Re: [Cfrg] BLS standard draft

My take on this would be that

1) Pairing-based crypto threw open the doors to lots of nice new crypto
possibilities, enabling stuff that we couldn't do before

2) Gradually post-quantum crypto is catching up and demonstrating
capabilities that mirror some (but not all) of these achievements

3) Post-quantum crypto depends on hard problems that it will take time to
develop full confidence in, even in regard to attacks from non-quantum
computers

4) In the meantime (and that could be quite a long time) it makes perfect
sense to proceed with the development and standardization of non-quantum
safe methods.

5) In the year x out pops a quantum computer. However in the year x-1 out
popped well-developed and well-understood post-quantum crypto replacements
in which we can have
complete confidence.

Everyone is a winner! Well except for the guys who invested in a business
plan to develop a quantum computer on the basis that it would break all of
crypto.

Mike Scott

On Sun, Feb 10, 2019 at 11:37 PM William Whyte <wwhyte@onboardsecurity.com>
wrote:

> Hi all,
>
> With no intent to cast aspersions on this particular scheme, I'm not sure
> that CFRG should be putting a lot of time into non-quantum-safe schemes
> these days unless there's a compelling reason to.
>
> Cheers,
>
> William
>
> On Sun, Feb 10, 2019 at 5:44 PM Sergey Gorbunov <sgorbunov@uwaterloo.ca>
> wrote:
>
>> Dear Colleagues:
>>
>> We submitted a draft-00 on the BLS signature scheme.
>> We received some preliminary feedback from interested parties, and we
>> plan to continue updating it as we receive more.
>> Please take a look.
>> We appreciate any additional feedback!
>> https://datatracker.ietf.org/doc/draft-boneh-bls-signature/
>>
>> Abstract
>>
>>    The BLS signature scheme was introduced by Boneh-Lynn-Shacham in
>>    2001.  The signature scheme relies on pairing-friendly curves and
>>    supports non-interactive aggregation properties.  That is, given a
>>    collection of signatures (sigma_1, ..., sigma_n), anyone can produce
>>    a short signature (sigma) that authenticates the entire collection.
>>    BLS signature scheme is simple, efficient and can be used in a
>>    variety of network protocols and systems to compress signatures or
>>    certificate chains.  This document specifies the BLS signature and
>>    the aggregation algorithms..
>>
>>
>> Regards,
>> Sergey
>> web <https://cs.uwaterloo.ca/~sgorbuno/>
>> _______________________________________________
>> Cfrg mailing list
>> Cfrg@irtf.org
>> https://www.irtf.org/mailman/listinfo/cfrg
>>
>
>
> --
>
> ---
>
> I may have sent this email out of office hours. I never expect a response
> outside yours.
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg
>