IETF Logo Mail Archive

[CFRG] Update of Classic McEliece and Chempat drafts

Simon Josefsson <simon@josefsson.org> Sun, 14 April 2024 11:00 UTC

Return-Path: <simon@josefsson.org>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16D13C14F610 for <cfrg@ietfa.amsl.com>; Sun, 14 Apr 2024 04:00:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.098
X-Spam-Level:
X-Spam-Status: No, score=-7.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=josefsson.org header.b="eBNQGQHH"; dkim=pass (2736-bit key) header.d=josefsson.org header.b="HLb8zhXo"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tjo4I8miLFI6 for <cfrg@ietfa.amsl.com>; Sun, 14 Apr 2024 04:00:07 -0700 (PDT)
Received: from uggla.sjd.se (uggla.sjd.se [IPv6:2001:9b1:8633::107]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1DC2C14E515 for <cfrg@irtf.org>; Sun, 14 Apr 2024 04:00:06 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=Content-Type:MIME-Version:Message-ID:Date: Subject:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description; bh=g6ccihU1D0+tCtNmRXN1FSmmmz01GOA34FhNuj3S0FA=; t=1713092404; x=1714302004; b=eBNQGQHH7yRhPZy+HLm0ocfs+CLVQ/iquER4rim7WQRiI1W UJ9kpk3zO0PxtxLdeVzszm6oD14CApWGfOLHmDA==;
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=Content-Type:MIME-Version:Message-ID:Date: Subject:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description; bh=g6ccihU1D0+tCtNmRXN1FSmmmz01GOA34FhNuj3S0FA=; t=1713092404; x=1714302004; b=HLb8zhXoHSlM8KywfgFzh/Z1oYkcvGH/iD1M/c/EWkMwJDU Fvp4I38TEYW3E36EvYie5OZ2ev7/yC2X8OplfL9Jmng/8neDmQH3M/Q30MTFeQRpQdHQzDIE3KZC9 WIWI3ahQpf2NrlzNjQkn0+UT6n7/DnRtMwuJ0TAgHli2cGFs1PHO4+CjTvhR3T84XsadUuNh2T8xw zjUMg7jgCAKVWzloKTqd2Sute+BsvMRVkEZ5mWUU/IKoWyniZplociJ4l3mgwOb4zotl5KY5/jo+F xpcisEHRjz7nEsRWomDbeTZBm36G9FiLcymL4Qhaz7QSGwYCThPpbiCam0FL6ydzBk/IaJOn0GRth mZy7Z18nZ4Ls29rFvkWdz3AEJM0vAojmaVA4FmpknVJZsHcsEmN99IQlAuWEmC86IQtXXP3DvPTY4 cv2xeN/KlE1rZn1GaDte6P6t;
Received: from [2001:9b1:41ac:ff00:823f:5dff:fe09:16ac] (port=50052 helo=kaka) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from <simon@josefsson.org>) id 1rvxab-004uKN-CB for cfrg@irtf.org; Sun, 14 Apr 2024 11:00:01 +0000
X-Hashcash: 1:23:240414:cfrg@irtf.org::7p125FFqOucFQR6Z:0G++i
From: Simon Josefsson <simon@josefsson.org>
To: cfrg@irtf.org
OpenPGP: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt
Date: Sun, 14 Apr 2024 12:59:15 +0200
Message-ID: <87jzl0us58.fsf@kaka.sjd.se>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/wfXX0xvooCdQb3THtRLxBdwCB68>
Subject: [CFRG] Update of Classic McEliece and Chempat drafts
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://mailman.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://mailman.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 Apr 2024 11:00:14 -0000

All,

I've updated the Classic McEliece draft to fix some feedback given on
the list earlier, and to refresh the draft before it expired.

https://datatracker.ietf.org/doc/html/draft-josefsson-mceliece-01

I have considered a pure-PQ HPKE KEM based on Classic McEliece and
publish a specification for that.  There has been a flow of recent
interesting papers [1] [2] on what properties we want from KEM's.  I
feel that the cost to add a X25519/X448 operation is low compared to the
McEliece part, so I have updated the Chempat KEM draft to provide
instantiations for all combinations of X25519/X448 and Classic McEliece.

https://datatracker.ietf.org/doc/html/draft-josefsson-chempat-01

I recommend everyone that is deploying Classic McEliece to consider
doing so in a hybrid mode with X25519/X448.  Since people seem to chose
different Classic McEliece parameters, I wanted to provide a Chempat
option to combine any choice with trusted X25519/X448 implementations.

What do you think?

/Simon

[1] https://eprint.iacr.org/2023/1933
[2] https://eprint.iacr.org/2024/523

v2.23.0 | Report a Bug | By Email