Re: [openpgp] To bind or not to bind

Andrew Gallagher <andrewg@andrewg.com> Sat, 23 March 2024 21:48 UTC

Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: Andrew Gallagher <andrewg@andrewg.com>
Mime-Version: 1.0 (1.0)
Date: Sat, 23 Mar 2024 21:48:29 +0000
Message-Id: <CD84ACA8-C126-4929-B581-98C552F9648C@andrewg.com>
References: <87il1c3i02.fsf@fifthhorseman.net>
Cc: openpgp@ietf.org
In-Reply-To: <87il1c3i02.fsf@fifthhorseman.net>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/oSKTDSFJSw-YZOpB7yajRxLcvcQ>
Subject: Re: [openpgp] To bind or not to bind
Precedence: list

On 23 Mar 2024, at 18:51, Daniel Kahn Gillmor <dkg@fifthhorseman.net> wrote:
> 
>> If that's right, then it would put SLH-DSA-SHAKE-128f and
>> SLH-DSA-SHAKE-256s out of reach, but all the other proposals would fit.
> 
> Wait, i think i got this entirely wrong.  The public keys of SLH-DSA are
> actually quite small.  It's the signatures that are large, right?
> 
> So perhaps this isn't an issue for any of the algorithms currently
> contemplated in draft-ietf-openpgp-pqc.

We are only considering encryption subkeys in v4, so the size of SLH-DSA (or ML-DSA) keys isn’t relevant, only that of ML-KEM.

A

[openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Johannes Roth
Re: [openpgp] To bind or not to bind Kai Engert
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Kai Engert
Re: [openpgp] To bind or not to bind Daniel Huigens
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Daniel Kahn Gillmor
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Daniel Kahn Gillmor
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Kai Engert
Re: [openpgp] To bind or not to bind Bart Butler
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Daniel Kahn Gillmor
Re: [openpgp] To bind or not to bind Daniel Kahn Gillmor
Re: [openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Daniel Kahn Gillmor
Re: [openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Kai Engert
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Falko Strenzke
Re: [openpgp] To bind or not to bind Johannes Roth
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Nickolay Olshevsky
Re: [openpgp] To bind or not to bind Nickolay Olshevsky
Re: [openpgp] To bind or not to bind Falko Strenzke
Re: [openpgp] To bind or not to bind Werner Koch
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Justus Winter
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Bart Butler
Re: [openpgp] To bind or not to bind Michael Richardson
Re: [openpgp] To bind or not to bind Falko Strenzke
Re: [openpgp] To bind or not to bind Andrew Gallagher
Re: [openpgp] To bind or not to bind Aron Wussler
Re: [openpgp] To bind or not to bind Heiko Schäfer
Re: [openpgp] To bind or not to bind Bart Butler