Re: [Pqc] Listing pointers to not-yet-standardized PQC algorithms

["D. J. Bernstein" <[e-mail]>]

Paul Wouters writes:
> PQUIP is not setup to make any choices of PQ algorithms. It is
> explicitly out of the charter:
>       This WG will not update existing protocols, specify new protocols,
>       define new cryptographic mechanisms, or assess whether a given
>       cryptographic mechanism is quantum-resistant.

Um, how do you get from assessing quantum resistance being out of scope
to the claim that making "any choices of PQ algorithms" is out of scope?

Also, to clarify, are you saying it was out of PQUIP's scope for the UK
NCSC to write "I think we should focus on the NIST algorithms"?

---D. J. Bernstein

P.S. I already quoted the relevant part of the charter in my previous
message: "The charter says that PQUIP will not 'assess whether a given
cryptographic mechanism is quantum-resistant' but will instead 'rely on
outside entities (e.g., CFRG) to define and assess new PQC mechanisms'."