Re: [Cfrg] Poll: hash functions for Ed448 (ends on December 22nd)

Aaron Zauner <azet@azet.org> Tue, 08 December 2015 21:21 UTC

Return-Path: <azet@azet.org>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED2A91A8792 for <cfrg@ietfa.amsl.com>; Tue, 8 Dec 2015 13:21:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0YpmusuqvRVu for <cfrg@ietfa.amsl.com>; Tue, 8 Dec 2015 13:21:32 -0800 (PST)
Received: from mail-lf0-x22c.google.com (mail-lf0-x22c.google.com [IPv6:2a00:1450:4010:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64A4F1A86E0 for <cfrg@irtf.org>; Tue, 8 Dec 2015 13:21:30 -0800 (PST)
Received: by lfaz4 with SMTP id z4so21301530lfa.0 for <cfrg@irtf.org>; Tue, 08 Dec 2015 13:21:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=azet.org; s=gmail; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=TV1RmJOReCxd7hXPc5aFCAI3wOh+Zn7KGjBkzs5/Tas=; b=cWuVO9zTMmHSLnorgezQdfJLaA0RD8X7H9vH2D+h095l2ICNJ976J8dctoXoPZK0fC 3Lgs+7gzWLBbVKMPY8RXSjoj/bxgc/1T0fr3iSWdl6o+e2p6u0B3L24kNdU9/j03lby/ A34Lelb0fXLcKzJM/qUKg6cbxTrGjKvt0Ubtw=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-type; bh=TV1RmJOReCxd7hXPc5aFCAI3wOh+Zn7KGjBkzs5/Tas=; b=bwLpA/4iWXtH3m7YS+PUAVS+dyK/71prRqX87Eu2psHn6KaoP+WAXamm9YCKqvgEA+ sdgOFzKNYG9xcyW/z4WA6QfGzZ/ZsaWRXlpRY6CxEOtpziccpDADawf2Iu13IrrmGBK2 6xeKTKhCQYBhIrbQHa/rsjAoa0U/dl+DwER0wrsmVkV+pSCs75HW9hIMgI8W8AItWx03 NAXsYWVj451ZsaZpjPWW5p0oVU1K2hfbV7NOYr9eX/2PqhvcCm2J3nj0rdnP1UM9V9GO CmaYpfq54qnbF+JQmXfsTZ4AfZwOpMryu09gau9xJZy5OxiCUQP6XfpqE9aBIxeKo+WB RRzA==
X-Gm-Message-State: ALoCoQkifBsKu+DbRLW6gajeDTpl2rKKvoTBqgX1ZtcNk3U/oqwBjCVinjIgFDNbJ1E8NsJ6SkgVNmq+WFX4vT18m1J2CjUZZg==
X-Received: by 10.25.156.73 with SMTP id f70mr719882lfe.70.1449609688469; Tue, 08 Dec 2015 13:21:28 -0800 (PST)
Received: from [192.168.1.103] ([41.232.113.177]) by smtp.gmail.com with ESMTPSA id s63sm869400lfd.31.2015.12.08.13.21.25 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 08 Dec 2015 13:21:26 -0800 (PST)
Message-ID: <566749CD.5070506@azet.org>
Date: Tue, 08 Dec 2015 22:21:17 +0100
From: Aaron Zauner <azet@azet.org>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: Tony Arcieri <bascule@gmail.com>
References: <5666F7A9.7020608@isode.com> <CAHOTMVJgO7MhXF+MpnTYGThUJG3YXtD8jQifC=UcDyq3AMPj+w@mail.gmail.com>
In-Reply-To: <CAHOTMVJgO7MhXF+MpnTYGThUJG3YXtD8jQifC=UcDyq3AMPj+w@mail.gmail.com>
X-Enigmail-Version: 1.2.3
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="------------enigA0B502056713A03B90A38EC2"
Archived-At: <http://mailarchive.ietf.org/arch/msg/cfrg/gx9Q8JJkzQS_lKZKRH5HzeX4Rbg>
Cc: "cfrg@irtf.org" <cfrg@irtf.org>
Subject: Re: [Cfrg] Poll: hash functions for Ed448 (ends on December 22nd)
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Dec 2015 21:21:34 -0000

Hey,

Tony Arcieri wrote:
> 0: ilari2: HKDF is a nice standard construction but I don't see the
> advantage over simon2

The point made in this proposal is somewhat valid as HKDF is the
"standard" KDF in IETF and it's going to be used (in some form) in TLS
1.3 [OPTLS]. That being said; I can't see why we should not take the
simon2 proposal.

Aaron

[OPTLS] - https://eprint.iacr.org/2015/978.pdf