Re: [saag] sntrup761x25519-sha512

Peter Yee <peter@akayla.com> Wed, 24 May 2023 20:07 UTC

Return-Path: <peter@akayla.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F68CC151B22 for <saag@ietfa.amsl.com>; Wed, 24 May 2023 13:07:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 49zaHEKaXiKj for <saag@ietfa.amsl.com>; Wed, 24 May 2023 13:07:46 -0700 (PDT)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B8B56C151B08 for <saag@ietf.org>; Wed, 24 May 2023 13:07:46 -0700 (PDT)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id 47BCB9D624; Wed, 24 May 2023 16:07:45 -0400 (EDT)
Received: from spectre (server.houseofyee.com [173.8.184.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id B1D1C9D4E4; Wed, 24 May 2023 16:07:44 -0400 (EDT)
From: Peter Yee <peter@akayla.com>
To: 'Mark Baushke' <mbaushke@gmail.com>
Cc: 'Paul Wouters' <paul.wouters=40aiven.io@dmarc.ietf.org>, 'Simon Josefsson' <simon=40josefsson.org@dmarc.ietf.org>, saag@ietf.org
References: <03cb01d98dd4$1d6cc0f0$584642d0$@akayla.com> <194D8C0F-0872-4354-975C-70D6AC22CCF7@gmail.com>
In-Reply-To: <194D8C0F-0872-4354-975C-70D6AC22CCF7@gmail.com>
Date: Wed, 24 May 2023 13:07:47 -0700
Message-ID: <05ac01d98e7b$6a34ff40$3e9efdc0$@akayla.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_05AD_01D98E40.BDD7D4F0"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQISBkfvyFD1ZwTzTzWNIJycCC3kXQGZaoi4ruwciyA=
Content-Language: en-us
X-Scanned-By: mailmunge 3.11 on 66.39.134.11
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/KPibn5dEeuPiiJgF8hCtkRGZTHg>
Subject: Re: [saag] sntrup761x25519-sha512
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 May 2023 20:07:48 -0000

Thanks for the input, Mark. I suspect what will happen is that the designated experts list will be made of individuals who combined will have the breadth to cover all the registries. I rather doubt it will be one person (and probably a backup expert). I think a single mailing list simplifies where discussion takes place. If there are many experts (one can wish), I expect they will work it out amongst themselves how to divvy up the incoming registration requests.

 

                                Kind regards,

                                -Peter

 

[Sent from my Windows PC – Please pardon any flappy-finger created typos.]

 

From: Mark Baushke <mbaushke@gmail.com> 
Sent: Tuesday, May 23, 2023 5:51 PM
To: Peter Yee <peter@akayla.com>
Cc: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>; Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org>; saag@ietf.org
Subject: Re: [saag] sntrup761x25519-sha512

 

Hi Peter,

 

Yes, RFC 4250 Section 4.6.1 specifies names be approved by IETF CONSENSUS as defined in section 3.2 with this definition:

 

  IETF CONSENSUS - New values are assigned through the IETF consensus
   process.  Specifically, new assignments are made via RFCs approved by
   the IESG.  Typically, the IESG will seek input on prospective
   assignments from appropriate persons (e.g., a relevant Working Group
   if one exists).
 
Your suggestion to move to 
 
 
  EXPERT REVIEW - approval by a Designated Expert is required.

 

makes sense to me as the experts are designated by RFC  8126 in section 5 via the IESG with the help of ADs… I think I got that right?

 

I would suspect that Kex method names and encryption algorithm names may not always be given to the same designated expert person.  I am uncertain if a mailing list for all of the SSH parameters table update approval should be the same individual or not.

 

I agree that the ssh-reg-review@ietf.org <mailto:ssh-reg-review@ietf.org>  list could be used as a start and that group could choose the expert to use for a request.

 

                -- Mark

 

[Sent from my iPad -- Please pardon any auto-fix created typos.]





On May 23, 2023, at 7:10 PM, Peter Yee <peter@akayla.com <mailto:peter@akayla.com> > wrote:



And, yes, I need to finish that off. I let it slip off my radar, but I’ll turn it around shortly.

 

                                -Peter

 

From: saag <saag-bounces@ietf.org <mailto:saag-bounces@ietf.org> > On Behalf Of Paul Wouters
Sent: Tuesday, May 23, 2023 4:57 PM
To: Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org <mailto:simon=40josefsson.org@dmarc.ietf.org> >
Cc: saag@ietf.org <mailto:saag@ietf.org> 
Subject: Re: [saag] sntrup761x25519-sha512

 

 

On Tue, May 23, 2023 at 6:37 PM Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org <mailto:40josefsson.org@dmarc.ietf.org> > wrote:

"Martin Thomson" <mt@lowentropy.net <mailto:mt@lowentropy.net> > writes:


As far as I understand, the independent submission route is not possible
due to the IANA registration policy for the SSH KEX registry.

 

https://datatracker.ietf.org/doc/html/draft-yee-ssh-iana-requirements-01

 

Paul

_______________________________________________
saag mailing list
saag@ietf.org <mailto:saag@ietf.org> 
https://www.ietf.org/mailman/listinfo/saag