[openpgp] Re: I-D Action: draft-ietf-openpgp-pqc-10.txt

Aron Wussler <[email protected]> Tue, 27 May 2025 19:40:53 +0000

Newsgroups	gmane.ietf.openpgp
Message-ID	<i1dRqXefaFiGXaa6NiXttBfo1AuhaOzV1DHnA5k3efvrSS3dA8NE_WtS0j0BcGYBIA6forbPMeXzyBJKBkm73WNm1c4tp4s1pdlSt2ckSS0=@wussler.it>

Hi everyone,

We just updated the draft to reflect the feedback on the list about hash binding [1].

Given that we only allow v6 signatures, featuring an unpredictable salt, 256-bit hashes are sufficient for all the security levels. 

We therefore add a security consideration to reflect this and we require a minimum hash size of 256 bit for PQ signatures.

Cheers,
Aron


[1] https://mailarchive.ietf.org/arch/msg/openpgp/BvfBQQrVLs_tJ9XB93jksDLKlzw/


--
Aron Wussler
Sent with ProtonMail, OpenPGP key 0x7E6761563EFE3930



On Tuesday, 27 May 2025 at 21:39, [email protected] <[email protected]> wrote:

> Internet-Draft draft-ietf-openpgp-pqc-10.txt is now available. It is a work
> item of the Open Specification for Pretty Good Privacy (OPENPGP) WG of the
> IETF.
> 

> Title: Post-Quantum Cryptography in OpenPGP
> Authors: Stavros Kousidis
> Johannes Roth
> Falko Strenzke
> Aron Wussler
> Name: draft-ietf-openpgp-pqc-10.txt
> Pages: 268
> Dates: 2025-05-27
> 

> Abstract:
> 

> This document defines a post-quantum public-key algorithm extension
> for the OpenPGP protocol. Given the generally assumed threat of a
> cryptographically relevant quantum computer, this extension provides
> a basis for long-term secure OpenPGP signatures and ciphertexts.
> Specifically, it defines composite public-key encryption based on ML-
> KEM (formerly CRYSTALS-Kyber), composite public-key signatures based
> on ML-DSA (formerly CRYSTALS-Dilithium), both in combination with
> elliptic curve cryptography, and SLH-DSA (formerly SPHINCS+) as a
> standalone public key signature scheme.
> 

> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/
> 

> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-openpgp-pqc-10.html
> 

> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-openpgp-pqc-10
> 

> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 

> 

> _______________________________________________
> openpgp mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

signature.asc (application/pgp-signature, 343 B)