[saag] Re: draft update on discussion on crypto practices at IETF

Eric Rescorla writes:
> It would even be appropriate for the WG to formally ask CFRG for a
> review and hold the document until that's completed.

We already saw what happened when CFRG was asked in 2023 for a review of
the specification of X25519+sntrup761 for ssh: it gave complete control
over the review to _one_ person, whose review consisted of

    (1) saying that NIST is standardizing Kyber, so the use of sntrup
        "should then be motivated", and

    (2) complaining about something unrelated to sntrup, namely the use
        of the concatenation combiner.

Take ten seconds and read the full review for yourself:

    https://mailarchive.ietf.org/arch/msg/crypto-panel/kDiLLcVOhwoix5BUDdv4r91ZhfY/

Also take another five seconds and read the reviewer's foreword
abdicating to NIST on "philosophical" grounds:

    https://mailarchive.ietf.org/arch/msg/crypto-panel/wIIKFsYfoLNwVSQrcOQlveHfSkA/

---D. J. Bernstein (speaking for myself)

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]