Re: [lamps] PQC X.509 115 Hackathon

[Tomas Gustavsson <[e-mail]>]

Great idea. I will not be able to join unfortunately, but would have liked to. In your list mostly everything is important for sure.

Perhaps from my side I currently think that signatures on certificates, CRLs, CSRs, etc feel pretty stable, certain that it will be right in the end. Some other things you mention are more often overlooked. The basic ability to encode/decode public and private keys from PEM and PKCS#12 will be vital to not waste a lot of time implementing and interoperate.

Just as an example, the two versions of encoding for EdDSA keys cost some hours of work, and some unnecessary if's in code. If we can avoid such seemingly simple annoyances that would be good.

Cheers,
Tomas

________________________________
From: Spasm <[e-mail]> on behalf of Mike Ounsworth <Mike.Ounsworth=[e-mail]>
Sent: Wednesday, October 5, 2022 3:00 AM
To: 'LAMPS' <[e-mail]>; [e-mail] <[e-mail]>
Subject: [lamps] PQC X.509 115 Hackathon

CAUTION: External Sender - Be cautious when clicking links or opening attachments. Please email [e-mail] with any questions.


Hi LAMPS and people interested in PQC!



As suggested at 114, my colleague John Gray and I would like to do a 115 Hackathon on PQ keys and signatures in X.509 / PKIX.



We are suggesting to play with Dilithium, Falcon, Sphincs+, and Composite signing algorithms in Certs, CRLs, CSRs, PKCS#12s, CMS SignedData, maybe OCSP Responses, maybe Timestamping, maybe CMP. We can bring: the Entrust Toolkit (which we can hack at), Bounce Castle, OpenQuantumSafe-openssl, OpenCA (easier if Max Pala is there, but we can probably figure out how to build it).



The point of the hackathon, I think, is going to be OIDs, and public key / private key formats (ex.: the differences between Dilithium and Falcon encodings in draft-uni-qsckeys, and draft-massimo-lamps-pq-sig-certificates).







Question 1: are others interested in joining us at the hackathon? (no point is signing up for a hackathon spot if we’re the only ones there)



Question 2: whether or not you're joining, what PQ X.509 / PKIX things would you like to see working with Dilithium, Falcon, Sphincs+, Composite?





---
Mike Ounsworth
Software Security Architect, Entrust



Any email and files/attachments transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains. Please notify Entrust immediately and delete the message from your system.