Re: [saag] sntrup761x25519-sha512

Mark Baushke <mbaushke@gmail.com> Wed, 24 May 2023 00:50 UTC

Return-Path: <mbaushke@gmail.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 550D0C15107A for <saag@ietfa.amsl.com>; Tue, 23 May 2023 17:50:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.202
X-Spam-Level:
X-Spam-Status: No, score=-1.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MIME_HTML_ONLY_MULTI=0.001, MIME_QP_LONG_LINE=0.001, MPART_ALT_DIFF=0.79, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vA0QNyKjfNB7 for <saag@ietfa.amsl.com>; Tue, 23 May 2023 17:50:53 -0700 (PDT)
Received: from mail-qk1-x72f.google.com (mail-qk1-x72f.google.com [IPv6:2607:f8b0:4864:20::72f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14FDBC14CE4B for <saag@ietf.org>; Tue, 23 May 2023 17:50:53 -0700 (PDT)
Received: by mail-qk1-x72f.google.com with SMTP id af79cd13be357-75b2a2bf757so48314385a.2 for <saag@ietf.org>; Tue, 23 May 2023 17:50:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684889452; x=1687481452; h=to:references:message-id:cc:date:in-reply-to:from:subject :mime-version:content-transfer-encoding:from:to:cc:subject:date :message-id:reply-to; bh=weyophEtUkRPixjJ3I6JnMq9W0+ZgUcT5if0h2JbNYQ=; b=rjEyzrAZp3z5Cz+732zApVv+Qf5MQQCcWuYcOLxUgUVlFNZ0NH7iw9hLt1RRUjMN7/ 0BFW31FbAuZDZr2PzBl45ikfe6M9OuoYeuatOH5m4Ktvwy059vTG1MJskICDBZOwWCOS UHEnDwtP/uaNqzukAcEAOmLTgRTQA0oXKb8fVeQ+mqbTI3l4rUS05kmxKp+D3LqtccSH qVbTb+YICMffP3i4EWcfbVZkaQFJuUXHkKdJ5qU6+p+0k0z6PZFJ2jH+oHEStycmc/Am RMffPIDOE1RmpV7Nn34MBK6VKzddE/+JGs4yfW+14Ie73MP2zOYcusIyHah9SNbDtViD qksA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684889452; x=1687481452; h=to:references:message-id:cc:date:in-reply-to:from:subject :mime-version:content-transfer-encoding:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=weyophEtUkRPixjJ3I6JnMq9W0+ZgUcT5if0h2JbNYQ=; b=CzwyvE6Y0LITqFjNmEh0/BnuxrEARvRKxRwClJ0sM++GQRtmX2B+n18jmg+E0i1PVe Uhbs42mqJlX5ofPmu32gRFaB4u7YHnzHHaP61VTrygEExaloxxsSCXZD2Sp1i2UPCsov emBC2lPEby2c0drLep7xCA5+0YZnY8sXin2VNShLvwXzADQsZHA+M+0+8UuE3jETQhDv lyNI0t/vTObR2qf+aEOWxRQXkLieZGVtT2PHm2BfWLjUSTevXvaIrJozLd3T6vDxn4fb cgaDpVCuw2QP6QdLsQR8T2Dd/yyVc5c4/CXrT/PykBErL1iRK4W/A44Lj/1iThYtkg+3 9JNQ==
X-Gm-Message-State: AC+VfDxuI6P1eMhabvK8BxE7Tn63AL9d1vRkrldd0vrNq0dEWyxUMdmf oms3EnYh5fDmPOby5K1vQC0=
X-Google-Smtp-Source: ACHHUZ7Nz/HsRiQ66VdmhJVxVdWTwO4A2kBhstgTj3K9u04xqtydrs4fxwgyJhZQ+RpVbDpO4wMqkg==
X-Received: by 2002:a05:620a:4106:b0:75b:23a1:3668 with SMTP id j6-20020a05620a410600b0075b23a13668mr6817402qko.41.1684889451661; Tue, 23 May 2023 17:50:51 -0700 (PDT)
Received: from smtpclient.apple ([2601:246:5481:da50:40a4:78af:43d6:b31a]) by smtp.gmail.com with ESMTPSA id x15-20020ae9e90f000000b00748676d89e7sm2919661qkf.8.2023.05.23.17.50.50 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 23 May 2023 17:50:51 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail-7E7174CD-98CB-4447-88BE-3BF4F1C0CCC9"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (1.0)
From: Mark Baushke <mbaushke@gmail.com>
In-Reply-To: <03cb01d98dd4$1d6cc0f0$584642d0$@akayla.com>
Date: Tue, 23 May 2023 19:50:40 -0500
Cc: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>, Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org>, saag@ietf.org
Message-Id: <194D8C0F-0872-4354-975C-70D6AC22CCF7@gmail.com>
References: <03cb01d98dd4$1d6cc0f0$584642d0$@akayla.com>
To: Peter Yee <peter@akayla.com>
X-Mailer: iPad Mail (20E252)
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/QkkEoaqjflmqr-5JrHpV0FivJwo>
Subject: Re: [saag] sntrup761x25519-sha512
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 24 May 2023 00:50:57 -0000

Hi Peter,

Yes, RFC 4250 Section 4.6.1 specifies names be approved by IETF CONSENSUS as defined in section 3.2 with this definition:

  IETF CONSENSUS - New values are assigned through the IETF consensus
   process.  Specifically, new assignments are made via RFCs approved by
   the IESG.  Typically, the IESG will seek input on prospective
   assignments from appropriate persons (e.g., a relevant Working Group
   if one exists).

Your suggestion to move to 


  EXPERT REVIEW - approval by a Designated Expert is required.

makes sense to me as the experts are designated by RFC  8126 in section 5 via the IESG with the help of ADs… I think I got that right?

I would suspect that Kex method names and encryption algorithm names may not always be given to the same designated expert person.  I am uncertain if a mailing list for all of the SSH parameters table update approval should be the same individual or not.

I agree that the ssh-reg-review@ietf.org list could be used as a start and that group could choose the expert to use for a request.

-- Mark

[Sent from my iPad -- Please pardon any auto-fix created typos.]

On May 23, 2023, at 7:10 PM, Peter Yee <peter@akayla.com> wrote:



And, yes, I need to finish that off. I let it slip off my radar, but I’ll turn it around shortly.

 

                                -Peter

 

From: saag <saag-bounces@ietf.org> On Behalf Of Paul Wouters
Sent: Tuesday, May 23, 2023 4:57 PM
To: Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org>
Cc: saag@ietf.org
Subject: Re: [saag] sntrup761x25519-sha512

 

 

On Tue, May 23, 2023 at 6:37 PM Simon Josefsson <simon=40josefsson.org@dmarc.ietf.org> wrote:

"Martin Thomson" <mt@lowentropy.net> writes:


As far as I understand, the independent submission route is not possible
due to the IANA registration policy for the SSH KEX registry.

 

 

Paul

_______________________________________________
saag mailing list
saag@ietf.org
https://www.ietf.org/mailman/listinfo/saag