Re: [Cfrg] BLS standard draft

As we have no 100% certainty on if quantum computers that can break crypto will ever be a thing, why should that stop the standardizarion of any algorithms?

Great work Sergey,
David

> On Feb 11, 2019, at 6:52 AM, Michael Scott <mike.scott@miracl.com> wrote:
> 
> My take on this would be that
> 
> 1) Pairing-based crypto threw open the doors to lots of nice new crypto possibilities, enabling stuff that we couldn't do before
> 
> 2) Gradually post-quantum crypto is catching up and demonstrating capabilities that mirror some (but not all) of these achievements
> 
> 3) Post-quantum crypto depends on hard problems that it will take time to develop full confidence in, even in regard to attacks from non-quantum computers
> 
> 4) In the meantime (and that could be quite a long time) it makes perfect sense to proceed with the development and standardization of non-quantum safe methods.
> 
> 5) In the year x out pops a quantum computer. However in the year x-1 out popped well-developed and well-understood post-quantum crypto replacements in which we can have 
> complete confidence. 
> 
> 
> Everyone is a winner! Well except for the guys who invested in a business plan to develop a quantum computer on the basis that it would break all of crypto.
> 
> 
> Mike Scott
> 
>> On Sun, Feb 10, 2019 at 11:37 PM William Whyte <wwhyte@onboardsecurity.com> wrote:
>> Hi all,
>> 
>> With no intent to cast aspersions on this particular scheme, I'm not sure that CFRG should be putting a lot of time into non-quantum-safe schemes these days unless there's a compelling reason to.
>> 
>> Cheers,
>> 
>> William
>> 
>>> On Sun, Feb 10, 2019 at 5:44 PM Sergey Gorbunov <sgorbunov@uwaterloo.ca> wrote:
>>> Dear Colleagues: 
>>> 
>>> We submitted a draft-00 on the BLS signature scheme. 
>>> We received some preliminary feedback from interested parties, and we plan to continue updating it as we receive more. 
>>> Please take a look. 
>>> We appreciate any additional feedback! 
>>> https://datatracker.ietf.org/doc/draft-boneh-bls-signature/
>>> 
>>> Abstract
>>> 
>>>    The BLS signature scheme was introduced by Boneh-Lynn-Shacham in
>>>    2001.  The signature scheme relies on pairing-friendly curves and
>>>    supports non-interactive aggregation properties.  That is, given a
>>>    collection of signatures (sigma_1, ..., sigma_n), anyone can produce
>>>    a short signature (sigma) that authenticates the entire collection.
>>>    BLS signature scheme is simple, efficient and can be used in a
>>>    variety of network protocols and systems to compress signatures or
>>>    certificate chains.  This document specifies the BLS signature and
>>>    the aggregation algorithms..
>>> 
>>> 
>>> Regards,
>>> Sergey 
>>> web
>>> _______________________________________________
>>> Cfrg mailing list
>>> Cfrg@irtf.org
>>> https://www.irtf.org/mailman/listinfo/cfrg
>> 
>> 
>> -- 
>> 
>> ---
>> 
>> I may have sent this email out of office hours. I never expect a response outside yours.
>> _______________________________________________
>> Cfrg mailing list
>> Cfrg@irtf.org
>> https://www.irtf.org/mailman/listinfo/cfrg
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg