[saag] Re: post quantum guidance draft

  *
For a project [1] we're part of, (where I'm the resident PQ
  *
skeptic:-), I had to do a bit of a survey of ongoing IETF PQ
  *
work and produced [2] which has just been put up on the web
  *
page for the project following some local bureaucracy.

Thanks for the work and making this available. The current survey of IETF work seems even-handed. I’m not sure it gives much justification for your draft, tho.

Do you think all the WGs will end up using the same signature algorithms?

Many people dislike the multiplicative impact of, for example, the three sizes of ML-DSA.  Me too. It’s unfortunate that they’re made explicit. RSA, for example, uses the same identifiers no matter the key size, so I’m not sure it’s right to count that as an argument against PQ por PQ/T signatures.

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]