IETF Logo Mail Archive

Re: [lamps] Fwd: New Version Notification for draft-turner-lamps-nist-pqc-kem-certificates-01.txt

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 17 March 2022 13:02 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBA0E3A11CC for <spasm@ietfa.amsl.com>; Thu, 17 Mar 2022 06:02:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.316
X-Spam-Level:
X-Spam-Status: No, score=-6.316 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b=gw1N7QaN; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b=PBnZKysY
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jo0IdQOH6Lhn for <spasm@ietfa.amsl.com>; Thu, 17 Mar 2022 06:02:14 -0700 (PDT)
Received: from che.mayfirst.org (unknown [162.247.75.117]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C11A53A0CBD for <spasm@ietf.org>; Thu, 17 Mar 2022 06:02:14 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1647522133; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=Cs09BoKl3juFnvt5IzpW2pkg7R2CUUYMIFU9X/OVxeY=; b=gw1N7QaNxHYKqj0lOtBmyv92xD+MGPjgZswnoaqNITLZHbBRtxsb1GomyO/aDYdSAg9lB uGQxmrYfTtYo9HJCg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1647522133; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=Cs09BoKl3juFnvt5IzpW2pkg7R2CUUYMIFU9X/OVxeY=; b=PBnZKysYZc156rZJLuMfg9621YOaXygzJz3Di71aA5oIsEgpSkmd3mQNBOLlWjTtHD/xk oremwFZKDZQnI5IlrmL5em43f4SfbDSC28GdY3VDT7J6wU4QKaA7VbftJJCcnKhSPozECAr v0yvEp/b/YREa60lOmsf2F5WhevRRkmHYdQ9BRsDRpz5mJ1cjCfLa5zHeSoECRXtP3aRrxz 5XbIVZ9yr6pIvI2hwlGicxQYZNxemdcvf+sMYlY8Vnmk1G5I1I3LfoG7Qb8bKSrWIvC1Ez+ tRbqghfxLfgUVnEBgZ02/gaUTkTTunhEbLrTrotOeFwdw5xh6X1K3Qw6pkMg==
Received: from fifthhorseman.net (lair.fifthhorseman.net [108.58.6.98]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id EE88AF9AD; Thu, 17 Mar 2022 09:02:12 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id 6B58320462; Thu, 17 Mar 2022 09:02:10 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: "Salz, Rich" <rsalz=40akamai.com@dmarc.ietf.org>, Alexey Melnikov <alexey.melnikov@isode.com>, Sean Turner <sean@sn3rd.com>, SPASM <spasm@ietf.org>
In-Reply-To: <49835057-8258-418B-A645-50251C87520C@akamai.com>
References: <164668084786.2777.1392432397778617867@ietfa.amsl.com> <55EABB36-6C61-4C24-8F6E-D307BBED5DB7@sn3rd.com> <4d8a4ef7-dd39-7632-1c7d-f37e83e93b99@isode.com> <49835057-8258-418B-A645-50251C87520C@akamai.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Thu, 17 Mar 2022 09:02:09 -0400
Message-ID: <87ilscraum.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/Xc1e_P03_qO8RUR5qiRZrKX4yK0>
Subject: Re: [lamps] Fwd: New Version Notification for draft-turner-lamps-nist-pqc-kem-certificates-01.txt
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Mar 2022 13:02:21 -0000

On Tue 2022-03-15 18:09:27 +0000, Salz, Rich wrote:
> Strongly agree.  It's not just wire format but configuration

Count me as another advocate for explicitly declaring the private key
format.  Even doing interoperability testing is difficult if there's no
standard, commonly-adopted way to load a private key into the software.

If the goal of the IETF is to produce interoperable standards, we can't
ignore private key formats.

On a different topic, I appreciate that this draft is looking like it
will have sample keys in it.  I recommend that the authors place each
sample key in a separate subsection for easier reference.

I also hope that when the actual samples end up in this document, there
will be a sample private key that corresponds to each sample public
key.  I assume that will be the case, but the text as currently written
doesn't imply that the samples are related to one another, so i just
wanted to explicitly encourage that.

       --dkg

v2.23.0 | Report a Bug | By Email