Re: [TLS] I-D: TLS += Kerberos (provides Quantum Relief for DH)

Rick van Rein <rick@openfortress.nl> Wed, 26 February 2020 09:41 UTC

Message-ID: <5E563D1C.9010209@openfortress.nl>
Date: Wed, 26 Feb 2020 10:40:44 +0100
From: Rick van Rein <rick@openfortress.nl>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: Nico Williams <nico@cryptonector.com>
CC: TLS WG <tls@ietf.org>, "Tom Vrancken (ARPA2)" <tom.vrancken@arpa2.org>
References: <5E54CDA0.8070209@openfortress.nl> <20200225191519.GH18021@localhost>
In-Reply-To: <20200225191519.GH18021@localhost>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/_VxzL1NPnUZ_z-LndtQ5HtOLGoQ>
Subject: Re: [TLS] I-D: TLS += Kerberos (provides Quantum Relief for DH)
Precedence: list

Hello Nico,

> I don't believe that using Kerberos helps on the _entropy_ side as much
> as on the PQ side.

Ah; I meant to (be terse and) say that it adds an independent source of entropy that leaves no traces in the TLS flow subject to, indeed, Quantum Computer cracking.

> Now, the biggest problem with Kerberos is that with manually-keyed
> cross-realm trusts doesn't scale to Internet scale.  But there's a way
> to fix that too: use PQ PK with PKINIT as a form of "PKCROSS", and now
> Kerberos can function as a way of amortizing PQ PK costs.

Indeed :- though I'd have mentioned KXOVER or Kerberos Realm Crossover,
https://gitlab.com/arpa2/kxover
This is founded on DNSSEC, DANE and TLS.

Thanks,
 -Rick

[TLS] I-D: TLS += Kerberos (provides Quantum Reli… Rick van Rein
Re: [TLS] I-D: TLS += Kerberos (provides Quantum … Salz, Rich
Re: [TLS] I-D: TLS += Kerberos (provides Quantum … Nico Williams
Re: [TLS] I-D: TLS += Kerberos (provides Quantum … Rick van Rein
Re: [TLS] I-D: TLS += Kerberos (provides Quantum … Salz, Rich
Re: [TLS] I-D: TLS += Kerberos (provides Quantum … Rick van Rein