[openpgp] Re: Call for adoption of draft-ehlen-openpgp-nist- bp-comp

As one of the editors, I obviously support adoption. Regarding hybrids 
with Brainpool curves, there is a clear need from the German 
administration and any user that needs to or wants to conform with 
recommendations from the German BSI. These recommendations require, as 
in many EU countries, that structured-lattice-based algorithms are only 
used in hybrid combinations with traditional algorithms. The hybrids 
proposed in draft-ietf-openpgp-pqc, which is now well on its way to 
publication, only use Edwards-Curves which are not among the algorithms 
admitted by the BSI.

Note that recommendations from the BSI often become mandatory as 
compliance to them is typically regarded as best practice in German IT 
projects. This is especially true for any project in the public sector, 
but also applies to general industry projects. This requirement is thus 
not resctricted to projects in the German administration but has broad 
impact on the whole German IT industry.

The NIST curves are widely deployed and in broad use. Many international 
users might prefer them over the Edwards Curves due to well-tested 
existing implementations in software and hardware. The effort for their 
support given an implementation that can handle BrainPool Curves is 
minimal, since it requires only to define the new domain parameters. All 
ECDSA and ECDH implementations down to the arithmetic can be reused. 
(Typcially it is BrainPool users that struggle to find support for their 
curves, not the other way around.)

Falko

Am 12.09.25 um 14:44 schrieb Stephen Farrell:
>
> Hi,
>
> This message starts a call for adoption of
> draft-ehlen-openpgp-nist-bp-comp. [1] This draft
> has had some discussion/support already and
> so far nobody has objected to adopting it,
> so, in this case, as chairs, we'll consider
> silence as being positive.
>
> But, if you do not want the WG to adopt this,
> please say why.
>
> The call for adoption will close in two weeks
> on September 26th.
>
> Thanks,
> S.
>
> [1] https://datatracker.ietf.org/doc/draft-ehlen-openpgp-nist-bp-comp/
>
>
> _______________________________________________
> openpgp mailing list [email protected]
> To unsubscribe send an email [email protected]
-- 

*MTG AG*
Dr. Falko Strenzke

Phone: +49 6151 8000 24
E-Mail: [email protected]
Web: mtg.de <https://www.mtg.de>

------------------------------------------------------------------------

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]