Re: [openpgp] SLH-DSA code points

[Falko Strenzke <[e-mail]>]

I have made that PR now: 
https://github.com/openpgp-pqc/draft-openpgp-pqc/pull/99

In its description I wrote:

/For technical reasons, namely being able to proceed with other changes 
affecting larger portions of the draft without creating any conflicts, 
the editors would like to merge this PR as soon as it is found to make 
the correct transformation to the new three SLH-DSA-SHAKE code points 
(removing the parametrization) in a  *technical sense* (which has an 
impact on the document structure and the textual reference to the 
algorithm) .

The criterion for merging it should not be that there is already 
consensus on the exact number of SLH-DSA code points or the text for 
their justification in the "Additional Considerations" section. That can 
be agreed on in the further discussion on the list and then we can open 
another PR for the required changes./

- Falko

Am 21.03.24 um 03:57 schrieb Daniel Kahn Gillmor:
> Hi Falko--
>
> On Wed 2024-03-20 10:56:54 +0100, Falko Strenzke wrote:
>> My argument for the current triple is that
>>
>> - 128s is the only SLH-DSA variant coming near ML-DSA regarding
>> signature size,
>> - 128f is a factor of 100 worse in signature generation than ML-DSA, but
>> still 10x faster than 128s. Thus where signing time is a cost factor,
>> 128f has a clear advantage.
>>
>> So both 128s and 128f seem highly relevant to achieve performance time
>> or space wise somewhat close to ML-DSA.
>>
>> Then of course 256s seems clearly required to have at least one variant
>> for 256 bit security.
> thanks for this rundown.  Would you be up for proposing something like
> this justification text as an MR for draft-ietf-openpgp-pqc?
>
> If you could tie it to specific use cases (e.g. e-mail, code-signing),
> that would also be useful.
>
>       --dkg
-- 

*MTG AG*
Dr. Falko Strenzke
Executive System Architect

Phone: [phone]
E-Mail: [e-mail]
Web: mtg.de <https://www.mtg.de>

<https://www.linkedin.com/search/results/all/?fetchDeterministicClustersOnly=true&heroEntityKey=urn%3Ali%3Aorganization%3A13983133&keywords=mtg%20ag&origin=RICH_QUERY_SUGGESTION&position=0&searchId=d5bc71c3-97f7-4cae-83e7-e9e16d497dc2&sid=3S5&spellCorrectionEnabled=false>
Follow us
------------------------------------------------------------------------
<https://www.mtg.de/de/aktuelles/MTG-AG-erhaelt-Innovationspreis-des-Bundesverbands-IT-Sicherheit-e.V-00001.-TeleTrust/> 
<https://www.itsa365.de/de-de/companies/m/mtg-ag>

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>