[lamps] PQ-composite OR or K-of-N logic

"Kampanakis, Panos" <kpanos@amazon.com> Fri, 22 April 2022 03:00 UTC

From: "Kampanakis, Panos" <kpanos@amazon.com>
To: LAMPS <spasm@ietf.org>
Thread-Topic: PQ-composite OR or K-of-N logic
Thread-Index: AdhV9Rf0dKtEp6K7TUGSt7lMX+2Vvw==
Date: Fri, 22 Apr 2022 03:00:20 +0000
Message-ID: <f2fb2b2459fe42818348838eb14cc2ac@EX13D01ANC003.ant.amazon.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/iZJDuH4kMQj7_9gMHOI_LDSJYHM>
Subject: [lamps] PQ-composite OR or K-of-N logic
Precedence: list

Hi all,

This was discussed in the interim meeting yesterday, but I promised to also bring it up to the list. 

https://datatracker.ietf.org/doc/draft-ounsworth-pq-composite-sigs/ includes a Composite-OR and a Composite-OR-Legacy mode. And Mike also mentioned K-of-N logic in the meeting. These allow for the signer to define the verification logic of the composite signature. As many pointed out in the interim meeting yesterday, it is counter intuitive for the signer to tell the verifier what to verify. If the verifier does not trust one of the signatures in the composite signature it can make a decision on what to do based on its policy. It could fail unless all sigs verify or do something else. 

Adding granularity in the signature to tell the signer what to do not only changes what we know and use today, but it also opens cans of worms with complexity and mistakes that could happen in implementations. 

I suggest to just define one mode. That is a composite sig is two signatures of the same thing with two algorithms using two keys. The signer is supposed to verify the composite signature. How it does that is beyond this draft. 

Rgs, 
Panos

[lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] PQ-composite OR or K-of-N logic Russ Housley
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Russ Housley
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Serge Mister
Re: [lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] PQ-composite OR or K-of-N logic Serge Mister
Re: [lamps] PQ-composite OR or K-of-N logic Michael Richardson
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Michael Richardson
Re: [lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Klaußner, Jan
Re: [lamps] PQ-composite OR or K-of-N logic Klaußner, Jan
Re: [lamps] PQ-composite OR or K-of-N logic Russ Housley
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Mike Ounsworth
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Blumenthal, Uri - 0553 - MITLL
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Santosh Chokhani
Re: [lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] PQ-composite OR or K-of-N logic Carl Wallace
Re: [lamps] PQ-composite OR or K-of-N logic Michael Richardson
Re: [lamps] PQ-composite OR or K-of-N logic Michael Richardson
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Mike Ounsworth
Re: [lamps] [EXTERNAL] Re: PQ-composite OR or K-o… Santosh Chokhani
Re: [lamps] PQ-composite OR or K-of-N logic Klaußner, Jan
Re: [lamps] PQ-composite OR or K-of-N logic Michael Jenkins
Re: [lamps] PQ-composite OR or K-of-N logic Klaußner, Jan
Re: [lamps] PQ-composite OR or K-of-N logic Tadahiko Ito
Re: [lamps] PQ-composite OR or K-of-N logic Kampanakis, Panos
Re: [lamps] PQ-composite OR or K-of-N logic Russ Housley