[Sidrops] Master's thesis paper: PQC for the RPKI (and the"'null scheme")
Job Snijders <job@sobornost.net> Thu, 26 June 2025 14:16 UTC
Return-Path: <job@instituut.net>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 101DA39CEE7D for <sidrops@mail2.ietf.org>; Thu, 26 Jun 2025 07:16:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kD9ZRa0v7OAH for <sidrops@mail2.ietf.org>; Thu, 26 Jun 2025 07:15:59 -0700 (PDT)
Received: from mail-ej1-x631.google.com (mail-ej1-x631.google.com [IPv6:2a00:1450:4864:20::631]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5765239CEE75 for <sidrops@ietf.org>; Thu, 26 Jun 2025 07:15:58 -0700 (PDT)
Received: by mail-ej1-x631.google.com with SMTP id a640c23a62f3a-ade33027bcfso166233066b.1 for <sidrops@ietf.org>; Thu, 26 Jun 2025 07:15:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20230601.gappssmtp.com; s=20230601; t=1750947356; x=1751552156; darn=ietf.org; h=content-disposition:mime-version:message-id:subject:to:from:date :from:to:cc:subject:date:message-id:reply-to; bh=vNldyoTYl+wFKbgafOb5n3l9gQ+7d1doKVd5NKMmdds=; b=kNm/p5mZskFT0zvLD1fbthsx0jACGkRZwmXDXXpIbX50H/HSz2X0JUArG9l/JMPzJe vi3yNC5GP9zuQ3VK6BG1gV9jUo2b4L9VyhSa9AjCOOLKSSvLFIAa/+uo3yupKTn28qeg pKNNWfiPC7d+tOc7Fe+I9sr4gNum11Ews22SpgD0Mbhj3UPymnAtUvMhHni1QdgYDzBL q983ypT+bLDIZdXxGSd8JJCma7hnJ4MPyh18dqc21vCLsNMLgMK+MruvcIgCXUhAX/IM oHY+Odf1bjipEtfxc8QboSn64qT7D6eZX/Y+6bxyCTD8FHzl/ForcXLcj7uREwrCIYnJ A+2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750947356; x=1751552156; h=content-disposition:mime-version:message-id:subject:to:from:date :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=vNldyoTYl+wFKbgafOb5n3l9gQ+7d1doKVd5NKMmdds=; b=UPVu8Y+X5lAJGin5A2/6C4rv+QmxKUDZURJhqaoNL3AXiilzCrK5SuZyqsbUyxmw28 J4JL229dwB687GLYFmE2XUWTgcDyqjCTtYFnhFUhA/5TvLZxH9rxqE8m3yn/a1NxAiZ7 MAqZfbO60GoXpwiPokCCo1lkNwWe9MhkuHyg/EMxiWZqR+c7foY0HLdzJPEIY63kRSDk Zkjw57FX3h5XPXLITGjgSK7ZJyl9PkZLrLQPeTFAlUalfAfyq+7Gxqz5Rdx5mgp7QECW xUTOHIfKBK2LirLZj134Gcwux0orBNLfj5o1kG8JqPsFQ3DvNbInEFCgdXsA/eUxSACz 0Evw==
X-Gm-Message-State: AOJu0Yzu8ixlXJD5zmpgjujKa/FtgNSrukemtzeMN9FRtCbq8Yeo8hqW qpM6RJOnZnkR6nmyRfQaHUQiOpyeuZZMmefLjpjr7QRNZw+w9jKypQnjZOXTFOAjf31EIp3fRre jd6CVaXU=
X-Gm-Gg: ASbGncuGYhXIQ+te88osypBWoEbQ5sLIf9GqRH4ycIS3zXIczLKa5ZmVrd3izAyfgHz f5L/BBeMlyXP/tr2ZszyUUUZPLTclmZB5+NN+uLKo2C5u3VUkn9aRvO5gfDHUSU3rA0OQPXj5PC yGjxPKn++f4gyR3tFLQGpsLZlcYAbmc/s5fDgvM2eyndqLsoze2mqud6WtbF+XJ18rJk5ZwukqM 2gknr0XDB25wdUf+AQYSZMP/aTx0sJHxpGHgogwtiKsD0FshhXxXPwP2xT7Q7VegnLLauvj3UIc I8t9CM+gsyU/0nbR0xbQq1s/BlddXEHZu96KKVDU0J7o0jZ7od2+0m1n
X-Google-Smtp-Source: AGHT+IGo2hY0G6qhOWWcAXaENiIc8t68Y9gAkb8oBjGfpZ/PnfwkICehoE/EgJufD4nAIU8fjCAmqw==
X-Received: by 2002:a17:907:fdc1:b0:ae0:cae0:cb35 with SMTP id a640c23a62f3a-ae0cae0cc63mr511327266b.37.1750947350306; Thu, 26 Jun 2025 07:15:50 -0700 (PDT)
Received: from feather.sobornost.net ([192.147.168.2]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ae2235accdesm4942566b.154.2025.06.26.07.15.47 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 26 Jun 2025 07:15:47 -0700 (PDT)
Date: Thu, 26 Jun 2025 14:15:46 +0000
From: Job Snijders <job@sobornost.net>
To: sidrops@ietf.org, dirk.doesburg@sidn.nl
Message-ID: <aF1T-3DhH879Wlcj@anton.sobornost.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="iazvsGYdtRDj015o"
Content-Disposition: inline
X-Clacks-Overhead: GNU Erik Bais
Message-ID-Hash: ALTEQAQ7C6UWNVCZH6ABQSUPXRHII3FX
X-Message-ID-Hash: ALTEQAQ7C6UWNVCZH6ABQSUPXRHII3FX
X-MailFrom: job@instituut.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Sidrops] Master's thesis paper: PQC for the RPKI (and the"'null scheme")
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/T5PvNu_fYa8ZIV_dfhsx3K9_Cd8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>
Dear working group, I'd like to bring an interesting research paper to your attention: "Post-Quantum Cryptography for the RPKI" authored by Dirk Doesburg. The paper is attached to this message, a summary is available here: https://www.sidnlabs.nl/en/news-and-blogs/thesis-pqc-for-the-rpki I'm pleased to see more research has been conducted on the topic of algorithm agility in the RPKI. To me the problem space isn't so much about "which algorithm to pick next?", but rather "how do we ever go about deploying any new algorithm?". This paper provides many helpful insights. The paper also challenges the RPKI's current approach to signature placement. The author argues there may be an unnecessary repetition in the construction of Signed Objects, that a certain process step can perhaps be fully subsumed in another feature and in doing so offset the cost of a more resource intensive signature scheme (which most PQ schemes are), or ... we just take the resulting shrinkage as a win. :) However, this proposed "null scheme" currently is entirely theoretical in nature: as of yet no test objects have been generated. As I'm very interested in the RPKI's performance, I'd love to contribute to a proof-of-concept to better understand the feasability of the proposed approach and any potential trade-offs. The claims on robustness and security properties will of course need to be verified and triple-checked. Stay tuned for future updates. Thank you Dirk for sharing your work with the world! Kind regards, Job
- [Sidrops] Master's thesis paper: PQC for the RPKI… Job Snijders
- [Sidrops] Re: Master's thesis paper: PQC for the … Randy Bush
- [Sidrops] Re: Master's thesis paper: PQC for the … Luigi Iannone
- [Sidrops] Re: Master's thesis paper: PQC for the … Randy Bush
- [Sidrops] Re: Master's thesis paper: PQC for the … Martin Hoffmann
- [Sidrops] Re: Master's thesis paper: PQC for the … Tim Bruijnzeels
- [Sidrops] Re: Master's thesis paper: PQC for the … Russ Housley
- [Sidrops] Re: Master's thesis paper: PQC for the … Russ Housley
- [Sidrops] Re: Master's thesis paper: PQC for the … Randy Bush
- [Sidrops] Re: Master's thesis paper: PQC for the … George Michaelson
- [Sidrops] Re: Master's thesis paper: PQC for the … Ties de Kock
- [Sidrops] Re: Master's thesis paper: PQC for the … Loganaden Velvindron
- [Sidrops] Re: Master's thesis paper: PQC for the … dirk
- [Sidrops] Re: Master's thesis paper: PQC for the … Ties de Kock
- [Sidrops] Re: Master's thesis paper: PQC for the … Nicolas Fiumarelli
- [Sidrops] Re: Master's thesis paper: PQC for the … Tim Bruijnzeels