Return-Path: X-Original-To: ssh@mail2.ietf.org Delivered-To: ssh@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id BBDD1E4B52A4 for ; Tue, 28 Apr 2026 05:23:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777379035; bh=WLDw2QLH6OWk7xmEPfCbN2CctlAV2DFgXUu7oxF/Ozw=; h=From:To:Subject:Date:References:In-Reply-To; b=l4D37o8HCJXLug8C+tCGgMF7yZcBbY/1f845oO6aJG5M1cbqvscIk4zB7JdRRMJMD Gr1z5aW2FCEp0YhjQnZxJKDSuiEVeyh9CDEBEnYTuL40rYpzbGQy/oM5g3EbLOz8ja /G2V1XXHA2vd7TuRC84FeHInaSyH9zl+VwWMarJI= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.auckland.ac.nz Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wQHq1pdR_G9z for ; Tue, 28 Apr 2026 05:23:53 -0700 (PDT) Received: from MEUPR01CU001.outbound.protection.outlook.com (mail-australiasoutheastazon11020091.outbound.protection.outlook.com [52.101.152.91]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AEFEAE4B529F for ; Tue, 28 Apr 2026 05:23:53 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=BRH3WK9/frZjduab1uqq/OWOH1aW6kw0v/mpFyEnXPyjypG2WCGQwqlORnf905QuKejWreSOCgSIBBTs2LoKJTYO4+U4KdvPrMsh60dcvlN3Qh0DdscggYRY/uMu+01JRR8BAcro/tVq8lgLdrY1ZuBlUYpT5iKm1HsL4OmR7Y2e0RcevP9uAtkzSXAv1+/8argUFFTitHMawlxvxmgcqn0F5X734CmjNGTfvn6TNI7lOnu9j5iXRBZHhpj4ZRWqJXqVkJ2LxzaaeB4Ip0C+AE1S6HiYxYytgnLSXmH0NnBxXanA6Tt9KWhg8JhJzDmvnYwWS+y/70AWsKhtTYKjWA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=WLDw2QLH6OWk7xmEPfCbN2CctlAV2DFgXUu7oxF/Ozw=; b=Sr+dDXWYiLTr5ZumtlkXZg3gUIDN11+VqpTwvNYUT5b6jyk0tShCg0y2TzvVkgRR5AZW84/x/T0/e5T0EGTZGvwPKw56W2toadD63lwZA/4dNZAvLH6Z0KbcdT+ff6HTZc/3ZJaImtm9pjUdCDeVaIAWlioK/NA6ypBRcsHkXhWHjIZjQ9D+nvYdxhU35gsChHj0msZ0mV6pSd7yr9tlso61uR1CClfkkkcN4+BYdsDDb0dYjevvgd3/HeiRRbZs6M7rxUaGROKPa6aTqQbBGjnGTPpqfBQDghfLV2I9SBZIMp4Z7CiQpq4fdpSqRXYOB15JPG+5ibpbz9p7XSHOkg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.auckland.ac.nz; dmarc=pass action=none header.from=cs.auckland.ac.nz; dkim=pass header.d=cs.auckland.ac.nz; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.auckland.ac.nz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WLDw2QLH6OWk7xmEPfCbN2CctlAV2DFgXUu7oxF/Ozw=; b=lLZqxjKZs+0/q7RaNiBzVmm8sJOYtkIEMRJQAhudNs5edp5x0WQ58smwKf4+DRY/EDIaYO/AGCnCUGmxt2Zcayw9HZ/4Kzsw7OywnRf5OAl6FVm8iPosNaeTRUb1iKhS5NXdg1mSGeGIR2R8ebQJjpSQoH6yMNpSXBq29DY7jqHjksXJ1KxpLC4PC3O8drFZkCg7fjfiLfdz/YgM5i7SS3Rn0hfmaryrdlkziOwkNz72HlvVSM+leC+bDElZAHM6O/Qta+hsKiiVTZXn4vTd/XeQzh6TFxyOVZTSfVtqqvbOImeNv/7qj+aWn3pMJCsQ7nbYDylUY0tBxxRcRNPbPw== Received: from SYBPR01MB6336.ausprd01.prod.outlook.com (2603:10c6:10:104::10) by ME3PR01MB6917.ausprd01.prod.outlook.com (2603:10c6:220:162::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9846.26; Tue, 28 Apr 2026 12:23:42 +0000 Received: from SYBPR01MB6336.ausprd01.prod.outlook.com ([fe80::db13:393:ea21:b3cb]) by SYBPR01MB6336.ausprd01.prod.outlook.com ([fe80::db13:393:ea21:b3cb%4]) with mapi id 15.20.9846.025; Tue, 28 Apr 2026 12:23:42 +0000 From: Peter Gutmann To: Stephen Farrell , "ssh@ietf.org" Thread-Topic: [Ssh] PQ signatures - where do we want to end up? Thread-Index: AQHc1wgECtDwNHyzBU+j8+Yy+rEMzbX0ZRkr Date: Tue, 28 Apr 2026 12:23:42 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-NZ, en-US Content-Language: en-NZ X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SYBPR01MB6336:EE_|ME3PR01MB6917:EE_ x-ms-office365-filtering-correlation-id: 7734deac-8195-47cf-e041-08dea520fc48 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|786006|1800799024|10070799003|56012099003|18002099003|22082099003|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SYBPR01MB6336.ausprd01.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(786006)(1800799024)(10070799003)(56012099003)(18002099003)(22082099003)(38070700021);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 2 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?KqVscf1gUHx1LKr8wAvC30CqCFWCpyhO3e+8sT+SO0jDp0jm88eTE5CMNn?= =?iso-8859-1?Q?S5gZpOGtz7KYXhaS5ZQHfOai4erEsUeoVq8agebfkSImGoZJl221kmuk+M?= =?iso-8859-1?Q?48kSTEj8qG3URJRfmkDWz29SzzHcx+dDGetnFxG7qcyt/bJoRjRsHjbAkn?= =?iso-8859-1?Q?btahSii2HczViLK/KYKCYKVlfniabcG7RBzbKe3KMEE13hfgm4g7T5Hybz?= =?iso-8859-1?Q?tsKQiCeAVCR5Pn7bLYUJ+GkLNMlg/8idzFZFlNFHnZZevB1r6t02dSpDSE?= =?iso-8859-1?Q?Rgh2JiKvbeTUsmx4xELqKRq86JKXEj/1uUDuYJYFt0w7q13bXu0zFg3Tfa?= =?iso-8859-1?Q?jyeS4lqFahNmliOiQGKaMqqlnY7ItOzpkjQQujGkKkYJepxgc9jctm0kE0?= =?iso-8859-1?Q?2c5/gQMDXvPXFHfz6ZeaHommfvZSff+WiH2nffWduuPLl6yXt5heFH2h0p?= =?iso-8859-1?Q?1s6fDrwg7DDCa6XG0dR+tH0IleN6Zsq0JUnuWxQfHCXFYeojqSaOEeTKEU?= =?iso-8859-1?Q?QYpIbpnliTrxNRjMnqusk8ho4IKQJjSINdjqbg9Tks25AxavN+VTe0IcKp?= =?iso-8859-1?Q?qXOoC11QT7aMG1l8Yx25dssqRYQfsgL1y0Pqw5JgtsoonlCHg+oukzaum7?= =?iso-8859-1?Q?JHfp5KJDffEu4aTe3ShJk+BI3K0aQx/qWGgNHiImvRazABfJ+w+oo5kd7i?= =?iso-8859-1?Q?XOipx4t5QIL8RtyqZ0ciwUT7effU7Q3B1IEiYU/20qxMQ1JiZtCDC3w0uY?= =?iso-8859-1?Q?G0G8jScodtb1R61HfEGx0sBtnnkBFxSI7R3ICVqK2i48YNSm+AovD21iJ6?= =?iso-8859-1?Q?umpOhTCs28XSSOKTyoXCneOiUSSBxg3IjW7WPr2CuOvqsCjikWmjEaHA9r?= =?iso-8859-1?Q?SBV8hYzSX2rmMSxd5YnEiXdQ2EqlUyq1ItqB0P7S5l0D2Xp8DkNg9nh5K9?= =?iso-8859-1?Q?JcV8/Ftz1klHunVNx7aLQnbbIJc7+J2de0hWXyLGXLtTHde3NnkZkSJQpL?= =?iso-8859-1?Q?eZ3gGL7jeEKUbfEs49DV2GfwvRXWBjI0Ny2740Ko+LoFbjQi8x6qM6zkDc?= =?iso-8859-1?Q?RWujrbtbRXc4ocQ0UasfTixj6++vBc49bXz0CRX8Zpk2zmF+KcIzMLfucm?= =?iso-8859-1?Q?TTW51Qjjlk1hgp8npLR5/xiE6PT1mgh3vh3fo8+jPtII9uEyZ3dSnQiN+j?= =?iso-8859-1?Q?vFRoDGNFlyydYGPmsSP+PqydnFkqcUTu/5TG50/Iq/lhbZv+iWLjLSZqgI?= =?iso-8859-1?Q?mEedwmgcWLJTruxEtJBmYFv2iTZ7OtNzJZ+BMrMoJCHxyC9goHpHGntLX1?= =?iso-8859-1?Q?Tj8xDczZ/uEs/qTVPRtKgyUjK/ji/CzNqWoUuYtTIRX8yyM4pjG+YM7y9W?= =?iso-8859-1?Q?hl8IG6cBRBFUqjOla5Ss3Z/8uWAsw9vhLEsL02f60itO3BcJ2geMgLQf2E?= =?iso-8859-1?Q?D0C6R/3eqgGK/jYNNxA0DzHwvCZatHn9uQM4cWo7piE/A/s27NW2FdT29j?= =?iso-8859-1?Q?IHvO6P8PVP5+AT+m7mNA16HQ76u4PGXP3dHY/kSL64WtJD9kCfJcNSOzkZ?= =?iso-8859-1?Q?PNEUnCxSovK4G0R+c4sPUEN0sT923h7T2tImFN32ILHEXCTMr/UvTX/oGe?= =?iso-8859-1?Q?cQaibStjCAgx7AMwtlcPRGQNdkEnHwp6sZUlgX0tJZF0ZBmX7Kz8rMZV1c?= =?iso-8859-1?Q?OwnRgyYAGM8LHJMZN4nxbgVbwBfuk5bWqW7G7C+O8SI2Oa5MGQ6Tg4u9xN?= =?iso-8859-1?Q?Gi5Y23hOXFm9LzJoy15L4RCTBvuoiJLDgAHeM14eGogo5P7XW9o4kUT8vn?= =?iso-8859-1?Q?SNsMuvXGmFI5oCj+cOW4HV50eF16r91Os/vPSlQgDzNETlZNSP6ii29ynA?= =?iso-8859-1?Q?nD?= x-ms-exchange-antispam-messagedata-1: NO2uAoivghd2HA== Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: cs.auckland.ac.nz X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SYBPR01MB6336.ausprd01.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7734deac-8195-47cf-e041-08dea520fc48 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Apr 2026 12:23:42.2918 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 3j8/jZUSYKXNr/OQTmIYmIZgYemPiwLug0Un3EJNNac/iGt3eJrvzrfDiQlyAwc3c/56UyJft3R8qcpxrnegN1Yh08TtPUdSaxra+Ah/6xQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: ME3PR01MB6917 Message-ID-Hash: RZM7IGVPSCCINYKDIGYOJU2TDG7SQG4K X-Message-ID-Hash: RZM7IGVPSCCINYKDIGYOJU2TDG7SQG4K X-MailFrom: pgut001@cs.auckland.ac.nz X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BSsh=5D_Re=3A_PQ_signatures_-_where_do_we_want_to_end_up=3F?= List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Stephen Farrell writes:=0A= =0A= >which of the bazillion options we think might actually be implemented and = get=0A= >deployed.=0A= =0A= It's SSH, all of them of course.=0A= =0A= (Take a look at the SSH_MSG_KEXINIT from widely-used clients some time, her= e's=0A= an extract from one of them).=0A= =0A= sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-= =0A= sha256,mlkem1024nistp384-sha384,mlkem768nistp256-sha256,curve448-=0A= sha512,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-=0A= nistp256,ecdh- sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-=0A= exchange-sha256,diffie- hellman-group-exchange-sha1,diffie-hellman-group18= -=0A= sha512,diffie-hellman- group17-sha512,diffie-hellman-group16-sha512,diffie= -=0A= hellman-group15- sha512,diffie-hellman-group14-sha256,diffie-hellman-group= 14-=0A= sha1,rsa2048- sha256,rsa1024-sha1,diffie-hellman-group1-sha1,ext-info-c,ke= x-=0A= strict-c- v00@openssh.com...{ssh-ed25519,ecdsa-sha2-nistp256,rsa-=0A= sha2-512,rsa- sha2-256,ssh-rsa,ssh-ed448,ecdsa-sha2-nistp384,ecdsa-sha2-= =0A= nistp521,ssh- dss....aes256-ctr,aes256-cbc,rijndael-=0A= cbc@lysator.liu.se,aes192-ctr,aes192- cbc,aes128-ctr,aes128-cbc,chacha20-= =0A= poly1305@openssh.com,aes128- gcm@openssh.com,aes256-gcm@openssh.com,3des-= =0A= ctr,3des-cbc,blowfish- ctr,blowfish-cbc,arcfour256,arcfour128....aes256-= =0A= ctr,aes256-cbc,rijndael- cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-= =0A= ctr,aes128-cbc,chacha20- poly1305@openssh.com,aes128-gcm@openssh.com,aes25= 6-=0A= gcm@openssh.com,3des- ctr,3des-cbc,blowfish-ctr,blowfish-=0A= cbc,arcfour256,arcfour128....hmac- sha2-256,hmac-sha2-512,hmac-sha1,hmac-= =0A= sha1-96,hmac-md5,hmac-sha2-256- etm@openssh.com,hmac-sha2-512-=0A= etm@openssh.com,hmac-sha1-etm@openssh.com,hmac- sha1-96-etm@openssh.com,hm= ac-=0A= md5-etm@openssh.com....hmac-sha2-256,hmac- sha2-512,hmac-sha1,hmac-=0A= sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac- sha2-512-=0A= etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96- etm@openssh.com,hm= ac-=0A= md5-etm@openssh.com=0A= =0A= Peter.=