[openpgp] Re: AusGov Information Security Manual
Andrew <[email protected]>
| Newsgroups | gmane.ietf.openpgp |
|---|---|
| Message-ID | <[email protected]> |
Hi Daniel, Thanks for the reply. Just answering your question. > So if I understand correctly, if ML-DSA and ML-KEM are considered as the approved component of a hybrid construction, then ML-DSA+EdDSA and ML-KEM+X25519/448 are also acceptable, right? Assuming parameter sizes, correct, those would be acceptable configurations. For your examples, currently ML-DSA 65 and 87 are approved and ML-KEM 768 and 1024 are approved. Beyond year 2030, only the highest security level versions will be allowed. Ideally, pure PQC options are also available for our deployments. Cheers, Andrew Sent from my iPhone > On 25 Jul 2025, at 13:52, Daniel Huigens <[email protected]> wrote: > > > Hi Andrew, > > Thanks a lot for the clarification! So if I understand correctly, if ML-DSA and ML-KEM are considered as the approved component of a hybrid construction, then ML-DSA+EdDSA and ML-KEM+X25519/448 are also acceptable, right? > > The point about deployment friction is taken, of course. Though, I'm personally somewhat skeptical about this in the context of OpenPGP specifically, as all implementations have supported Curve25519 since a long while now. > > Best, > Daniel > > >> On Friday, July 25th, 2025 at 13:38, Andrew <[email protected]> wrote: >> As discussed in the WG session, here is a link to the AusGov requirements documents https://www.cyber.gov.au/resources-business-and-government/essential-cybersecurity/ism >> The Guidelines for Cryptography area is the relevant section. >> >> A rough summary for the discussion. Pure PQC options are the desired position using approved PQC algorithms. The approved algorithms are specified in the linked document. >> >> If hybrids are used, at least one of the algorithms must be approved. If that is the Traditional algorithm, which uses ECC, it would need to be using a NIST curve. Currently, curves such as CFRG curves aren’t in used AusGov, so only those options may cause friction for deployment. >> >> Sorry I didn’t make that clear at the mic, chalk that up to first time nervousness. >> >> Hopefully that helps the discussions for the WG. >> >> Regards, >> Andrew Holder >> >> >> Sent from my iPhone > _______________________________________________ openpgp mailing list -- [email protected] To unsubscribe send an email to [email protected]