[openpgp] Re: AusGov Information Security Manual

Hi Andrew,

Thanks a lot for the clarification! So if I understand correctly, if ML-DSA and ML-KEM are considered as the approved component of a hybrid construction, then ML-DSA+EdDSA and ML-KEM+X25519/448 are also acceptable, right?

The point about deployment friction is taken, of course. Though, I'm personally somewhat skeptical about this in the context of OpenPGP specifically, as all implementations have supported Curve25519 since a long while now.

Best,
Daniel

On Friday, July 25th, 2025 at 13:38, Andrew <[email protected]> wrote:

> As discussed in the WG session, here is a link to the AusGov requirements documents https://www.cyber.gov.au/resources-business-and-government/essential-cybersecurity/ism
> The Guidelines for Cryptography area is the relevant section.
>
> A rough summary for the discussion. Pure PQC options are the desired position using approved PQC algorithms. The approved algorithms are specified in the linked document.
>
> If hybrids are used, at least one of the algorithms must be approved. If that is the Traditional algorithm, which uses ECC, it would need to be using a NIST curve. Currently, curves such as CFRG curves aren’t in used AusGov, so only those options may cause friction for deployment.
>
> Sorry I didn’t make that clear at the mic, chalk that up to first time nervousness.
>
> Hopefully that helps the discussions for the WG.
>
> Regards,
> Andrew Holder
>
> Sent from my iPhone

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]