[RZERC] Potential SSAC Comments on NIST Choice of Post Quantum Crypto Algorithms

Wessels, Duane dwessels at verisign.com
Tue Nov 26 00:56:03 UTC 2019



> On Nov 25, 2019, at 2:31 PM, Peter Koch <pk at DENIC.DE> wrote:
> 
> Russ, all,
> 
> thanks for the heads up and sharing.
> 
> On Sun, Nov 24, 2019 at 01:59:05AM +0800, Russ Mundy wrote:
> 
>> I think that I mentioned at our last meeting that SSAC was probably going to submit a comment to NIST related to their ongoing post quantum crypto algorithm selection activity. I recently learned that comments are due by Dec 6 so I wanted to ask on the mail list if RZERC had interest in ‘joining’ in on the SSAC comment - If there is interest from RZERC, I’ll be happy to coordinate & provide more detail.
> 
> I could imagine a number of spots in the root zone maintenance/provisioning scheme where
> longevity, PQC and algorithm agility could become relevant, but looking at
> <https://csrc.nist.gov/Projects/post-quantum-cryptography/workshops-and-timeline>
> without having followed that process anywhere near close, I wonder what RZERC could add
> to an SSAC statement. So, I'd be curious to learn what SSAC's areas of concern are.


Peter,

I don't know if you had a chance to see John Levine's TechDay presentation (https://static.ptbl.co/static/attachments/232986/1572893313.pdf?1572893313) which has a table showing key and signature sizes for the PQC algorithms under consideration.  Most of them have either (very) large keys or (very) large signatures, or both.  I'm guessing that's where SSAC's concerns are.

Personally, my feeling is that developing comments to the NIST selection falls out-of-scope for RZERC, and I would generally trust SSAC to come up with something good.  That said, if SSAC believes there is a benefit to having RZERC join with them in their comment, and of course if RZERC has full consensus on the comment, then I would support doing so.  But the schedule is very tight.

DW


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4675 bytes
Desc: not available
URL: <http://mm.icann.org/pipermail/rzerc/attachments/20191126/8ecabcb9/smime.p7s>


More information about the RZERC mailing list