Re: [lamps] [EXTERNAL] Re: I-D Action: draft-ietf-lamps-cms-sphincs-plus-02.txt

Hi John.

The document authors had a discussion about this, and felt that the need for SHA-512 for the 192 and 256 secritly levels made SHAKE256 fare more attractive.  This input was provided to the SPHINCS+ author team, and they are considering it.  We'll see what NIST does for the standard.

Russ

> On May 18, 2023, at 2:38 PM, John Gray <John.Gray@entrust.com> wrote:
> 
> I was looking at the OID assignments, and noticed for 128s and 128f you specified shake and sha2.   However, you don't specify sha2 for 192 and 256.  I know that the final assignments will probably look much different, but I was just curious as to why the use of sha2 was limited to the 128 size?
> 
> Thanks,
> 
> John Gray
> Entrust
> 
> -----Original Message-----
> From: Spasm <spasm-bounces@ietf.org> On Behalf Of Russ Housley
> Sent: Wednesday, May 17, 2023 11:05 AM
> To: LAMPS <spasm@ietf.org>
> Subject: [EXTERNAL] Re: [lamps] I-D Action: draft-ietf-lamps-cms-sphincs-plus-02.txt
> 
> WARNING: This email originated outside of Entrust.
> DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.
> 
> ______________________________________________________________________
> This is a fairly significant update.  It goes from three OIDs to eight OIDs for the SPHINCS+ algorithms.  Of course, NIST has the final say on how many will actually be allocated.
> 
> Russ
> 
> 
>> On May 17, 2023, at 11:02 AM, internet-drafts@ietf.org wrote:
>> 
>> 
>> A New Internet-Draft is available from the on-line Internet-Drafts
>> directories. This Internet-Draft is a work item of the Limited
>> Additional Mechanisms for PKIX and SMIME (LAMPS) WG of the IETF.
>> 
>>  Title           : Use of the SPHINCS+ Signature Algorithm in the Cryptographic Message Syntax (CMS)
>>  Authors         : Russ Housley
>>                    Scott Fluhrer
>>                    Panos Kampanakis
>>                    Bas Westerbaan
>>  Filename        : draft-ietf-lamps-cms-sphincs-plus-02.txt
>>  Pages           : 14
>>  Date            : 2023-05-17
>> 
>> Abstract:
>>  SPHINCS+ is a stateless hash-based signature scheme.  This document
>>  specifies the conventions for using the SPHINCS+ stateless hash-based
>>  signature algorithm with the Cryptographic Message Syntax (CMS).  In
>>  addition, the algorithm identifier and public key syntax are
>>  provided.
>> 
>> The IETF datatracker status page for this Internet-Draft is:
>> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-iet
>> f-lamps-cms-sphincs-plus/__;!!FJ-Y8qCqXTj2!fhq0txb2yHYuBCt6QomrHO3y04j
>> OgLNf-pJ4o7hpi6dF4QMHS1CSMCnaDakX28nvYmCemG7R0QeM1ycXf-EkNWBJ$
>> 
>> There is also an HTML version available at:
>> https://urldefense.com/v3/__https://www.ietf.org/archive/id/draft-ietf
>> -lamps-cms-sphincs-plus-02.html__;!!FJ-Y8qCqXTj2!fhq0txb2yHYuBCt6QomrH
>> O3y04jOgLNf-pJ4o7hpi6dF4QMHS1CSMCnaDakX28nvYmCemG7R0QeM1ycXf6vhjMNF$
>> 
>> A diff from the previous version is available at:
>> https://urldefense.com/v3/__https://author-tools.ietf.org/iddiff?url2=
>> draft-ietf-lamps-cms-sphincs-plus-02__;!!FJ-Y8qCqXTj2!fhq0txb2yHYuBCt6
>> QomrHO3y04jOgLNf-pJ4o7hpi6dF4QMHS1CSMCnaDakX28nvYmCemG7R0QeM1ycXf5tcGW
>> 8C$
>> 
>> Internet-Drafts are also available by rsync at
>> rsync.ietf.org::internet-drafts
> 
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/spasm__;!!FJ-Y8qCqXTj2!fhq0txb2yHYuBCt6QomrHO3y04jOgLNf-pJ4o7hpi6dF4QMHS1CSMCnaDakX28nvYmCemG7R0QeM1ycXf7YazXZM$
> Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.