[CFRG] Re: Progressing NTRUPrime/Classic McEliece drafts

[Harry Halpin <[e-mail]>]

We are also working to deploy Classic McEliece in our VPN software:
https://nym.com.

The SimpleX chat protocol is using Classic McEliece:
https://simplex.chat

At least my company, Nym, would be disappointed if IETF protocols and
 algorithms were limited to NIST-approved post-quantum cryptography.

As an advisor of the Progressive International (
https://progressive.international) various governments outside of the USA
and Western Europe that we work with (mostly in Latin America, and I happen
am in Middle East rn) would also be disappointed. Although everyone in the
US (and many in Europe) have forgotten the Snowden revelations, including
the problematic relationship between NIST and NSA, various governments and
organizations in the Global South do tend to trust DJB-approved crypto more
than NIST-approved crypto.

Of course, we want to avoid too many algorithmic options, but that is not
the case with Classic McEliece. In general, support of NIST should not
preclude other deployed non-NIST approved algorithms if there is reasonable
evidence of deployment, although reasonable people may disagree on what is
reasonable.

  Yours,
     Harry

On Mon 27 Jan 2025 at 2:40 PM, D. J. Bernstein <[e-mail]> wrote:

> More data points regarding Classic McEliece deployment:
> https://mceliece.org
>
> Rationale for deployment: https://classic.mceliece.org/talks/20240917.pdf
>
> ---D. J. Bernstein
>
> _______________________________________________
> CFRG mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>