Re: [Pqc] PQC X.509 115 Hackathon

["Vaira, Antonio" <[e-mail]>]

Hi Mike,

my colleague Alex plans to join IETF 115 hackathon in person, if it shouldn't be possible then at least remotely.
The plan is to bring along a CMP RA and a CMP client, which support the lightweight CMP profile, and try to integrate them with a 3rd party CA. During the hackathon, if others come with CMP clients and CA that support PQ-certificates issuance, over any CMP flavor, we can attempt to update our RA to reach interoperability.

What do you think about our plan? Do you think the needed toolset will be available as well?

Many thanks

Antonio Vaira

Siemens AG
Technology
Research in Digitalization and Automation
Cybersecurity Technology
Security Architecture
T RDA CST SEA-DE
Otto-Hahn-Ring 6
Perlach
81739 Munich, Germany
Mobile: [phone]
mailto:[e-mail]
www.siemens.com
[cid:image001.gif@01D8DF06.4BFFC200]
Siemens Aktiengesellschaft: Chairman of the Supervisory Board: Jim Hagemann Snabe; Managing Board: Roland Busch, Chairman, President and Chief Executive Officer; Cedrik Neike, Matthias Rebellius, Ralf P. Thomas, Judith Wiese; Registered offices: Berlin and Munich, Germany; Commercial registries: Berlin-Charlottenburg, HRB 12300, Munich, HRB 6684; WEEE-Reg.-No. DE 23691322

From: Spasm <[e-mail]> On Behalf Of Mike Ounsworth
Sent: 05 October 2022 03:01
To: 'LAMPS' <[e-mail]>; [e-mail]
Subject: [lamps] PQC X.509 115 Hackathon

Hi LAMPS and people interested in PQC!

As suggested at 114, my colleague John Gray and I would like to do a 115 Hackathon on PQ keys and signatures in X.509 / PKIX.

We are suggesting to play with Dilithium, Falcon, Sphincs+, and Composite signing algorithms in Certs, CRLs, CSRs, PKCS#12s, CMS SignedData, maybe OCSP Responses, maybe Timestamping, maybe CMP. We can bring: the Entrust Toolkit (which we can hack at), Bounce Castle, OpenQuantumSafe-openssl, OpenCA (easier if Max Pala is there, but we can probably figure out how to build it).

The point of the hackathon, I think, is going to be OIDs, and public key / private key formats (ex.: the differences between Dilithium and Falcon encodings in draft-uni-qsckeys, and draft-massimo-lamps-pq-sig-certificates).



Question 1: are others interested in joining us at the hackathon? (no point is signing up for a hackathon spot if we're the only ones there)

Question 2: whether or not you're joining, what PQ X.509 / PKIX things would you like to see working with Dilithium, Falcon, Sphincs+, Composite?


---
Mike Ounsworth
Software Security Architect, Entrust

Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.