[lamps] Re-charter text for LAMPS to work on Post-Quantum, and PQ problem statement

[Mike Ounsworth <[e-mail]>]

Hi LAMPS,

After the discussion at 105, I'm going to take a step back from my "composite crypto" draft and propose:

A) LAMPS re-charter so that post-quantum is guaranteed time on future agendas.

B) As a group, we define the post-quantum certificates problem that we're trying to solve, and examine the whole space of possible solutions.


---
A) Proposed re-charter text:

> Quantum computers and the emerging post-quantum cryptographic algorithms present a unique agility challenge in that legacy algorithms may become compromised before we have full trust in, or adoption of, the replacement algorithms. The prevailing opinion in the crypto community is to address this uncertainty by layering all crypto operations with legacy and post-quantum algorithms during the transition period. LAMPS is tasked with specifying appropriate mechanism(s) by which PKIX and relying protocols can leverage public keys from two or more algorithms in the same cryptographically-protected transaction. Proposed mechanisms should address combining new and conventional algorithms, backwards compatibility, and increased certificate size. Both negotiated and non-negotiated protocols need to be considered.


The first discussion question is: what is appropriate for LAMPS adoption here? If it doesn't get adopted by LAMPS, maybe we need a specific PQ WG? Maybe we should run a BoF session at 106?


---
B) Problem statement and solutions overview; I put up a draft here:

https://datatracker.ietf.org/doc/draft-pq-pkix-problem-statement/



Let the discussions begin!


- - -
Mike Ounsworth | Software Security Architect
Entrust Datacard