[openpgp] Fwd: SLH-DSA code points

[Falko Strenzke <[e-mail]>]

Hi DKG,

yes, I am working on a PR that proposes the changed code point 
allocation (3 "flat" code points, I think it is clear that we remove the 
parametrization in any case) and explains when and why each one is useful.

I am not sure I have an ultimately concrete use case where signing time 
is clearly a big cost factor. One that is conceivable, though, would be 
code signing for a large number of devices, where the firmware image is 
different for each device.

- Falko

Am 21.03.24 um 03:57 schrieb Daniel Kahn Gillmor:
> Hi Falko--
>
> On Wed 2024-03-20 10:56:54 +0100, Falko Strenzke wrote:
>> My argument for the current triple is that
>>
>> - 128s is the only SLH-DSA variant coming near ML-DSA regarding
>> signature size,
>> - 128f is a factor of 100 worse in signature generation than ML-DSA, but
>> still 10x faster than 128s. Thus where signing time is a cost factor,
>> 128f has a clear advantage.
>>
>> So both 128s and 128f seem highly relevant to achieve performance time
>> or space wise somewhat close to ML-DSA.
>>
>> Then of course 256s seems clearly required to have at least one variant
>> for 256 bit security.
> thanks for this rundown.  Would you be up for proposing something like
> this justification text as an MR for draft-ietf-openpgp-pqc?
>
> If you could tie it to specific use cases (e.g. e-mail, code-signing),
> that would also be useful.
>
>       --dkg
>
> _______________________________________________
> openpgp mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/openpgp
-- 

*MTG AG*
Dr. Falko Strenzke
Executive System Architect

Phone: [phone]
E-Mail: [e-mail]
Web: mtg.de <https://www.mtg.de>

<https://www.linkedin.com/search/results/all/?fetchDeterministicClustersOnly=true&heroEntityKey=urn%3Ali%3Aorganization%3A13983133&keywords=mtg%20ag&origin=RICH_QUERY_SUGGESTION&position=0&searchId=d5bc71c3-97f7-4cae-83e7-e9e16d497dc2&sid=3S5&spellCorrectionEnabled=false>
Follow us
------------------------------------------------------------------------
<https://www.mtg.de/de/aktuelles/MTG-AG-erhaelt-Innovationspreis-des-Bundesverbands-IT-Sicherheit-e.V-00001.-TeleTrust/> 
<https://www.itsa365.de/de-de/companies/m/mtg-ag>

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>