IETF Logo Mail Archive

Re: [CFRG] stick to kems maybe (Re: [EXTERNAL] Re: (no subject))

Mike Ounsworth <Mike.Ounsworth@entrust.com> Wed, 21 February 2024 22:35 UTC

Return-Path: <Mike.Ounsworth@entrust.com>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D99F5C14F6A8 for <cfrg@ietfa.amsl.com>; Wed, 21 Feb 2024 14:35:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.106
X-Spam-Level:
X-Spam-Status: No, score=-2.106 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=entrust.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jbn3deWlLbWr for <cfrg@ietfa.amsl.com>; Wed, 21 Feb 2024 14:35:09 -0800 (PST)
Received: from mx08-0015a003.pphosted.com (mx08-0015a003.pphosted.com [185.183.30.227]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C3E7C14F61A for <cfrg@irtf.org>; Wed, 21 Feb 2024 14:35:09 -0800 (PST)
Received: from pps.filterd (m0242863.ppops.net [127.0.0.1]) by mx08-0015a003.pphosted.com (8.17.1.24/8.17.1.24) with ESMTP id 41LGqLuA022925; Wed, 21 Feb 2024 16:35:04 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=entrust.com; h= from:to:cc:subject:date:message-id:references:in-reply-to :content-type:mime-version; s=mail1; bh=nFC/vKuCgXwHnvXew9LY2wKu L9HvBO0hQ9dVMmSkyXI=; b=LnkaApx4Q5xx/OEfInfkZnbgFpnUj6Q0By1xJm6v keF2vvhVT5KbpEdDKTnbz8hLirsCw+TlRaz1WjMdQtzLozgh5COGHKiZ9wEbtp9Q d8ooy3/XeoYxaaOWm10O3gya68dQT7E3uZMgTypO89STtbdJvkpQA/N0uiYFq8aj W+whzFj/YahsTYRfI4emzzobhtis0mf2eKAd4KefarBpxqOhCoYWIMk851R23RKs Qp0jLtzHMLX1XNirn0KsNMKiStibe+H8b8SfJ3sYaQOMyEaE26N+HAdPx8MjkNuK QZGcniCu2MERrTRsawiLMCq7+Wxn37iTBob5MY0MXCrCiQ==
Received: from nam11-co1-obe.outbound.protection.outlook.com (mail-co1nam11lp2168.outbound.protection.outlook.com [104.47.56.168]) by mx08-0015a003.pphosted.com (PPS) with ESMTPS id 3wd22bw66t-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 21 Feb 2024 16:35:04 -0600 (CST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Pk/zDHCNYAc72yGEBpFfvhjuZWYG9aT0HVgRQAfk2VGZ9mpSsFSNVEG/oQwgWfGYa+Y0cu+wql9kS87hSurV/OqcAKV1aTR5FX4j4oDYAgJOUna8Pdrg8kQesCUtHgaVw6iTubxndB/Sy1yQBq5cO+rfY41PNdVDSzpqo6IAO7gdtDN60CObhNIUNTKjrbgB24z6m5YFzO3RSGGWXfopGZqHa3a1xVBeMhwIk/D1+JdnrWjEIvGSdLrTgPTZQ1Oj4W0SAqlWK06jDfXhowHjlpuTp72esglt0Dphi37BYtBHjyRGgVPKo1dEd+IJZkmjqSpQH2eDHmZbggf8t7SoyQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=nFC/vKuCgXwHnvXew9LY2wKuL9HvBO0hQ9dVMmSkyXI=; b=kqaeK4tCPoAYpEjvzP0Qm8S4x41CP663ppFql0uJs+L6YDXhylmJXttOq0pxKS/U9lA0jcIppjnnWM7Wyfqc8YpYhRP1zms5YFFAU7y+n9m1Y/bknWenV2U1orOeZZ8JgMBX1ybyrA15Aqkd1EptEnV7qV00LL8DlNEJ/rKKg87zOKqsRBp6xSyHbIOqR1nySW7GQFwIXgrPK21FeDRCSLSx2hw2tbKnkoCVnhaDMr8jfwQfYBH3YkB6uO4Dbm8wMkNT0I+2rNTwhvAD8ppM8HtBwmmc2QfbZNIIsmwBc6N827nRWhl7twUODfRXGUJGjV08faIBmR0j6yaEJUGRJw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=entrust.com; dmarc=pass action=none header.from=entrust.com; dkim=pass header.d=entrust.com; arc=none
Received: from CH0PR11MB5739.namprd11.prod.outlook.com (2603:10b6:610:100::20) by CH3PR11MB8314.namprd11.prod.outlook.com (2603:10b6:610:170::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.21; Wed, 21 Feb 2024 22:34:58 +0000
Received: from CH0PR11MB5739.namprd11.prod.outlook.com ([fe80::e3f0:78e1:48fc:8a03]) by CH0PR11MB5739.namprd11.prod.outlook.com ([fe80::e3f0:78e1:48fc:8a03%3]) with mapi id 15.20.7339.007; Wed, 21 Feb 2024 22:34:58 +0000
From: Mike Ounsworth <Mike.Ounsworth@entrust.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Watson Ladd <watsonbladd@gmail.com>
CC: CFRG <cfrg@irtf.org>
Thread-Topic: stick to kems maybe (Re: [CFRG] [EXTERNAL] Re: (no subject))
Thread-Index: AQHaZRQiYwDtg2jpLUOOvcs8FkH98LEVYeHK
Date: Wed, 21 Feb 2024 22:34:58 +0000
Message-ID: <CH0PR11MB57397D9CCC6B2D32FCD499DB9F572@CH0PR11MB5739.namprd11.prod.outlook.com>
References: <20240221165144.860827.qmail@cr.yp.to> <25cecba9-7c35-41c7-962a-c204a76e538c@app.fastmail.com> <CALCETrXru4ehNw=SDQantWK7zWTC0255cehuYYZqLD6Hw3Wkqw@mail.gmail.com> <CH0PR11MB5739C76681009F9EDA6B45259F572@CH0PR11MB5739.namprd11.prod.outlook.com> <CACsn0ckCJykHy3+WKMWahda_TPAyrgPh8-93i65d2RRmEB34gw@mail.gmail.com> <CH0PR11MB573954D6F10C8B89BE8BDB539F572@CH0PR11MB5739.namprd11.prod.outlook.com> <CACsn0c=L920fUM=4fnCSW4kdAoY3LkHpvmd-kmnuMYdcr6URkw@mail.gmail.com> <CH0PR11MB5739912410D1855B31CD41A59F572@CH0PR11MB5739.namprd11.prod.outlook.com> <CACsn0c=qjwytim2ENGRSFQq4jW2F=U5DuUa_P5cm6jdMT-QqFA@mail.gmail.com> <CH0PR11MB57397CD6FDC88D691CDF4FB99F572@CH0PR11MB5739.namprd11.prod.outlook.com> <CH0PR11MB5739561D8338E44CE35958E69F572@CH0PR11MB5739.namprd11.prod.outlook.com> <6eae0d0f-27b4-4cdd-9f44-3ad1b6232ffd@cs.tcd.ie>
In-Reply-To: <6eae0d0f-27b4-4cdd-9f44-3ad1b6232ffd@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CH0PR11MB5739:EE_|CH3PR11MB8314:EE_
x-ms-office365-filtering-correlation-id: 673a08be-00ab-499e-2380-08dc332d55a5
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:CH0PR11MB5739.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(230273577357003)(38070700009); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CH0PR11MB57397D9CCC6B2D32FCD499DB9F572CH0PR11MB5739namp_"
MIME-Version: 1.0
X-OriginatorOrg: entrust.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CH0PR11MB5739.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 673a08be-00ab-499e-2380-08dc332d55a5
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Feb 2024 22:34:58.2616 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f46cf439-27ef-4acf-a800-15072bb7ddc1
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: VyHTTPtbC/PGbL2aV1sYCQu1MRoraG3nrl1yTB3xYzJI6xgQBorC5rHP3Y0LpExyVmoyui+VDU738hVwNGOJc5remPI7w2jOH0odsK03peQ=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR11MB8314
X-Proofpoint-ORIG-GUID: BhcW25bThKztV_pwDiXEsWX6NbtiVMGP
X-Proofpoint-GUID: BhcW25bThKztV_pwDiXEsWX6NbtiVMGP
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-02-21_09,2024-02-21_02,2023-05-22_02
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 phishscore=0 adultscore=0 mlxlogscore=836 clxscore=1015 lowpriorityscore=0 mlxscore=0 malwarescore=0 priorityscore=1501 suspectscore=0 impostorscore=0 bulkscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2402120000 definitions=main-2402210178
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/hKHJfOiKt-z5CVnaoL1Fe-wE64s>
Subject: Re: [CFRG] stick to kems maybe (Re: [EXTERNAL] Re: (no subject))
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://mailman.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://mailman.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Feb 2024 22:35:13 -0000

Right Stephen. My point is that regardless of how you architect the PKI migration, you still end up needing to know how to do a RSA + ML-KEM encryption. So you don't get to dodge the main topic of this thread.

- Mike Ounsworth

________________________________
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Sent: Wednesday, February 21, 2024 4:20:11 PM
To: Mike Ounsworth <Mike.Ounsworth@entrust.com>; Watson Ladd <watsonbladd@gmail.com>
Cc: CFRG <cfrg@irtf.org>
Subject: stick to kems maybe (Re: [CFRG] [EXTERNAL] Re: (no subject))



On 21/02/2024 21:57, Mike Ounsworth wrote:
> By the way, which of those parallel PKI models is right for you...

FWIW, I've not been convinced all those PKI combinations
are actually needed, but regardless, given this debate is
about KEMs, I don't think it's helpful to add PKI issues
(or other extraneous matters) to the mix.

Cheers,
S.


Any email and files/attachments transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.

v2.46.0 | Report a Bug | By Email | System Status