IETF Logo Mail Archive

[CFRG] Re: Per-KEM security considerations: drafts received, and a two week comment period

Ilari Liusvaara <ilariliusvaara@welho.com> Sat, 11 July 2026 19:30 UTC

Return-Path: <ilariliusvaara@welho.com>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 6BEAA1152A707 for <cfrg@mail2.ietf.org>; Sat, 11 Jul 2026 12:30:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783798219; bh=zUs9O/Uo2L6njQ7cbNtrRSpS4R39tyab9VSc+y1BwzU=; h=Date:From:To:Subject:References:In-Reply-To; b=fuddKAn2TcE3iBFvrPHqjtKmlbUHq1X8pO+g1ZL8DE3m7KLVdNuTI81MfDpJYwrj2 gm1wHrEFG3Yy2DS6CQWPOj8oMLbzyWLpEhUBke1I3scgrjQS54EoXNe2m5qUW+Oshc ElkMKna3WdPysc4TWJ2DfCqWKmM+1BZ/2v91N2cc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=welho.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sSc9rZXuqBXB for <cfrg@mail2.ietf.org>; Sat, 11 Jul 2026 12:30:18 -0700 (PDT)
Received: from smtp.dnamail.fi (sender001.dnamail.fi [83.102.40.178]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 999931152A702 for <cfrg@irtf.org>; Sat, 11 Jul 2026 12:30:18 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by smtp.dnamail.fi (Postfix) with ESMTP id 7A3962113903 for <cfrg@irtf.org>; Sat, 11 Jul 2026 22:30:17 +0300 (EEST)
X-Virus-Scanned: X-Virus-Scanned: amavis at smtp.dnamail.fi
Received: from smtp.dnamail.fi ([83.102.40.178]) by localhost (dmail-psmtp01.s.dnaip.fi [127.0.0.1]) (amavis, port 10024) with ESMTP id lZKDW_IOHbJI for <cfrg@irtf.org>; Sat, 11 Jul 2026 22:30:15 +0300 (EEST)
Received: from LK-Perkele-VII2 (87-92-117-27.bb.dnainternet.fi [87.92.117.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: hliusvaa@dnamail.internal) by smtp.dnamail.fi (Postfix) with ESMTPSA id B9DB421148A4 for <cfrg@irtf.org>; Sat, 11 Jul 2026 22:30:15 +0300 (EEST)
DKIM-Filter: OpenDKIM Filter v2.11.0 smtp.dnamail.fi B9DB421148A4
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=welho.com; s=2025-03; t=1783798215; bh=JQmaDRJUwv7wAkr1tnQYhIvdIV2JVB9+k/RpuIYvdLY=; h=Date:From:To:Subject:References:In-Reply-To:From; b=BFgJTJbocN8dESXu19fmSradqlXpXZ7qN3giC8Z/vptcfAfoKqa+jVbpqFWwjp13C jHt1iLofdNhXhFiWVlkU4/xdO6kWqM9/qA/z/IBivHv7ycsM0rDCdQ+OEw8/HDlo9G 4LLc0JZquWSf2nI49fsoBmhKvKdCKAbNWCTC0jL+h8vrf9mZRkbsTRmMyfINRG3boK o+5+FLzco0kc649YFF93AbFflzABMH1AP+KY8kZ/hPeBlld5UlChT70It+xPOq5zVw rFzUkDsNF64IAz6A4D03qY6mDctp+yUfu9HOBLDWanp/q3cnOR8NSpoLjNa1SNQ3fr 01prAhOANDkLA==
Date: Sat, 11 Jul 2026 22:30:11 +0300
From: Ilari Liusvaara <ilariliusvaara@welho.com>
To: CFRG <cfrg@irtf.org>
Message-ID: <alKZw96NpqDCm9y5@LK-Perkele-VII2.locald>
References: <CAOjisRxuoBfE_qDr-4cOnNFu-GZ+8_0sLusE+aYTvX4HbFTFhg@mail.gmail.com> <CAOjisRzTcCxru1p6KiNfSVTj_G5=UteQHjYb+gW5-FaUsf7pyQ@mail.gmail.com> <CABcZeBNS1a04NXXe_OgtMaeMu4G-RtpOWarLvKt98vwixkeAng@mail.gmail.com> <AS4PR07MB8825BB7F34A2B09D54144C0F89FD2@AS4PR07MB8825.eurprd07.prod.outlook.com> <PH3PPFA3FE8A23F8A5E7B21C00FA3F1ABC2C1FD2@PH3PPFA3FE8A23F.namprd11.prod.outlook.com> <AS4PR07MB882565B213D9F31A3E6A033689FD2@AS4PR07MB8825.eurprd07.prod.outlook.com> <CABcZeBOm0P1j73Dx9HtAQOKHao_4h6io7m+M7phmKzBy1m7Y-g@mail.gmail.com> <87wlv2s7t5.fsf@josefsson.org> <CAL02cgR-mRoF6ie2dKpDDpa5RLNDthjHLLrhf4FfxH4u=0Y8tg@mail.gmail.com> <CABcZeBPdGNN7EnaenB4iTBb2HWgB-uG3BxQDKspxpGCXmXP_EQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
In-Reply-To: <CABcZeBPdGNN7EnaenB4iTBb2HWgB-uG3BxQDKspxpGCXmXP_EQ@mail.gmail.com>
Sender: ilariliusvaara@welho.com
Message-ID-Hash: YLRHPIM3COO4MLFLBGJKMKCBQMQMIT3A
X-Message-ID-Hash: YLRHPIM3COO4MLFLBGJKMKCBQMQMIT3A
X-MailFrom: ilariliusvaara@welho.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] Re: Per-KEM security considerations: drafts received, and a two week comment period
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/raQSBQOKy_Fyl4xzkpYX1LxSnG0>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

On Fri, Jul 10, 2026 at 05:44:07PM -0700, Eric Rescorla wrote:
> 
> Exactly. One could think of this as notionally providing an API with certain
> guarantees and one ought to be able to (1) analyze a protocol based solely
> on those guarantees without knowing the details of the KEM and (2) swap
> in any approved KEM as long as it provided those guarantees.

The difficult part of that is what those guarantees should be.

The requirements vary a lot from protocol to protocol. This ranges from
needing OW-CONF (met by any useful KEM), to needing very exotic
properties (that are very rarely met).




-Ilari

v2.46.0 | Report a Bug | By Email | System Status