[saag] Re: New Version Notification for draft-rsalz-crypto-registries-00.txt

[Paul Wouters <[e-mail]>]

> On Nov 28, 2024, at 20:14, D. J. Bernstein <[e-mail]> wrote:
> 
> Paul Wouters writes:
>> The rough consensus is that there is no appetite for NTRUprime.
> 
> Um, what? There are multiple interoperable NTRU Prime implementations
> for SSH, plus NTRU Prime implementations for various other protocols.
> The SSHM WG adopted draft-josefsson-ntruprime-ssh earlier this month:

i was talking about the IETF, not SSH.

> BCP 79 includes the following requirement:

> I'd think that the ADs are responsible for enforcing this BCP 79
> requirement.

The cryptographer constantly repeating their mistaken interpretation doesn't make it true.

> Instead the ADs seem to be _encouraging_ having Kyber as
> the only post-quantum encryption option.

That is willful misrepresentation. If that cryprographer listened to what the AD said and wrote about the preferred methods of cryptography adoption in the IETF and separated that from their personal desire to promote their own cryptography, that cryptographer should be able correct their mistaken view.

> We've
> already seen the same patent minefield causing years of delays in
> post-quantum rollout, even without any patent holders having filed
> lawsuits yet.

Apparently that cryptographer's view of IPR dangers is not a widely shared concern.

Paul