Re: [Secdispatch] Problem statement for post-quantum multi-algorithm PKI

Ira McDonald <> Mon, 16 September 2019 21:59 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id E81F51201A3 for <>; Mon, 16 Sep 2019 14:59:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (2048-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id 6vvOO-Iwdf_T for <>; Mon, 16 Sep 2019 14:59:32 -0700 (PDT)
Received: from ( [IPv6:2607:f8b0:4864:20::e2f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 62CAA120178 for <>; Mon, 16 Sep 2019 14:59:32 -0700 (PDT)
Received: by with SMTP id w195so679431vsw.11 for <>; Mon, 16 Sep 2019 14:59:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=TRVfsq84D+2bI/6o+qE64xij4G+cf5L5TaRm8p7fRos=; b=CVmu3jx+k/CTYIt2SSLGFIFL3cDB4+vosJLnzETZv8b+4gcbQH9cni2ZNUfaQ9cWv2 SjVvcxWDmSiaSq7/jWg5GGlJgEjCVzxR1rei+yKwPJt2TlnMKomcT0Pw3bjIgyXKYQCh ttryI0lHyWew7bXPrObL9fj7cVsGhkZQYd1XBkQRVw5bhehOJsSNR2KUogRZ7t5yPurN IXu3LnIRXbG1+JoBW4vxyl2ECa8zpr2f7tFBx57P5iyaq1f+6eCzUl0XwshEWNsNGbHf bMBxC00Xgp6zsMpYvUzn37X4QwaTLrS+Zq9XgllGXy+6vwn7nCVmecWPVBTBODzu5vwx fZ1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=TRVfsq84D+2bI/6o+qE64xij4G+cf5L5TaRm8p7fRos=; b=m9KkiZ0p+3OH9k3nwAtU9NSelfCILxE9v5rhGCDKErpDVXVggWxKd9INjsbIgL9dUe BIuKIFmJHQJQpix4es6y5WXj6eP8eBGUmdF6Aqdxfzx2Q+Apf7nYtP4Sgn/689egJzqq AL20/caAjGE6fCF/bCiFg4/AEjnc1qVHi4uGnQjBilfK3ilNNqYU3onFFiiDywkWrD+I DflRLg2VG6njLFB+tMxReK5NYHrjYOYCD03giiT5KsJDUhKyr7AlhlXUR23yJ3E5KISB aBkSYDoFhUoQIGlX3+sBo0ntzHf1KWragSwafhb5CKXp8Khl4CUZspjd4Ms2pSuV9es/ 05Yw==
X-Gm-Message-State: APjAAAUr7jrC7xZD0agwnYcUeDl9wgsOc9F5GIi3v8UatT5wqfhoHWxr /nIFyWXtJ2uG2p1vg4eqM0NaMpw/4FSUF0oPOY4=
X-Google-Smtp-Source: APXvYqybybyhg+EN2INZmPKFoOMmLMsRCQxQ8vXtvMc6Wh31RgLR9tQEiKYxh4FW3oHJHdF/tXolF2wcXiFAQ42Cz98=
X-Received: by 2002:a67:f9cf:: with SMTP id c15mr134806vsq.240.1568671171558; Mon, 16 Sep 2019 14:59:31 -0700 (PDT)
MIME-Version: 1.0
References: <> <> <> <> <> <> <> <> <> <>
In-Reply-To: <>
From: Ira McDonald <>
Date: Mon, 16 Sep 2019 17:59:21 -0400
Message-ID: <>
To: "Salz, Rich" <>, Ira McDonald <>
Cc: Stephen Farrell <>, "" <>
Content-Type: multipart/alternative; boundary="000000000000f342b00592b2b75b"
Archived-At: <>
Subject: Re: [Secdispatch] Problem statement for post-quantum multi-algorithm PKI
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Dispatch <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 16 Sep 2019 21:59:35 -0000

Hi Rich,

The autos *do* already support numerous algorithms (including
nation-specific mandatory ones).  They do update their crypto
(for bug-fixes and for new algorithms).  But when new algorithms
are from an entirely different family and need hardware acceleration
to achieve hard timing constraints *within* vehicle internal networks,
there is no practical solution.  Auto OEMs and parts suppliers are
not going to dramatically increase the cost of their ECUs in order
to add FPGAs or something else to allow field upgrades of their
hardware acceleration.

I perceive that this list doesn't care about this issue.  Beware your
lovely "connected cars" in future years.  I'll give up doing a poor
job of explaining the problem on this list.

- Ira

Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
PO Box 221  Grand Marais, MI 49839  906-494-2434

On Mon, Sep 16, 2019 at 5:53 PM Salz, Rich <> wrote:

> So why are multiple algorithms needed if the target platform (cars) cannot
> update to handle them?