Re: [openpgp] OpenPGP Suite-B Profile vs. RFC 8423

[Benjamin Kaduk <[e-mail]>]

On Tue, Mar 02, 2021 at 08:02:24AM +0900, Masanori Ogino wrote:
> Hello folks,
> 
> First of all, thank you all for your effort on revising OpenPGP RFC!
> I am really glad to hear that the OpenPGP WG was officially rebooted recently.
> 
> I have a comment on draft-ietf-openpgp-crypto-refresh-02, section 16.2.
> The section specifies a compatibility profile conforming the Suite B.
> However, IETF published RFC 8423 that moved several RFCs referring the
> Suite B for other protocols to Historic.
> 
> >From RFC 8423:
> > In July 2015, NSA published the Committee for National Security
> > Systems Advisory Memorandum 02-15 as the first step in replacing
> > Suite B with NSA's Commercial National Security Algorithm (CNSA)
> > Suite.
> > (...)
> > As indicated in [CNSA], NSA is transitioning from Suite B to the CNSA
> > Suite.  As a result, the profiles of the security protocols for the
> > Suite B algorithms are now only of historic interest.
> 
> It would be great if the ongoing revision specifies a CNSA profile
> and/or obsoletes the Suite B profile IMHO.
> What do you think?

Obsoleting (or maybe even just not describing; I didn't look at the current
state of it) the Suite B profile seems worthwhile.

The ongoing CNSA work has not been done in the IETF itself, and instead is
progressing as RFCs via the Independent Submissions Editor.

-Ben