Re: [Pqc] Mapping the state of PQC and IETF

[John Gray <[e-mail]>]

Great idea to compile a list of all the PQ related drafts!   In addition to the ones that have been listed, we are working on updating the following (in the LAMPS working group):

We are working on adding KEM support in this draft:
https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc4210bis/     - Certificate Management Protocol Version 3

We are also working on updates to these drafts.
https://datatracker.ietf.org/doc/draft-ounsworth-pq-composite-keys/    -   Composite keys
https://datatracker.ietf.org/doc/draft-ounsworth-pq-composite-kem/    -    Composite KEM

Cheers,

John Gray

-----Original Message-----
From: Pqc <[e-mail]> On Behalf Of Rebecca Guthrie
Sent: Monday, February 27, 2023 1:47 PM
To: [e-mail]
Subject: [EXTERNAL] Re: [Pqc] Mapping the state of PQC and IETF

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.

______________________________________________________________________
Hello Sofia and Paul and pquip,

I compiled a list of some more drafts and RFCs to add to the GitHub list. I tried my best to only include documents that are not yet listed on the GitHub, but I apologies in advance if there are any repeats!

Stateful Hash-Based Signatures
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-fluhrer-lms-more-parm-sets/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZk7s91MF$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/rfc8778/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZvABWINB$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-gazdag-x509-hash-sigs/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZjewniTM$

General (in support of PQ Migration)
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-nir-ipsecme-big-payload/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZhONoBeq$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lamps-cert-binding-for-multi-auth/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZqxaboO4$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/rfc7383/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZuLy8cyC$  (leveraged in RFC 9242) . https://urldefense.com/v3/__https://datatracker.ietf.org/doc/rfc9242/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZgaHOYDe$  (leveraged in https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-ikev2-multiple-ke__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZvZnUWN-$ ) . https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-auth-announce/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZoXN8x0L$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ajitomi-cose-cose-key-jwk-hpke-kem/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZvV6TTrv$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-kemri/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZvfiRnDK$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-guthrie-ipsecme-ikev2-hybrid-auth-00__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZrrx3_DW$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-cose-post-quantum-signatures/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZg2ba5PK$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-driscoll-pqt-hybrid-terminology/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZmW68vcB$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ounsworth-cfrg-kem-combiners/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZu_-tbIl$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-schanck-tls-additional-keyshare-00__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZjywEIK7$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/rfc9191__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZvN2nANs$  (This RFC does not explicitly mention PQC, but the handling of large certificates has come up in discussion in other places as it relates to PQC.)

Kyber
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lamps-kyber/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZszUMhp5$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lamps-kyber-certificates/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZr0dzilo$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-uni-qsckeys-kyber/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZgtRnnv8$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-steele-cose-kyber/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZiSIHWCF$

Dilithium
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-uni-qsckeys-dilithium/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZuB6D-RM$

Falcon
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-uni-qsckeys-falcon/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZnlbNa82$

SPHINCS+
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-sphincs-plus/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZiqq9KEX$
. https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-uni-qsckeys-sphincsplus/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZq25edrn$

Additionally, what are the group's thoughts on including drafts and RFCs that aren't focused on the NIST PQ Standardization Effort algorithms or on the Stateful Hash-Based Signatures, but that still address quantum resistance, such as https://urldefense.com/v3/__https://datatracker.ietf.org/doc/rfc8784/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZp8fR1jz$ , https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-vanrein-tls-kdh/__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZhkwbPo_$  or https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-smyslov-ipsecme-ikev2-qr-alt/?__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZq-oEXCE$

Last, I would suggest that this list does not include draft-irtf-qirg-quantum-internet-use-cases, as this draft focuses on quantum computing which is distinct from quantum-resistant cryptography.

Rebecca

Rebecca Guthrie
she/her
Center for Cybersecurity Standards (CCSS) Cybersecurity Collaboration Center (CCC) National Security Agency (NSA)

-----Original Message-----
From: Pqc <[e-mail]> On Behalf Of Sofía Celi
Sent: Monday, February 27, 2023 10:47 AM
To: [e-mail]
Subject: [Pqc] Mapping the state of PQC and IETF

Dear, list,

We have started work on mapping the state of PQC (if any draft or RFC
exists) in the different IETF protocols/WG and IRTF groups: https://urldefense.com/v3/__https://github.com/ietf-wg-pquip/state-of-protocols-and-pqc__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZk34wkRS$  to keep track of where everything is at. Feel free to contribute by sending a PR. We hope this list is useful to many.

Thank you,

Sofía and Paul

--
Sofía Celi
@claucece
Cryptographic research and implementation at many places, specially Brave.
Chair of hprc at IRTF and anti-fraud at W3C.
Reach me out at: [e-mail]
Website: https://urldefense.com/v3/__https://sofiaceli.com/3D0B__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZm_Tv3an$  D6E9 4D51 FBC2 CEF7  F004 C835 5EB9 42BF A1D6

--
Pqc mailing list
[e-mail]
https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/pqc__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZpa0EJbP$

--
Pqc mailing list
[e-mail]
https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/pqc__;!!FJ-Y8qCqXTj2!eu1hPKREuxI8n_3HshS5tkmhIKFnDgGtDjPa0uiYfQkAVrFbC-fPwGyXtwGwzmtqGpaochQgS6DypRFuNJvYsIXlZpa0EJbP$
Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.