[openpgp] Re: WG: BSI view on KEM combiners

[Paul Wouters <[e-mail]>]

On Sep 8, 2024, at 06:16, D. J. Bernstein <[e-mail]> wrote:
> 
> Paul Wouters writes:
>> A few months delay against an as-of-yet
>> theoretical quantum attack to ensure we got things right would be worth it to
>> avoid wasting years of time of wrongly deployed data ending up being
>> vulnerable.
> 
> This sounds very wrong to me from a security perspective. Sure, years of
> risk would outweigh months of risk if the risks had the same probability
> and impact;

I believe even if the probability is different. We have different opinions here.

>>> Are you suggesting that we now adopt draft-connolly-cfrg-xwing-kem, an
>>> individual draft?
>> That draft will be adopted in CFRG.
> 
> Evidence?

That was not a promise but a process clarification. I am neither the author, the chair or the AD for this document or CFRG. It seems to me, there is consensus for that document and so it is my expectation it will be adopted there and published. You can always lend a helping hand to the people involved there or express your support for the document on the cfrg list to ensure the community there is aware.

Paul