[openpgp] Re: proposal of draft-ehlen-openpgp-nist-bp-comp for adoption by WG

[Stephen Farrell <[e-mail]>]

Hiya,

dkg and I chatted today and I'll kick off the formality
of a call for adoption now, sorry for the delay.

Cheers,
S.

On 07/08/2025 14:43, Falko Strenzke wrote:
> We would like to follow up here on the list with the discussion of 
> draft-ehlen-openpgp-nist-bp-comp <https://datatracker.ietf.org/doc/ 
> draft-ehlen-openpgp-nist-bp-comp/> which we presented at IETF 123.
> 
> The purpose of this document is to support users who would like to or 
> have to use hybrid KEMs and/or signatures using ML-KEM, ML-DSA with the 
> NIST or the Brainpool curves with OpenPGP.
> 
> NIST is fine with both options: standalone PQC and hybrids. Due to the 
> long-standing and wide deployment of the NIST curves, there are well- 
> tested, secure, and efficient implementations of ECDSA and ECDH with 
> them. We expect there are users currently preferring the hybrid 
> solutions of ML-KEM, ML-DSA with the NIST curves over the standalone ML- 
> KEM and ML-DSA. European regulations on the other hand generally allow 
> the use of ML-KEM and ML-DSA in hybrid combinations only, and the 
> Brainpool curves are a requirement in German regulations.
> 
> On this background, we propose draft-ehlen-openpgp-nist-bp-comp to be 
> considered for adoption as a working group document. The currently 
> proposed set of algorithm combinations would be subject to WG discussion 
> after an adoption.
> 
> Falko, Quynh, and Stephan
> 
> 
> _______________________________________________
> openpgp mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]