Re: [Pqc] [EXTERNAL] Re: Listing pointers to not-yet-standardized PQC algorithms

[Mike Ounsworth <[e-mail]>]

Dan,

At the risk of entangling myself into this thread, here goes.

(Sofía, Paul, Paul, Roman, feel free to correct me)

PQUIP is expressly NOT composed of cryptographers (that's CFRG's domain) and as such it is not chartered to make cryptographic assessments or recommendations. What IT IS chartered for is protocol-level discussions about how to integrate PQC into existing protocols. Prior to PQUIP, there wasn't really a central place in IETF in which to seek inter-WG alignment on PQC integration.

For example, the following topic would be in-scope for PQUIP:

"I need an authenticated KEM-KEM key exchange and I can tolerate 1.5 RTT. Has someone already written out the necessary message structures that I can borrow?"


We're also doing the secretarial work of tracking the PQC work across the IETF in this living document:
https://github.com/ietf-wg-pquip/state-of-protocols-and-pqc


As you know Dan, IETF is a volunteer-driven organization; work only happens if an individual steps up to do it. You yourself are welcome to write an internet-draft and submit it to PQUIP. The WG will decide if it fits our mandate / charter, or if it would get better discussion somewhere else (like CFRG).

---
Mike Ounsworth

-----Original Message-----
From: Pqc <[e-mail]> On Behalf Of D. J. Bernstein
Sent: Monday, May 15, 2023 1:30 PM
To: [e-mail]
Subject: [EXTERNAL] Re: [Pqc] Listing pointers to not-yet-standardized PQC algorithms

WARNING: This email originated outside of Entrust.
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.

______________________________________________________________________
> > Also, to clarify, are you saying it was out of PQUIP's scope for the
> > UK NCSC to write "I think we should focus on the NIST algorithms"?
> People can choose what to focus their time and energy on within the WG
> on things that are in scope.

Please clarify. If making "any choices of PQ algorithms" is supposed to be out of scope then how can "focus on the NIST algorithms" be in scope?

Right now I'm unable to figure out concretely what's being claimed about the PQUIP scope, never mind the question of how this claim is supposed to follow from the PQUIP charter (and the meta-question of how my quotes from the charter were supposed to be missing something relevant).

---D. J. Bernstein

--
Pqc mailing list
[e-mail]
https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/pqc__;!!FJ-Y8qCqXTj2!b60MEDWC4lG5ebf0WdxYDyxIIFvMc-kHwd8sSqA_LtSksimFRDPECJY2qJH73c9Ur9XtmiFsGuv6OLns$
Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.