Skip to Content.
Sympa Menu

rare-users - RE: [RARE-users] Post Quantum Cryptography(PQC) and freeRouter

Subject: RARE user and assistance email list

List archive

RE: [RARE-users] Post Quantum Cryptography(PQC) and freeRouter


Chronological Thread 
    < Chronological >      < Thread >
  • From: Eoin Kenny <>
  • To: "" <>, "" <>
  • Subject: RE: [RARE-users] Post Quantum Cryptography(PQC) and freeRouter
  • Date: Tue, 14 Dec 2021 14:59:49 +0000
  • Accept-language: en-IE, en-GB, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=heanet.ie; dmarc=pass action=none header.from=heanet.ie; dkim=pass header.d=heanet.ie; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MMKCEL/9ds6JopK5KZSvWfxNuPcdNPeCvOwNDN36hA8=; b=WA/PHSpJNmgJL84Pkb7/sXUL/WbOYreVzbBDmDVGyNI8JzgMEefZFWSIE/SCTLqFmssqK7XNK9dKNPcxrmXuvV4gb26kwBPUOjr4pHRyue9H49YaY3RcLahKzGtBnMsPajYT6YnMQ8f2ls++ImaUo+Wi0Krai31QTvVM9WkKYsyFK5tk+bZGGvO723iSzE+a0VgnQHlcfRoAptqWPgOQk2pZxz1j56e8FcJVEZ6pYynQPJOEMl09AKJ480nSg3r6FLFLxj82OlQ6wW9HnVF9WTXcm+JSW8RgOtQLobgT8VmGzfwOFDJyqJuMOVVf0ig5JaKaS75FiTwvjcXGnNqiEQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=V4HtNQ+JsZ0fQQlXX5Oq73bP7hFyuH9uMcFJWNadw+tcSq7CRi8JTIOD7+9bTcC32ALcuu4HianPDQ2hLFTdVrjgEkgwPQUEd2WR2JwKeKxmH7f6gVLnFzOuayKGLz8wPQoGvwy3vW7sVJA6gpj/R7g/O7eCiwjIZLoSDfpuf/1NFy8iCfLfI6g52GPy1mzlrJJDqG1I3fg9Md3B9HJzzncbnAtXh+A+75veJTR9YjRoSLNYLIZtO//90NQdH9S3DLzgUwqkhOeIn/2XYeYMlH38gRNO1n65R+UauheVJM/UbwHkI9tGrl+SJgaXvpzzusDB/PM1HwlUgX7ZhprD0Q==
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=heanet.ie;
Hi Csaba,

That does sound promising. Maybe a project for GN5.

Regards
Eoin

-----Original Message-----
From: mc36 <>
Sent: Tuesday 14 December 2021 12:33
To: ; Eoin Kenny <>
Subject: Re: [RARE-users] Post Quantum Cryptography(PQC) and freeRouter

CAUTION[External]: This email originated from outside of the organisation. Do
not click on links or open the attachments unless you recognise the sender
and know the content is safe.


hi,
first of all, im also very interested in the outcome of these efforts...
as i see there is nothing stable i can test against for now, so i'm waiting
for the outcome...
this stands for the ietf efforts...
on the other hand, during wireguard implementation, i added the wg-pqc
extensions...
that one is achieved basically with a pre-shared secret used in key
derivations only...
then i remembered that during macsec key exchange i was not able to reverse
engineer what cisco does, so i came up with my own dhe+preshared
implementation which uses similar thing: does not exchange the preshared key
or anything but uses it to feed the key derivation functions... so for now i
believe we have at least 2 implementation that are pqc-safe at the moment:
wg-psk and macsec-psk...
and as soon as ietf progresses, i plan to proceed with the official ones
too...
regards,
cs




On 12/14/21 13:21, Eoin Kenny wrote:
>
> Hi RARE team,
>
> Has there been any discussion in relation to the possibility of
> implementing post-quantum cryptography(PQC) in freeRouter?
> https://csrc.nist.gov/projects/post-quantum-cryptography/round-3-submi
> ssions
>
> Standardisation is expected to be completed in 2022 and Classic McEliece
> looks like a good candidate for testing.
> https://classic.mceliece.org/
> There are already some implementations, Adva [1] and
> https://post-quantum.com/.
>
> There is working ongoing in the IETF on extending IKEv2 to handle larger
> payloads. It may be possible to implement PQC for IPsec with PQ-IKEv2 and
> Classic McEliece coding.
>
> Regards
> Eoin
>
> [1]
> https://www.adva.com/en/resources/resources-gated-page/solution-briefs
> /making-networks-quantum-safe

Archive powered by MHonArc 2.6.19.

Top of Page