All Topics
All Topics
Technology
Technology
Design
Design
Programming
Programming
Science
Science
News
News
Gaming
Gaming
Entertainment
Entertainment
Business
Business
Finance
Finance
Sports
Sports
Health
Health
Food
Food
Travel
Travel
Art
Art
Music
Music
Books
Books
Education
Education
Politics
Politics
Personal
Personal
No algorithm. No AI slop. No ads. Just RSS. Pro-human. Indie writers. Real journalism. Open web. Chronological. Hand toasted.

Analysis of NSA Influence on IETF Post-Quantum Cryptography Standardization

By

upofadown

6mo ago· 33 min readenInsight

Summary

This article is part of a series examining the conflict between the NSA and IETF regarding post-quantum cryptography standardization. The author criticizes IETF management for pushing through an NSA-driven 'non-hybrid' document that adds only post-quantum cryptography as another TLS option, while the normal practice and TLS working group's approach is to deploy ECC+PQ hybrid solutions. The article suggests IETF is dodging substantive issues and censoring dissent in the standardization process, with the NSA influencing the direction against consensus-based hybrid approaches.

Key quotes

· 5 pulled
IETF's TLS working group is standardizing ECC+PQ.
But IETF management is also non-consensually ramming a particular NSA-driven document through the IETF process.
a 'non-hybrid' document that adds just PQ as another TLS option.
Normal practice in deploying post-quantum cryptography is to deploy ECC+PQ.
Dodging the issues at hand.
Snippet from the RSS feed
Normal practice in deploying post-quantum cryptography is to deploy ECC+PQ. IETF's TLS working group is standardizing ECC+PQ. But IETF management is also non-consensually ramming a particular NSA-driven document through the IETF process, a "non-hybrid" do

You might also wanna read