Summary of January 27th Virtual Interim Hackathon

[johngray-dev]

Saturday January 27th - 9:00am - 4:00pm EST

Present: Daniel Van Giest, John Gray, David Hook, Dev Jayati, Mike Ounsworth, Felipe Ventura, Carl Wallace

• Initial Welcome and discussion
  • Dev Jayati from ComCast has joined the project. Interested in DOCSYS and what is going on in this group.
• Discussed the X-Wing Draft (https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/)- updates to the Kyber768 and X25519 KEM combiner - Should Composite KEM make use of the same KEM for those algorithms instead of the generic combiner? It seems like for interoperability and implementation ease it should.
• Related discussions about XWing and the fact that it doesn't use the CT in the KDF has helped further the discussion on the KEMRecipientInfo draft to leave out adding H(ct) into the KDF -at least for now.
• Questions if XWing can be considered FIPS certified by combiner algorithms. Perhaps it will need to be certified on its own.
• Lots of interest for interop with KEMRecipientInfo. Participants are working on artifacts and will be posting them in the coming weeks so we can interoperate with each other.
• Did some composite Signature interop testing (https://datatracker.ietf.org/doc/draft-ounsworth-pq-composite-sigs/). NOTE: The PrivateKeyFormat in CompositeSignature has NOT changed in any of the recent versions. Only the Composite Public key format has changed since version -10.
• A updated version of KEMRecipientInfo draft was pushed out: https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-kemri/07/. No breaking changes introduces, just clarifications.
• Request for a new IETF PQX509Interop mailing list email has been sent out.