IETF Logo Mail Archive

Re: [lamps] Hybrid pkix isn't needed

Carl Wallace <carl@redhoundsoftware.com> Tue, 31 January 2023 10:49 UTC

Return-Path: <carl@redhoundsoftware.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 849CBC14F749 for <spasm@ietfa.amsl.com>; Tue, 31 Jan 2023 02:49:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMdSW6rjqv1U for <spasm@ietfa.amsl.com>; Tue, 31 Jan 2023 02:49:30 -0800 (PST)
Received: from mail-qt1-x82d.google.com (mail-qt1-x82d.google.com [IPv6:2607:f8b0:4864:20::82d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8168BC14F738 for <spasm@ietf.org>; Tue, 31 Jan 2023 02:49:30 -0800 (PST)
Received: by mail-qt1-x82d.google.com with SMTP id m26so12846088qtp.9 for <spasm@ietf.org>; Tue, 31 Jan 2023 02:49:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=content-transfer-encoding:mime-version:in-reply-to:references :thread-topic:message-id:cc:to:from:subject:date:user-agent:from:to :cc:subject:date:message-id:reply-to; bh=yR4yl2WI09N3joaBZHZUT2e/dQ6LH6A8YnCoky8J7Ac=; b=IrwRgjIWmHh7uOG567ls+EpYvU+LsguPuIgRXKdgqo3LKBiYUVhZ7Vufw7HYMNjB83 sC9Kl7zyCHb4fbWG8G8dfjcDncssaTS6S+5aXjhuKeUFoUECX5JfsufYhSX6Mq3QOQm7 E5Q/dUNi/cwe7B7OxIzJObW26k9ue8AMSHLPE=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:in-reply-to:references :thread-topic:message-id:cc:to:from:subject:date:user-agent :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=yR4yl2WI09N3joaBZHZUT2e/dQ6LH6A8YnCoky8J7Ac=; b=yn3py1R2AirV4tZVpOZ7G/Hz/IksrxfMRPOExpO+JQdaiO8kb7SEeVc3fgnWmZO+jT ft3ASfHWJxomV57bnHFiQni3tLEQ2I8eqvzrN9z8EgHUYA45Ms6Fw22P2lXBjFvu4iIP hD5pky+qM/NHsWoGMyJw26J0h3wD3Qf5EgZQIYVoTrrFkSOw8HzemfIp3pNxwu1sOnN5 Zl239H2NYbTceHIQ34wYP0kq4A+ojggfLI/1LXyc5Csmy7ekaLHUxD38qfHq6yxXMZ38 LQwDAqUtZjRDwbSl+4piOxS4PPm5Dsn2KY14m8z9N51BZGMDz7duTKo8zvSaogPWIzAD XvpA==
X-Gm-Message-State: AO0yUKX87B5Rw2yUaAZhbQTZ5Tj4rgndpLyT9QkY29ZFcIgER6zrL9PN hnjEpGjGHG6jCgR3upCYLTLO5g==
X-Google-Smtp-Source: AK7set/QD2XMIonGlWzPcFTqY7wuUsL5pK+cIxmiqMDWkA4xkZI8HXDGTwFQIBpYQpTqdO9gTmOJnA==
X-Received: by 2002:a05:622a:1911:b0:3b8:68fa:afc6 with SMTP id w17-20020a05622a191100b003b868faafc6mr12932103qtc.29.1675162168949; Tue, 31 Jan 2023 02:49:28 -0800 (PST)
Received: from [192.168.2.16] (pool-74-96-253-253.washdc.fios.verizon.net. [74.96.253.253]) by smtp.gmail.com with ESMTPSA id x14-20020a05620a258e00b0071b368cf074sm6288114qko.118.2023.01.31.02.49.28 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 31 Jan 2023 02:49:28 -0800 (PST)
User-Agent: Microsoft-MacOutlook/16.69.23011802
Date: Tue, 31 Jan 2023 05:49:28 -0500
From: Carl Wallace <carl@redhoundsoftware.com>
To: Watson Ladd <watsonbladd@gmail.com>, Seo Suchan <tjtncks@gmail.com>
CC: spasm@ietf.org
Message-ID: <E8410219-6231-423B-8213-5ABCEA0ACCB9@redhoundsoftware.com>
Thread-Topic: [lamps] Hybrid pkix isn't needed
References: <CACsn0c=uPvp_hmakpfPff8WkYh1q9NhjfTJYs7iFu_czL2yAyA@mail.gmail.com> <DS7PR12MB5983E36300151BFC47E5CB34AAD39@DS7PR12MB5983.namprd12.prod.outlook.com> <CH0PR11MB57392033396F181A9853FAD79FD39@CH0PR11MB5739.namprd11.prod.outlook.com> <CACsn0c=n5TLZRywpRCQhpyoxX65OfA9p6e5iz9jKnnEVSX4zmQ@mail.gmail.com> <f04487ba-594d-ae24-828a-e08889c3b51e@gmail.com> <CACsn0cm_ggt-mzX2Sd_29bMBOBbBj6ozouZu0gSzg3LY2bDN-A@mail.gmail.com>
In-Reply-To: <CACsn0cm_ggt-mzX2Sd_29bMBOBbBj6ozouZu0gSzg3LY2bDN-A@mail.gmail.com>
Mime-version: 1.0
Content-type: text/plain; charset="UTF-8"
Content-transfer-encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/6IGsWS9_bnqUaZy1rf5OPZkg7ic>
Subject: Re: [lamps] Hybrid pkix isn't needed
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jan 2023 10:49:34 -0000


On 1/30/23, 2:20 PM, "Spasm on behalf of Watson Ladd" <spasm-bounces@ietf.org <mailto:spasm-bounces@ietf.org> on behalf of watsonbladd@gmail.com <mailto:watsonbladd@gmail.com>> wrote:


On Mon, Jan 30, 2023 at 10:57 AM Seo Suchan <tjtncks@gmail.com <mailto:tjtncks@gmail.com>> wrote:
>
> Think there are two kinds of fail mode hybrid cert try to guard against:
> Quantum computer came out breaking classical asymmetrical crypto, or PQ
> algorithm we chooses was not that great and it broken down by new
> classical attack


Hash based schemes are secure if any signature scheme is secure. Even
if we want to hybridize, having hybrid keys in certs seems a lot
simpler to me than tying multiple certs through complex mechanisms.

[CW] The PQC hackathon during IETF115 bears out that composite is not difficult to implement. Interoperability was demonstrated between several implementations fairly quickly.

v2.27.8 | Report a Bug | By Email | System Status