[openpgp] Re: I-D Action: draft-ietf-openpgp-pqc-08.txt

[Aron Wussler <[e-mail]>]

Hi everyone,

At the OpenPGP Email Summit we discussed the PQC draft, and noticed that many are waiting on us to publish the latest state.

We took action, and here's the latest version with all the changes we discussed at the recent meetings:
- Assigned code points 35 and 36 for ML-KEM + ECDH algorithms: as discussed at the interim meeting and IETF 122
- Removed hash binding for ML-DSA + EdDSA and SLH-DSA algorithms: as discussed on the list, we allow signatures to offer a SHA-2 prehash to remove a blocker for CNSA 2.0 compliance
- Allowed usage of ML-KEM-768 + X25519 with v4 keys: as discussed at the OpenPGP summit, we decided to allow for a pq-upgrade path without rotating the primary key
- Aligned KEM combiner to X-Wing and switched to suffix-free encoding of the domain separator: as presented at IETF 122 to further align with LAMPS

Cheers,
Aron

--
Aron Wussler
Sent with ProtonMail, OpenPGP key 0x7E6761563EFE3930



On Tuesday, 15 April 2025 at 10:42, [e-mail] <[e-mail]> wrote:

> Internet-Draft draft-ietf-openpgp-pqc-08.txt is now available. It is a work
> item of the Open Specification for Pretty Good Privacy (OPENPGP) WG of the
> IETF.
> 

> Title: Post-Quantum Cryptography in OpenPGP
> Authors: Stavros Kousidis
> Johannes Roth
> Falko Strenzke
> Aron Wussler
> Name: draft-ietf-openpgp-pqc-08.txt
> Pages: 268
> Dates: 2025-04-15
> 

> Abstract:
> 

> This document defines a post-quantum public-key algorithm extension
> for the OpenPGP protocol. Given the generally assumed threat of a
> cryptographically relevant quantum computer, this extension provides
> a basis for long-term secure OpenPGP signatures and ciphertexts.
> Specifically, it defines composite public-key encryption based on ML-
> KEM (formerly CRYSTALS-Kyber), composite public-key signatures based
> on ML-DSA (formerly CRYSTALS-Dilithium), both in combination with
> elliptic curve cryptography, and SLH-DSA (formerly SPHINCS+) as a
> standalone public key signature scheme.
> 

> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/
> 

> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-openpgp-pqc-08.html
> 

> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-openpgp-pqc-08
> 

> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 

> 

> _______________________________________________
> openpgp mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]