Markdown Version | Session Recording

Session Date/Time: 22 Jul 2025 09:30

pquip

Summary

The pquip meeting covered the status of existing documents, updates from the Hackathon, discussions on stateful hash-based signatures, adapting constrained devices for PQC, hybrid signature spectrums, a potential new working group item summarizing PQC algorithms, and a discussion about composite key formats. Several action items were identified, and future discussion topics were highlighted.

Key Discussion Points

• Hybrid Signature RFC: The RFC on hybrid signature spectrums is nearing completion, awaiting review from an AD who has been busy.
• PQC Hackathon: The hackathon included interoperability testing of PQC algorithms, focusing on composite keys and updates to the OID list. Participants tested various implementations and added new artifacts to the GitHub repository. Seed format support in crypto libraries was discussed.
• Stateful Hash-Based Signatures: Discussion focused on the state management document's readiness for working group last call. There were differing opinions on whether to emphasize the difficulty of state management or focus on best practices. Overlap with an existing ETSI document was raised as a concern. The need for more review and comments on the mailing list was emphasized. NIST's potential updates to SP 800-208 was also discussed.
• Adapting Constrained Devices for PQC: The presentation covered integrating PQC into constrained devices, highlighting trade-offs between memory usage, speed, and key management. Issues of MLDSA's memory footprint on small devices was discussed.
• Hybrid Signature Spectrums: Clarifications were made to the document during the AD review process, including discussions on artifacts, configuration, and security definitions.
• Summary of PQC Algorithms: A new individual draft summarizing a range of widely studied post-quantum algorithms was presented. The draft aims to provide a high-level overview of various PQC algorithms, including security assumptions and standardization status, in a unified and easily comparable format. Scope and how to make the document a living document vs. an RFC were debated.
• Composite Key Formats: A discussion on composite key formats focused on whether a hybrid key should be treated as an atomic algorithm or a decomposable structure at the protocol layer. There were arguments for and against both approaches. The encoding of private keys in relation to public keys was also discussed.

Decisions and Action Items

• Stateful Hash-Based Signatures:
  • ACTION: Authors to initiate discussion on the mailing list regarding readiness for working group last call.
  • ACTION: Authors to review overlap with existing ETSI document.
  • ACTION: Authors to monitor NIST's progress on SP 800-208 and adjust the document accordingly.
• Adapting Constrained Devices for PQC:
  • ACTION: Authors to drive discussion on the mailing list regarding specific sections of the document needing more input and updates.
  • ACTION: Authors to add a discussion on side channel security.
• Summary of PQC Algorithms:
  • ACTION: Community to discuss and provide feedback on the mailing list regarding the criteria for algorithm selection and the overall scope of the document.

Next Steps

• Continue discussion on the mailing list for various drafts
• Await IESG review of the hybrid signature spectrums draft.
• Attend LAMPS meeting to discuss composite key formats.