[Pqc] Re: [Ext] Re: [EXTERNAL] Re: Review of PQC for Engineers

["Hale, Britta (CIV)" <[e-mail]>]

Technically, ZKP is a thing that is built, vs a thing public key schemes are built of (it can also be a middle step). I.e. Lattice- based, Hash-based, and Coding-based are approaches for employing hardness assumptions. So, one uses those basic categories of approaches to build KEMs, for instance, or to build ZKPs, and from those protocols are then built.

So, if the goal is to talk about primitive approaches as categories like Lattice- Based, ZKP is not really a category in the same way.

Britta


________________________________
From: Mike Ounsworth <Mike.Ounsworth=[e-mail]>
Sent: Wednesday, July 24, 2024 5:06 PM
To: Paul Hoffman <[e-mail]>
Cc: [e-mail] <[e-mail]>
Subject: [Pqc] Re: [Ext] Re: [EXTERNAL] Re: Review of PQC for Engineers


NPS WARNING: *external sender* verify before acting.


Paul,



I like Sophie’s classification of “Public-key crypto”, “symmetric crypto”, and “fancy crypto”. I am not trying to bring “fancy crypto” into this document, but “9. Post-quantum cryptography categories” has sub-sections about Lattice-based, Hash-based, and Code-based as things you can build public-key schemes on top of, well, you can also build public-key schemes on top of ZKP.



Although none of those are currently NIST finalists, so maybe in fact, at present, you can’t?



---

Mike Ounsworth



From: Paul Hoffman <[e-mail]>
Sent: Wednesday, July 24, 2024 6:40 PM
To: Mike Ounsworth <[e-mail]>
Cc: [e-mail]
Subject: Re: [Ext] [Pqc] Re: [EXTERNAL] Re: Review of PQC for Engineers



On Jul 24, 2024, at 16: 26, Mike Ounsworth <Mike. Ounsworth=40entrust. com@ dmarc. ietf. org> wrote: > Do you feel that the whole category of ZKP should or should not be mentioned? Is there another example to cite, or just have the descriptive

On Jul 24, 2024, at 16:26, Mike Ounsworth <Mike.Ounsworth=[e-mail]<mailto:Mike.Ounsworth=[e-mail]>> wrote:

> Do you feel that the whole category of ZKP should or should not be mentioned? Is there another example to cite, or just have the descriptive text with no example?



<no-hats> I would not bother with ZKP in this document. PQC can be considered to be about vulnerable asymmetric cryptography, and barely about vulnerable-if-too-short symmetric cryptography, but not about all other parts of cryptography.



--Paul Hoffman