Minutes of the June 4th Meeting

[johngray-dev]

In Attendance: Mike Ounsworth, Daniel Van Geest, Markku, Carl Wallace, Julien Prat, Alexander Railien, Hendrick Brockhaus, Tomofumi, John Gray

Round table discussion:

John:

• Discussed meeting with the PKI Consortium and how we could closer collaborate.
• Created When artifacts are submitted, use a github action to automatically run them against LibOQS or other open source tools #115 as a good project for the hackathon (Adding a github action to automatically run artifacts through libOQS). Team members discussed how we could achieve closer collaboration. There is no point in maintaining two separate lists.

Mike

• Chaos is coming with the new algorithms. Need to prepare.

Daniel

• Algorithms may be coming sooner than we think! Possibly this month!
• Working on public key and private key signature encodings. Updated stateful hash based signature drafts. Ready to post soon with the new ASN.1. Already aligns with what we did in the hackathon.
• Can people look at the stateful hash based signatures draft and make comments?
• Anyone have artifact for HSS, XMSS, SLH-DSA specifies no wrapping for private keys?

Carl Wallace

• Nothing to report - didn't get to work on the composite KEM's.
• Interested reading about timing attacks in the reference implementations.
  • Markku: Timing attacks came from PQShield - an exploitable timing attack. Many places with boolean AND operations that may be optimized in branches. Not such big news. It was posted on the mailing list. Changing compiler options fixed the issue. This affected Kyber: See:
    https://pqshield.com/pqshield-plugs-timing-leaks-in-kyber-ml-kem-to-improve-pqc-implementation-maturity/

Julien Prat

• Nothing really new to add for this month. Updated the implementations - Adding the private key in the artifacts. Interoperability of the private keys. Added to V4 format proposal. See Desired properties of V4 format artifact file #112

Hendrik Brockhaus

• Submitting an updated version of the 4210-bis. It is quite stable now. Ready for working group last call.
• KEM support to CMC using the same approach, hopefully Sean Turner will give us some feedback.
• Working with Hannes on CSR Attestation - discussing the hint for the CSR, evidence object - how to connect Nonce with CSR.
  • Mike: Authors meeting, take the HINT out - keep an explanation mark, add it back thanks.

Tomofumi

• Still need to review the detailed review Carl sent for certificate discovery.
  • Team discussed that it worth doing an adoption call after it is presented at IETF 120.

Markku

• The private key is changing (Dilithium and Kyber - using a 32 byte seed for the private key). They are adding domain separation. ML-DSA, ML-KEM - Keygen will have to keep being done. Which gives a nice public key pairing. SLH-DSA (won't have, not changing)
  • John - Private key format and compact format - will it lead to some compatibility issues if you don't want to have to regenerate the private key each time.
  • Mike: The format of the private key will need to be figured out for moving keys with P12. With private keys from seeds it becomes harder to test for robustness. Need a test mode for fully inflated private keys.
  • Daniel - Need FIPS certification of the private key. For SLH-DSA they are specifying only pure signing, no pre-hash signing.
  • Markku - CNSA 2.0 still says no SHAKE or SHA3 - still waiting to here if it is a SHA2. Look at the CNSA 2.0 FAQ, SHAKE and SHA3 for internal operations only. They updated the FAQ in April of this year

Alexander

• Joining up again after being away for the past few months.
• Still looking for people to interop with CMP
  • John: PQ CMP is getting closer to the top of my list of work items.

Outstand Issue Walk Through

Team went through issues #115, #114, #113, #112, #102, #96 and closed #95 because it will be part of #112