Re: [lamps] Fwd: New Version Notification for draft-housley-cms-mix-with-psk-00.txt

"Panos Kampanakis (pkampana)" <pkampana@cisco.com> Mon, 13 November 2017 21:53 UTC

From: "Panos Kampanakis (pkampana)" <pkampana@cisco.com>
To: Russ Housley <housley@vigilsec.com>, SPASM <spasm@ietf.org>
Thread-Topic: [lamps] Fwd: New Version Notification for draft-housley-cms-mix-with-psk-00.txt
Thread-Index: AQHTXJJnvtwF0ibx70yqT6Xv0DHsVKMS2Tmw
Date: Mon, 13 Nov 2017 21:53:44 +0000
Message-ID: <0eb2dd1b4c9b477e8a7f032f98266ce2@XCH-ALN-010.cisco.com>
References: <151058607297.580.10143889052435378840.idtracker@ietfa.amsl.com> <1FB8E6DC-4EB2-4812-AA10-3415396EC984@vigilsec.com>
In-Reply-To: <1FB8E6DC-4EB2-4812-AA10-3415396EC984@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_0eb2dd1b4c9b477e8a7f032f98266ce2XCHALN010ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/J7BQdC7-b-qR5aVVTYqE-ccKU2s>
Subject: Re: [lamps] Fwd: New Version Notification for draft-housley-cms-mix-with-psk-00.txt
Precedence: list

Hi Russ,
This is a useful doc. It resembles the IPSECME work for IKEv2 as a temporary solution until NIST comes up with new public key crypto algos. I would suggest to be more prescriptive on the KDFs, the entropy and the key sizes so they are long enough (at least 256-bits as you are suggesting with AES-256) to be resistant against a quantum computer.
Panos

From: Spasm [mailto:spasm-bounces@ietf.org] On Behalf Of Russ Housley
Sent: Monday, November 13, 2017 10:16 AM
To: SPASM <spasm@ietf.org>
Subject: [lamps] Fwd: New Version Notification for draft-housley-cms-mix-with-psk-00.txt

People on this list may find this new I-D interesting,

Russ

From: internet-drafts@ietf.org<mailto:internet-drafts@ietf.org>
Subject: New Version Notification for draft-housley-cms-mix-with-psk-00.txt
Date: November 13, 2017 at 10:14:32 AM EST
To: "Russell Housley" <housley@vigilsec.com<mailto:housley@vigilsec.com>>, "Russ Housley" <housley@vigilsec.com<mailto:housley@vigilsec.com>>

A new version of I-D, draft-housley-cms-mix-with-psk-00.txt
has been successfully submitted by Russell Housley and posted to the
IETF repository.

Name:             draft-housley-cms-mix-with-psk
Revision:        00
Title:               Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS)
Document date:          2017-11-13
Group:             Individual Submission
Pages:             11
URL:            https://www.ietf.org/internet-drafts/draft-housley-cms-mix-with-psk-00.txt
Status:         https://datatracker.ietf.org/doc/draft-housley-cms-mix-with-psk/
Htmlized:       https://tools.ietf.org/html/draft-housley-cms-mix-with-psk-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-housley-cms-mix-with-psk-00

Abstract:
  The invention of a large-scale quantum computer would pose a serious
  challenge for the cryptographic algorithms that are widely deployed
  today.  The Cryptographic Message Syntax (CMS) supports key transport
  and key agreement algorithms that could be broken by the invention of
  such a quantum computer.  By storing communications that are
  protected with the CMS today, someone could decrypt them in the
  future when a large-scale quantum computer becomes available.  Once
  quantum-secure key management algorithms are available, the CMS will
  be extended to support them, if current syntax the does not
  accommodated them.  In the near-term, this document describes a
  mechanism to protect today's communication from the future invention
  of a large-scale quantum computer by mixing the output of key
  transport and key agreement algorithms with a pre-shared key.

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org<http://tools.ietf.org>.

The IETF Secretariat

[lamps] Fwd: New Version Notification for draft-h… Russ Housley
Re: [lamps] Fwd: New Version Notification for dra… Panos Kampanakis (pkampana)