[openpgp] proposal of draft-ehlen-openpgp-nist-bp-comp for ado ption by WG

We would like to follow up here on the list with the discussion of 
draft-ehlen-openpgp-nist-bp-comp 
<https://datatracker.ietf.org/doc/draft-ehlen-openpgp-nist-bp-comp/> 
which we presented at IETF 123.

The purpose of this document is to support users who would like to or 
have to use hybrid KEMs and/or signatures using ML-KEM, ML-DSA with the 
NIST or the Brainpool curves with OpenPGP.

NIST is fine with both options: standalone PQC and hybrids. Due to the 
long-standing and wide deployment of the NIST curves, there are 
well-tested, secure, and efficient implementations of ECDSA and ECDH 
with them. We expect there are users currently preferring the hybrid 
solutions of ML-KEM, ML-DSA with the NIST curves over the standalone 
ML-KEM and ML-DSA. European regulations on the other hand generally 
allow the use of ML-KEM and ML-DSA in hybrid combinations only, and the 
Brainpool curves are a requirement in German regulations.

On this background, we propose draft-ehlen-openpgp-nist-bp-comp to be 
considered for adoption as a working group document. The currently 
proposed set of algorithm combinations would be subject to WG discussion 
after an adoption.

Falko, Quynh, and Stephan

-- 

*MTG AG*
Dr. Falko Strenzke

Phone: +49 6151 8000 24
E-Mail: [email protected]
Web: mtg.de <https://www.mtg.de>

------------------------------------------------------------------------

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]