Re: [saag] sntrup761x25519-sha512

Loganaden Velvindron <loganaden@gmail.com> Tue, 23 May 2023 15:35 UTC

Return-Path: <loganaden@gmail.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73F41C1519AE for <saag@ietfa.amsl.com>; Tue, 23 May 2023 08:35:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.095
X-Spam-Level:
X-Spam-Status: No, score=-2.095 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dgAEor5lWSxr for <saag@ietfa.amsl.com>; Tue, 23 May 2023 08:35:51 -0700 (PDT)
Received: from mail-lj1-x233.google.com (mail-lj1-x233.google.com [IPv6:2a00:1450:4864:20::233]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AECE2C169513 for <saag@ietf.org>; Tue, 23 May 2023 08:35:38 -0700 (PDT)
Received: by mail-lj1-x233.google.com with SMTP id 38308e7fff4ca-2af20198f20so62713051fa.0 for <saag@ietf.org>; Tue, 23 May 2023 08:35:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684856136; x=1687448136; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=xX+ruTcF0wiWDoGvwsqe/dTpXQrAcVseES4k34qoUHE=; b=fUJrVOYamidDWVKpTQisWYjUD6FCXuToaIDPReN5xQJI7Ozkxi58hzbt9Utf0vYtBB +/JRnR4gOBzo4ASEvYCSkQpyiNcmzFJIAx02j9C6nnfvD0Clss4XVmoQKJwXF0Ot3CGn 9tSQUNCiW5fVjcGDNKeuseqD4iKLcGFS2VpdPzv82jLjZ0lNhwkMwpGqhyJDA+yMeZHc j5L83k96pnWsOQGAgxghkBqKMtzeWZflAVSI/5arfvRUZbfzvnnZ/lnZA8mQTqU6xAAG ic4u6LYGBD7RBVudBFDAfNMo3bI7j01k7BOY7lanfWcmhXxVy823ASvYaFHiKoNGDVFS brpA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684856136; x=1687448136; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=xX+ruTcF0wiWDoGvwsqe/dTpXQrAcVseES4k34qoUHE=; b=X/KQVNs5zE8Y8jLCd5vXZtgQwPmo7rfhWjcRuJ2bDE6MUw7ezfP5FZuqldgqfzZiqZ 4sPlMDpnBVfkoJ3g0Y0hkEe3MrnUbhvoAOK8UTGOeSShoASg4hwCGgLYist1Y7jGFTAv +4fH9oPtRM2B6hw6c1c8j/1aPt2aAu+XsXcX/iIPEFcUyHXzi9ocjLA7idxPjTknC9FY CkT6AuUtT8NbKClOfuHXD0rnBTljfdw73iBf7rEzh0gIK8ogwZSObmL99ecRlIrHfWet 6IFNXDpSTzdNFXk8MNSypOzHMOypwZgNCSCJa7QDWPy/TMj3W1OIiXxBTXCdg02mwgP8 lboQ==
X-Gm-Message-State: AC+VfDzkoVD1SxU8JiQkx0QgJY5UEcPfxOyxXlaBfYon0QZw2C9p0yD5 B0s8MjxpfaA5aJARKvAa+AgMlq3+2b2JGV41i8zhu/l0gsg=
X-Google-Smtp-Source: ACHHUZ7SQ1RyaSoR8o3jKL2OfxoYu0btgNehLfuTTy9den74VWGhRvzjmX4xgflwRgnCiilXfjcLIpBCR4hsS8cc2Ko=
X-Received: by 2002:a2e:a40d:0:b0:2ac:82c1:5a3d with SMTP id p13-20020a2ea40d000000b002ac82c15a3dmr5251426ljn.23.1684856136046; Tue, 23 May 2023 08:35:36 -0700 (PDT)
MIME-Version: 1.0
References: <875y8y4ip2.fsf@kaka.sjd.se> <84296E62-5843-4E7A-BD43-430491A5A1F3@akamai.com> <874jo8ytgw.fsf@kaka.sjd.se> <f6aa133635084609b0032ab1cfbfb7ce@amazon.com> <87sfbny046.fsf@kaka.sjd.se> <34f16e71-6897-4370-a77c-effc45e434a4@app.fastmail.com>
In-Reply-To: <34f16e71-6897-4370-a77c-effc45e434a4@app.fastmail.com>
From: Loganaden Velvindron <loganaden@gmail.com>
Date: Tue, 23 May 2023 19:35:23 +0400
Message-ID: <CAOp4FwSL2nCcFOvfkmPWzfts7U9+q48G28xykiX-+mxXQL2euA@mail.gmail.com>
To: Martin Thomson <mt@lowentropy.net>
Cc: saag@ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/4GSH3UX4AQ9IZp6vncfj_p6yg3g>
Subject: Re: [saag] sntrup761x25519-sha512
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 May 2023 15:35:53 -0000

On Tue, 23 May 2023 at 12:00, Martin Thomson <mt@lowentropy.net> wrote:
>
> On Tue, May 23, 2023, at 09:31, Simon Josefsson wrote:
> > There is no either/or conflict here -- SNTRU is deployed and will be in
> > wide use on the Internet for the coming 5+ years.  It seems useful for
> > the IETF to be involved in standardizing protocols that are used on the
> > Internet.
>
> If it is deployed already, I'd assume that there is no intent to change it.  That is, the IETF isn't going to gain change control.
>
I remember the github issue where OpenSSH developers publicly said
that they will support NTRU-Prime for 5 years at least
(https://github.com/open-quantum-safe/liboqs/pull/1328#issuecomment-1354111314).

I would like to know if there are specific weaknesses in NTRU-Prime
that should be discussed ?


> So is this a case for ISE publication?  That is, a note saying that this is how the Internet does it.  There's value in that, but at least it would not pretend that this is standardization.
>
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag