From: Russ Housley <housley@vigilsec.com>
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Tue, 6 Aug 2019 17:12:17 -0400
References: <156512546616.27392.11574912416324243112.idtracker@ietfa.amsl.com>
To: LAMPS WG <spasm@ietf.org>
In-Reply-To: <156512546616.27392.11574912416324243112.idtracker@ietfa.amsl.com>
Message-Id: <064E2F31-FFF1-44C1-BC87-CC70FDA48FC2@vigilsec.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/R1Hcd0Dn87DVkC2sBfHLTZ3SYMg>
Subject: Re: [lamps] New Version Notification for
 draft-ietf-lamps-cms-mix-with-psk-06.txt
Precedence: list

This revision addresses the AD review comments and the IETF Last Call =
comments.

If you are implementing, please note the correction in the ASN.1 module. =
 Thanks for catching that Jim.

Russ


> On Aug 6, 2019, at 5:04 PM, internet-drafts@ietf.org wrote:
>=20
>=20
> A new version of I-D, draft-ietf-lamps-cms-mix-with-psk-06.txt
> has been successfully submitted by Russ Housley and posted to the
> IETF repository.
>=20
> Name:		draft-ietf-lamps-cms-mix-with-psk
> Revision:	06
> Title:		Using Pre-Shared Key (PSK) in the Cryptographic =
Message Syntax (CMS)
> Document date:	2019-08-06
> Group:		lamps
> Pages:		30
> URL:            =
https://www.ietf.org/internet-drafts/draft-ietf-lamps-cms-mix-with-psk-06.=
txt
> Status:         =
https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-mix-with-psk/
> Htmlized:       =
https://tools.ietf.org/html/draft-ietf-lamps-cms-mix-with-psk-06
> Htmlized:       =
https://datatracker.ietf.org/doc/html/draft-ietf-lamps-cms-mix-with-psk
> Diff:           =
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lamps-cms-mix-with-psk-06
>=20
> Abstract:
>   The invention of a large-scale quantum computer would pose a serious
>   challenge for the cryptographic algorithms that are widely deployed
>   today.  The Cryptographic Message Syntax (CMS) supports key =
transport
>   and key agreement algorithms that could be broken by the invention =
of
>   such a quantum computer.  By storing communications that are
>   protected with the CMS today, someone could decrypt them in the
>   future when a large-scale quantum computer becomes available.  Once
>   quantum-secure key management algorithms are available, the CMS will
>   be extended to support the new algorithms, if the existing syntax
>   does not accommodate them.  In the near-term, this document =
describes
>   a mechanism to protect today's communication from the future
>   invention of a large-scale quantum computer by mixing the output of
>   key transport and key agreement algorithms with a pre-shared key.