Re: [lamps] OID für KEM?

[Russ Housley <[e-mail]>]

Uri:

Researchers are going to assign OIDs to use in their projects.  A group of researchers might collaborate to use the same OIDs.  My worry is that these will not ever go away.

The LAMPS WG cannot assign these OIDs.  The charter says:

   5.a. The US National Institute of Standards and Technology (NIST)
   has a Post-Quantum Cryptography (PQC) effort to produce one or more
   quantum-resistant public-key cryptographic algorithm standards.
   The LAMPS WG will specify the use of these new PQC public key
   algorithms with the PKIX certificates and the Cryptographic Message
   Syntax (CMS). These specifications will use object identifiers
   for the new algorithms that are assigned by NIST.

Russ


> On Oct 8, 2021, at 12:48 PM, Blumenthal, Uri - 0553 - MITLL <[e-mail]> wrote:
> 
> There was a discussion here some time ago regarding NIST PQC KEM candidates, and assigning them OIDs for use in various protocols.
> The conclusion at  that time was that an OID should identify not just the bare-bones algorithm, but the suite the KEM in question is made a part of.
> 
> I now need to define a certificate that would authenticate PQ public key for use in a variety of non-public (yet) protocols that utilize KEM. That means - I need to identify the algorithm this public key is for, and not bother with differentiating between different protocols that may use this KEM and therefore this public key.
> I understand that I can create an Algo Identifier myself, but my preference is something with broader acceptability and interoperability.
> 
> What does the WG think? Any recommendations?
> 
> Regards,
> Uri