Re: Specification for Kyber in GnuPG

On Mon,  6 May 2024 14:49, Simon Josefsson said:
> Werner Koch via Gnupg-devel <[email protected]> writes:
>
>> +  - Prepare fixedInfo as specified above
>>  
>>    - Compute KEK := multiKeyCombine(eccKeyShare, eccCipherText,
>>      mlkemKeyShare, mlkemCipherText, fixedInfo, 256) as defined in
>> -    Section [](#KEM-Key-Combiner).
>> +    Section [](#kem-key-combiner).
>
> Where is multiKeyCombine defined?  I can't find it in

Line 6133 in the draft I posted today to librepgp-discuss
https://lists.gnupg.org/pipermail/librepgp-discuss/2024/000068.html

> draft-koch-librepgp-00 nor in your patch.  I'm happy you included the
> ciphertext in the combiner, but I'm trying to work out how strong the
> binding to the Kyber public key material this has.

That is the same as in draft-wussler-openpgp-pqc-03.txt.

> Is the source code of the file this patch is against public?  It is
> easier to review a patched version of an entire document than a patch
> against an unknown file.

git://git.gnupg.org/people/wk/rfc4880bis.git

and take rfc4880bis.md


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

_______________________________________________
Gnupg-devel mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-devel

-----BEGIN PGP SIGNATURE-----

iIMEARYIACsWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCZjjUHA0cd2tAZ251cGcu
b3JnAAoJEBnMHJ4IWxB6z+ABAJsFAlU/QLz43n9+d4ANG64CXxXde1VFQQ1azWkz
U7AcAP9V8Ij4LFgfHfCdTdWntpCoEgqk7nWjxSAoujtckmG7AA==
=GCdx
-----END PGP SIGNATURE-----