Re: [EXTERNAL] Re: AERO/OMNI dropping support for SEND/CGA

[Alexandre Petrescu <[e-mail]>]

Le 02/12/2020 à 20:07, Templin (US), Fred L a écrit :
>>> As Fernando pointed many times: many things in ND could be
>>> resolved only by digital signature (he calls it "untrusted
>>> model").
>> 
>> YEs yes.
> 
> Our plan and intention is to inherit the digital signature methods in
> Teredo. If there is anything wrong with that short of
> quantum-robustness, please speak up.

I am not a specialist of crypto but I heard of a contest at NIST(?)
about quantum resistant algorithms.  If I remember correctly, three
candidates were selected in July.  I am not sure where are they now;
maybe they already stepped further in the selection process.

But some of these candidates do have open source implementations, and
are not specified in RFCs.  If one has a crystal ball, one can decide
which of these algorithms will be the AES of the future and bring that
to OMNI.

(I hope I did not say too naïve things)

A respected crypto oppinion also says that it might be not necessary to
consider these as of now, or that it is too early.  For my part I think
it is never too early for these things.

Alex

> 
> We could have called what we are doing "TereTAP", or "ISAdo" but it
> is more than just that. So, we called it OMNI.
> 
> Fred
>