[lamps] Re: WG Last Call for draft-ietf-lamps-kyber-certificates-07

Russ Housley <housley@vigilsec.com> Fri, 17 January 2025 21:06 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 381E8C151532 for <spasm@ietfa.amsl.com>; Fri, 17 Jan 2025 13:06:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.102
X-Spam-Level:
X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=vigilsec.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uvvJ97HD8Pv3 for <spasm@ietfa.amsl.com>; Fri, 17 Jan 2025 13:06:24 -0800 (PST)
Received: from mail3.g24.pair.com (mail3.g24.pair.com [66.39.134.11]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE315C15109E for <spasm@ietf.org>; Fri, 17 Jan 2025 13:06:24 -0800 (PST)
Received: from mail3.g24.pair.com (localhost [127.0.0.1]) by mail3.g24.pair.com (Postfix) with ESMTP id A1F4F80291 for <spasm@ietf.org>; Fri, 17 Jan 2025 16:06:23 -0500 (EST)
Received: from smtpclient.apple (unknown [96.241.2.243]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail3.g24.pair.com (Postfix) with ESMTPSA id 966531AFE1C for <spasm@ietf.org>; Fri, 17 Jan 2025 16:06:23 -0500 (EST)
From: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_10A1EC1D-AF2D-4309-A7F6-A8C4341C8F2C"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.200.121\))
Date: Fri, 17 Jan 2025 16:06:13 -0500
References: <50AEFA36-6AEC-47BA-B0A7-3EDC6C88FCED@vigilsec.com> <CAAYYu_tV0fZgmet2z_--5YFph6SSe0d9nXvtX_hJWO12-5kZsg@mail.gmail.com> <87fs8mmfrl.fsf@fifthhorseman.net> <79D27AE6-EAD6-4C0B-9036-7F6A8174B9BB@vigilsec.com> <6F65CFE7-41E3-4B16-8DE6-0BB75AFDEC42@vigilsec.com> <1B633295-9219-4B86-B241-E6095E52D209@vigilsec.com>
To: LAMPS <spasm@ietf.org>
In-Reply-To: <1B633295-9219-4B86-B241-E6095E52D209@vigilsec.com>
Message-Id: <E2E053E1-056D-40E7-8BEB-1BC821C57847@vigilsec.com>
X-Mailer: Apple Mail (2.3826.200.121)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vigilsec.com; h=from:content-type:mime-version:subject:date:references:to:in-reply-to:message-id; s=pair-202402141609; bh=kVGPMwVtslBhAwhnIGOG+q0nEIRNTuYZ8kA4b9jaMnY=; b=UVAVmNMVaLdn+lLFE3mEpbIZa8DkgZgiOTZhepg4bjN4w8dlgXbRvRH6jjesbi+gu5kuQ+v5yY7ngj2mLnwDrh6dX+ZRpquqcqU6oiLPadxynIjNTrV9RPYT43cQTDQiYg0z9/ZsVN1mOXawMKSndYOhkWXEiu6SvmGMS2E3ltlI22Cg0lM/iCV5jd8oJjzUSw4utrxCJrH6m/ZlKOz2Cc8wn59uNIrUnPx6/zKqFuS6qhDeRhUcKCONIjs0rm2EPxJM8KgZAUr8pDpEMZdpnMiTpPItfa1EUDNve1hlkW+JSgLZjf6iHLmfWQ8oH17qrL/lhUYnyYtjKFebqVfZdw==
X-Scanned-By: mailmunge 3.11 on 66.39.134.11
Message-ID-Hash: BATWXA6DAMQXM2E5PLMZLDMGJJR3EBN6
X-Message-ID-Hash: BATWXA6DAMQXM2E5PLMZLDMGJJR3EBN6
X-MailFrom: housley@vigilsec.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [lamps] Re: WG Last Call for draft-ietf-lamps-kyber-certificates-07
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/GKFhHfBeCgf8hQQvhUcyOJ6M-kI>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>

In response to the WG Last Call, Dan Bernstein <djb@cr.yp.to <mailto:djb@cr.yp.to>> pointed out some potential IPR.

BCP 79 makes this important point:

   (b) The IETF, following normal processes, can decide to use
       technology for which IPR disclosures have been made if it decides
       that such a use is warranted.

The following information is provided so that people can make their own determination.


(1) NIST has signed patent licenses regarding patents US9094189 (Gaborit and Aguilar-Melchor) and US9246675 (Ding).  NIST has release all of the information about the licenses that it can:

https://csrc.nist.gov/csrc/media/Projects/post-quantum-cryptography/documents/selected-algos-2022/nist-pqc-license-summary-and-excerpts.pdf


(2) Dan also pointed to a message where KCL publicly claimed two additional patents:

https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/Fm4cDfsx65s/m/F63mixuWBAAJ

In that same mail archive, the following statement was made by the same person regarding these patents:

https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/Fm4cDfsx65s/m/2NzgqoTaBAAJ

After a bit of research, the patents involved appear to be available here:

https://patents.google.com/patent/CN107566121A/en

https://patents.google.com/patent/CN108173643B/en


If this information changes a view that you have already expressed during this WG Last Call, please post a follow-up message.

Thanks,
 Russ


> On Jan 8, 2025, at 3:56 PM, Russ Housley <housley@vigilsec.com> wrote:
> 
> Title: Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the
>       Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM)
> Authors: S. Turner, P. Kampanakis, J. Massimo, and B. Westerbaan
> Datatracker: https://datatracker.ietf.org/doc/draft-ietf-lamps-kyber-certificates
> 
> Should the LAMPS WG ask the IESG to publish this document as a Standards-Track RFC?  Please respond to this WG Last Call by 22 January 2025.
> 
> For the LAMPS WG Chairs,
> Russ