It appears that Richard Clayton <[email protected]> said: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >In message <[email protected]>, Alexander >Stumpf <[email protected]> writes > >>How about including the PQC public key as another info in the header and only >>store its SHA3 in a TXT record? SHA3 is, as of now, quantum-safe. > >that makes PQ handling very different from other algorithms, not >impossible but rather messy for the code to handle
Depends what the interface to the crypto is. If it's "here's the body or header hash, return a blob of base64" it wouldn't be that messy. But we need to decide whether how much of a problem we think it is if the keys are too big to fit in one packet. If you're using 2K RSA keys, the packets are already pretty close to 512, so my inclination is to say that the keys are whatever size they are, so be it. If people are using DoT or DoH they'll be wrapped in TCP anyway, and nobody seems to think that's a problem. R's, John _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
