[openpgp] Re: proposal of draft-ehlen-openpgp-nist-bp-comp f or adoption by WG

Hiya,

dkg and I chatted today and I'll kick off the formality
of a call for adoption now, sorry for the delay.

Cheers,
S.

On 07/08/2025 14:43, Falko Strenzke wrote:
> We would like to follow up here on the list with the discussion of 
> draft-ehlen-openpgp-nist-bp-comp <https://datatracker.ietf.org/doc/ 
> draft-ehlen-openpgp-nist-bp-comp/> which we presented at IETF 123.
> 
> The purpose of this document is to support users who would like to or 
> have to use hybrid KEMs and/or signatures using ML-KEM, ML-DSA with the 
> NIST or the Brainpool curves with OpenPGP.
> 
> NIST is fine with both options: standalone PQC and hybrids. Due to the 
> long-standing and wide deployment of the NIST curves, there are well- 
> tested, secure, and efficient implementations of ECDSA and ECDH with 
> them. We expect there are users currently preferring the hybrid 
> solutions of ML-KEM, ML-DSA with the NIST curves over the standalone ML- 
> KEM and ML-DSA. European regulations on the other hand generally allow 
> the use of ML-KEM and ML-DSA in hybrid combinations only, and the 
> Brainpool curves are a requirement in German regulations.
> 
> On this background, we propose draft-ehlen-openpgp-nist-bp-comp to be 
> considered for adoption as a working group document. The currently 
> proposed set of algorithm combinations would be subject to WG discussion 
> after an adoption.
> 
> Falko, Quynh, and Stephan
> 
> 
> _______________________________________________
> openpgp mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

-----BEGIN PGP SIGNATURE-----

wnsEABYIACMWIQQwbnhHy1kPJkWsM6fk2On5l6gz3QUCaMQU1AUDAAAAAAAKCRDk2On5l6gz3ZKh
AQC1NYeAbbnk67r6BGlO324eWJUPzDhmPYhwnKiS2N9l6gEAu8Rjmxy/icv6zKGXau2zpbYaHZLU
atsaJBwb8SteNAQ=
=bcLR
-----END PGP SIGNATURE-----