Re: [lamps] I-D Action: draft-ietf-lamps-cms-kyber-02.txt

Hi,

This version is a significant rewrite to fully use KEMRecipientInfo from
cms-kemri (remove KEM-TRANS).  The rewrite follows the structure of
rfc59990bis.

During the review of the draft it was pointed out that Section 1.4 "CMS
KEMRecipientInfo Processing Summary" is basically a less complete version of
Section 2 " KEM Processing Overview" from cms-kemri, and could be confusing
to readers.  I based this section on the same one from Section 1.3 of
rfc5990bis.  Does the WG find this section useful, or should it be removed
here (and presumably in rfc5990bis)?

Some things left to do on this draft, besides obviously waiting for FIPS203
to publish OIDs:
- wait for KMAC-based KDF OIDs and switch to those as MTI instead of
HKDF-with-SHA3
- harmonize Security Considerations between this draft and
draft-ietf-lamps-kyber-certificates
- add examples
- add ASN.1 to ASN.1 section, or remove ASN.1 section? No new ASN.1 is
defined in this draft, so is an ASN.1 section needed?

Thanks,
Daniel, Julien, Mike

-----Original Message-----
From: Spasm <spasm-bounces@ietf.org> On Behalf Of internet-drafts@ietf.org
Sent: Monday, February 26, 2024 10:34 AM
To: i-d-announce@ietf.org
Cc: spasm@ietf.org
Subject: [lamps] I-D Action: draft-ietf-lamps-cms-kyber-02.txt

Internet-Draft draft-ietf-lamps-cms-kyber-02.txt is now available. It is a
work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS) WG
of the IETF.

   Title:   Use of ML-KEM in the Cryptographic Message Syntax (CMS)
   Authors: Julien Prat
            Mike Ounsworth
            Daniel Van Geest
   Name:    draft-ietf-lamps-cms-kyber-02.txt
   Pages:   15
   Dates:   2024-02-26

Abstract:

   The Module-Lattice-based Key-Encapsulation Mechanism (ML-KEM)
   Algorithm is a one-pass (store-and-forward) cryptographic mechanism
   for an originator to securely send keying material to a recipient
   using the recipient's ML-KEM public key.  Three parameters sets for
   the ML-KEM Algorithm are specified by NIST in [FIPS203-ipd] [EDNOTE:
   Change to [FIPS203] when it is published].  In order of increasing
   security strength (and decreasing performance), these parameter sets
   are ML-KEM-512, ML-KEM-768, and ML-KEM-1024.  This document specifies
   the conventions for using ML-KEM with the Cryptographic Message
   Syntax (CMS) using KEMRecipientInfo as specified in
   [I-D.ietf-lamps-cms-kemri].

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-kyber/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-lamps-cms-kyber-02.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-cms-kyber-02

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts

_______________________________________________
Spasm mailing list
Spasm@ietf.org
https://www.ietf.org/mailman/listinfo/spasm