NIST announces first PQC algoritms to be standardized
groups.google.com
NIST announces first PQC algoritms to be standardized
1–10 of 132 posts
Re: NIST announces first PQC algoritms to be standardized
#2A link to the report: https://nvlpubs.nist.gov/nistpubs/ir/2022/NIST.IR.8413.pdf
Re: NIST announces first PQC algoritms to be standardized
#3Crystals-Kyber website: https://pq-crystals.org/kyber/
Press release: https://techxplore.com/news/2022-07-nist-quantum-resistant-c...
Re: NIST announces first PQC algoritms to be standardized
#4Obligatory djb warnings: https://ntruprime.cr.yp.to/warnings.html
Re: NIST announces first PQC algoritms to be standardized
#5OpenSSH has already chosen NTRU-Prime. Will there be a retrofit of CRYSTALS-KYBER? Or has the market already chosen?
DJB is an author on the SPHINCS+ team; glad to see that his work will be part of the standard.
Re: NIST announces first PQC algoritms to be standardized
#6PQC = post quantum cryptography
Re: NIST announces first PQC algoritms to be standardized
#7What's up with this?
> In addition, NIST has engaged with third parties that own various patents directed to cryptography, and NIST acknowledges cooperation of ISARA, Philippe Gaborit, Carlos Aguilar Melchor, the laboratory XLIM, the French National Center for Scientific Research (CNRS), the University of Limoges, and Dr. Jintai Ding. NIST and these third parties are finalizing agreements such that the patents owned by the third parties will not be asserted against implementers (or end-users) of a standard for the selected cryptographic algorithm
and
> NIST expects to execute the various agreements prior to publishing the standard. If the agreements are not executed by the end of 2022, NIST may consider selecting NTRU instead of KYBER. NTRU was proposed in 1996, and U.S. patents were dedicated to the public in 2007.
Re: NIST announces first PQC algoritms to be standardized
#8What's up with this? > In addition, NIST has engaged with third parties that own various patents directed to cryptography, and NIST acknowledges cooperation of ISARA, Philippe Gaborit, Carlos Aguilar Melchor, the laboratory XLIM, the French National Center for Scientific Research (CNRS), the University of Limoges, and Dr. Jintai Ding. NIST and these third parties are finalizing agreements such that the patents owned…
NIST is going the proper route to ensure that any standards they publish can be freely implemented without implementers having to pay patent royalties. That's the reason for your second quote - if KYBER patent holders don't want to agree, they should know that NIST won't choose them for the standard.
Re: NIST announces first PQC algoritms to be standardized
#9Obligatory djb warnings: https://ntruprime.cr.yp.to/warnings.html
[deleted]
Re: NIST announces first PQC algoritms to be standardized
#10What's up with this? > In addition, NIST has engaged with third parties that own various patents directed to cryptography, and NIST acknowledges cooperation of ISARA, Philippe Gaborit, Carlos Aguilar Melchor, the laboratory XLIM, the French National Center for Scientific Research (CNRS), the University of Limoges, and Dr. Jintai Ding. NIST and these third parties are finalizing agreements such that the patents owned…
Key part here is "are finalizing". It's still possible for at least some of the deals to fall through. I guess NTRU is the backup plan just in case and/or a method to apply pressure by saying the public is now aware there's a plan B. I exüect this passage to imply at least one negotiation has been going poorly.
It would probably be interesting to look up who of these people also has patents outside of the USA. If there really is someone being particularly stubborn, one might reasonably expect them to enforce the non-US patent variant outside of the USA.