Re: Specification for Kyber in GnuPG

2024-05-06 Thread Simon Josefsson via Gnupg-devel
Werner Koch writes: > On Mon, 6 May 2024 17:06, Simon Josefsson said: > >> Thank you! As far as I can tell this doesn't strongly bind eccPublicKey >> and mlkemPublicKey to the KEK which may complicate a security proof. > > Can you give a reason for this? The fingerprint binds the two public >

Re: Specification for Kyber in GnuPG

2024-05-06 Thread Simon Josefsson via Gnupg-devel
Werner Koch via Gnupg-devel writes: > On Mon, 6 May 2024 14:49, Simon Josefsson said: >> Werner Koch via Gnupg-devel writes: >> >>> + - Prepare fixedInfo as specified above >>> >>>- Compute KEK := multiKeyCombine(eccKeyShare, eccCipherText, >>> mlkemKeyShare, mlkemCipherText,

Re: Specification for Kyber in GnuPG

2024-05-06 Thread Simon Josefsson via Gnupg-devel
Werner Koch via Gnupg-devel writes: > + - Prepare fixedInfo as specified above > >- Compute KEK := multiKeyCombine(eccKeyShare, eccCipherText, > mlkemKeyShare, mlkemCipherText, fixedInfo, 256) as defined in > -Section [](#KEM-Key-Combiner). > +Section [](#kem-key-combiner).

Re: Very first Beta of GnuPG 2.6 available

2024-05-01 Thread Simon Josefsson via Gnupg-devel
Werner Koch via Gnupg-devel writes: > Hi! > > Gniibe and me have been working on PQC Support in GnuPG for some time > now. Now we have a first Beta version available. Because we have done > no releases of the supporting libraries yet, a tarball with all sources is > available: > >