09:11:25 +0200
Message-ID: <9018bd85-4f99-4fcf-9458-85ad58a38ba6@tu-dresden.de>
Date: Sat, 11 Jul 2026 09:11:24 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Richard Barnes <rlb@ipv.sx>
References: <CAOjisRyRbkNif7mGD5TcoEcUsmbfeKE_wVHq+JH8VMySLcC47g@mail.gmail.com> <CAL02cgRk6JB-e6yTQnrEQGvEZ7uGpcd-0Eg=s__BCB+DNUdpew@mail.gmail.com>
Content-Language: en-US
From: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
In-Reply-To: <CAL02cgRk6JB-e6yTQnrEQGvEZ7uGpcd-0Eg=s__BCB+DNUdpew@mail.gmail.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-512"; boundary="------------ms010802090209070207080600"
X-ClientProxiedBy: MSX-L416.msx.ad.zih.tu-dresden.de (172.26.34.136) To msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139)
X-TUD-Virus-Scanned: mailout3.zih.tu-dresden.de
Message-ID-Hash: CIAAEJV2EH3XDLFZXTV2RTL2EL2F5IIQ
X-Message-ID-Hash: CIAAEJV2EH3XDLFZXTV2RTL2EL2F5IIQ
X-MailFrom: muhammad_usama.sardar@tu-dresden.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: CFRG <cfrg@irtf.org>, "cfrg-chairs@ietf.org" <cfrg-chairs@ietf.org>, Nick Sullivan <nicholas.sullivan@gmail.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] Re: RG Last Call on draft-irtf-cfrg-hybrid-kems-12 and draft-irtf-cfrg-concrete-hybrid-kems-04
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/XrQzlHKHqgW2zHkTebJQRthIlTk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

Hi Richard,

Without taking any position, a couple of notes and clarifying questions 
below:

On 11.07.26 04:53, Richard Barnes wrote:
> This message is a reply to D. J. Bernstein, but not directly on 
> account of not wanting to run afoul of his copyright lawyering
I don't think you need this line. One can see who you are replying to.
> Then how do you explain, e.g., CVE-2017-0379?
Without going into any detail, please note that you are pointing to a 
decade-old CVE. Could you please clarify your motivation for pointing to 
such an old CVE?
> No cryptographic algorithm can prevent all software bugs.

Could you please explain this one in more details at a level that a 
non-cryptographer like me can understand? Does it mean that 
cryptographers know ways to break /any/ cryptographic algorithm?

Best,

-Usama

v2.46.0 | Report a Bug | By Email | System Status