[CFRG] Re: We would like to have your feedback!

[Tushar Patel <[e-mail]>]

I would recommend holding this off until both 3rd Conf on Block Ciphers and
Accordion contests start and finalize, there are many good solutions that
can address these issues and in correctness one shoe fits all cannot apply
to so many cryptography applications. Just on one note, there are hardware
acceleration requirements and other items to plan in and SHA-3 does have
some partial information that needs clarification in the context of
cipher-modes, e.g., how would a hash improve anything over the AES-GCM
random IV, it still will be 96-bits to 128-bits and the hash will not
improve it, on the other hand a cipher-mode change for AEAD with a new
definition for the MAC key and an increase in the MAC tag size can be very
helpful.

Also, the problem of random IVs have been solved by many including my
incubation atnacipher.com.

Thx.,
Tushar



On Fri, Sep 27, 2024 at 12:31 PM Bas Westerbaan <bas=
[e-mail]> wrote:

> Thanks for the heads up, Quynh. We sent the following comments.
>
> Cloudflare appreciates the opportunity to comment on NIST’s proposal to
> update SP 800-185.
>
> NIST is considering whether to specify and approve one or more SHA-3
> derived functions for AEAD. Currently approved encryption methods such as
> AES-GCM are challenging and error-prone to deploy, primarily because of
> strict limits of encryption when using random nonces. An approved AEAD that
> can be used safely with random nonces would be of great benefit to us.
>
>
> We do not have a preference whether this AEAD should be based on SHA-3 or
> AES. If it would be based on SHA3, we suggest NIST uses the 12-round
> permutation, put forward by the Keccak team in 2016 and reconfirmed [1] in
> 2022.
>
>
> We agree with NIST’s proposal to add a streaming XOF specification. This
> matches many modern use cases of XOFs.
>
> [1]
> https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/t95kZqnbS4Q/m/E8VGP0juAwAJ
>
>
> On Sat, Sep 7, 2024 at 12:02 PM Dang, Quynh H. (Fed) <quynh.dang=
> [e-mail]> wrote:
>
>> Hi SAAG and CFRG,
>>
>>
>>
>> NIST is considering whether to specify and approve one or more SHA-3
>> derived functions for authenticated encryption with associated data in a
>> new, separate Special Publication. The announcement is here :
>> https://csrc.nist.gov/News/2024/proposal-to-update-fips-202-and-revise-sp-800-185
>> .
>>
>>
>>
>> We would like to have your comments/suggestions by October 7, 2024.  They
>> should be sent to [e-mail] with "Comments on FIPS
>> 202 Decision Proposal" or “Comments on SP 800-185 Decision Proposal” in the
>> subject line.
>>
>>
>>
>> More information is available on the website above.
>>
>>
>>
>> Regards,
>>
>> Quynh.
>> _______________________________________________
>> CFRG mailing list -- [e-mail]
>> To unsubscribe send an email to [e-mail]
>>
> _______________________________________________
> CFRG mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>