[IPsec] Re: draft-ietf-ipsecme-ikev2-pqc-auth-09 ietf last call Genart review

["Eric Vyncke (evyncke)" <[e-mail]>]

Gyan,

May I assume that Tiru's reply addresses your review (and thanks for the review BTW) ?

Regards

-éric (acting as the responsible AD for this I-D)

From: tirumal reddy <[e-mail]>
Date: Friday, 24 July 2026 at 09:46
To: Gyan Mishra <[e-mail]>
Cc: [e-mail] <[e-mail]>; [e-mail] <[e-mail]>; [e-mail] <[e-mail]>; [e-mail] <[e-mail]>
Subject: Re: draft-ietf-ipsecme-ikev2-pqc-auth-09 ietf last call Genart review

Hi Gyan,

Thanks for the review. No new IKEv2 code points are needed. The draft reuses the generic Digital Signature method (RFC 7427), which identifies the algorithm by OID in the AUTH payload, so new PQC algorithms need no IKEv2 registry change.
Rekeying is unaffected by the PQC signature algorithms, CREATE_CHILD_SA carries no AUTH payload.

Cheers,
-Tiru

On Mon, 20 Jul 2026 at 02:40, Gyan Mishra via Datatracker <[e-mail]<mailto:[e-mail]>> wrote:
Document: draft-ietf-ipsecme-ikev2-pqc-auth
Title: Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
using PQC Reviewer: Gyan Mishra Review result: Almost Ready

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair.  Please treat these comments just
like any other last call comments.

For more information, please see the FAQ at

<https://wiki.ietf.org/en/group/gen/GenArtFAQ>.

Document: draft-ietf-ipsecme-ikev2-pqc-auth-??
Reviewer: Gyan Mishra
Review Date: 2026-07-19
IETF LC End Date: 2026-07-31
IESG Telechat date: Not scheduled for a telechat

Summary:

Signature-based authentication methods are utilized in the Internet Key
Exchange Version 2 (IKEv2). The current version of the IKEv2 protocol,
specified in RFC 7296, supports traditional digital signatures.

This document specifies a generic mechanism for integrating post-quantum
cryptographic (PQC) digital signature algorithms into the IKEv2 protocol. The
approach allows for seamless inclusion of any PQC signature scheme within the
existing authentication framework of IKEv2. Additionally, it outlines how
Module-Lattice-Based Digital Signatures (ML-DSA) and Stateless Hash-Based
Digital Signatures (SLH-DSA), can be employed as authentication methods within
the IKEv2 protocol, as they have been standardized by US NIST.

I believe this specification is almost ready for publication.

One question I would like to ask the authors is related to any IANA code points
for the use of PQC for signature for IKEv2.

As this is standards track and a significant change to IKEv2 which does impact
all IPSEC implementations vendors supporting the PQM update feature.

To ensure standardization and forward and backward compatibility in the
implementation should there be a standard codepoint allocated for the drafts
update to IKEv2 for PQM signature signing.

What is the impact on SA security association rekeying during key update
intervals.  I do not see anything mentioned related but as we are using a new
PQM signing mechanism, I wonder if there is any impact and if so it should be
added to the considerations section.

Major issues:
None

Minor issues:
None

Nits/editorial comments:
None