Re: [saag] post-X509 cryptographic identities

[Eric Rescorla <[e-mail]>]

[Trimming extensively]

On Tue, Feb 11, 2020 at 1:06 PM Stephen Farrell <[e-mail]>
wrote:

>
> For me, I'd be interested in starting with a much
> less ambitious goal, e.g. perhaps how to integrate
> PQ algs into TLS and SSH without x.509


Well...
It's already straightforward to integrate PQ key establishment into TLS w/o
X.509.
It's also possible to do PQ authentication w/ Delegated Keys.

Finally, TLS supports new credential types via the "certiifcate_type"
extension, so if you were to define some new kind of credential structure,
TLS could take it easily. However, it's hard to see how that would actually
fit into existing deployments of TLS, which are already rooted in the
WebPKI; if we wanted to add PQ signatures to TLS for the Web, we would do
it by defining new algorithms for X.509.

-Ekr