Re: [lamps] Do we have a FALCON draft yet?

Not that I know of. If someone picks this up, may I urge them to add a
warning to the following effect in the earliest draft.

The Falcon signing procedure is difficult to implement in constant time
because of its use of floating point arithmetic. By default, it should be
assumed that the timing of the creation of the signature leaks the private
key. Thus, without careful consideration, it should not be used when
signatures are created on-the-fly such as for TLS handshakes. It is safe if
floating-point emulation is used (which comes at a performance penalty) or
a (custom) FPU with sufficient constant-time guarantees. Verification does
not use floating-point arithmetic and does come with the same concerns.

Best,

 Bas

On Sun, Nov 20, 2022 at 12:56 AM Mike Ounsworth <Mike.Ounsworth=
40entrust.com@dmarc.ietf.org> wrote:

> For completeness, we also have Kyber [3].
>
>
>
> [3]: https://datatracker.ietf.org/doc/draft-ietf-lamps-kyber-certificates/
>
>
>
> ---
>
> *Mike* Ounsworth
>
>
>
> *From:* Spasm <spasm-bounces@ietf.org> *On Behalf Of * Mike Ounsworth
> *Sent:* November 19, 2022 5:53 PM
> *To:* 'LAMPS' <spasm@ietf.org>
> *Subject:* [EXTERNAL] [lamps] Do we have a FALCON draft yet?
>
>
>
> WARNING: This email originated outside of Entrust.
> DO NOT CLICK links or attachments unless you trust the sender and know the
> content is safe.
> ------------------------------
>
> Hi LAMPS,
>
>
>
> We have drafts for SPHINCS+ [1] and Dilithium [2] in LAMPS.
>
>
>
> Has anyone started one for FALCON yet? (I need something to
> cross-reference the composite draft against)
>
>
>
>
>
> [1]: https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-sphincs-plus/
> <https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/draft-ietf-lamps-cms-sphincs-plus/__;!!FJ-Y8qCqXTj2!fJ0iZFzue-XVZBbJ18itKI-6e6y12C3g-v1B6dzJyGsg9sgUnSr-uGDYsyjTI-fvpuSJoWVhNP0h3vCR5xxUkcbW4I-VqfjlT2DqrQ8jQA$>
>
> [2]:
> https://datatracker.ietf.org/doc/draft-massimo-lamps-pq-sig-certificates/
> <https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/draft-massimo-lamps-pq-sig-certificates/__;!!FJ-Y8qCqXTj2!fJ0iZFzue-XVZBbJ18itKI-6e6y12C3g-v1B6dzJyGsg9sgUnSr-uGDYsyjTI-fvpuSJoWVhNP0h3vCR5xxUkcbW4I-VqfjlT2A2XHyKVQ$>
>
> ---
> Mike Ounsworth
> Software Security Architect, Entrust
>
>
>
> *Any email and files/attachments transmitted with it are confidential and
> are intended solely for the use of the individual or entity to whom they
> are addressed. If this message has been sent to you in error, you must not
> copy, distribute or disclose of the information it contains. Please notify
> Entrust immediately and delete the message from your system.*
> _______________________________________________
> Spasm mailing list
> Spasm@ietf.org
> https://www.ietf.org/mailman/listinfo/spasm
>