[Ssh] Re: IPR Disclosure Daniel J. Bernstein's Statement about IPR related to draft-josefsson-ntruprime-streamlined and draft-josefsson-ntruprime-ssh belonging to Panasonic Corp

["D. J. Bernstein" <[e-mail]>]

This IPR disclosure is a forgery. I didn't file it. The disclosure
claims that I believe that the draft in question is covered by this
patent; I don't. I don't see a problem for any of the deployed versions
of NTRU, such as ntruhrss (deployed by Google) and sntrup (deployed by
OpenSSH et al.); the draft in question uses sntrup.

In the interests of proactively avoiding patent problems, I have public
analyses online of many _potential_ patent threats to cryptography. The
word "potential" is important. The details are important. The results of
the analyses vary from one patent to another. Sometimes there's a real
threat. Sometimes there's clear prior art. Sometimes there isn't clear
prior art but the patent is too limited to be a real problem.

For this particular patent, I already posted an analysis in 2017
(https://cr.yp.to/patents/us/7929688.html) locating prior art directly
on point, so I didn't bother posting my analysis of how limited the
patent is. The patent was also discussed on pqc-forum in 2022:
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/G0DoD7lkGPk/m/Wf872-WqBwAJ

---D. J. Bernstein