Subject: Re: [lamps] New Version Notification for draft-ietf-lamps-cms-mix-with-psk-06.txt

From: Russ Housley <[email-masked]>
Date: Tue, 6 Aug 2019 17:12:17 -0400

This revision addresses the AD review comments and the IETF Last Call comments.

If you are implementing, please note the correction in the ASN.1 module.  Thanks for catching that Jim.

Russ

> On Aug 6, 2019, at 5:04 PM, [email-masked] wrote:
> 
> 
> A new version of I-D, draft-ietf-lamps-cms-mix-with-psk-06.txt
> has been successfully submitted by Russ Housley and posted to the
> IETF repository.
> 
> Name:		draft-ietf-lamps-cms-mix-with-psk
> Revision:	06
> Title:		Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS)
> Document date:	2019-08-06
> Group:		lamps
> Pages:		30
> URL:            https://www.ietf.org/internet-drafts/draft-ietf-lamps-cms-mix-with-psk-06.txt
> Status:         https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-mix-with-psk/
> Htmlized:       https://tools.ietf.org/html/draft-ietf-lamps-cms-mix-with-psk-06
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-ietf-lamps-cms-mix-with-psk
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-ietf-lamps-cms-mix-with-psk-06
> 
> Abstract:
>   The invention of a large-scale quantum computer would pose a serious
>   challenge for the cryptographic algorithms that are widely deployed
>   today.  The Cryptographic Message Syntax (CMS) supports key transport
>   and key agreement algorithms that could be broken by the invention of
>   such a quantum computer.  By storing communications that are
>   protected with the CMS today, someone could decrypt them in the
>   future when a large-scale quantum computer becomes available.  Once
>   quantum-secure key management algorithms are available, the CMS will
>   be extended to support the new algorithms, if the existing syntax
>   does not accommodate them.  In the near-term, this document describes
>   a mechanism to protect today's communication from the future
>   invention of a large-scale quantum computer by mixing the output of
>   key transport and key agreement algorithms with a pre-shared key.