Re: [Pqc] [Ext] [WG last call] IETF WG state changed for draft-ietf-pquip-pqt-hybrid-terminology

Hi all,

I support the draft, and have just a couple of comments.

A first more substantive comment:

Section 4 of the draft currently defines PQ/T Hybrid Protocol with Composite Key Exchange, PQ/T Hybrid Protocol with Composite Key Agreement, PQ/T Hybrid Protocol with Non-Composite Key Exchange, and PQ/T Hybrid Protocol with Non-Composite Key Agreement. This comment is specifically about the distinction between "key exchange" and "key agreement."

To align with definitions in RFC4949, it may make more sense to either 1. instead define these phrases for "key transport" and "key agreement" or 2. define these phrases for "key establishment" only.

In particular, "key establishment" is an umbrella term that is subdivided into two techniques: "key agreement" and "key transport." Key Exchange Algorithm is defined as a specific key agreement method ("key exchange" is not defined).

If approach 1 is taken, it's my understanding that the examples for key establishment given in this draft (I-D.ietf-tls-hybrid-design and RFC9370) would still both be categorized as key agreement (how they are currently categorized), so all that would change is swapping the word "exchange" for "transport" in the relevant definitions.

A second smaller comment:

Suggestion to change "create" to "forge" (used twice in Section 5).

Thanks for all of your work on this draft!

Rebecca

Rebecca Guthrie
she/her
Center for Cybersecurity Standards (CCSS)
Cybersecurity Collaboration Center (CCC)
National Security Agency (NSA)

-----Original Message-----
From: Pqc <pqc-bounces@ietf.org> On Behalf Of Paul Hoffman
Sent: Friday, March 1, 2024 12:57 PM
To: pqc@ietf.org
Subject: Re: [Pqc] [Ext] [WG last call] IETF WG state changed for draft-ietf-pquip-pqt-hybrid-terminology

A strong nudge that this document is in WG Last Call and needs a bunch more reviews, even if they just say "that's all fine".

On Feb 21, 2024, at 07:31, Sofía Celi <cherenkov@riseup.net> wrote:

> Hi,
> 
> This email starts the working group last call for "Terminology for Post-Quantum Traditional Hybrid Schemes" I-D, located here:
> 
> https://datatracker.ietf.org/doc/draft-ietf-pquip-pqt-hybrid-terminology/
> 
> The WG Last Call will end 6th March 2024 @ 2359 UTC.
> 
> Please review the I-D and submit any comments to the pqc@ietf.org mailing list.

-- 
Pqc mailing list
Pqc@ietf.org
https://www.ietf.org/mailman/listinfo/pqc