Re: [Pqc] PQC X.509 115 Hackathon

[Sofía Celi <[e-mail]>]

That is a great idea! I hope I can maybe make it. I agree with Paul in 
that in-person is always great, but it will be good to have remote ;)

I'll happily share this idea with others intererested.

Thank you,

On 05/10/2022 08:19, Tomas Gustavsson wrote:
> Great idea. I will not be able to join unfortunately, but would have 
> liked to. In your list mostly everything is important for sure.
> 
> Perhaps from my side I currently think that signatures on certificates, 
> CRLs, CSRs, etc feel pretty stable, certain that it will be right in the 
> end. Some other things you mention are more often overlooked. The basic 
> ability to encode/decode public and private keys from PEM and PKCS#12 
> will be vital to not waste a lot of time implementing and interoperate.
> 
> Just as an example, the two versions of encoding for EdDSA keys cost 
> some hours of work, and some unnecessary if's in code. If we can avoid 
> such seemingly simple annoyances that would be good.
> 
> Cheers,
> Tomas
> 
> ------------------------------------------------------------------------
> *From:* Spasm <[e-mail]> on behalf of Mike Ounsworth 
> <Mike.Ounsworth=[e-mail]>
> *Sent:* Wednesday, October 5, 2022 3:00 AM
> *To:* 'LAMPS' <[e-mail]>; [e-mail] <[e-mail]>
> *Subject:* [lamps] PQC X.509 115 Hackathon
> CAUTION: External Sender - Be cautious when clicking links or opening 
> attachments. Please email [e-mail] with any questions.
> 
> Hi LAMPS and people interested in PQC!
> 
> As suggested at 114, my colleague John Gray and I would like to do a 115 
> Hackathon on PQ keys and signatures in X.509 / PKIX.
> 
> We are suggesting to play with Dilithium, Falcon, Sphincs+, and 
> Composite signing algorithms in Certs, CRLs, CSRs, PKCS#12s, CMS 
> SignedData, maybe OCSP Responses, maybe Timestamping, maybe CMP. We can 
> bring: the Entrust Toolkit (which we can hack at), Bounce Castle, 
> OpenQuantumSafe-openssl, OpenCA (easier if Max Pala is there, but we can 
> probably figure out how to build it).
> 
> The point of the hackathon, I think, is going to be OIDs, and public key 
> / private key formats (ex.: the differences between Dilithium and Falcon 
> encodings in draft-uni-qsckeys, and 
> draft-massimo-lamps-pq-sig-certificates).
> 
> Question 1: are others interested in joining us at the hackathon? (no 
> point is signing up for a hackathon spot if we’re the only ones there)
> 
> Question 2: whether or not you're joining, what PQ X.509 / PKIX things 
> would you like to see working with Dilithium, Falcon, Sphincs+, Composite?
> 
> ---
> Mike Ounsworth
> Software Security Architect, Entrust
> 
> /Any email and files/attachments transmitted with it are confidential 
> and are intended solely for the use of the individual or entity to whom 
> they are addressed. If this message has been sent to you in error, you 
> must not copy, distribute or disclose of the information it contains. 
> _Please notify Entrust immediately_ and delete the message from your 
> system./
> 

-- 
Sofía Celi
@claucece
Cryptographic research and implementation at many places, specially Brave.
Chair of hprc at IRTF and anti-fraud at W3C.
Reach me out at: [e-mail]
Website: https://sofiaceli.com/
3D0B D6E9 4D51 FBC2 CEF7  F004 C835 5EB9 42BF A1D6