On 1/7/25 1:15 PM, Murray S. Kucherawy wrote:
On Tue, Jan 7, 2025 at 1:05 PM Michael Thomas <[email protected]> wrote:Has NIST given a timeline of when they are going to pick the quantum resistant algorithm? I suppose if it's far enough out, it might be worthwhile to wait, but on the other hand figuring out a transition sooner rather than later might be good.I'm on the fence here. Do we need to say explicitly in a charter that the best contemporary practices in terms of cryptography have to be used in the development of a new thing? If so, it seems like every charter would need to be explicit about it.
The way I see it is if I or anyone else wrote a draft to use ECC, say, under the current proposed charter it would be out of scope. I assume that the bulleted items in the proposed charter are what will get worked on and not some open ended set of things, though the charter is worryingly vague on that account too.
I suppose this is also me starting to lean in the direction that, yes, this is indeed a new thing, not an update to an existing thing, even if it borrows heavily from the existing thing. In that case, cipher suite updates would be out of scope for this effort.
Don't you mean *in* scope if it's a new thing? Mike
_______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
