Re: [Curdle] Quantum Resistant SSH connections

["Mark D. Baushke" <[e-mail]>]

Hi Hubert,

Hubert Kario <[e-mail]> writes:

> Hi everybody,
> 
> As it's fairly easy, and common, to configure Kerberos infrastructure
> to be resistant against quantum computers, I'd like to submit a new
> key exchange for SSH that leverages that quantum resistance to make
> quantum resistant SSH connections.
> 
> While we have gssapi key exchange methods already defined, they all use
> FFDH
> or ECDH to derive the shared secret and use gssapi/Kerberos just to
> authenticate the other side, not for encrypt the transmitted keying
> material.
> 
> This new key exchange uses gssapi to transmit keying material
> and thus builds on quantum resistance of protocols like Kerberos.
> 
> Please check:
> https://tools.ietf.org/html/draft-kario-gss-qr-kex-00
> https://datatracker.ietf.org/doc/draft-kario-gss-qr-kex/
> --
> Regards,
> Hubert Kario
> Senior Quality Engineer, QE BaseOS Security team
> Web: www.cz.redhat.com
> Red Hat Czech s.r.o., Purkyňova 115, 612 00  Brno, Czech Republic

Thank you for the pointers.

Related to Quantum-Resistant and Quantum-Safe algorithms, you may find
these pointers useful as well:

There is a github project under an MIT licesnse:

    https://github.com/open-quantum-safe/liboqs

which provides for various Quantum-Safe cryptographic algorithms.

There is also a paper published last year:

    Prototyping post-quantum and hybrid key exchange and authentication in
    TLS and SSH
    by Eric Crockett and Christian Paquin and Douglas Stebila
    URL: https://eprint.iacr.org/2019/858

which may be of interest as a hybrid mechanism may be more acceptable as
a transition to PQ than a direct move for some implementers.

	Be safe, stay healthy,
	-- Mark