Minutes of the March 4th, 2025 meeting

[johngray-dev]

Present at the Meeting
Mike Ounsworth, Julian Pratt, James Tung, Abel Chen , Christopher Wildfeuer, Petr Muzikant, Carl Wallace, Corey Bonnell, Felipe Venture, J.P. Fiset

Discussed what we plan to work on at the IETF Hackathon on March 15th and 16th

• John Gray - Two hackathon projects - MTL Revocation discovery and composite signatures
• Mike Ounsworth - Will work on the ACVP automation work started by Joseph in IETF 121. This will add automation using the standard NIST reference implementation used for ACVP testing. Mike is also working with UbiKey Key Attestation.
• Carl Wallace - Working on ML-KEM and ML-DSA in the Rust language. Has devised a private key format for seeds, expanded or both. Carl will also take a look at updating his composite implementation.
• Julien Prat - Looking at the ML-DSA / ML-KEM private key encodings, the seed, expanded or both format.
• Petr Muzikant - Will join the hackathon remotely for Saturday
• Felipe Venture - Working on composite Signatures for openSSL - Need to figure out a better way to implement them since the OQS provider is probably not the right place (it is for research implementations). Felipe is in conversation with Nicola Tuveri about the best place to put the open source composite signatures implementation for wider production use. Felipe may also work with Mike on the ACVP automation.
• James Tung - Just uploaded ML-KEM and CMS artifacts. Working on authn enveloped CMS. James will attend onsite meeting.
• Christoph Wilfeuer - Working on satellite communication protocol, implementing PQC into it. The SP 800-227 document on hybrids has been helpful on giving guidance. Looking at adding ECDH+MLKEM in satellite protocols. Also working with students for formal verification of these protocols.
• Corey Bonnell - Two things to do during the hackathon - private key formats, update his certificate linter and add support for linting private keys. Quick sanity testing for the linter. Could use this with the automated CICD pipeline. Second item is looking at known insecure private keys for ML-DSA/ML-KEM. Create drafts for known test keys similar to RFC 9500.
• JP Fiset - Would like to start working on composite Signatures and Composite KEM. Will be onsite at the Hackathon.

IETF Hackathon 122

• Saturday March 15th: We will have a virtual meetings at the following times:
  • 11:30 am, 3:00 pm, 8:00 pm (Bankok local time),
• Sunday March 16th:
  • 11:30 am (Bankok local time).

#Private key Format

• Discussed what the private key format for testing will look like. Here is the proposal:
  • seed_priv.der
    expandedkey_priv.der
    both_priv.der

We will update the artifact version format to v5, and ask that the above formats be included for the ML-DSA and ML-KEM formats

[t-j-h]

Can we get links added to what each person is talking about in terms of implementation and if the implementation is public and open source or closed or whatever - so it is clearer to new comers what each person is talking about - and where it fits in the overall deployment path for PQC.

Note the OASIS Open KMIP interop from last week has its results up at https://kmip-interop.org/ and the link at https://kmip-interop.org/background.html points to the details of the KMIP specifications and the tests. All the test cases in the XML test case representation of KMIP are at https://kmip-interop.org/test-xml/ - note that is 1452 test files. Just to show a PQC interop test approach contrast.