Re: [Cfrg] Backup ciphersuites in the event of an ECCpocalypse
"Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com> Tue, 16 June 2015 15:32 UTC
Return-Path: <sfluhrer@cisco.com>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A029E1B2DDD for <cfrg@ietfa.amsl.com>; Tue, 16 Jun 2015 08:32:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level:
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fKcUEUW075PJ for <cfrg@ietfa.amsl.com>; Tue, 16 Jun 2015 08:32:49 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B47A1B2DD9 for <cfrg@irtf.org>; Tue, 16 Jun 2015 08:32:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1544; q=dns/txt; s=iport; t=1434468769; x=1435678369; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=bQsVMVR+5y4m7vyCXdX5gaSZsfbBEMDYT0UC6e9qcRw=; b=Iwbol/W0Cnwiy8Jnb86ZIn5kXKuS42K9APLB77ygDPqzc3nB/jBTdBci 7+LDKaQ+v7j5hYaUU/KU7m3LPSSzJS3H7D+Arec69wzKOFvanpTnwAKyu GiwyPpbK3CBTXLXjhBwvM8lMNn/3FiqXnTfKtXOJwSPcaCooJObXM8Wsa 8=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AmBACbQIBV/4oNJK1bgxBUXwa+GgmBYYV4AoFAOBQBAQEBAQEBgQqEIgEBAQQ6SwQCAQgRBAEBCxQJBzIUCQgCBAESCIgnDc1BAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSLRIQaOzgGgxGBFgEEk18BhFGfCyaCCh2BUm+BRoEBAQEB
X-IronPort-AV: E=Sophos;i="5.13,626,1427760000"; d="scan'208";a="7726884"
Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-1.cisco.com with ESMTP; 16 Jun 2015 15:32:48 +0000
Received: from xhc-rcd-x10.cisco.com (xhc-rcd-x10.cisco.com [173.37.183.84]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t5GFWmYu005153 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 16 Jun 2015 15:32:48 GMT
Received: from xmb-rcd-x04.cisco.com ([169.254.8.217]) by xhc-rcd-x10.cisco.com ([173.37.183.84]) with mapi id 14.03.0195.001; Tue, 16 Jun 2015 10:32:47 -0500
From: "Scott Fluhrer (sfluhrer)" <sfluhrer@cisco.com>
To: Johannes Merkle <johannes.merkle@secunet.com>, "Salz, Rich" <rsalz@akamai.com>, Tony Arcieri <bascule@gmail.com>, "cfrg@irtf.org" <cfrg@irtf.org>
Thread-Topic: [Cfrg] Backup ciphersuites in the event of an ECCpocalypse
Thread-Index: AQHQnlUBWWE+B65QnUennxQeBvnR5J2b0zgAgBPSYAD//634YA==
Date: Tue, 16 Jun 2015 15:32:47 +0000
Message-ID: <A113ACFD9DF8B04F96395BDEACB340420D0C8B56@xmb-rcd-x04.cisco.com>
References: <CAHOTMVJwYL3Sd4WLpuZkx5=M9kPzYR=KgPj7hJ124ZF4kaKBWg@mail.gmail.com> <cf2e481f72ac45a2a49300fa09dce43d@ustx2ex-dag1mb2.msg.corp.akamai.com> <55803D78.3020706@secunet.com>
In-Reply-To: <55803D78.3020706@secunet.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.86.245.28]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/cfrg/mJF2J73FJSppUa5ScBfz60iiXDg>
Subject: Re: [Cfrg] Backup ciphersuites in the event of an ECCpocalypse
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Jun 2015 15:32:50 -0000
> -----Original Message----- > From: Cfrg [mailto:cfrg-bounces@irtf.org] On Behalf Of Johannes Merkle > Sent: Tuesday, June 16, 2015 11:15 AM > To: Salz, Rich; Tony Arcieri; cfrg@irtf.org > Subject: Re: [Cfrg] Backup ciphersuites in the event of an ECCpocalypse > > Salz, Rich schrieb am 04.06.2015 um 02:33: > >> Should there be backup algorithms in the event of some revolutionary > innovation that breaks all known curves or all curves presently in use? > > > > No. It is trying to solve a worry about the future with a hope. > > > > We have the scenario of someone building a quantum computer. In this > case, not only ECC is broken but RSA and FFDH, too. > Although I can't imagine that this will happen soon, it's better to be > prepared. > > > > How do you know a backup is any better? And, if it is, why is it a backup > and not the primary choice? > > > > There are many schemes believed to be resistant to quantum computers, > including hash-based signatures where the security can be based on any > secure hash function. > https://datatracker.ietf.org/doc/draft-huelsing-cfrg-hash-sig-xmss/ > https://datatracker.ietf.org/doc/draft-mcgrew-hash-sigs/ > > Of course, almost all Post-quantum schemes have very large keys making > them not the primary choice today. Minor correction: hash based signatures (such as the Huelsing and McGrew proposals above) have large signatures; the McGrew proposal has quite small public keys, and the Huelsing has reasonable sized ones.
- [Cfrg] Backup ciphersuites in the event of an ECC… Tony Arcieri
- Re: [Cfrg] Backup ciphersuites in the event of an… Salz, Rich
- Re: [Cfrg] Backup ciphersuites in the event of an… Adam Langley
- Re: [Cfrg] Backup ciphersuites in the event of an… Tony Arcieri
- Re: [Cfrg] Backup ciphersuites in the event of an… Tom Ritter
- Re: [Cfrg] Backup ciphersuites in the event of an… Phillip Hallam-Baker
- Re: [Cfrg] Backup ciphersuites in the event of an… Tony Arcieri
- Re: [Cfrg] Backup ciphersuites in the event of an… Yoav Nir
- Re: [Cfrg] Backup ciphersuites in the event of an… Johannes Merkle
- Re: [Cfrg] Backup ciphersuites in the event of an… Salz, Rich
- Re: [Cfrg] Backup ciphersuites in the event of an… Scott Fluhrer (sfluhrer)
- Re: [Cfrg] Backup ciphersuites in the event of an… Kurt Roeckx