Re: [Crypto-panel] Review request: draft-josefsson-ntruprime-ssh

[Ludovic Perret <[e-mail]>]

Dear all,

Independently of the technical quality, I have a strong  “philosophical" 
concern about this draft. NIST has now selected a first post-quantum 
standard for KEM, and four more KEM are currently in a fourth round for 
a possible standardization in a few years.
NTRU Prime is NOT one of these algorithms. Thus, I don’t see any 
fundamental reason to deploy a non-NIST standard in a widely used 
protocol  such as SSH. Quite the opposite. This could be 
counter-productive for the fast deployment of post-quantum cryptography,
will induce compatibility problems, will probably be seen  by the 
community as a de-facto adoption by IETF of  NTRU prime, etc ..

What do you think ?

Best Regards,

Ludovic,

------ Message d'origine ------
De "Stanislav V. Smyshlyaev" <[e-mail]>
À "Roman Danyliw" <[e-mail]>; "[e-mail]" 
<[e-mail]>
Cc [e-mail]; "Ludovic Perret" <[e-mail]>; 
"Ludovic Perret" <[e-mail]>
Date 23/10/2023 13:12:10
Objet Re: [Crypto-panel] Review request: draft-josefsson-ntruprime-ssh

>Dear Crypto Panel Experts,
>
>We would like to support Roman's request for a Crypto Panel review.
>
>The name of the draft is "Secure Shell (SSH) Key Exchange Method Using 
>Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: 
>sntrup761x25519-sha512", 
>https://datatracker.ietf.org/doc/html/draft-josefsson-ntruprime-ssh 
>(see also 
>https://mailarchive.ietf.org/arch/msg/secdispatch/uM9_Vy97C53MWoLSFNuRKUC6iuA/)
>
>The review on behalf of Crypto Panel should mainly focus on csntrup761 
>itself as a cryptographic mechanism which is new to the IETF.
>
>https://datatracker.ietf.org/doc/html/draft-josefsson-ntruprime-ssh
>
>Any volunteers?
>
>Ludovic, Jean-Philippe, Chloe, Scott?
>
>
>Regards,
>Stanislav (for CFRG Chairs)
>
>On Sat, Sep 9, 2023 at 12:24 AM Roman Danyliw <[e-mail]> wrote:
>>Hi Crypto Panel!
>>
>>I would like to request a review of draft-josefsson-ntruprime-ssh.  
>>Full history of this request at 
>>https://mailarchive.ietf.org/arch/msg/secdispatch/uM9_Vy97C53MWoLSFNuRKUC6iuA/.
>>
>>In short, this draft is requesting a code point in an SSH registry 
>>with a registration policy of "IETF Review".  This code point would 
>>register a new key exchange method of "sntrup761x25519-sha512" that 
>>has been fielded for several years in the SSH ecosystem.  Since this 
>>is the first introduction (to my knowledge) of the NTRU Prime 
>>sntrup761 in the IETF stream, a Crypto Panel review is being requested 
>>to review this "new-to-the-IETF" cryptography.
>>
>>Thanks,
>>Roman
>>
>>
>>_______________________________________________
>>Crypto-panel mailing list
>>[e-mail]
>>https://www.irtf.org/mailman/listinfo/crypto-panel

-------------------------------------------------------------------------
Ludovic Perret
Associate Professor, HDR
PolSys/LIP6/Sorbonne University
Coordinator of International Mobility for Computer Science
Co-founder of CryptoNext Security
https://www-polsys.lip6.fr/~perret/
https://www.linkedin.com/in/ludovic-perret-37a12524/
4 Place Jussieu, F-75252 Paris cedex 5, France
Office : 26-00 323
M: [phone]