IETF Logo Mail Archive

[Ssh] Re: PQ signatures - where do we want to end up?

Dmitry Belyavsky <beldmit@gmail.com> Tue, 28 April 2026 12:36 UTC

Return-Path: <beldmit@gmail.com>
X-Original-To: ssh@mail2.ietf.org
Delivered-To: ssh@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1B0D4E4B8266 for <ssh@mail2.ietf.org>; Tue, 28 Apr 2026 05:36:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1777379774; bh=TBP1OgWw6il5W1PwsjIc+b1yFbTMHGz75hexgfunq0g=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=S/6xbw+4E0dfAVsqeXK40eBkGxCipWEUc6b0knSeSaqb5u6hizNCd55cK7L1izTDZ 42L2Etljwd5kD4tqPvh7ombg/ykqXZAoV/SlQnt2RwO0vv4XpNPlmK+B89PU2/29il gzDL9jJFiNq4IAFlXbpeGC2KOIHT/uazE4I4+Xqw=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QCpSRFkqIQr9 for <ssh@mail2.ietf.org>; Tue, 28 Apr 2026 05:36:13 -0700 (PDT)
Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 1E590E4B81B1 for <ssh@ietf.org>; Tue, 28 Apr 2026 05:35:21 -0700 (PDT)
Received: by mail-ed1-x52a.google.com with SMTP id 4fb4d7f45d1cf-6794b8699b8so3503794a12.1 for <ssh@ietf.org>; Tue, 28 Apr 2026 05:35:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1777379720; cv=none; d=google.com; s=arc-20240605; b=SIfdZZLUNLxxtaK8Fy5eBcle6cl6z/8w76Ix51WDWmuB9MFs7s1JSR3bXLUHD4X0Ft PvtwfpbG5TSsWJsp377Jv1Wvv6rR2bnHHXIAKvrk6lraT/0wQZYVfKgCCABAzUbeJnuP 4713/J/+QbDplzsJcpsFMUCMvsSsyHpDeOaFOWjT2OYsSHT0qw5xycoEF0K8EqrXZc1g ofYYnxkvKfjc8nXdfobgwHc035da6h4gt56RmGa76qr49I9Fb0BzmnARhyTue37g9uyC sOrJ7IBTcXcwA1UVByrOPIHGhOeUo9Cdhs8nfhe576BIl7pUxZAjxPYcDKDHBX7XA86F /Q2w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=TBP1OgWw6il5W1PwsjIc+b1yFbTMHGz75hexgfunq0g=; fh=7YjUEDOSvG7e4pWzYQvmIm9Xpvn8eh2FoE0cYxo3uiI=; b=LkN4e2fCVoQvyfNdrFUeOqZjsWPh0VUPNXO8FH38DStzHYn4Dl7KXdqf/QZRQv7n0q TqQEa+/pDktAhmsG2V3EDMTcuPkoB3OCr6Hu5Wsng49Xvh0IoNlUqP9Lko7BwquaEtFg BlEizUMGULlK/Vk9eNGIfejsoq2mCd/857bFs75pb1JKwIh+5iB4EzoBRTknYJXmnDBP 0z7jnQf7VfOYAVS/P1e3agFCCqyEcX8fkc4IKUHbNmLrmfjscx49FwspUE862t6gp+Eq qiS5OHFWPppKJoftCLIudSG6eVRgQ8033BGUYgUtnBOzJtpRfmXaBZ64N/j0eB9A1U/h BCEg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1777379720; x=1777984520; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=TBP1OgWw6il5W1PwsjIc+b1yFbTMHGz75hexgfunq0g=; b=fQsmKVy+60Sne337qYI4lyQcO4v+JL4GmibRbgZWeTV9r+8wsDT2THe2pnopj/ZYlA MyRJ9BublRXHTx6pipgNrHMzpnc/OrCN8/e+iLLp+2G3I+i/l8PdG9c4d1pI7TRxgoR+ LrHM+IMJR3gfau/jVcAF3bOwQGgy4/oZRf3u0W2H4WT7HvI+t0X77CdcH3ejn4FnB2rk Bcbt6Nw7sB+vT5ybIsa0M4EsVjSvFG1jzQ63xcn65AfYUrx0q/9ZalSgEvjYTug9Ng7u 055YcTs8hrr+d1FRZgdqLKFcQviXnceFKzkbNdjjFsI4bWYK/+zjWAJ6F+1L8a3yYk+J g4QA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777379720; x=1777984520; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=TBP1OgWw6il5W1PwsjIc+b1yFbTMHGz75hexgfunq0g=; b=WxsUWaiBiH8AQeZ8KwWaP9pbvS/joVGDeXONZanosmQeQKzot71rHhRrxDQBWQCzFs kxtycYcFhv3f5p8YIWoldZgWVCV/ETU7iMkLFbm7bjaySmk4H1pBmrIXc8bEFhZaszJ8 FH2IJLF+ldich6jBSINpQEqq8v661mSCYyJHtYpEeMbZxidbSk+BW/P5wTGp10a/Phcg yBPVvi9Zu6+lrI0EbmlVXeseVRRDhYvIt9XCE7mGwBDapXHV5kSb8tlSzTXUuefZiThl wQRcbIqUCQCsVcfx0+J34AlHcdiQrjWhyG31EZ2VC9KNPAqD6l/lt+B8DonkfqwMwBkq kdhQ==
X-Gm-Message-State: AOJu0Yzg3ZGi5E4K4hzJjlEV7T0lF06gNc0Nco6giVaJxkLdnxt6HhK6 QorpHFguNFhLr1QS3bBhGl9flxMuOgItoswyR9LAZN0Y1UKr5ZF9GXsQoj5aCccEPi26Oo3xFwf ajBfTRd8y6L38WjBQLh1d/owew7VxhYIQvA==
X-Gm-Gg: AeBDieuvft+CN6QxyTzSsBZG12JVVEQKd8MrPUTZSmD5u4iaEsG1SCGnFw8L5djX7Oq 04/NMzGxq5oF9n3q47cnuUL6mtQAbEzLNxLPgchl++6DxkXWC+cIRfi9Wiz0cBPBhMjYi4ZlMEw dTY/H2bzeFgfeMA4hFo67yl7P5Kia0AP5QtFWszojyIcAEd/gFA/HARi8b6Quc5ACK/hYbdI1y7 edzamq5CPkZ7ao/cc+Z1Oczy8tbysGw93l97itYfjBLGrzy6toaln7RTA4AX4FmFzkRhURXKDZR 7gXiHaXpQyjGd0Y=
X-Received: by 2002:a05:6402:5216:b0:670:f319:ae77 with SMTP id 4fb4d7f45d1cf-679bb04c9a8mr1471257a12.1.1777379719711; Tue, 28 Apr 2026 05:35:19 -0700 (PDT)
MIME-Version: 1.0
References: <f1964c88-5199-48f7-a23d-36c0328734c8@cs.tcd.ie>
In-Reply-To: <f1964c88-5199-48f7-a23d-36c0328734c8@cs.tcd.ie>
From: Dmitry Belyavsky <beldmit@gmail.com>
Date: Tue, 28 Apr 2026 14:35:07 +0200
X-Gm-Features: AVHnY4LuR2qik1iC9Fgf_oYCjR3LO9XeCFqqskbljSXZmTj1LAFaoPUM8r7hMS4
Message-ID: <CADqLbz+Fp0LoBkkfkvmdD=_tk+kANpF=0Spe1fURZzWM6nQOXw@mail.gmail.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: M4EWTRTPGHKQX2H5T2GOVYMKSPGJBEPN
X-Message-ID-Hash: M4EWTRTPGHKQX2H5T2GOVYMKSPGJBEPN
X-MailFrom: beldmit@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "ssh@ietf.org" <ssh@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ssh] Re: PQ signatures - where do we want to end up?
List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ssh/oS6cIV8m9Bx5ITechy2WR3J9fTs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>

Dear Stephen,

Thanks for raising this!

I would prefer the pure ones from the implementation perspective.
They could be based on already present specifications and rely on the
implementation already present in crypto libraries.

I'm not against hybrids, and I definitely want to save time from
digging the rabbit hole "pure vs hybrids". If it means having both
specs, I'm pretty fine with this.

On Tue, Apr 28, 2026 at 2:10 PM Stephen Farrell
<stephen.farrell@cs.tcd.ie> wrote:
>
>
> Hiya,
>
> People are starting to propose PQ signature drafts for the
> WG to consider. Before we go there, I'd like to understand
> where WG participants would like us to end up, and which of
> the bazillion options we think might actually be implemented
> and get deployed.
>
> So, opinions on the above are welcome...
>
> Cheers,
> S.
>
> _______________________________________________
> Ssh mailing list -- ssh@ietf.org
> To unsubscribe send an email to ssh-leave@ietf.org



-- 
SY, Dmitry Belyavsky

v2.46.0 | Report a Bug | By Email | System Status