NSA-NIST-PQC FOIA responses
The FOIA request
"NSA, NIST, and post-quantum cryptography"
was filed in March 2022.
A lawsuit was filed in August 2022;
an accompanying
blog post
gives more background.
The U.S. government began delivering some records in September 2022.
A followup FOIA request
"Newer records regarding NSA, NIST, and post-quantum cryptography"
was filed in January 2023.
A lawsuit on that was filed in October 2023.
The U.S. government began delivering some records in July 2024.
This page is an index of the records delivered by 20241115 in both lawsuits,
plus notes last edited 20241125 00:54:00 UTC.
Records are ordered chronologically by dates listed on the records,
or by date estimates for records not providing dates.
Comparing NIST's claims of transparency to the facts.
The call for submissions
for NIST's Post-Quantum Cryptography Standardization Project
stated that
"NIST will perform a thorough analysis of the submitted algorithms in a manner that is open and transparent to the public":
https://web.archive.org/web/20220119113311/https://csrc.nist.gov/CSRC/media/Projects/Post-Quantum-Cryptography/documents/call-for-proposals-final-dec-2016.pdf
Matthew Scholl, Chief of the Computer Security Division in NIST's Information Technology Laboratory,
claimed in October 2021 regarding the same project that "We operate transparently. We've shown all our work":
https://web.archive.org/web/20211115191840/https://www.nist.gov/blogs/taking-measure/post-quantum-encryption-qa-nists-matt-scholl
In fact,
many of the records below
were hidden from the public until this lawsuit forced their disclosure.
Some of the records show critical decision steps,
including outright errors that could have been corrected if they hadn't been concealed.
It's clear that NIST's non-transparency was intentional;
some of the records are even marked "not for public distribution".
Some information was available.
For example, various submissions and "KAT" files sent to NIST
were promptly posted on NIST's web site, already starting in 2017.
NIST has padded its FOIA responses by including copies of various records that were already on its web site,
even though, for such records,
the FOIA request had asked for specific URLs, not copies.
Patterns observed in the records delivered so far.
The notes below use hash tags for some recurring themes:
- NIST carrying out secret evaluations, secret deliberations, etc. #weveshownallourwork
- NIST communicating with NSA (and GCHQ) regarding this project. #nsa
- NIST externally claiming transparency. #claimingtransparency
- NIST scrambling to catch up on post-quantum cryptography. #scramble
- NIST making claims that communicate incorrect information (beyond the claims of transparency). #error
- NIST making claims with exploitable ambiguities. #missingclarity
- NIST being inconsistent: for example, deviating from its announced procedures, or giving some submissions leeway not given to others. #inconsistency
- NIST putting weight on size/speed advertisements, while failing to quantify costs in context of the total application cost for the end user. #ftqcic
(This is important: security was supposed to be the top priority,
but clearly ended up being given lower weight
than unsubstantiated suggestions regarding the level of performance required.)
- NIST violating ethics rules. #ethics
- NIST slowing down deployment of post-quantum cryptography, for example via patents. #slowingdownpqcrypto
There is also a #needmorerecords hash tag
for questions that one can reasonably hope will be answered by further FOIA records.
Questions about whether particular documents were public might be resolved through separate searches
and are marked with #weveshownallourwork rather than #needmorerecords.
Number of occurrences of tags:
159 #weveshownallourwork.
119 #inconsistency.
109 #error.
104 #needmorerecords.
47 #scramble.
46 #nsa.
40 #ftqcic.
29 #missingclarity.
23 #claimingtransparency.
17 #slowingdownpqcrypto.
14 #ethics.
20100716 14:48:42 -04
file 20230315/quantum-feistel.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230608 16:16:17 UTC
- PDF date: 20100716 14:48:42 -04
- PDF creation date: 20100701 11:21:01 -0500
- Author: "Hidenori Kuwakado" and "Masakatu Morii"
- PDF title: "Quantum Distinguisher between the 3-Round Feistel Cipher and the Random Permutation"
- Pages: 4
- Bytes: 107294
Notes from djb, last edited 20230608 22:17:45 UTC:
Paper showing how to break a particular type of cipher
if the cipher user has a quantum computer
that applies the cipher to quantum inputs from the attacker.
20120620 08:29:33 -0400
file 20240215/Today's PQC meeting summary _ assignments_2.pdf-attachment-SHA3-FR_Notice_Nov07.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:56:28 UTC
- PDF date: 20120620 08:29:33 -0400
- PDF creation date: 20071102 01:49:06 UTC
- PDF author: "U.S. Government Printing Office"
- PDF title: "Federal Register Notice, Nov. 2, 2007, Announcing Request for Candidate Algorithm Nominations for a New Cryptographic Hash Algorithm (SHA-3) Family"
- PDF subject: "Extracted Pages"
- PDF keywords: "Federal Register Notice, Nov. 2, 2007, Announcing Request for Candidate Algorithm Nominations for a New Cryptographic Hash Algorithm (SHA-3) Family"
- Pages: 9
- Bytes: 284538
Notes from djb, last edited 20240225 11:49:06 UTC:
SHA-3 call from Federal Register.
20130123 15:10:00 -0500
file 20230619/quantumisogenies.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20130123 15:10:00 -0500
- PDF creation date: 20130123 15:10:00 -0500
- PDF author: "Dustin Moody"
- Title: "Isogenies and Quantum Computing"
- PDF title: "Isogenies in Elliptic Curve Cryptography"
- Pages: 28
- Bytes: 470000
Notes from djb, last edited 20230625 17:50:02 UTC:
Talk slides.
Were these slides public before this FOIA lawsuit?
#weveshownallourwork
Rostovstev–Stolbunov cryptosystem: "Mainly of theoretical interest"
"Flaws of previous system: Not very efficient ... Subexponential attack"
(For comparison, FrodoKEM is broken in time subexponential in the key size.
Has NIST ever described this as a "flaw" in FrodoKEM?
#inconsistency)
Regarding SIKE:
"New supersingular isogeny-based cryptosytem:
Way more efficient ... No subexponential attack known"
"Conclusion: wait and see"
20130315 13:01:49 UTC
file 20230619/Differential Invariants.pptx:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- XML date: 20130315 13:01:49 UTC
- XML creation date: 20130314 20:48:01 UTC
- Author: Daniel Smith-Tone? [indicated by XML creator, consistent with style and content]
- Title: "Differential Invariants: Continuing the Classification Based Security Schema for Multivariate Public Key Cryptography in the Hope that the Process will Eventually Lead to Reasonable Security Criteria for this Particular Family of Potentially Quantum-Resistant Public Key Cryptosystems"
- XML creator: "dcsmit11"
- XML last-modified-by: "dcsmit11"
- Pages: 7
- Bytes: 657252
Notes from djb, last edited 20230622 22:46:00 UTC:
Talk slides about an aspect of security analysis of MQ cryptosystems.
20130909 02:03:10 -0400
file 20230619/13371.SmithDaniel.Slides.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20130909 02:03:10 -0400
- PDF creation date: 20130909 02:03:10 -0400
- PDF author: "Daniel Smith-Tone "
- PDF title: "Quantum-Resistant Multivariate Public Key Cryptography"
- Pages: 68
- Bytes: 2078793
Notes from djb, last edited 20230622 22:46:00 UTC:
Talk reviewing various MQ cryptosystems.
Were these slides public before this FOIA lawsuit?
#weveshownallourwork
20131205
file 20230315/20131205-lecture.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230608 16:16:18 UTC
- PDF date: 20131205 13:31:37 +0100
- PDF creation date: 20131205 13:31:37 +0100
- Date: 20131205
- Author: "Ruben Niederhagen"
- PDF author: "Ruben Niederhagen"
- Title: "Multivariate Cryptography"
- PDF title: "Multivariate Cryptography - 2WC12 Cryptography I – Fall 2013"
- Pages: 151
- Bytes: 828417
Notes from djb, last edited 20230608 22:17:45 UTC:
Public lecture notes.
20140506 08:19:06 -0400
file 20230619/dings crypto club talk.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20140506 08:19:06 -0400
- PDF creation date: 20140402 21:49:18 +0800
- Author: "Jintai Ding"
- PDF author: "Jintai Ding "
- Title: "Post-quantum Cryptography: Multivariate Public Key Cryptography"
- PDF title: "Post-quantum Cryptography Multivariate Public Key Cryptography"
- Pages: 77
- Bytes: 496357
Notes from djb, last edited 20230622 22:46:00 UTC:
Talk on Rainbow and other MQ systems.
Similar to slides from some public talks on other occasions.
"The security analysis has solid theoretical support"
20140707 08:57:37 -0400
file 20240726/Edwards isogeny paper.pdf-attachment-edwardsisogenies-final revision.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240719 12:14:54 UTC
- PDF date: 20140707 08:57:37 -0400
- PDF creation date: 20140707 08:57:37 -0400
- Pages: 22
- Bytes: 335056
201410
file 20230206/ETSI-workshop-LilyChen.pdf:
- FOIA delivery date: 20230206
- FOIA file date: 20221209 16:46:00 UTC
- PDF date: 20220907 21:42:02 -0400
- PDF creation date: 20220907 21:41:52 -0400
- Date: 201410
- Author: "Lily Chen"
- PDF author: "Chen, Lily"
- Title: "Build Quantum-Safe Security Protocols"
- PDF title: "Neither do people pour new wine into old wineskins"
- Pages: 16
- Bytes: 331624
Notes from djb, last edited 20230625 17:50:02 UTC:
Slides of an external talk in 2014.10.
"Quantum Resistant IKE":
"It is very likely that a quantum resistant encryption scheme
will be used to establish keys";
"Require a fast key pair generation"
This seems to be claiming that a quantum-resistant variant of IKE
can't work without fast key generation. But that's not true.
#error
20141112
file 20230517/Fwd Four decks for NIST.msg:
- FOIA delivery date: 20230517
- FOIA file date: 20230608 16:17:00 UTC
- Date: 20141112
- Author: "Ken Zatyko"
- Title: "Fwd: Four decks for NIST"
- Bytes: 10210816
Notes from djb, last edited 20230608 22:17:45 UTC:
Email to "Michaela Iorga" and "Meltem Sonmez Turan"
with "slide decks for today".
Four PDFs.
Hash-based "keyless signatures".
20150216
file 20230517/Third Draft NIST ITL Patent Process for Its P.docx:
- FOIA delivery date: 20230517
- FOIA file date: 20230608 16:17:00 UTC
- XML date: 20160129 15:55:00 UTC
- XML creation date: 20160129 15:55:00 UTC
- Date: 20150216
- Title: "NIST ITL Process for Inclusion of Patents in NIST ITL Publications"
- XML creator: "Mike Hogan"
- XML last-modified-by: "Microsoft Office User"
- Pages: 3
- Bytes: 37686
Notes from djb, last edited 20230608 22:17:45 UTC:
Third secret draft of a policy document.
20150313 19:36:00 UTC
file 20230517/Fourth Draft NIST ITL Patent Process for Its .docx:
- FOIA delivery date: 20230517
- FOIA file date: 20230608 16:17:00 UTC
- XML date: 20150313 19:36:00 UTC
- XML creation date: 20150313 19:31:00 UTC
- Title: "NIST ITL Process for Inclusion of Patents in NIST ITL Publications"
- XML creator: "Mike Hogan"
- XML last-modified-by: "Mike Hogan"
- Pages: 3
- Bytes: 43349
Notes from djb, last edited 20230625 17:50:02 UTC:
Fourth secret draft of a policy document.
Authorship is not clearly indicated
but "Mike Hogan" is listed as a contact.
"Our preference is to develop ITL publications that do
not include patent concerns in order to not encumber
the development and implementation of our
publications. In some instances, such as NIST
cryptographic competitions, we require that the
candidate cryptographic algorithms to be offered on a
Royalty Free (RF) basis. In general, the use of an
essential patent claim (one whose use would be
required for compliance with the guidance or
requirements of the publication) may be considered if
technical reasons justify this approach. In such
cases, a patent holder would have to agree to either
Royalty Free (RF) or Reasonable and Non-Discriminatory
(RAND) licensing to all interested parties."
If patent holders do not agree to RF or RAND:
"In such case, NIST shall determine if the patent
claim appears to be pertinent. If the patent claim
appears to be pertinent to NIST, the publication shall
not include provisions depending on that patent."
The specific provision requiring royalty-free submissions to "competitions"
is in line with NIST IR 7977,
which clearly states that,
for a NIST competition,
winners relinquish intellectual property rights so that the winner can be used royalty-free.
For comparison,
NIST avoided calling NISTPQC a "competition";
avoided requiring submissions to be royalty-free;
and drastically slowed down development and implementation of its post-quantum encryption standards
by selecting a cryptosystem in the middle of a patent minefield.
#inconsistency
#slowingdownpqcrypto
Furthermore,
after NISTPQC was underway,
NIST quietly posted a toothless
policy
saying
"In the case of NIST ITL cryptographic competitions, ITL may require that candidate cryptographic algorithms be offered on an RF and RAND basis"
and saying
that ITL "may" exclude material if patent holders do not agree to RF or RAND.
#inconsistency
20150622 10:04:39 +0200
file 20230508/QuantumSafeWhitepaper.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- PDF date: 20150622 10:04:39 +0200
- PDF creation date: 20150621 14:57:53 +0200
- PDF author: "newpc3"
- Title: "Quantum Safe Cryptography and Security"
- Pages: 64
- Bytes: 1615972
Notes from djb, last edited 20230608 22:17:45 UTC:
Public white paper from ETSI.
20151022 14:43:02 +0100
file 20240726/Re_ question about Quantum Communications appli..._1.pdf-attachment-InnovateUK_QuantumTech_CO004_final.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240611 09:29:40 UTC
- PDF date: 20151022 14:43:02 +0100
- PDF creation date: 20150914 14:08:15 +0100
- Pages: 28
- Bytes: 580007
20151130 17:26:16 UTC
file 20230508/PQC at UMD.pptx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:41 UTC
- XML date: 20151130 17:26:16 UTC
- XML creation date: 20140310 14:46:07 UTC
- Author: "Dustin Moody"
- Title: "A Quantum World and how NIST is preparing for future crypto"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 14
- Bytes: 102167
Notes from djb, last edited 20230625 17:50:02 UTC:
Filename indicates that this was (a draft of?) a slide set for a talk at UMD.
Was this talk public?
"For most of the potential PQC replacements, the times needed for encryption, decryption, signing, verification are acceptable":
Acceptable for what?
How was this evaluated?
For comparison, NIST later used timings as a major deciding factor.
#missingclarity
#ftqcic
"Some key sizes are significantly increased":
Significant for what?
How was this evaluated?
#missingclarity
#ftqcic
"Some ciphertext and signature sizes are not quite plausible":
Plausible for what?
How was this evaluated?
#missingclarity
#ftqcic
"Key pair generation time for the encryption schemes is not bad at all":
Not bad for what?
How was this evaluated?
#missingclarity
#ftqcic
"No easy “drop-in” replacements":
How was this evaluated?
#missingclarity
#ftqcic
"The NIST PQC Project ... Biweekly seminars since 2012"
#weveshownallourwork
"Cannot use general lattices, key sizes are too big!":
Too big for what?
How was this evaluated?
#missingclarity
#ftqcic
20151202 20:29:36 UTC
file 20230508/Challenges in PQC standardization - 11302015 .pptx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:41 UTC
- XML date: 20151202 20:29:36 UTC
- XML creation date: 20151116 14:26:06 UTC
- Title: "Challenges in Post Quantum Cryptography Standardization"
- XML creator: "Chen, Lily"
- XML last-modified-by: "Moody, Dustin"
- Pages: 25
- Bytes: 363590
Notes from djb, last edited 20230608 22:17:45 UTC:
Draft of "Challenges in PQC standardization - 12102015.pdf".
20151210
file 20230105/Challenges in PQC standardization - 12102015.pdf:
- FOIA delivery date: 20230105
- FOIA file date: 20221025 06:46:28 UTC
- PDF date: 20220907 21:36:25 -0400
- PDF creation date: 20220907 21:36:14 -0400
- Date: 20151210
- Author: "(Lily) Lidong Chen"
- PDF author: "Chen, Lily"
- Title: "Challenges in Post Quantum Cryptography Standardization"
- PDF title: "Challenges in Post Quantum Cryptography Standardization"
- Pages: 26
- Bytes: 235100
Notes from djb, last edited 20230625 17:50:02 UTC:
Slides of a talk. Was this talk public?
#weveshownallourwork
"We have more than 20 years experience in PKC standardization"
"Will the experience be sufficient for developing PQC standards?"
"Shortest Vector Problem (SVP) is NP-hard under randomized reductions":
Why did NIST praise lattice-based cryptography on the basis of irrelevant NP-hardness results
while not praising other types of cryptography on the basis of irrelevant NP-hardness results?
#inconsistency
"The original version of the McEliece cryptosystem has a key length of million of bits": Half a million, not millions.
#error
2016
file 20231013/IAC2PCABCSMMES5.docx:
- FOIA delivery date: 20231013
- FOIA file date: 20230926 06:20:38 UTC
- XML date: 20230926 12:20:00 UTC
- XML creation date: 20230926 12:20:00 UTC
- Date: 2016?
- Author: Dustin Moody, Ray Perlner, Daniel Smith-Tone
- Title: "Improved Attacks on Cubic Simple Matrix Encryption"
- XML creator: "Scholl, Matthew A. (Fed)"
- XML last-modified-by: "Gonzales, Matthew J. (Fed)"
- Pages: 37
- Bytes: 45033
20160106
file 20230315/ACMD News (Vol. 5, No. 1).pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 13:16:36 -0500
- PDF creation date: 20221014 14:12:57 -0400
- Email date: 20160106 03:32:28
- Date: 20160106
- Author: "Ronald Boisvert"
- Title: "ACMD News (Vol. 5, No. 1)"
- Email from: "Ronald Boisvert"
- Email to: "Division 771"
- Email subject: "ACMD News (Vol. 5, No. 1)"
- Pages: 4
- Bytes: 115423
20160106 10:00:00
file 20230619/RE_ some comments(1).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:44:17 -0500
- PDF creation date: 20221014 14:13:01 -0400
- Email date: 20160106 10:00:00
- Date: 20160106 10:00:00
- Author: "Moody, Dustin"
- Title: "RE: some comments"
- Email from: "Moody, Dustin"
- Email to: "Dodson, Donna F"
- Email subject: "RE: some comments"
- Pages: 2
- Bytes: 132587
Notes from djb, last edited 20230622 22:46:00 UTC:
Email scheduling internal discussion of NIST report.
#weveshownallourwork
20160106 10:12:49
file 20230508/Re_ are you around today_.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 13:43:46 -0500
- PDF creation date: 20221014 14:13:00 -0400
- Email date: 20160106 10:12:49
- Date: 20160106 10:12:49
- Author: "Dodson, Donna F"
- Title: "Re: are you around today?"
- Email from: "Dodson, Donna F"
- Email to: "Regenscheid, Andrew"
- Email subject: "Re: are you around today?"
- Pages: 1
- Bytes: 111111
Notes from djb, last edited 20230608 22:17:45 UTC:
Email from Donna Dodson (NIST higher-up)
asking for a discussion
of an upcoming NIST report.
20160106 10:17:00
file 20230619/RE_ some comments.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:43:29 -0500
- PDF creation date: 20221014 14:13:00 -0400
- Email date: 20160106 10:17:00
- Date: 20160106 10:17:00
- Author: "Moody, Dustin"
- Title: "RE: some comments"
- Email from: "Moody, Dustin"
- Email to: "Regenscheid, Andrew; Dodson, Donna F"
- Email cc: "Chen, Lily"
- Email subject: "RE: some comments"
- Pages: 2
- Bytes: 135364
Notes from djb, last edited 20230622 22:46:00 UTC:
Email scheduling internal discussion of NIST report.
#weveshownallourwork
20160107
file 20230315/ISPAB_ Draft Recommendation Letter re. Quantum ...(1).pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 13:12:13 -0500
- PDF creation date: 20221014 14:11:49 -0400
- Email date: 20160107 02:34:52
- Date: 20160107
- Author: "ispab@nist.gov on behalf of Sokol, Annie W."
- Title: "ISPAB: Draft Recommendation Letter re. Quantum Computing"
- PDF attachments: "ISPAB Ltr to NIST on Quantum_Computing_201601.docx"
- Email from: "ispab@nist.gov on behalf of Sokol, Annie W."
- Email to: "ISPAB"
- Email subject: "ISPAB: Draft Recommendation Letter re. Quantum Computing"
- Pages: 1
- Bytes: 131647
Notes from djb, last edited 20230321 15:29:09 UTC:
Refers to "ISPAB Ltr to NIST on Quantum Computing 20160106-1a.docx" attachment
including "tracked changes for easy readability".
20160107 07:11:00
file 20230619/Re_ post quantum stuff.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:14:18 -0500
- PDF creation date: 20221014 14:11:54 -0400
- Email date: 20160107 07:11:00
- Date: 20160107 07:11:00
- Author: "Moody, Dustin"
- Title: "Re: post quantum stuff"
- Email from: "Moody, Dustin"
- Email to: "Kelsey, John M.; Chen, Lily"
- Email subject: "Re: post quantum stuff"
- Pages: 1
- Bytes: 116480
Notes from djb, last edited 20230622 22:46:00 UTC:
"It will be similar to, but NOT, a competition"
For comparison,
the
Dual EC post-mortem
said that NIST's VCAT
"strongly encourages standard development through open competitions, where appropriate".
#inconsistency
20160107 19:27:00 UTC
file 20230315/ISPAB Ltr to NIST on Quantum_Computing_201601.docx:
- FOIA delivery date: 20230315
- FOIA file date: 20230608 16:16:18 UTC
- XML date: 20160107 19:27:00 UTC
- XML creation date: 20160107 02:23:00 UTC
- XML creator: "Toby Levin"
- XML last-modified-by: "Sokol, Annie W."
- Pages: 2
- Bytes: 28807
Notes from djb, last edited 20230622 22:46:00 UTC:
Draft of letter from
"Peter Weinberger, Ph.D., Chair, Information Security and Privacy Advisory Board"
to NIST director
"Dr. Willie E. May"
and OMB director
"The Honorable Shaun Donovan".
Edits from Sokol.
"At our meeting October 21, 2015 we had presentations
by employees of National Institute of Standards and
Technology (NIST) and National Security Agency (NSA)
related to quantum computing. We discussed the
critical concerns that would arise from the
development of a cryptographically capable quantum
computer, including making insecure all present and
future uses of current public key cryptography.
...
A plan for quantum resistance should provide a roadmap and timeline for getting to generally accepted standards, protocols, and, perhaps, competitions for necessary algorithms. Unfortunately not enough is known to lay out such a plan. The Board urges the creation of a strategy to develop such a plan."
What exactly did NSA say?
Some digging finds partial information:
minutes
and
slides
from a presentation
"NIST and NSA Future Plans for Quantum Resistant Cryptography".
One interesting comment in the slides is
"Don’t force elliptic curve transition (resources)".
For comparison, NSA subsequently announced that it wants everybody to finish moving to post-quantum encryption by 2035.
That's twenty years after this ISPAB presentation.
The minutes say, regarding NSA's "announcement in August 2015 on quantum computers",
that
"The announcement was also abruptly made owing to a mandate for
NSA to transition to strictly elliptic curve protocols for public key cryptography in October 2015.
NSA felt an obligation to make the announcement prior to the October deadline and because some of their
partners would conscientiously move forward with the transition on their own."
Other interesting comments in the minutes:
"NIST is further working with the international community for general acceptance of Product Quality Characteristic (PQC) standards. ...
The Chair noted that the early uses of
public key had many algorithms that were not truly secure and suggested there may be a need for several algorithms."
#nsa
20160108 16:36:23
file 20230517/Re_ Keyless signature infrastructure.pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 13:11:10 -0500
- PDF creation date: 20221014 14:11:45 -0400
- Email date: 20160108 04:36:23
- Date: 20160108 16:36:23
- Author: "Iorga, Michaela"
- Title: "Fwd Four decks for NIST.msg"
- PDF attachments: "Fwd Four decks for NIST.msg"
- Email from: "Iorga, Michaela"
- Email to: "Chen, Lily"
- Email cc: "Perlner, Ray; Moody, Dustin"
- Email subject: "Re: Keyless signature infrastructure"
- Pages: 2
- Bytes: 9491478
20160111 09:54:54
file 20230619/Re_ Your visit to NIST .pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:08:41 -0500
- PDF creation date: 20221014 14:11:44 -0400
- Email date: 20160111 09:54:54
- Date: 20160111 09:54:54
- Author: "Moody, Dustin"
- Title: "Re: Your visit to NIST"
- Email from: "Moody, Dustin"
- Email to: "Chen, Lily; Scott Simon (scott.b.simon@gmail.com)"
- Email subject: "Re: Your visit to NIST"
- Pages: 1
- Bytes: 114958
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Chen, Lily" and "Scott Simon (scott.b.simon@gmail.com)"
about "an internal PQC meeting tomorrow".
#weveshownallourwork
Quotes email from "Chen, Lily" to the same "Scott Simon"
about Simon's upcoming visit to NIST on 12 January 2016.
(NIST SP 800-56B lists two coauthors identified as "NSA",
one of them being "Scott Simon",
presumably the same person visiting NIST.)
What exactly was communicated between NSA and NIST during this visit?
#needmorerecords
#nsa
20160112 11:45:16
file 20230517/Re_ meeting at RSA.pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:01:53 -0500
- PDF creation date: 20221014 14:11:33 -0400
- Email date: 20160112 11:45:16
- Date: 20160112 11:45:16
- Author: "Scholl, Matthew"
- Title: "Re: meeting at RSA"
- Email from: "Scholl, Matthew"
- Email to: "Dodson, Donna F"
- Email subject: "Re: meeting at RSA"
- Pages: 1
- Bytes: 113127
Notes from djb, last edited 20230608 22:17:45 UTC:
Planning meeting with Paul Kocher.
20160113 09:01:31
file 20230619/RE_ PQC timeline.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:00:22 -0500
- PDF creation date: 20221014 14:11:31 -0400
- Email date: 20160113 09:01:31
- Date: 20160113 09:01:31
- Author: "Chen, Lily"
- Title: RE: PQC timeline
- Email from: "Chen, Lily"
- Email to: "Moody, Dustin; Perlner, Ray"
- Email cc: "Liu, Yi-Kai"
- Email subject: "RE: PQC timeline"
- Pages: 1
- Bytes: 122906
Notes from djb, last edited 20230625 17:50:02 UTC:
Email on general planning of the competition.
Quotes draft email proposing
"We can accept submissions on ongoing basis anytime after our deadline,
but we won't promise when we'll get to them".
This is very different from what NIST ended up doing.
#inconsistency
20160113 14:26:37
file 20230619/Re_ PQC meeting tomorrow(1).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 13:00:35 -0500
- PDF creation date: 20221014 14:11:31 -0400
- Email date: 20160113 02:26:37
- Date: 20160113 14:26:37
- Author: "Liu, Yi-Kai"
- Title: "Re: PQC meeting tomorrow"
- Email from: "Liu, Yi-Kai"
- Email to: "Moody, Dustin"
- Email subject: "Re: PQC meeting tomorrow"
- Pages: 2
- Bytes: 138978
Notes from djb, last edited 20230622 22:46:00 UTC:
Logistics email about internal NIST content discussions.
#weveshownallourwork
Quoted email from Moody says
"I appreciated the feedback from the NSA and Donna,
as they gave us a perspective I think we were lacking"
and
"NSA wants to coordinate with us before PQCrypto".
Also refers to "our NSA friends".
#nsa
20160114
file 20230315/Outline for PQC announcement.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 12:48:19 -0500
- PDF creation date: 20221014 14:09:17 -0400
- Email date: 20160114 01:11:59
- Date: 20160114
- Author: "Moody, Dustin"
- Title: "Outline for PQC announcement"
- Email from: "Moody, Dustin"
- Email to: "Liu, Yi-Kai; Perlner, Ray; Peralta, Rene; Chen, Lily; Bassham, Lawrence E; Jordan, Stephen P; Daniel C Smith(daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "Outline for PQC announcement"
- Pages: 2
- Bytes: 117459
Notes from djb, last edited 20230622 22:46:00 UTC:
Email to "Liu, Yi-Kai" and "Perlner, Ray" and "Peralta, Rene" and "Chen, Lily"
and "Bassham, Lawrence E" and "Jordan, Stephen P" and "Daniel C Smith"
saying "I'm going to start working on the slides for our announcement at PQCrypto".
"Mention NSA's statement? (not sure about this) EU's project?"
"Should we try to 'fast-track' those proposals that seem more mature?"
"pqc@nist.gov - NSA gets this email as well"
#nsa
20160114 01:57:24
file 20230508/Re_ Outline for PQCrypto announcement.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:56:42 -0500
- PDF creation date: 20221014 14:11:25 -0400
- Email date: 20160114 01:57:24
- Date: 20160114 01:57:24
- Author: "Liu, Yi-Kai"
- Title: "Re: Outline for PQCrypto announcement"
- Email from: "Liu, Yi-Kai"
- Email to: "Moody, Dustin"
- Email subject: "Re: Outline for PQCrypto announcement"
- Pages: 3
- Bytes: 139837
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Moody, Dustin"
suggesting questions to pose to the public.
"How can we encourage more work on quantum cryptanalysis?"
(NIST did pose this question,
but NIST's "categories"
discouraged work on quantum cryptanalysis. #inconsistency)
"If we want to standardize some post-quantum cryptosystem that has worse parameters (such as
key length) than our currently-deployed crypto, this may have consequences for higher-level
protocols and applications. How can we encourage people to study these issues? For instance, I
would feel more confident if we had some more prototype implementations of post-quantum TLS
and IKE protocols."
20160114 09:31:00
file 20230517/RE_ Latest version of NISTIR and other document...(3).pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:53:32 -0500
- PDF creation date: 20221014 14:09:22 -0400
- Email date: 20160114 09:31:00
- Date: 20160114 09:31:00
- Author: "Moody, Dustin"
- Title: "RE: Latest version of NISTIR and other documents for PQC"
- Email from: "Moody, Dustin"
- Email to: "Perlner, Ray"
- Email subject: "RE: Latest version of NISTIR and other documents for PQC"
- Pages: 1
- Bytes: 116086
Notes from djb, last edited 20230608 22:17:45 UTC:
Acknowledgment.
20160114 09:38:12
file 20230508/PQC NISTIR version 2.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 12:53:05 -0500
- PDF creation date: 20221014 14:09:21 -0400
- Email date: 20160114 09:38:12
- Date: 20160114 09:38:12
- Author: "Moody, Dustin"
- Title: "PQC NISTIR version 2"
- PDF attachments: "PQC NISTIR v2.docx"
- Email from: "Moody, Dustin"
- Email to: "Perlner, Ray; Peralta, Rene; Chen, Lily; Find, Magnus G.; Jordan, Stephen P; Liu, Yi-Kai; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Bassham, Lawrence E; Regenscheid, Andrew; Dodson,Donna F; Scholl, Matthew"
- Email subject: "PQC NISTIR version 2"
- Pages: 1
- Bytes: 220590
Notes from djb, last edited 20230625 17:50:02 UTC:
"I’ve incorporated the revisions and edits we discussed regarding the comments received from Donna and the NSA."
What was the NSA input?
#nsa
#needmorerecords
20160114 10:50:35
file 20230508/PQC Crypto Club Talk(3).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 12:52:35 -0500
- PDF creation date: 20221014 14:09:19 -0400
- Email date: 20160114 10:50:35
- Date: 20160114 10:50:35
- Author: "Moody, Dustin"
- Title: "PQC Crypto Club Talk"
- PDF attachments: "Challenges in PQC standardization - 11302015 .pptx"; "PQC at UMD.pptx"; "QuantumSafeWhitepaper.pdf"
- Email from: "Moody, Dustin"
- Email to: "Perlner, Ray; Liu, Yi-Kai; Jordan, Stephen P; Peralta, Rene; Chen, Lily; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Bassham, Lawrence E"
- Email subject: "PQC Crypto Club Talk"
- Pages: 1
- Bytes: 2060274
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Perlner, Ray"
and "Liu, Yi-Kai"
and "Jordan, Stephen P"
and "Peralta, Rene"
and "Chen, Lily"
and "Daniel C Smith"
and "Bassham, Lawrence E".
"We're going to give the crypto-club talk on Feb. 3rd, at 10am, on our PQC project and its
upcoming plans. I'm thinking we should plan for roughly 90 minutes of talking, which would leave
ample time for questions. To ease the burden of preparing, I would like to break up the
presentation, and have several of us give different parts of it. Here's my initial thought for how we
could do this:"
"1) (10 min) Yi-Kai Introduction. Impact of quantum on PKC/NIST standards. What
are quantum computers, Shor's algorithm, Grover's algorithm. What is post-quantum
crypto. Difference with quantum crypto/QKD. NIST project/team. Why this all matters right
now. Then lead into broad overview of the main candidates."
"2) (10 min) Yi-Kai or Ray Lattice-based crypto summary"
"3) (10 min) Ray Code-based crypto summary"
"4) (10 min) Ray Hash-based signatures"
"5) (10 min) Rene Multivariate crypto summary"
"6) (5 min) Rene Other candidates (isogeny-based, maybe braid groups?)"
"7) (5 min) Rene Overall summary. Our table of key sizes / timings. No
obvious drop-in replacement. Which criteria are most important?"
"8) (10 min) Stephen State of quantum computing. Recent advances. Estimates
of future progress (time/cost)"
"9) (20 min) Dustin NIST's plans. Workshop recap. NSA announcement.
Transition importance. NISTIR. Call for Proposals. Evaluation criteria. Process. Timeline.
How this will affect the group."
"Does this make sense to everyone? Any suggestions. Yi-Kai, Ray, Rene, Stephen, are you good to
cover these topics on Feb. 3rd? I think everyone should make their own slides using powerpoint, and
then we can combine them all into one. I've attached a few resources that might be helpful. Also,
on our wiki page we have slides from most of our past presentations:
http://nistpqc.wikispaces.com/"
#needmorerecords
Were "key sizes" and "timings"
the reason for NIST claiming "No obvious drop-in replacement" in 2016?
#needmorerecords
20160114 11:33:00
file 20230517/RE_ Latest version of NISTIR and other document.(2).pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:51:54 -0500
- PDF creation date: 20221014 14:09:19 -0400
- Email date: 20160114 11:33:00
- Date: 20160114 11:33:00
- Author: "Moody, Dustin"
- Title: "RE: Latest version of NISTIR and other documents for PQC"
- Email from: "Moody, Dustin"
- Email to: "Peralta, Rene"
- Email subject: "RE: Latest version of NISTIR and other documents for PQC"
- Pages: 2
- Bytes: 138450
Notes from djb, last edited 20230608 22:17:45 UTC:
Scheduling.
20160114 12:31:09
file 20230619/RE_ PQC Crypto Club Talk(2).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:51:21 -0500
- PDF creation date: 20221014 14:09:18 -0400
- Email date: 20160114 12:31:09
- Date: 20160114 12:31:09
- Author: "Moody, Dustin"
- Title: "RE: PQC Crypto Club Talk"
- Email from: "Moody, Dustin"
- Email to: "Liu, Yi-Kai"
- Email subject: "RE: PQC Crypto Club Talk"
- Pages: 2
- Bytes: 137477
Notes from djb, last edited 20230622 22:46:00 UTC:
Email about NIST talks.
Were the slides public before this FOIA lawsuit?
#weveshownallourwork
20160114 12:32:00
file 20230508/PQC talk on Feb 3rd.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 12:50:43 -0500
- PDF creation date: 20221014 14:09:18 -0400
- Email date: 20160114 12:32:00
- Date: 20160114 12:32:00
- Author: "Moody, Dustin"
- Title: "PQC talk on Feb 3rd"
- Email from: "Moody, Dustin"
- Email to: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "PQC talk on Feb 3rd"
- Pages: 1
- Bytes: 83076
Notes from djb, last edited 20230608 22:17:45 UTC:
Email to "Daniel C Smith" asking for a short talk on multivariate crypto.
20160114 14:04:27
file 20230619/Re_ PQC Crypto club talk(3).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:56:30 -0500
- PDF creation date: 20221014 14:11:24 -0400
- Date: 20160114 14:04:27
- Author: "Liu, Yi-Kai"
- Title: "Re: PQC Crypto club talk"
- Pages: 2
- Bytes: 137828
Notes from djb, last edited 20230622 22:46:00 UTC:
Email planning talk.
Was this talk public before this FOIA lawsuit?
#weveshownallourwork
"Maybe we can borrow some text from the ETSI white paper?"
20160114 14:30:00 UTC
file 20230315/PQC NISTIR v2.docx:
- FOIA delivery date: 20230315
- FOIA file date: 20230608 16:16:18 UTC
- XML date: 20160114 14:30:00 UTC
- XML creation date: 20160105 16:21:00 UTC
- Author: "Lily Chen" and
"Stephen Jordan" and
"Yi-Kai Liu" and
"Dustin Moody" and
"Rene Peralta" and
"Ray Perlner" and
"Daniel Smith-Tone"
- Title: "NISTIR XXXX, Revision #, Report on Post-Quantum Cryptography"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 149869
Notes from djb, last edited 20230608 22:17:45 UTC:
Draft report.
20160114 14:30:00 UTC
file 20230508/PQC NISTIR v2.docx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- XML date: 20160114 14:30:00 UTC
- XML creation date: 20160105 16:21:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 149869
20160114 14:30:00 UTC
file 20230517/PQC NISTIR v2.docx:
- FOIA delivery date: 20230517
- FOIA file date: 20230608 16:17:01 UTC
- XML date: 20160114 14:30:00 UTC
- XML creation date: 20160105 16:21:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 149869
20160114 14:30:00 UTC
file 20230619/PQC NISTIR v2.docx:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- XML date: 20160114 14:30:00 UTC
- XML creation date: 20160105 16:21:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 149869
20160115
file 20230508/PQC crypto club talk(1).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 12:45:22 -0500
- PDF creation date: 20221014 14:09:13 -0400
- Email date: 20160115 01:11:00
- Date: 20160115
- Author: "Moody, Dustin"
- Title: "PQC crypto club talk"
- Email from: "Moody, Dustin"
- Email to: "Peralta, Rene"
- Email subject: "PQC crypto club talk"
- Pages: 1
- Bytes: 80226
Notes from djb, last edited 20230608 22:17:45 UTC:
Email to "Peralta, Rene".
"I was hoping you could speak on multivariate crypto,
and the miscellaneous systems which don’t fall into
one of the main families."
"We have lots of slides that we can use,
since Daniel has given several talks on multivariate,
and I’ve given a talk on isogeny-based systems."
[Presumably referring to Daniel Smith-Tone.]
20160115 14:28:12
file 20230619/Re_ PQC Crypto Club Talk(1).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:43:58 -0500
- PDF creation date: 20221014 14:09:11 -0400
- Email date: 20160115 02:28:12
- Date: 20160115 14:28:12
- Author: "Liu, Yi-Kai"
- Title: "Re: PQC Crypto Club Talk"
- Email from: "Liu, Yi-Kai"
- Email to: "Moody, Dustin"
- Email subject: "Re: PQC Crypto Club Talk"
- Pages: 2
- Bytes: 137688
Notes from djb, last edited 20230622 22:46:00 UTC:
Email agreeing to give a talk about lattices.
Was this talk public before this FOIA lawsuit?
#weveshownallourwork
20160119
file 20230315/Fwd_ feistel cipher and quantum.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 12:04:15 -0500
- PDF creation date: 20221014 14:09:03 -0400
- Email date: 20160119 10:58:53
- Date: 20160119
- Author: "Stephen Jordan"
- Title: "Fwd: feistel cipher and quantum"
- PDF attachments: "quantum-feistel.pdf"
- Email from: "Stephen Jordan"
- Email to: "Liu, Yi-Kai"
- Email subject: "Fwd: feistel cipher and quantum"
- Pages: 1
- Bytes: 186428
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Liu, Yi-Kai"
saying "Have you seen this paper? Do you know what to make of it?".
Refers to "quantum-feistel.pdf" attachment.
#scramble
20160119 09:35:00
file 20230508/RE_ Outline for PQC announcement.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:42:14 -0500
- PDF creation date: 20221014 14:09:08 -0400
- Email date: 20160119 09:35:00
- Date: 20160119 09:35:00
- Author: "Chen, Lily"
- Title: "RE: Outline for PQC announcement"
- Email from: "Chen, Lily"
- Email to: "Moody, Dustin"
- Email subject: "RE: Outline for PQC announcement"
- Pages: 3
- Bytes: 145408
Notes from djb, last edited 20230625 17:50:02 UTC:
Forwarded email from Moody says
"By the way, our next meeting with the NSA PQC folks is Jan 26th."
This email approves disclosing NIST's plans to NSA.
#nsa
What exactly happened in NIST's discussions with NSA?
#needmorerecords
20160120
file 20230315/Japan Trip for Dr. Smith-Tone Passport Request..pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 12:00:46 -0500
- PDF creation date: 20221014 14:08:52 -0400
- Email date: 20160120 11:43:55
- Date: 20160120
- Author: "Scholl, Matthew"
- Title: "Japan Trip for Dr. Smith-Tone Passport Request."
- Email from: "Scholl, Matthew"
- Email to: "Romine, Charles H"
- Email cc: "Mukes, Vickie J.; Chen, Lily"
- Email subject: "Japan Trip for Dr. Smith-Tone Passport Request."
- Pages: 1
- Bytes: 103668
20160120
file 20230315/One more set of slides.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 12:01:50 -0500
- PDF creation date: 20221014 14:08:53 -0400
- Email date: 20160120 09:29:29
- Date: 20160120
- Author: "Moody, Dustin"
- Title: "One more set of slides"
- PDF attachments: "20131205-lecture.pdf"
- Email from: "Moody, Dustin"
- Email to: "Peralta, Rene"
- Email subject: "One more set of slides"
- Pages: 1
- Bytes: 749239
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Peralta, Rene" saying
"I've also found some slides for an introductory talk by Tanja Lange on multi-variate crypto."
#scramble
20160120
file 20230315/crypto-club talk.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 12:02:02 -0500
- PDF creation date: 20221014 14:08:54 -0400
- Email date: 20160120 09:27:00
- Date: 20160120
- Author: "Moody, Dustin"
- Email from: "Moody, Dustin"
- Email to: "Sonmez Turan, Meltem"
- Email subject: "crypto-club talk"
- Pages: 1
- Bytes: 105770
Notes from djb, last edited 20230321 15:29:09 UTC:
Email to "Sonmez Turan, Meltem" with a talk title ("Post-Quantum Cryptography: NIST's plan for the future") and abstract.
20160120 09:17:00
file 20230619/Slides for Crypto Club talk.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 12:02:50 -0500
- PDF creation date: 20221014 14:08:55 -0400
- Email date: 20160120 09:17:00
- Date: 20160120 09:17:00
- Author: "Moody, Dustin"
- Title: "Slides for Crypto Club talk"
- PDF attachments: "quantumisogenies.pdf"; "quantumisogenies.tex"; "Differential Invariants.pptx"; "13371.SmithDaniel.Slides.pdf"; "dings crypto club talk.pdf"
- Email from: "Moody, Dustin"
- Email to: "Peralta, Rene"
- Email subject: "Slides for Crypto Club talk"
- Pages: 1
- Bytes: 3239663
Notes from djb, last edited 20230625 17:50:02 UTC:
Email forwarding miscellaneous slides.
#weveshownallourwork
#scramble
20160120 09:21:00
file 20230508/PQC crypto club talk.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 12:02:37 -0500
- PDF creation date: 20221014 14:08:55 -0400
- Email date: 20160120 09:21:00
- Date: 20160120 09:21:00
- Author: "Moody, Dustin"
- Title: "PQC crypto club talk"
- Email from: "Moody, Dustin"
- Email to: "Jordan, Stephen P (stephen.jordan@nist.gov)"
- Email subject: "PQC crypto club talk"
- Pages: 1
- Bytes: 83076
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Jordan, Stephen P"
asking for a short talk on quantum computing.
#scramble
20160120 15:00:36 -0500
file 20230619/CNSA-Suite-and-Quantum-Computing-FAQ.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20160120 15:00:36 -0500
- PDF creation date: 20160120 14:58:55 -0500
- Author: "Information Assurance Directorate"
- PDF author: "NSA/IAD"
- Title: "Commercial National Security Algorithm Suite and Quantum Computing FAQ"
- Pages: 11
- Bytes: 258615
20160121
file 20230315/Crypto Reading Club - February 3, 2016.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 11:59:49 -0500
- PDF creation date: 20221014 14:08:50 -0400
- Email date: 20160121 10:59:03
- Date: 20160121
- Author: "crypto-club@nist.gov on behalf of Sonmez Turan, Meltem"
- Title: "Crypto Reading Club - February 3, 2016"
- Email from: "crypto-club@nist.gov on behalf of Sonmez Turan, Meltem"
- Email to: "CRYPTO-CLUB"
- Email subject: "Crypto Reading Club - February 3, 2016"
- Pages: 1
- Bytes: 138113
Notes from djb, last edited 20230321 15:29:09 UTC:
Email to "CRYPTO-CLUB":
"Our post-quantum cryptography group
(Yi-Kai Liu, Ray Perlner, Rene Peralta,
Stephen Jordan, Dustin Moody, and possibly Daniel Smith-Tone)
is going to present the talk titled 'Post-Quantum Cryptography: NIST's plan for the future'."
20160121 12:20:04
file 20230508/pqc stuff.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:59:14 -0500
- PDF creation date: 20221014 14:08:49 -0400
- Email date: 20160121 12:20:04
- Date: 20160121 12:20:04
- Author: "Moody, Dustin"
- Title: "pqc stuff"
- PDF attachments: "PQCrypto 2016.pptx"
- Email from: "Moody, Dustin"
- Email to: "Liu, Yi-Kai"
- Email subject: "pqc stuff"
- Pages: 1
- Bytes: 198963
Notes from djb, last edited 20230622 22:46:00 UTC:
Email to "Liu, Yi-Kai".
"Our next meeting with the NSA, we'll also tell them of our plans. ...
Hopefully they have some good pointers. ...
Feb 2nd, we have Michael Groves from the CESG in UK coming.
He's one of the guys behind the soliloquy stuff.
We met him on our trip to Germany last month, and invited him."
#nsa
20160121 17:05:43 UTC
file 20230508/PQCrypto 2016.pptx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- XML date: 20160121 17:05:43 UTC
- XML creation date: 20130729 13:52:36 UTC
- Author: "Dustin Moody"
- Title: "Post-Quantum Cryptography: NIST's Plan for the Future"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 16
- Bytes: 119097
Notes from djb, last edited 20230608 22:17:45 UTC:
Draft of slides for a public talk.
20160121 17:15:17
file 20230508/PQCrypto slides.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:58:24 -0500
- PDF creation date: 20221014 14:08:47 -0400
- Email date: 20160121 05:15:17
- Date: 20160121 17:15:17
- Author: "Moody, Dustin"
- Title: "PQCrypto slides"
- PDF attachments: "PQCrypto 2016.pptx"
- Email from: "Moody, Dustin"
- Email to: "Chen, Lily; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Liu, Yi-Kai; Jordan,Stephen P; Peralta, Rene; Perlner, Ray"
- Email cc: "Regenscheid, Andrew"
- Email subject: "PQCrypto slides"
- Pages: 1
- Bytes: 185629
Notes from djb, last edited 20230625 17:50:02 UTC:
"Next Tuesday (1/26) we'll go over our PQC plans with the NSA."
#nsa
What exactly happened in NIST's discussions with NSA?
#needmorerecords
20160122 08:39:00 UTC
file 20231110/FW_ Our Feb 2nd PQC meeting with Michael Groves.pdf-attachment-QSC(16)004006_Quantum_Safe_Primitives.docx:
- FOIA delivery date: 20231110
- FOIA file date: 20230125 15:19:00 UTC
- XML date: 20160122 08:39:00 UTC
- XML creation date: 20151218 14:45:00 UTC
- Author: Michael Groves
- Title: "QSC WI#1 – Quantum-Safe Primitives"
- XML creator: "Author"
- XML last-modified-by: "Administrator"
- Pages: 24
- Bytes: 372550
Notes from djb, last edited 20231110 16:46:46 UTC:
Draft of an ETSI document.
ETSI's
public version
of the document doesn't say it's from GCHQ,
NSA's UK partner.
#nsa
Many errors
(e.g., "Cryptographic schemes based on LWE or SIS typically have worst-case
to average-case reductions")
and inconsistencies
(e.g., mentions that there have been
small improvements in McEliece attacks,
while not mentioning that there have been
much larger improvements in lattice attacks).
What influence did this document have on NISTPQC?
#needmorerecords
20160122 08:40:00 UTC
file 20231110/FW_ Our Feb 2nd PQC meeting with Michael Groves.pdf-attachment-QSC(15)004004 (March16)_WI3_Suitability.docx:
- FOIA delivery date: 20231110
- FOIA file date: 20230125 15:19:00 UTC
- XML date: 20160122 08:40:00 UTC
- XML creation date: 20160121 12:03:00 UTC
- Author: Michael Groves
- Title: "QSC WI#3 - Cryptographic Primitives Suitability"
- Pages: 8
- Bytes: 144116
Notes from djb, last edited 20231110 16:46:46 UTC:
#nsa
Performance hype, anti-hybrid hype, etc.: e.g.,
"Hybrid key exchanges are not always allowed by network protocols (e.g. IKE)
or they may not fit into the bandwidth currently allocated for handshakes [10]."
What influence did this document have on NISTPQC?
#needmorerecords
20160125 15:11:21
file 20230508/Re_ Crypto Reading Club - webpage .pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:54:36 -0500
- PDF creation date: 20221014 14:08:40 -0400
- Email date: 20160125 03:11:21
- Date: 20160125 15:11:21
- Author: "Sonmez Turan, Meltem"
- Title: "Re: Crypto Reading Club - webpage"
- Email from: "Sonmez Turan, Meltem"
- Email to: "Kerman, Sara J."
- Email cc: "Dworkin, Morris J."
- Email subject: "Re: Crypto Reading Club - webpage"
- Pages: 1
- Bytes: 162812
Notes from djb, last edited 20230608 22:17:45 UTC:
Email chain shows various talks given to NIST:
- "February 3; Dustin Moody; Post Quantum Cryptography"
- "January 20, Sharon Keller; Cryptographic Algorithm Validation Program"
- "January 15, Jean-Phillippe Aumasson, Password Hashing Competition"
- "January 13, Jacob Alperin Sheriff, Lattice-based cryptography"
- "December 23, Rene Peralta, Random thoughts about randomness, primality, and covering arrays"
- "December 9, Meltem Sonmez Turan, Magnus Find, Multiplicative Complexity"
20160125 20:59:57
file 20230619/Re_ PQC NISTIR version 2(3).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:53:54 -0500
- PDF creation date: 20221014 14:08:39 -0400
- Email date: 20160125 08:59:57
- Date: 20160125 20:59:57
- Author: "Dodson, Donna F"
- Title: "Re: PQC NISTIR version 2"
- PDF attachments: "PQC NISTIR v2.docx"
- Email from: "Dodson, Donna F"
- Email to: "Moody, Dustin; Perlner, Ray; Peralta, Rene; Chen, Lily; Find, Magnus G.; Jordan, Stephen P; Liu, Yi-Kai; Daniel CSmith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Bassham, Lawrence E; Regenscheid,Andrew; Scholl, Matthew"
- Email subject: "Re: PQC NISTIR version 2"
- Pages: 1
- Bytes: 252860
Notes from djb, last edited 20230622 22:46:00 UTC:
Email with comments on a report.
#weveshownallourwork
20160126
file 20230315/FW_ PQC NISTIR version 2.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 11:53:04 -0500
- PDF creation date: 20221014 14:08:38 -0400
- Email date: 20160126 09:18:52
- Date: 20160126
- Author: "Scholl, Matthew"
- Title: "FW: PQC NISTIR version 2"
- PDF attachments: "PQC NISTIR v2.docx"
- Email from: "Scholl, Matthew"
- Email to: "Grance, Tim"
- Email subject: "FW: PQC NISTIR version 2"
- Pages: 1
- Bytes: 247571
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Grance, Tim"
forwarding email from "Moody, Dustin"
saying
"I’ve incorporated the revisions and edits we discussed regarding the comments received from Donna and the NSA."
What was the NSA input?
#nsa
#needmorerecords
20160126 01:57:00 UTC
file 20230619/difference-detected-PQC NISTIR v2.docx:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- XML date: 20160126 01:57:00 UTC
- XML creation date: 20160125 00:21:00 UTC
- Author: "Lily Chen";
"Stephen Jordan";
"Yi-Kai Liu";
"Dustin Moody";
"Rene Peralta";
"Ray Perlner";
"Daniel Smith-Tone"
- Title: "NISTIR XXXX: Revision #: Report on Post-Quantum Cryptography"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Microsoft Office User"
- Pages: 15
- Bytes: 149886
Notes from djb, last edited 20230622 22:46:00 UTC:
Supplied as "PQC NISTIR v2.docx".
Draft with some internal editing notes.
#weveshownallourwork
20160126 10:10:14
file 20230915/Re_ PQC NISTIR version 2(2).pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:52:53 -0500
- PDF creation date: 20221014 14:08:38 -0400
- Email date: 20160126 10:10:14
- Email from: "Daniel Smith"
- Email to: "Dodson, Donna F"
- Email cc: "Moody, Dustin; Perlner, Ray; Peralta, Rene; Chen, Lily; Find, Magnus G.; Jordan, Stephen P; Liu, Yi-Kai;Bassham, Lawrence E; Regenscheid, Andrew; Scholl, Matthew; Sonmez Turan, Meltem; Mukes, Vickie J.; Kelsey,John M.; Dworkin, Morris J.; Dang, Quynh"
- Email subject: "Re: PQC NISTIR version 2"
- Pages: 2
- Bytes: 169077
Notes from djb, last edited 20230915 23:13:56 UTC:
More followups to
"I’ve incorporated the revisions and edits we discussed regarding the comments received from Donna
and the NSA."
#nsa
20160127
file 20230925/FW_ NIST Correspondence 16-0000011-N_2.pdf-attachment-2016_02_01_16_06_18.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 12:52:02 UTC
- PDF date: 20160201 16:06:24 -0500
- PDF creation date: 20160201 16:06:24 -0500
- Date: 20160127
- Pages: 2
- Bytes: 532725
Notes from djb, last edited 20231001 22:32:48 UTC:
Final (?) version of letter from ISPAB chair to Willie E. May and Shaun Donovan.
20160127 01:20:00
file 20231110/FW_ Our Feb 2nd PQC meeting with Michael Groves.pdf:
- FOIA delivery date: 20231110
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 11:42:23 -0500
- PDF creation date: 20221014 14:08:23 -0400
- Email date: 20160127 01:20:00
- PDF attachments: "QSC(15)004004 (March16)_WI3_Suitability.docx"; "QSC(16)004006_Quantum_Safe_Primitives.docx"
- Email from: "Perlner, Ray"
- Email to: "Regenscheid, Andrew"
- Email subject: "FW: Our Feb 2nd PQC meeting with Michael Groves"
- Pages: 1
- Bytes: 633322
Notes from djb, last edited 20231110 16:46:46 UTC:
Reminder about upcoming meeting with "Michael Groves, from the UK".
"Note, these documents are for internal use only - not to be shared"
#weveshownallourwork
Quotes Groves referring to
"your immediate NIST (and IAD) colleagues".
IAD is part of NSA;
obviously Groves knew NIST was working with NSA on post-quantum cryptography,
even though the public didn't know this.
Groves is from GCHQ, NSA's UK partner.
#nsa
20160127 08:36:44
file 20230517/Re_ Latest version of NISTIR and other document...(1).pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:48:30 -0500
- PDF creation date: 20221014 14:08:33 -0400
- Email date: 20160127 08:36:44
- Date: 20160127 08:36:44
- Author: "Moody, Dustin"
- Title: "PQC NISTIR v2.docx"
- PDF attachments: "PQC NISTIR v2.docx"
- Email from: "Moody, Dustin"
- Email to: "Liu, Yi-Kai"
- Email subject: "Re: Latest version of NISTIR and other documents for PQC"
- Pages: 2
- Bytes: 254478
Notes from djb, last edited 20230622 22:46:00 UTC:
Replying to 25 January email that said
"It has a bunch of comments by Donna
and the NSA people, and I remember we discussed those comments at one of our meetings, but I
don't know if we updated the NISTIR after that discussion?"
#nsa
Earlier in the thread, 12 January email said
"The latest version of the PQC NISTIR (with comments
from NSA and Donna) is attached."
20160127 09:30:01
file 20230619/Slides for our Crypto Club talk.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:47:43 -0500
- PDF creation date: 20221014 14:08:31 -0400
- Email date: 20160127 09:30:01
- Date: 20160127 09:30:01
- Author: "Moody, Dustin"
- Title: "Slides for our Crypto Club talk"
- PDF attachments: "PQC NISTIR v2.docx"; "CNSA-Suite-and-Quantum-Computing-FAQ.pdf"
- Email from: "Moody, Dustin"
- Email to: "Perlner, Ray; Liu, Yi-Kai; Jordan, Stephen P; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene"
- Email cc: "Chen, Lily"
- Email subject: "Slides for our Crypto Club talk"
- Pages: 1
- Bytes: 505433
Notes from djb, last edited 20230622 22:46:00 UTC:
Logistics email about NIST post-quantum talks and internal NIST discussions of an upcoming report.
Were the talk slides public before this FOIA lawsuit?
#weveshownallourwork
"We were going to meet with the NSA yesterday ...
The NSA still wants to meet with us soon ...
I'm still checking with them, but it might work out for us to meet tomorrow
(Thursday) at 1pm, right before we all meet with Carl Miller. This is just a heads up that we
might have a last minute meeting at that time."
#nsa
20160127 16:28:18
file 20230517/Re_ Latest version of NISTIR and other document....pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:41:55 -0500
- PDF creation date: 20221014 14:08:22 -0400
- Email date: 20160127 04:28:18
- Date: 20160127 16:28:18
- Author: "Liu, Yi-Kai"
- Title: "PQC NISTIR v2 YKL.docx"
- PDF attachments: "PQC NISTIR v2 YKL.docx"
- Email from: "Liu, Yi-Kai"
- Email to: "Moody, Dustin"
- Email subject: "Re: Latest version of NISTIR and other documents for PQC"
- Pages: 2
- Bytes: 272084
20160127 21:24:00 UTC
file 20230517/PQC NISTIR v2 YKL.docx:
- FOIA delivery date: 20230517
- FOIA file date: 20230608 16:17:01 UTC
- XML date: 20160127 21:24:00 UTC
- XML creation date: 20160105 16:21:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "yikailiu"
- Pages: 15
- Bytes: 173424
Notes from djb, last edited 20230608 22:17:45 UTC:
A few comments from "yikailiu".
20160128
file 20230315/Final call for changes to NISTIR.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 11:24:05 -0500
- PDF creation date: 20221014 14:08:10 -0400
- Email date: 20160128 03:43:46
- Date: 20160128
- Author: "Moody, Dustin"
- Title: "Final call for changes to NISTIR"
- PDF attachments: "PQC NISTIR v3.docx"
- Email from: "Moody, Dustin"
- Email to: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray; Peralta, Rene; Chen,Lily; Liu, Yi-Kai; Jordan, Stephen P"
- Email subject: "Final call for changes to NISTIR"
- Pages: 1
- Bytes: 215693
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Daniel C Smith" and "Perlner, Ray" and "Peralta, Rene" and "Chen, Lily" and "Liu, Yi-Kai" and "Jordan, Stephen P"
with last call for comments "before Monday" on a NISTIR draft.
"Jim Foti" would prepare the draft for publication;
"Matt" (presumably Matthew Scholl) suggested 30 days of public comments.
Email also includes a reminder that "next Tuesday we meet with Michael Groves".
Michael Groves is from GCHQ, NSA's UK partner. What did GCHQ tell NIST?
#nsa
#needmorerecords
20160128
file 20230315/NISTIR ready for WERB_.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 11:33:39 -0500
- PDF creation date: 20221014 14:08:15 -0400
- Email date: 20160128 10:10:38
- Date: 20160128
- Author: "Moody, Dustin"
- Title: "NISTIR ready for WERB?"
- PDF attachments: "PQC NISTIR v3.docx"
- Email from: "Moody, Dustin"
- Email to: "Chen, Lily"
- Email cc: "Liu, Yi-Kai"
- Email subject: "NISTIR ready for WERB?"
- Pages: 1
- Bytes: 217799
Notes from djb, last edited 20230321 15:29:09 UTC:
Email to "Chen, Lily" cc'ing "Liu, Yi-Kai"
regarding publication procedures for NISTIR.
Refers to "WERB" procedures
and suggestion from "Donna" (presumably Donna Dodson)
to have "Ed Roback" (Treasury) as an external reviewer.
20160128 09:20:00
file 20230619/RE_ PQC NISTIR version 2(1).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:39:06 -0500
- PDF creation date: 20221014 14:08:17 -0400
- Email date: 20160128 09:20:00
- Date: 20160128 09:20:00
- Author: "Moody, Dustin"
- Title: "RE: PQC NISTIR version 2"
- PDF attachments: "PQC NISTIR v3.docx"
- Email from: "Moody, Dustin"
- Email to: "Dodson, Donna F"
- Email cc: "Liu, Yi-Kai; Chen, Lily"
- Email subject: "RE: PQC NISTIR version 2"
- Pages: 2
- Bytes: 249120
Notes from djb, last edited 20230622 22:46:00 UTC:
Email about report editing.
#weveshownallourwork
20160128 10:29:35
file 20230517/RE_ NISTIR ready for WERB_.pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:33:26 -0500
- PDF creation date: 20221014 14:08:14 -0400
- Email date: 20160128 10:29:35
- Date: 20160128 10:29:35
- Author: "Chen, Lily"
- Title: "RE: NISTIR ready for WERB?"
- Email from: "Chen, Lily"
- Email to: "Moody, Dustin"
- Email cc: "Liu, Yi-Kai"
- Email subject: "RE: NISTIR ready for WERB?"
- Pages: 1
- Bytes: 85839
Notes from djb, last edited 20230608 22:17:45 UTC:
Deciding whether to ask for public comments.
20160128 14:17:00 UTC
file 20230619/PQC NISTIR v3.docx:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- XML date: 20160128 14:17:00 UTC
- XML creation date: 20160127 16:52:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 150688
20160128 14:21:00 UTC
file 20230315/PQC NISTIR v3.docx:
- FOIA delivery date: 20230315
- FOIA file date: 20230608 16:16:18 UTC
- XML date: 20160128 14:21:00 UTC
- XML creation date: 20160127 16:52:00 UTC
- Author: "Lily Chen" and
"Stephen Jordan" and
"Yi-Kai Liu" and
"Dustin Moody" and
"Rene Peralta" and
"Ray Perlner" and
"Daniel Smith-Tone"
- Title: "NISTIR XXXX, Revision #, Report on Post-Quantum Cryptography"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 147332
Notes from djb, last edited 20230608 22:17:45 UTC:
Draft report.
20160128 16:21:08
file 20230508/RE_ Final call for changes to NISTIR(5).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:23:49 -0500
- PDF creation date: 20221014 14:08:09 -0400
- Email date: 20160128 04:21:08
- Date: 20160128 16:21:08
- Author: "Perlner, Ray"
- Title: "RE: Final call for changes to NISTIR"
- PDF attachments: "PQC NISTIR v3 Ray Comments.docx"
- Email from: "Perlner, Ray"
- Email to: "Moody, Dustin; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene;Chen, Lily; Liu, Yi-Kai; Jordan, Stephen P"
- Email subject: "RE: Final call for changes to NISTIR"
- Pages: 1
- Bytes: 240195
Notes from djb, last edited 20230608 22:17:45 UTC:
Attaching comments on report.
20160128 20:14:10
file 20230508/Re_ Final call for changes to NISTIR(4).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:23:19 -0500
- PDF creation date: 20221014 14:08:08 -0400
- Email date: 20160128 08:14:10
- Date: 20160128 20:14:10
- Author: "Jordan, Stephen P"
- Title: "Re: Final call for changes to NISTIR"
- PDF attachments: "PQC NISTIR v3 Ray and Stephen Comments.docx"
- Email from: "Jordan, Stephen P"
- Email to: "Perlner, Ray; Moody, Dustin; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu);Peralta, Rene; Chen, Lily; Liu, Yi-Kai"
- Email subject: "Re: Final call for changes to NISTIR"
- Pages: 1
- Bytes: 250252
Notes from djb, last edited 20230608 22:17:45 UTC:
"I have also added my comments. The attached file should have both mine and Ray's."
20160128 21:19:00 UTC
file 20230508/PQC NISTIR v3 Ray Comments.docx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- XML date: 20160128 21:19:00 UTC
- XML creation date: 20160128 21:07:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Perlner, Ray"
- Pages: 15
- Bytes: 171450
20160129
file 20230315/Fw_ Final call for changes to NISTIR.pdf:
- FOIA delivery date: 20230315
- FOIA file date: 20230125 15:19:00 UTC
- PDF date: 20230110 11:21:41 -0500
- PDF creation date: 20221014 14:08:05 -0400
- Email date: 20160129 08:33:59
- Date: 20160129
- Author: "Moody, Dustin"
- Title: "Fw: Final call for changes to NISTIR"
- PDF attachments: "PQC NISTIR v3.docx"
- Email from: "Moody, Dustin"
- Email to: "Regenscheid, Andrew"
- Email subject: "Fw: Final call for changes to NISTIR"
- Pages: 1
- Bytes: 242998
Notes from djb, last edited 20230321 15:29:09 UTC:
Email to "Regenscheid, Andrew"
with last call for comments on draft NISTIR.
20160129
file 20230508/Re_ Final call for changes to NISTIR(3).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:22:26 -0500
- PDF creation date: 20221014 14:08:06 -0400
- Email date: 20160129 08:18:34
- Date: 20160129
- Author: "Peralta, Rene"
- Title: "Re: Final call for changes to NISTIR"
- PDF attachments: "OutlookEmoji-😊.png"
- Email from: "Peralta, Rene"
- Email to: "Moody, Dustin; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray;Chen, Lily; Liu, Yi-Kai; Jordan, Stephen P"
- Email cc: "Peralta, Rene"
- Email subject: "Re: Final call for changes to NISTIR"
- Pages: 1
- Bytes: 123730
Notes from djb, last edited 20230608 22:17:45 UTC:
Email about scheduling.
20160129
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-Ray Code Based Crypto.ppt:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- Date: 20160129
- Author: Ray Perlner
- Title: Code Based Crypto
- Bytes: 1044480
Notes from djb, last edited 20240225 11:49:06 UTC:
Slides.
20160129 01:11:00 UTC
file 20230508/PQC NISTIR v3 Ray and Stephen Comments.docx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- XML date: 20160129 01:11:00 UTC
- XML creation date: 20160129 01:11:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Stephen Paul Jordan"
- Pages: 15
- Bytes: 152073
20160129 05:56:18
file 20231013/Talk slides.pdf:
- FOIA delivery date: 20231013
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:13:26 -0500
- PDF creation date: 20221014 14:07:50 -0400
- Email date: 20160129 05:56:18
- PDF attachments: "Maryland 1-27-16.pdf"
- Email from: "Carl Miller"
- Email to: "Lily Chen; Liu, Yi-Kai; Peralta, Rene; Find, Magnus G."
- Email subject: "Talk slides"
- Pages: 1
- Bytes: 2622004
20160129 10:16:49
file 20230508/Re_ Final call for changes to NISTIR(1).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:19:54 -0500
- PDF creation date: 20221014 14:08:03 -0400
- Email date: 20160129 10:16:49
- Date: 20160129 10:16:49
- Author: "Regenscheid, Andrew"
- Title: "Re: Final call for changes to NISTIR"
- PDF attachments: "PQC NISTIR v3-arr.docx"
- Email from: "Regenscheid, Andrew"
- Email to: "Moody, Dustin"
- Email subject: "Re: Final call for changes to NISTIR"
- Pages: 2
- Bytes: 318183
Notes from djb, last edited 20230625 17:50:02 UTC:
Email to "Moody, Dustin".
"On page 6 you referred to changes to “Suite B.” If they didn’t comment on this, then I have no problem
with it. But, until yesterday it escaped me that they’re not calling the new guidance “Suite B” anymore. Did
they want to change it something else? Guidance on the use of public cryptographic algorithms for
protecting national security systems?":
#nsa
The "If they didn't comment on this" wording
appears to indicate
that Regenscheid knew that NSA had an opportunity to comment
but didn't know if they had commented on this in particular.
What exactly did NSA tell NIST?
#needmorerecords
"First, while we might informally say it, I don’t think we
usually formally refer to ourselves as “judges” in our crypto competitions. And in any event, I
think what you describe about NIST’s role is pretty much the same thing we do in
competitions."
20160129 10:21:02
file 20230508/Re_ PQC NISTIR version 2.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:19:12 -0500
- PDF creation date: 20221014 14:07:58 -0400
- Email date: 20160129 10:21:02
- Date: 20160129 10:21:02
- Author: "Moody, Dustin"
- Title: "Re: PQC NISTIR version 2"
- Email from: "Moody, Dustin"
- Email to: "Dodson, Donna F"
- Email subject: "Re: PQC NISTIR version 2"
- Pages: 2
- Bytes: 117297
Notes from djb, last edited 20230608 22:17:45 UTC:
Email regarding publication logistics
(and non-publication of NIST's comments on drafts).
20160129 10:24:01
file 20230508/Re_ Final call for changes to NISTIR(2).pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:17:53 -0500
- PDF creation date: 20221014 14:07:58 -0400
- Email date: 20160129 10:24:01
- Date: 20160129 10:24:01
- Author: "Moody, Dustin"
- Title: "Re: Final call for changes to NISTIR"
- Email from: "Moody, Dustin"
- Email to: "Regenscheid, Andrew"
- Email subject: "Re: Final call for changes to NISTIR"
- Pages: 2
- Bytes: 172634
Notes from djb, last edited 20230608 22:17:45 UTC:
Acknowledging "Re_ Final call for changes to NISTIR(1).pdf" comments.
20160129 10:27:19
file 20230508/RE_ Final call for changes to NISTIR.pdf:
- FOIA delivery date: 20230508
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:17:23 -0500
- PDF creation date: 20221014 14:07:57 -0400
- Email date: 20160129 10:27:19
- Date: 20160129 10:27:19
- Author: "Chen, Lily"
- Title: "RE: Final call for changes to NISTIR"
- PDF attachments: "llc-PQC NISTIR v3 Ray and Stephen Comments.docx"
- Email from: "Chen, Lily"
- Email to: "Jordan, Stephen P; Perlner, Ray; Moody, Dustin; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene; Liu, Yi-Kai"
- Email subject: "RE: Final call for changes to NISTIR"
- Pages: 2
- Bytes: 300069
Notes from djb, last edited 20230608 22:17:45 UTC:
Comments on draft report.
20160129 10:56:23
file 20230517/Re_ IPR question for PQC (1).pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:17:00 -0500
- PDF creation date: 20221014 14:07:57 -0400
- Email date: 20160129 10:56:23
- Date: 20160129 10:56:23
- Author: "Scholl, Matthew"
- Title: "Re: IPR question for PQC"
- PDF attachments: "Third Draft NIST ITL Patent Process for Its P.docx"
- Email from: "Scholl, Matthew"
- Email to: "Chen, Lily; Moody, Dustin; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner,Ray; Jordan, Stephen P; Liu, Yi-Kai; Peralta, Rene"
- Email cc: "Dworkin, Morris J."
- Email subject: "Re: IPR question for PQC"
- Pages: 2
- Bytes: 181673
Notes from djb, last edited 20230608 22:17:45 UTC:
"This is draft but has some good thoughts on this issue IMO. "
Beginning of thread was from "Moody, Dustin":
"We have (it seems to me) two possible ways we can approach the IPR issue in our call:
1) Require that there is no royalties, no IPR, require patent disclosures, etc.. during our
process. Right will be returned to the submitters if we do not standardize their algorithm.
This is similar to what was done with SHA-3, which then returned the rights to the submitters
of the algorithms that weren't selected. If we do it this way, when would we return the
rights? We're describing this as kind of like the modes process, where even if we don't initially
choose to standardize an algorithm, it doesn't meet that it is "out".
2) We could ask for patent disclosures, but not require algorithms be royalty-free. We would
need to warn submitters that it is obviously a big advantage to submit IPR free algorithms, as it
will be a big factor in our decision.
Any thoughts? Do we need to get the advice of
Matt/Donna/lawyers?"
20160129 12:50:04
file 20230517/Re_ IPR question for PQC(2) .pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:15:54 -0500
- PDF creation date: 20221014 14:07:55 -0400
- Email date: 20160129 12:50:04
- Date: 20160129 12:50:04
- Author: "Dworkin, Morris J."
- Title: "Re: IPR question for PQC"
- Email from: "Dworkin, Morris J."
- Email to: "Chen, Lily"
- Email cc: "Moody, Dustin; Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray;Jordan, Stephen P; Liu, Yi-Kai; Peralta, Rene; Dworkin, Morris J.; Scholl, Matthew"
- Email subject: "Re: IPR question for PQC"
- Pages: 2
- Bytes: 142899
Notes from djb, last edited 20230608 22:17:45 UTC:
"My understanding of the SHA-3 competition, and the AES competition before it, is that the IPR rights were
only waived conditionally, e.g., for the purposes of vetting, and in the event that NIST standardized the
algorithm. (We also requested that submitters disclose IPR that they thought might read on other
candidates, although I don’t think we had any way of enforcing this request.) Therefore, the question of
“returning” the rights should’t arise—my intuition is that something like Option 1 should be workable even
for an informal, ongoing process."
"The main issue is whether we can expect to obtain acceptable algorithms under Option 1. The block cipher
modes process operates under Option 2, because the possibilities for modes are more limited than for the
underlying block cipher, and we don’t always know in advance what properties will be required of the
mode. For example, we’re about to approve modes for format-preserving encryption that are encumbered
by IPR, because we don’t have any good, royalty-free methods that achieve the same properties."
"For PQC, perhaps it would be useful to examine the scope of existing patents (e.g., NTRU’s, I assume?) to
help inform this decision."
20160129 15:14:00 UTC
file 20230508/PQC NISTIR v3-arr.docx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- XML date: 20160129 15:14:00 UTC
- XML creation date: 20160129 15:14:00 UTC
- Author: "Lily Chen" and
"Stephen Jordan" and
"Yi-Kai Liu" and
"Dustin Moody" and
"Rene Peralta" and
"Ray Perlner" and
"Daniel Smith-Tone"
- Title: "NISTIR XXXX, Revision #, Report on Post-Quantum Cryptography"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Regenscheid, Andrew"
- Pages: 15
- Bytes: 150186
Notes from djb, last edited 20230622 22:46:00 UTC:
Comments from "Regenscheid, Andrew".
"See my note in my email about this. Did NSA comment on this?"
#nsa
"I don't think we typically refer to our role as judges,
even if it is a fairly descriptive term."
20160129 15:22:00 UTC
file 20230508/llc-PQC NISTIR v3 Ray and Stephen Comments.docx:
- FOIA delivery date: 20230508
- FOIA file date: 20230608 16:16:42 UTC
- XML date: 20160129 15:22:00 UTC
- XML creation date: 20160129 14:20:00 UTC
- Author: "Lily Chen" and
"Stephen Jordan" and
"Yi-Kai Liu" and
"Dustin Moody" and
"Rene Peralta" and
"Ray Perlner" and
"Daniel Smith-Tone"
- Title: "NISTIR XXXX, Revision #, Report on Post-Quantum Cryptography"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Chen, Lily"
- Pages: 15
- Bytes: 178825
Notes from djb, last edited 20230608 22:17:45 UTC:
Draft report, with comments from Jordan, Perlner, and Chen.
20160129 16:03:20 UTC
file 20230105/Hash-Based Signatures.pptx:
- FOIA delivery date: 20230105
- FOIA file date: 20221107 17:53:00 UTC
- XML date: 20160129 16:03:20 UTC
- XML creation date: 20160128 14:54:42 UTC
- Author: None listed.
- Title: "Hash-Based Signatures"
- XML creator: "Perlner, Ray"
- XML last-modified-by: "Perlner, Ray"
- Pages: 8
- Bytes: 75907
Notes from djb, last edited 20230125 23:38:54 UTC:
A few comments on hash-based signatures.
20160129 16:03:20 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-Ray Hash-Based Signatures.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160129 16:03:20 UTC
- XML creation date: 20160128 14:54:42 UTC
- XML creator: "Perlner, Ray"
- XML last-modified-by: "Perlner, Ray"
- Pages: 8
- Bytes: 63916
Notes from djb, last edited 20240225 11:49:06 UTC:
Should compare to separate "Hash-Based Signatures.pptx".
20160129 17:53:42 -0500
file 20231013/Talk slides.pdf-attachment-Maryland 1-27-16.pdf:
- FOIA delivery date: 20231013
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20160129 17:53:42 -0500
- PDF creation date: 20160129 17:53:12 -0500
- Author: Carl A. Miller
- PDF author: "Work"
- Title: "Random number generation from untrusted quantum devices"
- PDF title: "New approaches to quantum random number generation"
- Pages: 69
- Bytes: 2596355
Notes from djb, last edited 20231110 16:46:46 UTC:
On a slide titled "The need for provable randomness",
says "Heninger et al. (2012) broke the keys of a large number of SSH hosts".
Criticizes the security of normal RNGs for not being proven;
asks whether one can
"create a source of provable random numbers (with minimal assumptions)";
portrays quantum devices as solving this problem.
Doesn't cite any of the demonstrated security failures in quantum devices.
In fact,
the 2012 paper tracked down the vulnerabilities to
"specific software behaviors" including
"a boot-time entropy hole in the Linux random number generator".
This has nothing to do with the security risks arising from unprovability of RNGs.
#error
20160129 19:16:56
file 20221003/CodeCryptoShort.ppt:
- FOIA delivery date: 20221003
- FOIA file date: 20220826 15:52:00 UTC
- Date: 20160129 19:16:56
- Author: None listed, but PPT metadata says "01/27/2012, 16:49:27, Computer Security Division" for creation and "01/29/2016, 19:16:56, Perlner, Ray" for modification.
- Title: "Code Based Crypto"
- Bytes: 1059328
Notes from djb, last edited 20221005 15:48:18 UTC:
Summary of some code-based cryptosystems.
20160131 01:57:01 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-Steven - Quantum Computing.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160131 01:57:01 UTC
- XML last-modified-by: "Stephen"
- Pages: 10
- Bytes: 6943041
Notes from djb, last edited 20240225 11:49:06 UTC:
Should compare to "Quantum Computers...When?" in 20160203 slides.
20160131 16:31:15
file 20230517/RE_ IPR question for PQC .pdf:
- FOIA delivery date: 20230517
- FOIA file date: 20230125 16:19:00 UTC
- PDF date: 20230110 11:09:55 -0500
- PDF creation date: 20221014 14:07:43 -0400
- Email date: 20160131 04:31:15
- Date: 20160131 16:31:15
- Author: "Hogan, Michael D."
- Title: "RE: IPR question for PQC"
- PDF attachments: "Fourth Draft NIST ITL Patent Process for Its .docx"
- Email from: "Hogan, Michael D."
- Email to: "Scholl, Matthew; Chen, Lily; Moody, Dustin; Perlner, Ray; Jordan, Stephen P; Liu, Yi-Kai; Peralta, Rene"
- Email cc: "Dworkin, Morris J."
- Email subject: "RE: IPR question for PQC"
- Pages: 2
- Bytes: 187175
Notes from djb, last edited 20230608 22:17:45 UTC:
"Following up with Henry Wixon got away from me but I’m going to bring this up with him tomorrow.
Since the attached is still a draft, I would keep it inside NIST for now. But I’ll make it a priority to get
NIST clearance for us to post a finalized copy on our
ITL web pages and letting everyone know."
Replies to message from "Scholl, Matthew":
"We have some generic language on an IPR call that we adapted from ANSI (I think). If there turns out to be
IPR then we can decide how to handle it from there. We have done the range of not taking it or negotiating
an open license or something that is Reasonable and Non-Discriminatory (RAND).
Mike hogan worked up both the language and the steps to go through in making the decision.
I will find it for your consideration (or ask mike for
another copy)"
20160131 21:32:54 -0500
file 20230619/ykliu-pqc-crypto-club-2016.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20160131 21:32:54 -0500
- PDF creation date: 20160131 21:32:54 -0500
- Author: "Yi-Kai Liu / NIST PQC team"
- PDF author: "yikailiu"
- PDF title: "Standards for Post-Quantum Cryptography"
- Pages: 18
- Bytes: 449993
Notes from djb, last edited 20230625 17:50:02 UTC:
Talk slides.
Were the slides public before this FOIA lawsuit?
#weveshownallourwork
For some reason the overview slide on "Lattice-based" and "Code-based" and "Multivariate"
describes the trapdoor for "Code-based" and "Multivariate"
as "Linear transformations that reveal structure"
but describes the trapdoor for "Lattice-based"
as "Nice basis for the lattice (short, almost-orthogonal vectors)".
Why not consistently say "Linear transformations that reveal structure" for all three?
"Hash-based signatures":
"Caveat: signing algorithm
has to update an internal data structure
every time it signs a message".
This is true for some hash-based signature systems
but not for others.
#error
"Regev's encryption scheme":
"Theoretical security guarantees".
No, theory does not guarantee security of this scheme.
#error
"Provably secure variant of NTRUSign":
No, that variant has not been proven secure.
#error
"Signatures using Fiat-Shamir heuristic":
"Provably secure based on hardness of SIS problem":
No, these signatures have not been proven secure,
and some of them have been broken.
#error
Furthermore,
SIS hardness is merely conjectured,
and some cases of SIS have been broken.
#error
Furthermore,
even if the intention was merely to say that if SIS is hard then these signatures are secure,
that's an exaggeration of what has been proven.
#error
"Quantum attack on the Soliloquy cryptosystem":
Cites "Commentary" downplaying
this line of attacks.
When the main lines drawn in that "Commentary"
were broken by subsequent attacks,
did NIST retract this citation?
#needmorerecords
"Worst-case to average-case reduction doesn't say anything meaningful in this regime":
Then why did NIST later use these reductions
as a basis for selecting some cryptosystems
in this regime?
#inconsistency
20160131 21:37:16
file 20230619/Re_ PQC Crypto Club Talk.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230125 16:20:00 UTC
- PDF date: 20230110 11:09:39 -0500
- PDF creation date: 20221014 14:07:42 -0400
- Email date: 20160131 09:37:16
- Date: 20160131 21:37:16
- Author: "Liu, Yi-Kai"
- Title: "Re: PQC Crypto Club Talk"
- PDF attachments: "ykliu-pqc-crypto-club-2016.pptx"; "ykliu-pqc-crypto-club-2016.pdf"
- Email from: "Liu, Yi-Kai"
- Email to: "Moody, Dustin"
- Email subject: "Re: PQC Crypto Club Talk"
- Pages: 2
- Bytes: 916021
Notes from djb, last edited 20230622 22:46:00 UTC:
Email sending slides for a talk.
Was this talk public before this FOIA lawsuit?
#weveshownallourwork
20160201 02:32:36 UTC
file 20230619/ykliu-pqc-crypto-club-2016.pptx:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- XML date: 20160201 02:32:36 UTC
- XML creation date: 20060816 00:00:00 UTC
- XML creator: "yikailiu"
- XML last-modified-by: "yikailiu"
- Pages: 18
- Bytes: 365446
20160201 02:32:36 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-ykliu-pqc-crypto-club-2016.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160201 02:32:36 UTC
- XML creation date: 20060816 00:00:00 UTC
- XML creator: "yikailiu"
- XML last-modified-by: "yikailiu"
- Pages: 18
- Bytes: 365446
Notes from djb, last edited 20240225 11:49:06 UTC:
Should compare to "ykliu-pqc-crypto-club-2016.pdf".
20160202 09:10:39
file 20230727/RE_ NISTIR # request.pdf-attachment-RE_ NISTIR # request.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- PDF date: 20230111 09:15:39 -0500
- PDF creation date: 20230111 09:15:38 -0500
- Email date: 20160202 09:10:39
- Date: 20160202 09:10:39
- Author: "techpubs"
- Title: "RE: NISTIR # request"
- Email from: "techpubs"
- Email to: "Foti, James (Fed); techpubs"
- Email cc: "Moody, Dustin (Fed); Lennon, Elizabeth B."
- Email subject: "RE: NISTIR # request"
- Pages: 1
- Bytes: 132403
Notes from djb, last edited 20230727 19:57:07 UTC:
Assigning publication number IR 8105.
20160202 09:42:47
file 20230727/Re_ FW_ new NISTIR for post-quantum cryptography.pdf-attachment-Re_ FW_ new NISTIR for post-quantum cryptography.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- PDF date: 20230111 08:52:52 -0500
- PDF creation date: 20230111 08:52:52 -0500
- Email date: 20160202 09:42:47
- Date: 20160202 09:42:47
- Author: "Scholl, Matthew"
- Title: "Re: FW: new NISTIR for post-quantum cryptography"
- Email from: "Scholl, Matthew"
- Email to: "O"Reilly, Patrick D. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: FW: new NISTIR for post-quantum cryptography"
- Pages: 3
- Bytes: 214015
Notes from djb, last edited 20230727 19:57:07 UTC:
Discussing publication plans for NIST IR 8105.
20160202 12:08:25
file 20230915/Re_ PQCrypto slides_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:54:20 UTC
- PDF date: 20230912 11:54:18 -0400
- PDF creation date: 20230111 09:27:55 -0500
- Email date: 20160202 12:08:25
- Email from: "Daniel Smith"
- Email to: "Chen, Lily (Fed)"
- Email cc: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Moody, Dustin (Fed); Jordan, Stephen P; Peralta, Rene C. (Fed);Regenscheid, Andrew R. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Re: PQCrypto slides"
- Pages: 4
- Bytes: 194309
Notes from djb, last edited 20230915 23:13:56 UTC:
"ETSI's process is sort of a "path of least resistance" to establishing a consensus on
post-quantum technologies."
"An example of this would be my comment about the gap between theory and practice in the
state-of-the-art lattice reduction algorithms. If we face a situation in which we choose lattice
signatures but choose parameter sizes that have a more concrete justification, it would be nice
(for political reasons) to be able to refer to an ETSI document admitting that the discrepancy
between their recommended parameters and justified parameters exists."
"I'm sorry to be so paranoid, but I am skeptical that ETSI's process is accurately reflecting the
state of knowledge in PQ, even though I think that the recommendations they are making are
reasonable from their claimed standpoint."
Quoting "How are we going to collaborate with other standards organizations?"
Quoting "In the next 5-7 years, when we are working on PQC standards, I am sure other standards will
work on PQC as well. What we can do to collaborate with other standards organizations."
Quoting "Between slides 6 and 7: I think it might be helpful to add a slide saying that there is no "silver
bullet" for post-quantum cryptography, i.e., there is no one candidate that will satisfy everyone.
Every candidate has some disadvantages: McEliece has giant keys, hash based signatures are
prone to accidental misuse, NTRUSign leaks some information, etc. And, above all, there hasn't
been enough research on quantum algorithms to be really confident about the security of some
of these schemes."
Quoting "As a result, I think that post-quantum cryptography is a much more complicated situation than
AES or SHA-3. It may be impossible to achieve consensus on which candidate is "the best."
Instead, I think our goal should be to pick a candidate that is "well rounded" in the sense that it
meets everyone's minimum requirements. (This is elaborating on some of your comments on
slide 7.)"
Quoting "Maybe instead of calling this a "competition," we could say that this is a "standards
development process"?"
Quoting "On slide 8: Under "minimal acceptability requirements," I would add "theoretical and empirical
evidence that provides justification for claims about security." "
Quoting "On slide 15: Under the question "How is the timeline? Too fast? Too slow?" maybe add another
question "Should we do this only once, or have an ongoing process to standardize technologies
as they become mature?" "
Quoting "Next Tuesday (1/26) we'll go over our PQC plans with the NSA."
20160202 14:35:04 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-Dustin conclusion.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160202 14:35:04 UTC
- XML creation date: 20160201 16:27:12 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 15
- Bytes: 75177
Notes from djb, last edited 20240225 11:49:06 UTC:
Looks like part of 20160203 slides.
20160202 14:37:13 -0500
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-PQC Crypto Club Talk.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- PDF date: 20160202 14:37:13 -0500
- PDF creation date: 20160202 14:37:13 -0500
- Pages: 107
- Bytes: 3490980
Notes from djb, last edited 20240225 11:49:06 UTC:
Looks like copy of ykliu-pqc-crypto-club-2016.pdf.
20160202 14:53:00
file 20230815/RE_ FW_ Reminder_ Crypto Reading Club - TOMORROW_Redacted.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 06:43:34 UTC
- Date: 20160202 14:53:00
- Pages: 2
- Bytes: 286761
Notes from djb, last edited 20230909 22:51:01 UTC:
Email from "Chen, Lily"
to, presumably, Jacob Alperin-Sheriff,
regarding logistics for attending an internal NIST talk.
#weveshownallourwork
20160202 15:46:01
file 20230727/Crypto Club Talk Combined Slides.pdf-attachment-Crypto Club Talk Combined Slides.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 07:45:11 -0500
- PDF creation date: 20230111 07:45:08 -0500
- Email date: 20160202 03:46:01
- Date: 20160202 15:46:01
- Author: "Moody, Dustin"
- Title: "Crypto Club Talk Combined Slides"
- PDF attachments: "PQC Crypto Club Talk.pdf"
- Email from: "Moody, Dustin"
- Email to: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray A. (Fed); Peralta,Rene C. (Fed); Chen, Lily (Fed); Jordan, Stephen P; Liu, Yi-Kai (Fed)"
- Email subject: "Crypto Club Talk Combined Slides"
- Pages: 1
- Bytes: 3306591
Notes from djb, last edited 20230727 19:57:07 UTC:
"Here is a pdf file with all our slides combined. Thanks everyone for all your hard work!"
20160202 19:11:35 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-rene - pqc slides.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160202 19:11:35 UTC
- XML creation date: 20160201 16:21:16 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 7
- Bytes: 50168
Notes from djb, last edited 20240225 11:49:06 UTC:
Should compare to "Outliers" in 20160203 slides.
20160203
file 20230727/Crypto Club Talk Combined Slides.pdf-attachment-Crypto Club Talk Combined Slides.pdf-attachment-PQC Crypto Club Talk.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20160202 14:37:13 -0500
- PDF creation date: 20160202 14:37:13 -0500
- Date: 20160203
- Author: Six parts, with two listing authors: "Yi-Kai Liu / NIST PQC team"; "Daniel Smith-Tone"
- Title: "Standards for Post-Quantum Cryptography"; "Lattice-Based Cryptography"; "Multivariate Quantum-Resistant Cryptography"; "Outliers"; "Quantum Computers...When?"; "So What?"
- Pages: 107
- Bytes: 3490980
Notes from djb, last edited 20230727 19:57:07 UTC:
Talk slides. Were the slides public before this FOIA lawsuit?
#weveshownallourwork
First part looks like 20230619/ykliu-pqc-crypto-club-2016.pdf,
including the same errors.
Regarding hash-based signatures:
"Leighton-Micali is old enough that it can’t still be in patent,
although I think XMSS is not patented."
Isogeny-based encryption:
"Less studied and do worse than lattice based."
It's unclear what these claims mean.
There are many papers on various aspects of lattices,
but there are also many papers on various aspects of isogenies.
There have been important security losses for isogeny-based cryptosystems,
but there have been many more security losses for lattices.
#missingclarity
"We propose to ignore them."
Was this proposal internally rejected?
Was it internally approved but kept secret?
For comparison,
NIST later called for submissions and asked for public evaluations,
not saying that it had decided to ignore some classes of cryptosystems.
#needmorerecords
Braid-group cryptography:
"Some proposals have been shown insecure. We propose to ignore them."
Some lattice proposals have also been shown insecure.
#inconsistency
Regarding key size, key-generation time, etc.:
"Which are most important in practice?
... Not a lot of benchmarks in this area"
How did NIST end up deciding that most of these metrics
were important decision-making factors?
#needmorerecords
Incorrect benchmarks,
incorrect asymptotics,
and unclear claims about importance of various metrics.
See notes on
20230105/Crypto in PQ world -DoC.pdf.
#error
#inconsistency
#missingclarity
#ftqcic
"The NIST PQC Project":
"Biweekly seminars since 2012"
"Minimal acceptability requirements"
starting with "Publicly disclosed and available with no IPR".
How did this change?
#needmorerecords
"Correct security definitions? ... CK best for key exchange?":
#scramble
"Many proposals for post-quantum crypto, but no drop-in replacement"
"NIST is going to call for quantum-resistant algorithms"
"Hope to have standards ready within 10 years"
"This will take a lot of resources"; "Not (quite) as much as SHA-3";
"We will need more help"; "Post-docs/guest researchers wanted"
#scramble
20160204 09:01:48
file 20230925/FW_ NIST Correspondence 16-0000011-N_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 12:52:02 UTC
- PDF date: 20230914 14:52:01 -0400
- PDF creation date: 20230111 09:13:35 -0500
- Email date: 20160204 09:01:48
- PDF attachments: "2016_02_01_16_06_18.pdf"
- Email from: "Scholl, Matthew"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed)"
- Email subject: "FW: NIST Correspondence 16-0000011-N"
- Pages: 1
- Bytes: 643506
Notes from djb, last edited 20231001 22:32:48 UTC:
"Our Advisory Committee weighs in on our need to work on quantum.
Nice item to keep in our pocket and use as we may."
20160204 09:13:40
file 20230619/Re_ Improved Timing and Cyber.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20230111 09:01:20 -0500
- PDF creation date: 20230111 09:01:20 -0500
- Email date: 20160204 09:13:40
- Date: 20160204 09:13:40
- Author: "Scholl, Matthew"
- Title: "Re: Improved Timing and Cyber"
- Email from: "Scholl, Matthew"
- Email to: "Romine, Charles H. (Fed)"
- Email subject: "Re: Improved Timing and Cyber"
- Pages: 3
- Bytes: 123761
Notes from djb, last edited 20230622 22:46:00 UTC:
Logistics discussion regarding NIST advertisement to Congress.
20160204 09:29:00
file 20230925/RE_ NIST Correspondence 16-0000011-N_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 12:51:46 UTC
- PDF date: 20230914 14:51:44 -0400
- PDF creation date: 20230111 09:13:33 -0500
- Email date: 20160204 09:29:00
- Email from: "Chen, Lily"
- Email to: "Scholl, Matthew; Moody, Dustin"
- Email subject: "RE: NIST Correspondence 16-0000011-N"
- Pages: 1
- Bytes: 184501
Notes from djb, last edited 20231001 22:32:48 UTC:
"Great, indeed!"
20160204 09:45:35
file 20230619/Re_ Improved Timing and Cyber(1).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20230111 09:01:19 -0500
- PDF creation date: 20230111 09:01:19 -0500
- Email date: 20160204 09:45:35
- Date: 20160204 09:45:35
- Author: "Scholl, Matthew"
- Title: "Re: Improved Timing and Cyber"
- Email from: "Scholl, Matthew"
- Email to: "Williams, Carl J. Dr. (Fed); Montgomery, Douglas C. (Fed); Stine, Kevin M. (Fed)"
- Email cc: "Oates, Chris"
- Email subject: "Re: Improved Timing and Cyber"
- Pages: 2
- Bytes: 127584
Notes from djb, last edited 20230622 22:46:00 UTC:
Logistics discussion regarding NIST advertisement to Congress.
20160204 12:54:39
file 20230727/RE_ pqcrypto video recording.pdf-attachment-RE_ pqcrypto video recording.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- PDF date: 20230111 09:28:10 -0500
- PDF creation date: 20230111 09:28:09 -0500
- Email date: 20160204 12:54:39
- Date: 20160204 12:54:39
- Author: "Chen, Lily"
- Title: "RE: pqcrypto video recording"
- Email from: "Chen, Lily"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu)(daniel-c.smith@louisville.edu)"
- Email subject: "RE: pqcrypto video recording"
- Pages: 1
- Bytes: 133212
Notes from djb, last edited 20230727 19:57:07 UTC:
Discussing conference videotaping.
20160211 14:48:44
file 20230727/IPR for PQCrypto Call for Proposals.pdf-attachment-IPR for PQCrypto Call for Proposals.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 09:07:23 -0500
- PDF creation date: 20230111 09:07:22 -0500
- Email date: 20160211 02:48:44
- Date: 20160211 14:48:44
- Author: "Moody, Dustin"
- Title: "IPR for PQCrypto Call for Proposals"
- Email from: "Moody, Dustin"
- Email to: "Chen, Lily (Fed); Peralta, Rene C. (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P; Chen, Lily (Fed); Daniel CSmith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Scholl, Matthew A. (Fed); Dworkin, MorrisJ. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "IPR for PQCrypto Call for Proposals"
- Pages: 1
- Bytes: 148364
Notes from djb, last edited 20230727 19:57:07 UTC:
"After further discussion in our PQC group,
we think the best course for IPR for the PQCrypto Call For
Proposals is to use the same language as in the SHA-3 competition: ..."
The SHA-3 competition required blanket patent giveaways:
"I ... do hereby agree to grant to any interested party if the algorithm known as ...
is selected for SHA-3, an irrevocable nonexclusive royalty-free license to practice
the referenced algorithm, reference implementation or the optimized implementations.
Furthermore, I agree to grant the same rights in any other patent application or
patent granted to me or my company that may be necessary for the practice of the
referenced algorithm, reference implementation, or the optimized implementations."
How did NIST end up allowing patents in NISTPQC?
#needmorerecords
"Similar to the modes process,
we want quantum-resistant algorithms to be able to be considered (and standardized)
even after our competition-like search process ends."
20160215 13:06:10
file 20230727/Do you know this guy_.pdf-attachment-Do you know this guy_.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 07:55:11 -0500
- PDF creation date: 20230111 07:55:11 -0500
- Email date: 20160215 01:06:10
- Date: 20160215 13:06:10
- Author: "Scholl, Matthew"
- Title: "Do you know this guy?"
- Email from: "Scholl, Matthew"
- Email to: "Dodson, Donna F"
- Email subject: "Do you know this guy?"
- Pages: 1
- Bytes: 121697
Notes from djb, last edited 20230727 19:57:07 UTC:
Email to "Dodson, Donna F"
about "http://scienceforglobalpolicy.org/staff/dr-george-h-atkinson/".
"Met him at GMU thing and he was interested in what the world is thinking
and planning for PQC. I think he wants to do a workshop or something on it."
20160216 16:13:01
file 20230727/Hash based signatures.pdf-attachment-Hash based signatures.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 08:57:15 -0500
- PDF creation date: 20230111 08:57:15 -0500
- Date: 20160216 16:13:01
- Author: "Chen, Lily"
- Title: "Hash based signatures"
- Pages: 1
- Bytes: 160060
Notes from djb, last edited 20230727 19:57:07 UTC:
Email to "Scholl, Matthew A. (Fed); Dodson, Donna F; Regenscheid, Andrew R. (Fed); Dworkin, Morris J. (Fed)" cc "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)".
"Some hash-based signature schemes are relatively mature in the sense of algorithm security
and based on well-understood assumptions. Shall we go ahead to standardize those schemes
(without waiting to go through 5-7 year procedure)?"
"It is a good exercise for post quantum cryptography standardization."
This is a strange comment.
Anyone studying the previous literature would have seen
that the security of post-quantum cryptography needed much more research
(also illustrated over the next five years
by half of the submissions to NISTPQC being publicly broken),
but that hash-based signatures were an exception with a stable security picture.
If "standardization" refers to a process of NIST writing a specification
then, sure, hash-based standardization looks very much like
standardization of other areas of post-quantum cryptography;
but if security is job #1 then hash-based signatures are a misleading exercise,
missing how difficult it is to figure out which cryptosystems are safe to standardize
in the first place.
"Hash-based signatures may not serve well for entity authentication in many-to-many
protocols such as IKE. Other signature schemes (not hash based) are needed in the future."
Why exactly did NIST believe this?
#needmorerecords
"Compared with encryption/key establishment, signatures in general are less urgent in
preparing quantum time for backward secrecy. Do we really have the urgency to
standardize hash-based signature, other than code signing?"
20160216 16:41:05
file 20230727/shall it be an FRN - call for PQC proposals_ .pdf-attachment-shall it be an FRN - call for PQC proposals_ .pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- PDF date: 20230111 09:43:36 -0500
- PDF creation date: 20230111 09:43:36 -0500
- Email date: 20160216 04:41:05
- Date: 20160216 16:41:05
- Author: "Chen, Lily"
- Title: "shall it be an FRN - call for PQC proposals?"
- Email from: "Chen, Lily"
- Email to: "Scholl, Matthew A. (Fed); Dodson, Donna F; Dworkin, Morris J. (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "shall it be an FRN - call for PQC proposals?"
- Pages: 1
- Bytes: 118774
Notes from djb, last edited 20230727 19:57:07 UTC:
Email to "Scholl, Matthew A. (Fed); Dodson, Donna F; Dworkin, Morris J. (Fed); Regenscheid, Andrew R. (Fed)"
cc'ing "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
about an important procedural issue:
-
There is a government journal, the Federal Register,
for U.S. government agencies to issue public proposals and ask for comments.
Comment periods are generally required to be at least a month,
except in emergencies.
-
In August 2016,
NIST issued a Federal Register notice
announcing draft submission criteria
and soliciting public comments on the draft.
-
In December 2016,
NIST issued a Federal Register notice
announcing its final submission criteria.
-
Later NIST deviated from those criteria,
without first issuing Federal Register notices
proposing the changes and requesting public comment.
Sometimes it even applied its new criteria retroactively.
This email, from February 2016,
was asking "whether this formal “call for proposals” must be an FRN".
Reasons stated in the email to avoid a Federal Register notice:
-
"PQC standardization is not a competition."
-
"Modes of operations in 800-38 series are selected without an FRN."
-
"It will take painfully long time to get an FRN approved."
-
"We may change the requirements and the rules in the middle of the
procedure. It will provide us a lot flexibilities if we can announce it without an FRN."
At no moment does the email recognize the public interest in
(1) being notified of the government's plans
and (2) having at least a month to comment on those plans before they take effect.
What happened in response to this email?
#inconsistency
#needmorerecords
20160217 03:07:41
file 20230915/RE_ Conference information from Allen_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:53:42 UTC
- PDF date: 20230912 11:53:41 -0400
- PDF creation date: 20230111 07:38:52 -0500
- Email date: 20160217 03:07:41
- Email from: "daniel-c.smith@louisville.edu"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, Stephen P; Peralta, Rene C. (Fed); Perlner, Ray A. (Fed); Chen, Lily (Fed)"
- Email subject: "RE: Conference information from Allen"
- Pages: 2
- Bytes: 119775
Notes from djb, last edited 20230915 23:13:56 UTC:
"Aren’t Paulo Barreto and Anderson Nascimiento in Tacoma now? (Oh, I see that they are the
organizers.) Anderson is more into information theoretic security, if I remember, and Paulo into
post-quantum. I think that Anderson is getting into post-quantum right now, too, and I think that it’s
likely that there will be somewhat more attention paid to pq for this conference. I can ask them
what their guess is about the extent to which pq will be a topic."
20160217 20:29:18 UTC
file 20230727/RE_ PQC forum.pdf-attachment-RE_ PQC forum.pdf-attachment-PQCrypto 2016 v3.pptx:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- XML date: 20160217 20:29:18 UTC
- XML creation date: 20130729 13:52:36 UTC
- Author: "Dustin Moody"
- Title: "Post-Quantum Cryptography: NIST’s Plan for the Future"
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin"
- Pages: 16
- Bytes: 116342
Notes from djb, last edited 20230727 19:57:07 UTC:
"We see our role as managing a process of achieving community consensus in a transparent and timely manner"
[boldface in original]
#claimingtransparency
"Minimal acceptability requirements"
including "Publicly disclosed and available with no IPR"
#inconsistency
"We see our role as managing a process of achieving community consensus in a transparent and timely manner"
[reiterated]
#claimingtransparency
"Wanted: Postdocs, guest researchers at NIST"
#scramble
20160222 10:06:40
file 20230727/April 12th brief.pdf-attachment-April 12th brief.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 07:30:16 -0500
- PDF creation date: 20230111 07:30:15 -0500
- Email date: 20160222 10:06:40
- Date: 20160222 10:06:40
- Author: "Ferraiolo, Hildegard"
- Title: "April 12th brief"
- Email from: "Ferraiolo, Hildegard"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "April 12th brief"
- Pages: 1
- Bytes: 97118
Notes from djb, last edited 20230727 19:57:07 UTC:
Planning presentation to the Federal PKI Policy Authority (FBKIPA).
20160222 16:15:34
file 20230727/Comments NISTIR 8105.pdf-attachment-Comments NISTIR 8105.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 07:35:54 -0500
- PDF creation date: 20230111 07:35:54 -0500
- Email date: 20160222 04:15:34
- Date: 20160222 16:15:34
- Author: "Ferraiolo, Hildegard"
- Title: "Comments NISTIR 8105"
- Email from: "Ferraiolo, Hildegard"
- Email to: "NISTIR8105-comments"
- Email subject: "Comments NISTIR 8105"
- Pages: 1
- Bytes: 95775
Notes from djb, last edited 20230727 19:57:07 UTC:
"Please consider authentication as one of the rows in table 1."
20160224 16:04:00
file 20230727/pqc workshop in 2018.pdf-attachment-RE_ pqc workshop in 2018(1).pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 09:26:55 -0500
- PDF creation date: 20230111 09:26:54 -0500
- Email date: 20160224 04:04:00
- Date: 20160224 16:04:00
- Author: "Kerman, Sara J. (Fed)"
- Title: "RE: pqc workshop in 2018"
- Email from: "Kerman, Sara J."
- Email to: "Moody, Dustin; Liu, Yi-Kai; Chen, Lily; Scholl, Matthew"
- Email subject: "RE: pqc workshop in 2018"
- Pages: 2
- Bytes: 143381
Notes from djb, last edited 20230727 19:57:07 UTC:
Planning public meetings for 2018.
20160224 16:06:39
file 20230727/pqc workshop in 2018.pdf-attachment-RE_ pqc workshop in 2018.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 09:26:53 -0500
- PDF creation date: 20230111 09:26:53 -0500
- Email date: 20160224 04:06:39
- Date: 20160224 16:06:39
- Author: "Chen, Lily"
- Title: "RE: pqc workshop in 2018"
- Email from: "Chen, Lily"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Kerman, Sara J. (Fed); Scholl, Matthew A. (Fed)"
- Email subject: "RE: pqc workshop in 2018"
- Pages: 2
- Bytes: 150074
Notes from djb, last edited 20230727 19:57:07 UTC:
Planning public meetings in 2018.
20160226 09:50:07
file 20230619/Re_ Improved Timing and Cyber Initiative(1).pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20230111 09:02:15 -0500
- PDF creation date: 20230111 09:02:15 -0500
- Email date: 20160226 09:50:07
- Date: 20160226 09:50:07
- Author: "Scholl, Matthew"
- Title: "Re: Improved Timing and Cyber Initiative"
- Email from: "Scholl, Matthew"
- Email to: "Oates, Chris"
- Email cc: "Stine, Kevin M. (Fed)"
- Email subject: "Re: Improved Timing and Cyber Initiative"
- Pages: 3
- Bytes: 133324
Notes from djb, last edited 20230622 22:46:00 UTC:
Logistics discussion regarding NIST advertisement to Congress.
20160226 09:59:44
file 20230619/Re_ Improved Timing and Cyber Initiative.pdf:
- FOIA delivery date: 20230619
- FOIA file date: 20230622 19:54:17 UTC
- PDF date: 20230111 09:02:13 -0500
- PDF creation date: 20230111 09:02:13 -0500
- Email date: 20160226 09:59:44
- Date: 20160226 09:59:44
- Author: "Scholl, Matthew"
- Title: "Re: Improved Timing and Cyber Initiative"
- Email from: "Scholl, Matthew"
- Email to: "Hastings, Nelson E. (Fed)"
- Email subject: "Re: Improved Timing and Cyber Initiative"
- Pages: 4
- Bytes: 133520
Notes from djb, last edited 20230622 22:46:00 UTC:
Logistics discussion regarding NIST advertisement to Congress.
20160229 11:37:44
file 20230727/RE_ PQC forum.pdf-attachment-RE_ PQC forum.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- PDF date: 20230111 09:21:48 -0500
- PDF creation date: 20230111 09:21:47 -0500
- Email date: 20160229 11:37:44
- Date: 20160229 11:37:44
- Author: "Moody, Dustin (Fed)"
- Title: "RE: PQC forum"
- PDF attachments: "PQCrypto 2016 v3.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed); Foti, James (Fed)"
- Email subject: "RE: PQC forum"
- Pages: 2
- Bytes: 253449
Notes from djb, last edited 20230727 19:57:07 UTC:
Planning web pages.
20160229 13:01:27
file 20230727/NIST PQC Workshop - Email Listserve Information.pdf-attachment-NIST PQC Workshop - Email Listserve Information.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 09:15:25 -0500
- PDF creation date: 20230111 09:15:25 -0500
- Email date: 20160229 01:01:27
- Date: 20160229 13:01:27
- Author: "Kerman, Sara J. (Fed)"
- Title: "NIST PQC Workshop - Email Listserve Information"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "NIST PQC Workshop - Email Listserve Information"
- Pages: 1
- Bytes: 101035
Notes from djb, last edited 20230727 19:57:07 UTC:
Email to "Liu, Yi-Kai (Fed)"
saying
"PQC Workshop Attendees,
NIST has set up a pqc-forum@nist.gov mail listserve" etc.
20160229 15:01:00
file 20230727/RE_ pqc notes.pdf-attachment-RE_ pqc notes.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:20:00 UTC
- PDF date: 20230111 09:24:31 -0500
- PDF creation date: 20230111 09:24:31 -0500
- Email date: 20160229 03:01:00
- Date: 20160229 15:01:00
- Author: "Moody, Dustin (Fed)"
- Title: "RE: pqc notes"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: pqc notes"
- Pages: 2
- Bytes: 118601
Notes from djb, last edited 20230727 19:57:07 UTC:
Self-email with
one line "Visitors – Daniel, Oscar, Tsuyoshi, Jintai, (Ludovic)"
followed by a copy of another self-email
with a "PQCrypto 2016 quick report"
raising many obvious questions.
#needmorerecords
"Peter Campbell (ETSI/GCHQ): will our IPR approach work? What happens
with IPR after analysis phase? Are there IPR-free algorithms that can be
standardized?"
This question is particularly interesting because of the context,
including GCHQ's role as an NSA partner
and GCHQ's subsequent appearance in four years of litigation
attempting, unsuccessfully, to invalidate patent 9094189.
What did GCHQ, NSA, and NIST know about the patent situation in 2016?
#needmorerecords
#nsa
20160229 15:48:00
file 20230727/API for post-quantum.pdf-attachment-API for post-quantum.pdf:
- FOIA delivery date: 20230727
- FOIA file date: 20230216 15:19:00 UTC
- PDF date: 20230111 07:30:01 -0500
- PDF creation date: 20230111 07:30:01 -0500
- Email date: 20160229 03:48:00
- Date: 20160229 15:48:00
- Author: "Moody, Dustin (Fed)"
- Title: "API for post-quantum"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "API for post-quantum"
- Pages: 1
- Bytes: 84905
Notes from djb, last edited 20230727 19:57:07 UTC:
Internal email passing along public suggestion from Tanja Lange to align NIST's API with the SUPERCOP API.
20160301 08:17:48 -0500
file 20240215/RE_ Vulnerabilities of _McEliece in the World o..._1.pdf-attachment-escher11.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:38:46 UTC
- PDF date: 20160301 08:17:48 -0500
- PDF creation date: 20160301 08:17:48 -0500
- Pages: 13
- Bytes: 374376
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft (?) of public paper.
20160301 08:22:00
file 20240215/RE_ Vulnerabilities of _McEliece in the World o..._1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:38:46 UTC
- PDF date: 20240208 11:38:45 -0500
- PDF creation date: 20230125 14:55:27 -0500
- Email date: 20160301 08:22:00
- PDF attachments: "escher11.pdf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Foti, James (Fed)"
- Email subject: "RE: Vulnerabilities of "McEliece in the World of Escher""
- Pages: 1
- Bytes: 500924
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing mandatory disclaimers for NIST papers.
20160301 09:05:50
file 20240726/Re_ Will the Posting on USAJobs be up relativel..._1_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:55:30 UTC
- Email date: 20160301 09:05:50
- Email from: "(b) (6)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Re: Will the Posting on USAJobs be up relatively soon?"
- Pages: 2
- Bytes: 137194
Notes from djb, last edited 20240801 23:15:11 UTC:
Apparently from Jacob Alperin-Sheriff.
Thread is discussing new position for Alperin-Sheriff at NIST.
20160301 12:25:40 -0500
file 20221014/pqcrypto-2016-presentation.pdf:
- FOIA delivery date: 20221014
- FOIA file date: 20220823 19:00:00 UTC
- PDF date: 20160301 12:25:40 -0500
- PDF creation date: 20160301 12:21:33 -0500
- PDF author: "Computer Security Division"
- PDF title: "Post-Quantum Cryptography: NIST's Plan for the Future"
- PDF subject: "presentation at PQCrypto 2016, Feb 24-26, 2016"
- PDF keywords: "post-quantum cryptography, cryptography, call for submissions "
- Pages: 16
- Bytes: 534603
Notes from djb, last edited 20230625 17:50:02 UTC:
Public announcement of this NIST project.
"We see our role as managing a process of achieving community consensus in a transparent and timely manner" (boldface in original)
#claimingtransparency
"Disclose known patent information":
This is better than nothing,
but it falls short of NIST's official competition procedures
stated in NIST IR 7977,
"NIST Cryptographic Standards and Guidelines Development Process":
"The winning submitters are recognized,
but agree to relinquish claim to intellectual property rights for their design so that the
winning candidate can be available for royalty-free use."
The
Dual EC post-mortem
said that NIST's VCAT
"strongly encourages standard development through open competitions, where appropriate".
For some reason,
NIST avoided calling this project a "competition".
#inconsistency
20160303 01:21:06
file 20240124/RE_ PQC forum(1)_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:47:04 UTC
- PDF date: 20240122 11:47:03 -0500
- PDF creation date: 20230125 14:31:50 -0500
- Email date: 20160303 01:21:06
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: PQC forum"
- Pages: 3
- Bytes: 170740
Notes from djb, last edited 20240225 11:49:06 UTC:
Drafting text for web pages.
20160303 03:43:02
file 20240124/RE_ PQC forum_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:46:20 UTC
- PDF date: 20240122 11:46:18 -0500
- PDF creation date: 20230125 14:31:48 -0500
- Email date: 20160303 03:43:02
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Kerman, Sara J. (Fed)"
- Email subject: "RE: PQC forum"
- Pages: 3
- Bytes: 148815
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing web pages.
20160303 07:18:12
file 20240215/The PQC ir_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:54:24 UTC
- PDF date: 20240208 11:54:23 -0500
- PDF creation date: 20230125 14:51:34 -0500
- Email date: 20160303 07:18:12
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "The PQC ir"
- Pages: 1
- Bytes: 91085
Notes from djb, last edited 20240225 11:49:06 UTC:
"Can u please email a link to the pqc IR to Paul kocher. Also if there are any instructions on how to format
comments.
Had a good meet with him and he had some good ideas"
What happened at this meeting?
#needmorerecords
20160303 09:37:00
file 20240726/RE_ Travel in March(1)_2_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:54:42 UTC
- Email date: 20160303 09:37:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Mukes, Vickie J.; Daniel Smith (b) (6) ; Daniel C Smith (daniel-c.smith@louisville.edu)"
- Email subject: "RE: Travel in March"
- Pages: 1
- Bytes: 87546
Notes from djb, last edited 20240801 23:15:11 UTC:
Thread discusses travel planning, including visits by Jintai Ding and Tsuyoshi Takagi.
20160303 11:53:00
file 20240726/RE_ Travel in March_1_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:55:06 UTC
- Email date: 20160303 11:53:00
- Email from: "Chen, Lily (Fed)"
- Email to: "(b) (6)"
- Email cc: "Mukes, Vickie J."
- Email subject: "RE: Travel in March"
- Pages: 1
- Bytes: 126901
Notes from djb, last edited 20240801 23:15:11 UTC:
Apparently to Daniel Smith-Tone.
Travel planning.
20160307 12:08:07
file 20240215/Re_ next pqc meeting_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:30:18 UTC
- PDF date: 20240207 13:30:17 -0500
- PDF creation date: 20230125 14:19:16 -0500
- Email date: 20160307 12:08:07
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: next pqc meeting"
- Pages: 2
- Bytes: 114678
Notes from djb, last edited 20240225 11:49:06 UTC:
Moody:
"Yi-Kai,
I scheduled our next PQC meeting for Tuesday the 8th. Hope that is fine. Ray and I (and maybe
Daniel) can report on PQCrypto. Can you be ready to help us know what the next steps we need to
take on the evaluation criteria are?"
20160308 12:15:00
file 20231219/FIPS 186 notes_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:45:42 UTC
- PDF date: 20231212 10:45:40 -0500
- PDF creation date: 20230125 13:52:04 -0500
- Email date: 20160308 12:15:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Barker, Elaine B. (Fed)"
- Email subject: "FIPS 186 notes"
- Pages: 1
- Bytes: 81741
Notes from djb, last edited 20240112 23:05:08 UTC:
"I was cleaning out some papers in my office, and I found some papers/notebooks that I think might
be yours? Back when we were dealing with the VCAT, I was asked to give a presentation on the
history of FIPS 186. I think you gave me some meeting notes from the NIST/NSA TWG meetings that
dealt with that. Do you want them back?"
#nsa
The phrase "dealing with the VCAT" sheds a bit of light on NIST's mindset.
20160309 08:10:00
file 20240215/RE_ My Notes from PQCrypto 2016_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:27:34 UTC
- PDF date: 20240207 13:27:32 -0500
- PDF creation date: 20230125 14:14:46 -0500
- Email date: 20160309 08:10:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin"
- Email subject: "RE: My Notes from PQCrypto 2016"
- Pages: 3
- Bytes: 125617
Notes from djb, last edited 20240225 11:49:06 UTC:
More discussion of PQCrypto 2016 notes.
"We will follow up with a meeting with CAVP/CMVP about how to handle hybrid. I will reach to them."
What happened at this meeting?
#needmorerecords
Moody:
"Everyone,
Here’s a quick typed up version of my notes from PQCrypto 2016. The talk summaries probably
won’t help you much. I end with the questions people asked me about our quasi-competition."
20160309 08:33:00
file 20240215/RE_ PQC NISTIR Comments_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:47:18 UTC
- PDF date: 20240208 10:47:17 -0500
- PDF creation date: 20230125 14:33:56 -0500
- Email date: 20160309 08:33:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin"
- Email subject: "RE: PQC NISTIR Comments"
- Pages: 4
- Bytes: 175135
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing review of public comments on NIST IR 8105.
"You can pick any one. Remember, we need on Division reader who should be in the division. Another
is WERB reader, we can ask an external. A NSA guy will work."
#nsa
20160309 10:00:07
file 20231219/Links to the docs we discussed_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:13:32 UTC
- PDF date: 20231215 10:13:31 -0500
- PDF creation date: 20230125 14:11:42 -0500
- Email date: 20160309 10:00:07
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Schufreider, James R. (Fed)"
- Email subject: "Links to the docs we discussed"
- Pages: 1
- Bytes: 82462
Notes from djb, last edited 20240112 23:05:08 UTC:
Sending some public NIST reports to James Schufreider,
NIST's Director of Congressional and Legislative Affairs.
Apparently this was after a meeting;
what happened in the meeting?
#needmorerecords
20160310 02:41:28
file 20240215/Re_ Public key hybrid encryption and signature ..._1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:05:12 UTC
- PDF date: 20240208 10:05:10 -0500
- PDF creation date: 20230125 14:36:09 -0500
- Email date: 20160310 02:41:28
- Email from: "Dang, Quynh (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Regenscheid, Andrew R. (Fed); Dworkin, Morris J.(Fed); Kelsey, John M. (Fed); Vassilev, Apostol T. (Fed); Barker, Elaine B. (Fed); Keller, Sharon (Fed); Bassham,Lawrence E. (Fed); McKay, Kerry A. (Fed); Roginsky, Allen L. (Fed); Peralta, Rene C. (Fed); Burr, William E.(Assoc); Liu, Yi-Kai (Fed); Daniel C Smith (daniel-c.smith@louisville.edu)"
- Email cc: "Scholl, Matthew A. (Fed)"
- Email subject: "Re: Public key hybrid encryption and signature - for further discussion"
- Pages: 2
- Bytes: 155911
Notes from djb, last edited 20240225 11:49:06 UTC:
"How much would protocols designers/implementers/users (especially the users and
implementers) use the post-quantum algorithms that way knowing that they'll pay some
performance cost (could be heavy performance cost) (and IPR fee(s) in some cases) and do
not know which one(s) will be adopted by standard bodies such as NIST and/or the IETF
(adopted by a standard body implies some level of confidence in the security of the adopted
scheme(s)) ?"
"Would we like to be in a world where different post-quantum algorithms are supported in
different protocols when we decide what algorithm(s) to standardize?"
"Standardized algorithms bring significant interoperability, efficiency and security for the
internet. So, I am not sure if all kinds of algorithms being supported or/and used is the best
that we are looking for."
20160310 03:28:51
file 20240215/Re_ status_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:52:36 UTC
- PDF date: 20240208 10:52:34 -0500
- PDF creation date: 20230125 14:49:20 -0500
- Email date: 20160310 03:28:51
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: status"
- Pages: 1
- Bytes: 110336
Notes from djb, last edited 20240225 11:49:06 UTC:
Moody:
"I talked more with Andy, and he really thinks we need to have our draft by April, as we’ll have to run
it by the lawyers. Have you thought about assignments? Daniel will be here next week, so we could
really focus and work on the technical parts. Tuesday afternoon we will likely have a meeting with
some visitors (Jintai and Tsuyoshi), but we could have another meeting to work on the evaluation
criteria. What do you think?"
20160310 10:46:21 -0500
file 20231219/[Ispab] NIST response to ISPAB recommendation on Quantum Computing.pdf-attachment-0906_001.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231115 15:05:00 UTC
- PDF date: 20160310 10:46:21 -0500
- PDF creation date: 20160310 10:46:21 -0500
- Pages: 4
- Bytes: 197060
Notes from djb, last edited 20240112 23:05:08 UTC:
Letter from NIST director to ISPAB.
"In 2015,
CSD decided to embark on a standardization plan
for post quantum computing (PQC)"
"I'm interested in hearing the Board's opinion
on whether NIST has made the necessary investments in human capital
in order to execute on the PQC plan"
20160310 11:35:07
file 20231219/[Ispab] NIST response to ISPAB recommendation on Quantum Computing.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231115 15:05:00 UTC
- PDF date: 20230111 13:53:03 -0500
- PDF creation date: 20230111 13:48:10 -0500
- Email date: 20160310 11:35:07
- PDF attachments: "0906_001.pdf"; "ATT00001.txt"
- Email from: "ispab-bounces@nist.gov on behalf of Sokol, Annie W. (Fed)"
- Email to: "ISPAB"
- Email subject: "[Ispab] NIST response to ISPAB recommendation on Quantum Computing"
- Pages: 1
- Bytes: 277994
Notes from djb, last edited 20240112 23:05:08 UTC:
"response from NIST to ISPAB’s recommendation on quantum computing"
20160310 18:49:00 UTC
file 20231219/FW_ IPR for PQC Call For Submissions_1.pdf-attachment-CFP v1 RayIPRComments.docx:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:07:54 UTC
- XML date: 20160310 18:49:00 UTC
- XML creation date: 20160310 18:31:00 UTC
- Title: "Announcing Request for Proposals for Quantum-Resistant Cryptographic Algorithms"
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray"
- Pages: 9
- Bytes: 40550
Notes from djb, last edited 20240112 23:05:08 UTC:
Early draft of the call for submissions,
still using NSA's "quantum-resistant" terminology.
Visibly copying and pasting from SHA-3 text.
"NIST envisions a five-year process starting soon and ending with a NIST proposal of a standard for quantum-resistant cryptographic algorithms. We believe the
transition to the new algorithms must start soon after this five-year period.":
Why not try rolling something out immediately,
given that user data is already exposed?
#slowingdownpqcrypto
"a preliminary security analysis (including any security reduction proofs or intractability argument from complexity theory?)"
#scramble
"a precise security claim against quantum computation":
It's interesting to note that this version of the call kept its eye on the ball.
Later versions added the distraction of pre-quantum security analyses.
How did that change happen?
#needmorerecords
"quantum-resistant algorithm search process"
with comment from Dustin Moody saying "Any thoughts on a better name?"
"NIST will form an internal selection panel composed of NIST employees to analyze the candidate algorithms.
All of NIST’s analysis results will be made publicly available."
20160314 04:14:01
file 20231219/FW_ hybrid mode - ICMC16_1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:01:22 UTC
- Email date: 20160314 04:14:01
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); (b) (6)"
- Email subject: "FW: hybrid mode - ICMC16"
- Pages: 2
- Bytes: 111501
Notes from djb, last edited 20240112 23:05:08 UTC:
Redacts an email address of a recipient.
#needmorerecords
20160314 09:15:17
file 20240215/Re_ pqc meetings_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 13:00:18 UTC
- PDF date: 20240207 14:00:16 -0500
- PDF creation date: 20230125 14:33:28 -0500
- Email date: 20160314 09:15:17
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: pqc meetings"
- Pages: 1
- Bytes: 110026
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussion of when to meet between 14 and 18 March 2016.
20160314 10:24:36
file 20231219/FW_ IPR for PQC Call For Submissions_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:07:54 UTC
- PDF date: 20231215 10:07:53 -0500
- PDF creation date: 20230125 14:09:15 -0500
- Email date: 20160314 10:24:36
- PDF attachments: "CFP v1 RayIPRComments.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email subject: "FW: IPR for PQC Call For Submissions"
- Pages: 1
- Bytes: 162174
Notes from djb, last edited 20240112 23:05:08 UTC:
Editing IPR statement.
20160317 02:28:58
file 20240215/Today's PQC meeting summary _ assignments_2.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:56:28 UTC
- PDF date: 20240208 11:56:27 -0500
- PDF creation date: 20230125 14:52:41 -0500
- Email date: 20160317 02:28:58
- PDF attachments: "CFP v2.docx"; "SHA3-FR_Notice_Nov07.pdf"; "CFP outline 2016 march.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray A.(Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Moody, Dustin (Fed); Bassham,Lawrence E. (Fed)"
- Email subject: "Today"s PQC meeting summary & assignments"
- Pages: 1
- Bytes: 317505
Notes from djb, last edited 20240225 11:49:06 UTC:
Summary of meeting on 17 March 2016.
20160317 02:52:24
file 20240215/RE_ Today's PQC meeting summary _ assignments_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:55:38 UTC
- PDF date: 20240208 11:55:36 -0500
- PDF creation date: 20230125 14:52:37 -0500
- Email date: 20160317 02:52:24
- PDF attachments: "CFP v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray A.(Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "RE: Today"s PQC meeting summary & assignments"
- Pages: 1
- Bytes: 170430
Notes from djb, last edited 20240225 11:49:06 UTC:
Quoted message shows who did what,
starting from the SHA-3 call for proposals.
"Yi-Kai: Re-write section 1: Background"
"Ray: Draft section 4: Evaluation Criteria"
"Dustin: Continue working on 2.D: IPR. Write section 5: Candidate Evaluation Process. Every other
section not assigned (which are pretty much done)"
"Daniel: Add more detail to section 2.B.1: Algorithm Specification. Revise section 3: Minimum
Acceptability Requirements (not much needed). Revise section 6: Miscellaneous."
"Larry: Add more to section 2.B.2, and 2.C (like 2.C.1, 2.C.2, 2.C.3) as you deem fit. More details about
the API."
20160317 16:18:00 UTC
file 20240215/Today's PQC meeting summary _ assignments_2.pdf-attachment-CFP outline 2016 march.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:56:28 UTC
- XML date: 20160317 16:18:00 UTC
- XML creation date: 20160317 14:12:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 3
- Bytes: 13659
Notes from djb, last edited 20240225 11:49:06 UTC:
Outline of planned call for proposals,
and assignments of who will write what.
"1st draft by next Thursday 3/24/16"
"Background -> Yi-Kai"
. "Define: encryption, signatures"
. "Need for PQC"
. "Impact on standards, timeline"
. . "Migration – e.g., hybrid modes are automatically compliant"
. . "Will work with industry and other standards organizations (e.g., stateful hash-based signatures)"
. . "New NIST standards for public key encryption and signatures"
. . "“Pre-quantum” standards are likely to be deprecated"
. "Desirable features"
. . "Drop-in replacement in existing applications, as much as possible"
. . "Secure against classical and quantum computers"
. "“Standardization process”"
. . "Not competition"
"Requirements for candidate algorithm submission packages -> Daniel"
. "Due Nov. 2017"
. "2.B Algorithm specification"
. . "Can call approved primitives, should implement padding, etc., in order to achieve security"
. . "Want weakened versions for cryptanalysis"
. . "Replacing Diffie-Hellman key exchange with key transport"
. . "See Dustin’s draft CFP"
. "2.D Intellectual property -> Dustin"
. "Crypto API -> Dustin"
"Minimum acceptability requirements -> Daniel"
. "See Dustin’s draft CFP"
. "Meet minimum security levels"
"Evaluation criteria (see our old list of topics) -> Ray"
. "4.A. Security"
. . "i. Applications: TLS, IKE (need drop-in replacement for SP800-56A,B, FIPS 186) (use key transport) (code signing)"
. . "ii. Security definitions: IND-CCA, EUF-CMA"
. . . "Perfect forward secrecy? – security can be impacted by performance"
. . . "Crude definitions of number of bits of quantum security?"
. . "iii. Resistance to known attacks"
. . . "Best known attacks"
. . . "Multi-key attacks"
. . . "Side-channel resistance (performance can be affected by security)"
. . "iv. Other factors"
. . . "How well-understood is the cryptosystem?"
. . . . "Security proofs are nice, but not required"
. . . . "How much cryptanalysis has been done?"
. . . . "Want connection to existing literature"
. . . . "Excessive modifications of submissions will be a factor"
"4.B Cost"
. "Computational efficiency"
"Key sizes"
"4.C Implementation characteristics"
. "Ease of implementation and management: idiot-proof"
"Evaluation process -> Dustin"
. "Workshop – March 2018"
. "12-18 month cycle: Submission -> Workshop -> Analysis -> Report"
. "Goal: 3-5 years of evaluation, then 1-2 years to develop standard"
. "Open-ended process, no fixed timeline"
"Miscellaneous -> Daniel"
. "Don’t submit hybrid modes"
. "Don’t invent a new block cipher"
. "Quantum security models"
. "Encourage mergers of similar submissions"
20160317 18:05:00 UTC
file 20240215/Today's PQC meeting summary _ assignments_2.pdf-attachment-CFP v2.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:56:28 UTC
- XML date: 20160317 18:05:00 UTC
- XML creation date: 20160310 18:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 11
- Bytes: 40913
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20160317 18:51:00 UTC
file 20240215/RE_ Today's PQC meeting summary _ assignments_1.pdf-attachment-CFP v2.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:55:38 UTC
- XML date: 20160317 18:51:00 UTC
- XML creation date: 20160310 18:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 12
- Bytes: 42346
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20160322 03:06:46
file 20240124/RE_ My write-up in the PQC call(4)_7.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:49:06 UTC
- PDF date: 20240118 11:49:04 -0500
- PDF creation date: 20230125 14:16:18 -0500
- Email date: 20160322 03:06:46
- PDF attachments: "CFP v2 Ray + Sec4c.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan,Stephen P (Fed); Liu, Yi-Kai (Fed); Chen, Lily (Fed); Bassham, Lawrence E. (Fed); Peralta, Rene C. (Fed)"
- Email subject: "RE: My write-up in the PQC call"
- Pages: 1
- Bytes: 184531
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing call for proposals.
20160322 08:51:45
file 20231219/Re_ Phone conversation with IETF(1)_2.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:24:38 UTC
- PDF date: 20231215 10:24:36 -0500
- PDF creation date: 20230125 14:27:30 -0500
- Email date: 20160322 08:51:45
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Phone conversation with IETF"
- Pages: 2
- Bytes: 114724
Notes from djb, last edited 20240112 23:05:08 UTC:
What happened in this "phone conversation with IETF"?
#needmorerecords
NSA asks "every week if we have a meeting"
#nsa
20160322 11:05:18
file 20231219/Re_ Phone conversation with IETF_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:24:02 UTC
- PDF date: 20231215 10:24:00 -0500
- PDF creation date: 20230125 14:27:29 -0500
- Email date: 20160322 11:05:18
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Phone conversation with IETF"
- Pages: 2
- Bytes: 114317
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics regarding discussion with someone at IETF.
20160322 11:08:00
file 20240124/RE_ PQC meeting_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:07:56 UTC
- PDF date: 20240122 13:07:54 -0500
- PDF creation date: 20230125 14:32:58 -0500
- Email date: 20160322 11:08:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin"
- Email subject: "RE: PQC meeting"
- Pages: 2
- Bytes: 114072
Notes from djb, last edited 20240225 11:49:06 UTC:
"I’ll send a standing invitation to hold for PQC on Tuesday mornings."
In a quoted message:
"Are you talking about our internal PQC meeting? Or the conference call with the CRFG chairs?"
20160322 19:03:00 UTC
file 20240124/RE_ My write-up in the PQC call(4)_7.pdf-attachment-CFP v2 Ray + Sec4c.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:49:06 UTC
- XML date: 20160322 19:03:00 UTC
- XML creation date: 20160322 19:03:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray"
- Pages: 16
- Bytes: 66371
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft call for proposals.
20160323 01:52:54
file 20240124/RE_ My write-up in the PQC call(3)_5.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:48:06 UTC
- PDF date: 20240118 11:48:04 -0500
- PDF creation date: 20230125 14:16:11 -0500
- Email date: 20160323 01:52:54
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "RE: My write-up in the PQC call"
- Pages: 2
- Bytes: 189511
Notes from djb, last edited 20240225 11:49:06 UTC:
"The ANSI C compiler in the Microsoft Visual Studio 2005 Professional Edition"
20160323 11:49:06
file 20240124/FW_ My write-up in the PQC call_6.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:48:32 UTC
- PDF date: 20240118 11:48:31 -0500
- PDF creation date: 20230125 14:16:14 -0500
- Email date: 20160323 11:49:06
- PDF attachments: "CFP v2- LEB.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); DanielC Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "FW: My write-up in the PQC call"
- Pages: 1
- Bytes: 150623
Notes from djb, last edited 20240225 11:49:06 UTC:
See attachment.
20160323 15:30:00 UTC
file 20240124/FW_ My write-up in the PQC call_6.pdf-attachment-CFP v2- LEB.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:48:32 UTC
- XML date: 20160323 15:30:00 UTC
- XML creation date: 20160323 13:59:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Bassham, Lawrence E (Fed)"
- Pages: 3
- Bytes: 27133
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft requirements for software.
20160323 18:16:00 UTC
file 20240124/Re_ My write-up in the PQC call(4)_3.pdf-attachment-CFP v2-dbm-ray-larry.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:46:40 UTC
- XML date: 20160323 18:16:00 UTC
- XML creation date: 20160323 15:38:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 20
- Bytes: 55422
Notes from djb, last edited 20240225 11:49:06 UTC:
Early draft of call for proposals.
20160324 02:11:01
file 20240124/Re_ My write-up in the PQC call(5)_4.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:47:40 UTC
- PDF date: 20240118 11:47:38 -0500
- PDF creation date: 20230125 14:16:08 -0500
- Email date: 20160324 02:11:01
- PDF attachments: "CFP v2 - YKL.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed);Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "Re: My write-up in the PQC call"
- Pages: 1
- Bytes: 176804
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing call for proposals.
20160324 02:57:13
file 20240124/Re_ My write-up in the PQC call(4)_3.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:46:40 UTC
- PDF date: 20240118 11:46:38 -0500
- PDF creation date: 20230125 14:16:06 -0500
- Email date: 20160324 02:57:13
- PDF attachments: "CFP v2-dbm-ray-larry.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: My write-up in the PQC call"
- Pages: 1
- Bytes: 172691
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing call for proposals.
20160324 11:31:40
file 20231219/[Itl_mgmt] Fw_ [Deputies] News Clips for Thursd..._1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231204 10:55:46 UTC
- PDF date: 20231204 11:55:43 -0500
- PDF creation date: 20230125 12:33:36 -0500
- Email date: 20160324 11:31:40
- PDF attachments: "ATT00001.txt"; "ATT00001.txt"
- Email from: "itl_mgmt-bounces@nist.gov on behalf of St Pierre, James A. (Fed)"
- Email to: "ITL_MGMT"
- Email subject: "[Itl_mgmt] Fw: [Deputies] News Clips for Thursday, March 24, 2016"
- Pages: 3
- Bytes: 206289
Notes from djb, last edited 20240112 23:05:08 UTC:
Not obviously relevant.
20160324 17:54:00 UTC
file 20240124/Re_ My write-up in the PQC call(5)_4.pdf-attachment-CFP v2 - YKL.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:47:40 UTC
- XML date: 20160324 17:54:00 UTC
- XML creation date: 20160310 18:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "yikailiu"
- Pages: 13
- Bytes: 53274
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft call for proposals.
20160325 07:52:01
file 20240215/RE_ 6 Expert keynotes scheduled_ Reserve now at..._1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:00:04 UTC
- PDF date: 20240207 13:00:02 -0500
- PDF creation date: 20230125 13:33:38 -0500
- Email date: 20160325 07:52:01
- Email from: "Cawthra, Jennifer L. (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email subject: "RE: 6 Expert keynotes scheduled: Reserve now at 40% off"
- Pages: 6
- Bytes: 282331
Notes from djb, last edited 20240225 11:49:06 UTC:
Conference logistics.
20160327 03:30:58
file 20240124/Re_ My write-up in the PQC call(1)_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 10:44:26 UTC
- PDF date: 20240118 11:44:24 -0500
- PDF creation date: 20230125 14:15:58 -0500
- Email date: 20160327 03:30:58
- Email from: "Peralta, Rene (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Daniel; Moody, Dustin (Fed); Perlner, Ray A. (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed);Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Re: My write-up in the PQC call"
- Pages: 3
- Bytes: 131346
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing document edits, planning a meeting.
20160328 04:04:00
file 20240124/RE_ My write-up in the PQC call_1_Redacted.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 10:40:02 UTC
- PDF date: 20240123 11:40:00 -0500
- PDF creation date: 20240123 11:40:00 -0500
- Email date: 20160328 04:04:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin; Perlner, Ray; Jordan, Stephen P; (b) (6) ; Liu, Yi-Kai"
- Email cc: "Peralta, Rene; Bassham, Lawrence E"
- Email subject: "RE: My write-up in the PQC call"
- Pages: 24
- Bytes: 582179
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing draft call for proposals.
Some interesting comments.
20160329 04:32:51
file 20240124/PQC call for papers v4_3_Redacted.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 10:38:26 UTC
- PDF date: 20240123 11:38:25 -0500
- PDF creation date: 20240123 11:38:25 -0500
- Email date: 20160329 04:32:51
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed); (b) (6)"
- Email cc: "Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "PQC call for papers v4"
- Pages: 23
- Bytes: 567695
Notes from djb, last edited 20240225 11:49:06 UTC:
"Here is an updated version of the call for papers, after our discussion this morning. I cleaned up my
section. Could you all take turns revising your sections? If we can get this cleaned up by Friday
afternoon, that would be great!"
20160329 05:25:30
file 20240215/RE_ Grover's algorithm_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:17:24 UTC
- PDF date: 20240207 13:17:23 -0500
- PDF creation date: 20230125 13:58:44 -0500
- Email date: 20160329 05:25:30
- Email from: "Perlner, Ray (Fed)"
- Email to: "Peralta, Rene C. (Fed); Liu, Yi-Kai (Fed)"
- Email cc: "Jordan, Stephen P (Fed)"
- Email subject: "RE: Grover"s algorithm"
- Pages: 2
- Bytes: 123386
Notes from djb, last edited 20240225 11:49:06 UTC:
Surprisingly basic discussion of Grover's algorithm.
#scramble
Peralta:
"In Grover's algorithm (for a space of size N) one iterates
calls to two operators about sqrt(N) times, then one measures
and obtains the target with probability about 1. What happens
if you do fewer iterations and then measure? How does the
probability decay?"
Liu:
"Sorry I didn't have time to reply earlier! Yes, for Grover's algorithm, if you stop the algorithm early,
you can calculate what happens -- Grover's algorithm rotates the state of the system so that it
overlaps partially with the target state, see equation (11) here:
https://courses.cs.washington.edu/courses/cse599d/06wi/lecturenotes12.pdf"
The question was how the probability decays,
compared to probability "about 1" for "about sqrt(N)" iterations.
The correct answer to the question is that there's a quadratic decay:
the success probability is about q2/N after q iterations.
Someone who understands what the variables mean
can obtain this with a short calculation from the more complicated rotation formula that's cited.
But someone asking such a basic question about Grover's algorithm
obviously doesn't have that understanding.
Why would someone who does understand what's going on
point to the formula and not answer the question?
Liu:
"You can also ask a related question: what happens to the quantum query lower bounds, when you
are operating in this regime where the success probability is very low? Mark Zhandry has some
results about this -- for instance, he shows that for unstructured search over N items using q queries,
the best success probability is O(q2/N), see here:
https://www.cs.princeton.edu/~mzhandry/docs/talks/QSol.slides.pdf"
Three things are striking here.
First,
claiming O(q2/N) as a lower bound is meaningless;
it shows that the writer doesn't understand what "O" means.
#error
Zhandry's slides correctly say Theta.
Second,
Zhandry's slides credit the Theta(q2/N) result to BBBV'97.
Why would anyone claim that Zhandry showed this result?
#ethics
#error
Third,
why would someone who understands that the lower bound of Theta(q2/N) matches Grover's performance at that level of detail
not say so?
Someone who was asking about Grover's algorithm
won't be able to figure out from the reply text
that Grover's algorithm has success probability Theta(q2/N) after q iterations, within a constant factor of optimal.
For anyone who does understand Grover's algorithm,
this whole reply text looks like the result of someone searching for material online
and not taking the time to understand what the search results say about the question at hand.
What's weird is how confident the reply text sounds.
20160329 09:50:28
file 20231219/perfect forward secrecy__1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231219 08:45:50 UTC
- Email date: 20160329 09:50:28
- Email from: "Peralta, Rene (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed); (b) (6) ; Liu, Yi-Kai(Fed)"
- Email cc: "Bassham, Lawrence E. (Fed)"
- Email subject: "perfect forward secrecy"
- Pages: 3
- Bytes: 124523
Notes from djb, last edited 20240112 23:05:08 UTC:
Various redactions,
at least some of them obviously being Daniel Smith-Tone.
Rene Peralta: "I think perfect forward secrecy is overhyped.
Long term keys should be both protected and changed with adequate frequency.
If you can't do that, then I think you have bigger problems than lack of
forward secrecy."
20160329 12:59:33
file 20231219/Here's the reference for the optimal way to par..._1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:05:52 UTC
- PDF date: 20231215 10:05:50 -0500
- PDF creation date: 20230125 14:01:32 -0500
- Email date: 20160329 12:59:33
- Email from: "Perlner, Ray (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "Here"s the reference for the optimal way to parallelize Grover"
- Pages: 1
- Bytes: 91472
Notes from djb, last edited 20240112 23:05:08 UTC:
Sending around a reference on the limits of Grover parallelization.
#scramble
20160330 10:24:12
file 20240124/Re_ PQC call for papers v4_1_Redacted.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 10:19:56 UTC
- Email date: 20160330 10:24:12
- Email from: "Jordan, Stephen P (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Chen, Lily (Fed); (b) (6)"
- Email cc: "Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: PQC call for papers v4"
- Pages: 2
- Bytes: 116644
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing edits to the call for proposals.
"A danger is that different submitters may make incomparable security
analyses. If we leave too much complexity people may make mistakes and if we leave wiggle
room people will be likely to interpret things in a way that makes their own submission look
more favorable, even if they are not doing it consciously."
"Furthermore, our assumptions about the relative cost of quantum vs classical
operations can simply be baked into our choices of number bits of security for each rather
than leaving this as an aspect of the security definition for the individual teams to decide for
themselves."
20160330 10:48:20
file 20240124/Re_ PQC call for papers v4(1)_2_Redacted.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 10:19:18 UTC
- Email date: 20160330 10:48:20
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: PQC call for papers v4"
- Pages: 1
- Bytes: 112618
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing call for proposals.
20160404 04:59:36
file 20240311/Re_ latest cfp_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:45:36 UTC
- PDF date: 20240307 13:45:35 -0500
- PDF creation date: 20230126 13:30:38 -0500
- Email date: 20160404 04:59:36
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: latest cfp"
- Pages: 2
- Bytes: 113493
Notes from djb, last edited 20240311 19:56:24 UTC:
"Hmm, I just looked at the current version of the CFP. Larry asked if we needed any more text from
him, but I don't think we do, at least nothing big."
"I haven't heard anything from Daniel. If I have time on Wednesday, I may just rewrite Daniel's
section myself."
"Thanks for setting up the meeting on Thursday. We should definitely discuss the second half of the
CFP in more detail."
20160404 09:45:57
file 20240311/Re_ latest cfp(1)_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:45:52 UTC
- PDF date: 20240307 13:45:50 -0500
- PDF creation date: 20230126 13:30:39 -0500
- Email date: 20160404 09:45:57
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: latest cfp"
- Pages: 1
- Bytes: 120296
Notes from djb, last edited 20240311 19:56:24 UTC:
"Thursday is fine with me. I'll send out an invite...."
Thread is planning 7 April 2016 meeting.
20160405 09:14:46
file 20240325/Quantum pre-image attacks on SHA-256_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 12:29:48 UTC
- PDF date: 20240315 13:29:47 -0400
- PDF creation date: 20230126 15:06:25 -0500
- Email date: 20160405 09:14:46
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "Quantum pre-image attacks on SHA-256"
- Pages: 1
- Bytes: 85532
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thought you might find this interesting….
http://arxiv.org/pdf/1603.09383.pdf"
20160407 01:46:50
file 20240325/Reference papers on more realistic quantum comp..._1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:01:40 UTC
- PDF date: 20240318 15:01:38 -0400
- PDF creation date: 20230126 15:19:52 -0500
- Email date: 20160407 01:46:50
- Email from: "Perlner, Ray (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed)"
- Email subject: "Reference papers on more realistic quantum computation models"
- Pages: 1
- Bytes: 85422
Notes from djb, last edited 20240417 22:58:35 UTC:
"https://cr.yp.to/hash/collisioncost-20090517.pdf"
"http://arxiv.org/pdf/1207.2307v2.pdf"
20160407 03:00:23
file 20240311/Final revisions of the CFP for our first draft_6.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:03:06 UTC
- PDF date: 20240307 10:03:05 -0500
- PDF creation date: 20230126 12:20:53 -0500
- Email date: 20160407 03:00:23
- PDF attachments: "CFP v6.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed)"
- Email cc: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, StephenP (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Final revisions of the CFP for our first draft"
- Pages: 1
- Bytes: 157599
Notes from djb, last edited 20240311 19:56:24 UTC:
"Please use the attached to make your revisions. I believe Ray is going to address some things in
Section 3 and 4. Yi-Kai will work on the remaining few comments. They plan on being done by next
Monday, COB.
Starting next Tuesday, we want everyone to read the CFP and provide feedback by Friday. We can
then send the CFP to Andy, Matt, Donna, etc… the following week."
20160407 03:33:33
file 20240318/RE_ PQC webpage(2)_3.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:12:24 UTC
- PDF date: 20240314 13:12:21 -0400
- PDF creation date: 20230126 14:36:01 -0500
- Email date: 20160407 03:33:33
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC webpage"
- Pages: 1
- Bytes: 89010
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for the heads-up. I’m going to share and chat with Jim Foti about the best approach. I’d like
his advice on how to keep the pages streamlined with this round and I’d like to make sure it works
with the migration to the new CSRC web site.."
20160407 09:12:00
file 20240827/RE_ PQC call for papers v4(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:19:32 UTC
- Email date: 20160407 09:12:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email subject: "RE: PQC call for papers v4"
- Pages: 4
- Bytes: 190535
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for papers.
Down thread, from Perlner:
"I don’t
think we should be overly concerned with submitters doing incorrect or biased security analysis.
The worst thing that would come of that is that they set their parameters incorrectly – something
which I think is likely to be less fatal for the submissions in this process than it was in the SHA3
competition. If we like a submission but think the submitters set the parameters wrong, we should
simply tell the submitters that we’d like them to tweak their parameters for the next round, and
publicly state the same in the report."
NIST later announced a policy along these lines but then didn't follow it.
#inconsistency
"Hopefully I am getting across the message
that we would prefer an imprecise measurement of security in a realistic attack model to a precise
measurement of security in an unrealistic attack model (which, by the way, is the opposite of the
typical incentives when the primary goal is getting academic papers published, so I do think we
need to be somewhat explicit to push the analysis in this direction.)"
From Jordan, earlier:
"A danger is that different submitters may make incomparable security
analyses. If we leave too much complexity people may make mistakes and if we leave wiggle
room people will be likely to interpret things in a way that makes their own submission look
more favorable, even if they are not doing it consciously. I'd be in favor of saying something
totally simpleminded and mathematically well-defined like: ..."
Did NIST ever ask for public feedback on these arguments for and against well-defined attack metrics?
Did NIST ever even disclose that it was internally having this argument?
#weveshownallourwork
20160407 09:35:43
file 20240827/RE_ PQC call for papers v4_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:21:16 UTC
- Email date: 20160407 09:35:43
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed); Chen, Lily (Fed); (b) (6)"
- Email cc: "Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "RE: PQC call for papers v4"
- Pages: 25
- Bytes: 2776369
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for papers.
20160407 18:56:00 UTC
file 20240311/Final revisions of the CFP for our first draft_6.pdf-attachment-CFP v6.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:03:06 UTC
- XML date: 20160407 18:56:00 UTC
- XML creation date: 20160407 18:56:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 63232
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160408 02:12:59
file 20240311/RE_ Final revisions of the CFP for our first draft(1)_5.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:02:40 UTC
- PDF date: 20240307 10:02:38 -0500
- PDF creation date: 20230126 12:20:51 -0500
- Email date: 20160408 02:12:59
- PDF attachments: "CFP v6 Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email cc: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, StephenP (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "RE: Final revisions of the CFP for our first draft"
- Pages: 1
- Bytes: 193571
Notes from djb, last edited 20240311 19:56:24 UTC:
"Here are my edits to section 3 and 4."
20160408 18:02:00 UTC
file 20240311/RE_ Final revisions of the CFP for our first draft(1)_5.pdf-attachment-CFP v6 Ray.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:02:40 UTC
- XML date: 20160408 18:02:00 UTC
- XML creation date: 20160407 19:04:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 22
- Bytes: 68273
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160411 08:24:29
file 20240311/Re_ Final revisions of the CFP for our first draft(3)_4.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:02:20 UTC
- PDF date: 20240307 10:02:18 -0500
- PDF creation date: 20230126 12:20:48 -0500
- Email date: 20160411 08:24:29
- PDF attachments: "CFP v6 Ray YKL.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, StephenP (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: Final revisions of the CFP for our first draft"
- Pages: 1
- Bytes: 219779
Notes from djb, last edited 20240311 19:56:24 UTC:
"I went through the CFP and made a bunch of edits. I think it's in pretty good shape."
"The section on quantum cryptanalysis still needs a bit more work, but I think it is converging to a
good solution. Ray, thanks for your work on that!"
20160411 09:17:45
file 20240325/Re_ What next on blockchain_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:15:28 UTC
- PDF date: 20240318 14:15:26 -0400
- PDF creation date: 20230126 16:00:52 -0500
- Email date: 20160411 09:17:45
- Email from: "Grance, Tim (Fed)"
- Email to: "Kelsey, John M. (Fed); Dray Jr., James F. (Fed); Barker, Elaine B. (Fed); Barker, William C. (Assoc); Regenscheid,Andrew R. (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: What next on blockchain?"
- Pages: 3
- Bytes: 169648
Notes from djb, last edited 20240417 22:58:35 UTC:
Blockchain; one content-free mention of "post quantum".
20160412 00:16:00 UTC
file 20240311/Re_ Final revisions of the CFP for our first draft(3)_4.pdf-attachment-CFP v6 Ray YKL.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:02:20 UTC
- XML date: 20160412 00:16:00 UTC
- XML creation date: 20160407 19:04:00 UTC
- XML creator: "rene"
- XML last-modified-by: "yikailiu"
- Pages: 24
- Bytes: 92835
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160412 03:02:59
file 20240311/RE_ Final revisions of the CFP for our first draft_3.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:01:44 UTC
- PDF date: 20240307 10:01:42 -0500
- PDF creation date: 20230126 12:20:46 -0500
- Email date: 20160412 03:02:59
- PDF attachments: "CFP v6 Ray YKL RayComments.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, StephenP (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "RE: Final revisions of the CFP for our first draft"
- Pages: 2
- Bytes: 209772
Notes from djb, last edited 20240311 19:56:24 UTC:
"I read through your changes and provided comments. I took your statement that the section on
quantum cryptanalysis still needs a bit more work as an invitation to edit it extensively. I also moved
a paragraph of text in section 3. I think everything else is intact aside from some comments and
replies to your comments."
20160412 19:02:00 UTC
file 20240311/RE_ Final revisions of the CFP for our first draft_3.pdf-attachment-CFP v6 Ray YKL RayComments.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:01:44 UTC
- XML date: 20160412 19:02:00 UTC
- XML creation date: 20160412 17:27:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 24
- Bytes: 80131
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160413 08:20:28
file 20240318/RE_ PQC webpage(1)_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:12:00 UTC
- PDF date: 20240314 13:11:58 -0400
- PDF creation date: 20230126 14:35:59 -0500
- Email date: 20160413 08:20:28
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: PQC webpage"
- Pages: 1
- Bytes: 124220
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for checking on this. I like www.nist.gov/pqcrypto It would be nice if they can do it, because
it’s easier to remember than http://csrc.nist.gov/groups/ST/post-quantum-crypto/ . If they can’t do
it, then I think we don’t need a usa.gov alias, we can just use our exisiting /post-quantum-crypto/
directory."
20160413 12:04:33
file 20240311/RE_ FPKI Policy Authority_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:38:12 UTC
- PDF date: 20240307 10:38:11 -0500
- PDF creation date: 20230126 12:26:35 -0500
- Email date: 20160413 12:04:33
- Email from: "Ferraiolo, Hildegard (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed); Moody, Dustin (Fed); Scholl, Matthew A. (Fed)"
- Email subject: "RE: FPKI Policy Authority"
- Pages: 2
- Bytes: 146306
Notes from djb, last edited 20240311 19:56:24 UTC:
"Thanks Dustin. I’ve added some comments to Andy’s notes below in green.
Also: The discussion yesterday at FPKI-PA was also about the PKI shared service providers who have
been testing and planning for migrations to either ECC or RSA 3072+ - for the intermediate CAs etc.
The End Entity Certificates (PIV and other person and non-person end entity certs) are governed
under Common Policy for the federal agencies, which are aligned with NIST specs. They are currently
2K RSA certs. The question they had, as Dustin said to move to 3K or to ECC."
Earlier in thread:
"They recommended that if we want people to implement our PQC algorithms after they are
standardized that there needs to be some kind of mandate with a deadline. Otherwise they
can’t get their bosses to transition to new algorithms. They thought it a good idea if we
could state now that there will be a mandate."
20160414 02:12:12
file 20240311/Re_ Final revisions of the CFP for our first draft_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 08:59:10 UTC
- PDF date: 20240307 09:59:09 -0500
- PDF creation date: 20230126 12:20:37 -0500
- Email date: 20160414 02:12:12
- PDF attachments: "CFP v7.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed)"
- Email cc: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene C. (Fed); Bassham,Lawrence E. (Fed)"
- Email subject: "Re: Final revisions of the CFP for our first draft"
- Pages: 3
- Bytes: 200910
Notes from djb, last edited 20240311 19:56:24 UTC:
"I've added in some comments. I accepted several of Lily's comments, and tried to clean up
portions of the text. Thanks!"
20160414 03:17:53
file 20240318/RE_ PQC webpage_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:11:36 UTC
- PDF date: 20240314 13:11:34 -0400
- PDF creation date: 20230126 14:35:58 -0500
- Email date: 20160414 03:17:53
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC webpage"
- Pages: 3
- Bytes: 175768
Notes from djb, last edited 20240417 22:58:35 UTC:
"No, that would be the link and it would take you direct to: http://csrc.nist.gov/groups/ST/post-
quantum-crypto/ Or do you want another page that builds of the “Standardization” only? I have a
request in for an alias, that relates the project that would go through 2023-ish. That’s the one we
will get an alias to.
On that page, we would add more menu links, to whatever is necessary (Federal Register Notices,
Submission Requirements, etc.). Here is a link to the Wayback machine to the hash competition stuff
in 2008:
http://web.archive.org/web/20080307094319/http://www.csrc.nist.gov/groups/ST/hash/sha-
3/index.html"
20160414 12:30:12
file 20240311/Re_ Final revisions of the CFP for our first draft(1)_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:00:20 UTC
- PDF date: 20240307 10:00:17 -0500
- PDF creation date: 20230126 12:20:40 -0500
- Email date: 20160414 12:30:12
- PDF attachments: "llc-CFP v6 Ray YKL.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Moody, Dustin (Fed)"
- Email cc: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene C. (Fed); Bassham,Lawrence E. (Fed)"
- Email subject: "Re: Final revisions of the CFP for our first draft"
- Pages: 3
- Bytes: 213262
Notes from djb, last edited 20240311 19:56:24 UTC:
"Attached please see my comments. I started going through at the beginning of this week.
What I commented may not be the latest version. I am impressed about the progress we
made."
Earlier message in thread:
"I like the new discussion of security against quantum attacks much better. I would even go so
far as to say I am pretty happy with it!"
#weveshownallourwork
20160414 16:16:00 UTC
file 20240311/Re_ Final revisions of the CFP for our first draft(1)_2.pdf-attachment-llc-CFP v6 Ray YKL.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:00:20 UTC
- XML date: 20160414 16:16:00 UTC
- XML creation date: 20160412 19:00:00 UTC
- XML creator: "rene"
- XML last-modified-by: "lily chen"
- Pages: 22
- Bytes: 93720
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160414 18:07:00 UTC
file 20240311/Re_ Final revisions of the CFP for our first draft_1.pdf-attachment-CFP v7.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 08:59:10 UTC
- XML date: 20160414 18:07:00 UTC
- XML creation date: 20160412 17:27:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 68856
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160418 10:28:47
file 20240318/Re_ PQC CFP(1)_5.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:43:44 UTC
- PDF date: 20240314 10:43:41 -0400
- PDF creation date: 20230126 14:29:51 -0500
- Email date: 20160418 10:28:47
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: PQC CFP"
- Pages: 2
- Bytes: 155660
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks, both of you, for doing all this work. In particular, thanks, Ray, for all your work on
the security requirements!"
20160418 10:55:26
file 20231219/CFP v8 - ready to send on_3.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:19:46 UTC
- PDF date: 20231212 10:19:44 -0500
- PDF creation date: 20230125 15:31:50 -0500
- Email date: 20160418 10:55:26
- PDF attachments: "CFP v8.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "CFP v8 - ready to send on"
- Pages: 1
- Bytes: 152981
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics regarding CFP editing.
"Yi-Kai did a great job of spearheading this effort, and thanks also to Ray who did more than his fair
share of the writing."
20160418 12:16:00
file 20231219/RE_ CFP v8 - ready to send on(1)_2.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:17:50 UTC
- PDF date: 20231212 10:17:49 -0500
- PDF creation date: 20230125 15:31:48 -0500
- Email date: 20160418 12:16:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene (Fed)"
- Email subject: "RE: CFP v8 - ready to send on"
- Pages: 4
- Bytes: 194612
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing draft CFP.
20160418 12:23:00
file 20231219/RE_ CFP v8 - ready to send on_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:16:50 UTC
- PDF date: 20231212 10:16:48 -0500
- PDF creation date: 20230125 15:31:46 -0500
- Email date: 20160418 12:23:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin"
- Email subject: "RE: CFP v8 - ready to send on"
- Pages: 2
- Bytes: 113605
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics of reviewing draft CFP.
20160418 12:34:35
file 20240827/Post-Quantum Crypto - Call For Submissions - co..._Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 08:49:22 UTC
- Email date: 20160418 12:34:35
- Email from: "Moody, Dustin (Fed)"
- Email to: "Barker, Elaine B. (Fed); Chang, Shu-jen H. (Fed); Kelsey, John M. (Fed); Dworkin, Morris J. (Fed); McKay, KerryA. (Fed); Sonmez Turan, Meltem (Fed); Dang, Quynh H. (Fed); Cooper, David (Fed); Bill Burr(b) (6) Regenscheid, Andrew R. (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Post-Quantum Crypto - Call For Submissions - comments requested"
- Pages: 22
- Bytes: 526379
Notes from djb, last edited 20241002 20:43:30 UTC:
Asking more people to review call for proposals.
20160418 14:49:00 UTC
file 20231219/CFP v8 - ready to send on_3.pdf-attachment-CFP v8.docx:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:19:46 UTC
- XML date: 20160418 14:49:00 UTC
- XML creation date: 20160418 14:47:00 UTC
- Title: "Announcing Request for Proposals for Quantum-Resistant Cryptographic Algorithms"
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 63707
Notes from djb, last edited 20240112 23:05:08 UTC:
Draft of CFP.
20160420 19:25:00 UTC
file 20240827/NISTIR 8105 -- Coordinating release with Public....pdf-attachment-NIST.IR.8105.docx:
- FOIA delivery date: 20240827
- FOIA file date: 20240723 13:19:54 UTC
- XML date: 20160420 19:25:00 UTC
- XML creation date: 20160420 19:19:00 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Foti, James (Fed)"
- Pages: 15
- Bytes: 153782
Notes from djb, last edited 20241002 20:43:30 UTC:
Some version of NISTIR 8105.
20160422 09:11:26
file 20240215/Re_ Background for Korea Trade Mission_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:03:48 UTC
- PDF date: 20240207 13:03:46 -0500
- PDF creation date: 20230125 15:30:55 -0500
- Email date: 20160422 09:11:26
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Rhee, Sokwoo (Fed); Delak, Katya M. (Fed)"
- Email cc: "Sedgewick, Adam (Fed)"
- Email subject: "Re: Background for Korea Trade Mission"
- Pages: 2
- Bytes: 171956
Notes from djb, last edited 20240225 11:49:06 UTC:
General Korea coordination.
"Moving forward in the future we would like to coordinate with Korea in development of new encryption
technologies for Quantum Resistant Encryption."
20160422 09:11:26
file 20240325/Re_ Background for Korea Trade Mission_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:21:28 UTC
- PDF date: 20240315 14:21:26 -0400
- PDF creation date: 20230126 11:43:58 -0500
- Email date: 20160422 09:11:26
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Rhee, Sokwoo (Fed); Delak, Katya M. (Fed)"
- Email cc: "Sedgewick, Adam (Fed)"
- Email subject: "Re: Background for Korea Trade Mission"
- Pages: 2
- Bytes: 171713
Notes from djb, last edited 20240417 22:58:35 UTC:
"Adam has more data on Korea specifically but;"
"In reference to cybersecurity, the US and Korea: (My pitch)"
"NIST works with NSRI in Korea and hosts guest researchers at NIST from NSRI in cooperation areas of
cryptographic testing, test tools and test metrics.
We would like to coordinate with KAT in the US Cybersecurity Framework and is interested in other areas of
cloud computing, IOT and mobile security.
Moving forward in the future we would like to coordinate with Korea in development of new encryption
technologies for Quantum Resistant Encryption."
20160425 08:06:44
file 20240325/RE_ Draft meeting minutes_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:40:56 UTC
- PDF date: 20240315 14:40:54 -0400
- PDF creation date: 20230126 12:10:21 -0500
- Email date: 20160425 08:06:44
- Email from: "Keller, Sharon (Fed)"
- Email to: "Cooper, Michael Joseph (Fed)"
- Email cc: "Keller, Sharon (Fed); Chen, Lily (Fed)"
- Email subject: "RE: Draft meeting minutes"
- Pages: 1
- Bytes: 176909
Notes from djb, last edited 20240417 22:58:35 UTC:
"Elaine sent out the meeting notes for the NIST-NSA TWG Meeting from last week. Under the section
“SP800-56A revision”, the following bullet was included:
o The IKE groups will be approved for the ephemeral-ephemeral schemes, probably by
listing in FIPS 140 Annex A.
I wasn’t sure if this was similar to the XPN issue. Is FIPS140 Annex A supposed to be used for this or is
this something that needs to be added to an SP?
It’s possible it’s ok, I just wanted to get your opinion.
Please let me know what you think."
#nsa
20160425 11:29:00
file 20240325/RE_ PQC updates_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:52:04 UTC
- PDF date: 20240318 13:52:02 -0400
- PDF creation date: 20230126 14:35:32 -0500
- Email date: 20160425 11:29:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "RE: PQC updates"
- Pages: 1
- Bytes: 134271
Notes from djb, last edited 20240417 22:58:35 UTC:
"10am"
Context: A talk by Jerry Solinas on 3 May 2016.
#nsa
20160426 03:20:18
file 20240827/NISTIR 8105 -- Coordinating release with Public....pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240723 13:19:54 UTC
- PDF date: 20240723 15:19:52 -0400
- PDF creation date: 20230126 13:59:53 -0500
- Email date: 20160426 03:20:18
- PDF attachments: "NIST.IR.8105.docx"; "NIST.IR.8105.pdf"
- Email from: "Foti, James (Fed)"
- Email to: "techpubs"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "NISTIR 8105 -- Coordinating release with Public Affairs"
- Pages: 1
- Bytes: 456727
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing publication and press for NISTIR 8105.
20160426 15:18:44 -0400
file 20240827/NISTIR 8105 -- Coordinating release with Public....pdf-attachment-NIST.IR.8105.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240723 13:19:54 UTC
- PDF date: 20160426 15:18:44 -0400
- PDF creation date: 20160420 15:25:23 -0400
- PDF author: "Lily Chen"
- PDF title: "Report on Post-Quantum Cryptography"
- PDF subject: "In recent years, there has been a substantial amount of research on quantum computers – machines that exploit quantum mechanical phenomena to solve mathematical problems that are difficult or intractable for conventional computers. If large-scale quantum computers are ever built, they will be able to break many of the public-key cryptosystems currently in use. This would seriously compromise the confidentiality and integrity of digital communications on the Internet and elsewhere. The goal of post-quantum cryptography (also called quantum-resistant cryptography) is to develop cryptographic systems that are secure against both quantum and classical computers, and can interoperate with existing communications protocols and networks. This Internal Report shares the National Institute of Standards and Technology (NIST)’s current understanding about the status of quantum computing and post-quantum cryptography, and outlines NIST’s initial plan to move forward in this space. The report also recognizes the challenge of moving to new cryptographic infrastructures and therefore emphasizes the need for agencies to focus on crypto agility."
- PDF keywords: ""post-quantum cryptography; public key cryptography; quantum computing; quantum-resistant; quantum-safe""
- Pages: 15
- Bytes: 199518
Notes from djb, last edited 20241002 20:43:30 UTC:
Looks like final version of NISTIR 8105.
20160427 01:41:38
file 20240325/X9F1 request_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:40:08 UTC
- PDF date: 20240319 14:40:06 -0400
- PDF creation date: 20230126 16:04:53 -0500
- Email date: 20160427 01:41:38
- Email from: "Barker, Elaine B. (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "X9F1 request"
- Pages: 1
- Bytes: 85438
Notes from djb, last edited 20240417 22:58:35 UTC:
"Heads up: Terence Spies will be contacting you about arranging a webinar (or whatever) for X9F1 on post-
quantum activities."
20160427 03:17:26
file 20240827/Re_ Current KMAC document in Word_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 09:01:18 UTC
- Email date: 20160427 03:17:26
- Email from: "Chang, Shu-jen H. (Fed)"
- Email to: "Dang, Quynh H. (Fed); Sonmez Turan, Meltem (Fed); Perlner, Ray A. (Fed); Chang, Shu-jen H. (Fed); Kelsey,John M. (Fed); internal-hash"
- Email cc: "(b) (6)"
- Email subject: "Re: Current KMAC document in Word"
- Pages: 4
- Bytes: 162210
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing KMAC.
20160427 08:31:42 -0400
file 20221014/NIST.IR.8105.pdf:
- FOIA delivery date: 20221014
- FOIA file date: 20220823 19:00:00 UTC
- PDF date: 20160427 08:31:42 -0400
- PDF creation date: 20160420 15:25:23 -0400
- PDF author: "Lily Chen"
- PDF title: "Report on Post-Quantum Cryptography"
- PDF subject: "In recent years, there has been a substantial amount of research on quantum computers – machines that exploit quantum mechanical phenomena to solve mathematical problems that are difficult or intractable for conventional computers. If large-scale quantum computers are ever built, they will be able to break many of the public-key cryptosystems currently in use. This would seriously compromise the confidentiality and integrity of digital communications on the Internet and elsewhere. The goal of post-quantum cryptography (also called quantum-resistant cryptography) is to develop cryptographic systems that are secure against both quantum and classical computers, and can interoperate with existing communications protocols and networks. This Internal Report shares the National Institute of Standards and Technology (NIST)’s current understanding about the status of quantum computing and post-quantum cryptography, and outlines NIST’s initial plan to move forward in this space. The report also recognizes the challenge of moving to new cryptographic infrastructures and therefore emphasizes the need for agencies to focus on crypto agility."
- PDF keywords: ""post-quantum cryptography; public key cryptography; quantum computing; quantum-resistant; quantum-safe""
- Pages: 15
- Bytes: 199673
20160428 09:02:00
file 20240827/RE_ Post-Quantum Crypto - Call For Submissions ...(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:54:00 UTC
- Email date: 20160428 09:02:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chang, Shu-jen H. (Fed)"
- Email subject: "RE: Post-Quantum Crypto - Call For Submissions - comments requested"
- Pages: 2
- Bytes: 121328
Notes from djb, last edited 20241002 20:43:30 UTC:
"Thank you so much for taking the time to go through it. We really appreciate it."
20160429 01:38:57
file 20240827/Re_ Post-Quantum Crypto - Call For Submissions ..._Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:56:16 UTC
- Email date: 20160429 01:38:57
- Email from: "David A. Cooper"
- Email to: "Barker, Elaine B. (Fed); Sonmez Turan, Meltem (Fed); Moody, Dustin (Fed); Chang, Shu-jen H. (Fed); Kelsey,John M. (Fed); Dworkin, Morris J. (Fed); McKay, Kerry A. (Fed); Dang, Quynh H. (Fed); Bill Burr(b) (6) Regenscheid, Andrew R. (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: Post-Quantum Crypto - Call For Submissions - comments requested"
- Pages: 24
- Bytes: 3804908
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing early draft of call for proposals.
20160429 03:51:50
file 20240318/Re_ PQC in the FRN_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:08:28 UTC
- PDF date: 20240314 12:08:25 -0400
- PDF creation date: 20230126 14:31:05 -0500
- Email date: 20160429 03:51:50
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: PQC in the FRN"
- Pages: 1
- Bytes: 122166
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes, we reached out to the lawyers earlier this week. After some discussion, it would be
premature to send them a copy of the draft FRN for review, but we're trying to set up a
meeting with them to go over the main points. We think that will speed up the review
process."
20160429 15:10:16 UTC
file 20221003/AWACS-PQC-2016-04282016 RayComments.pptx:
- FOIA delivery date: 20221003
- FOIA file date: 20220826 15:52:00 UTC
- XML date: 20160429 15:10:16 UTC
- XML creation date: 20151116 14:26:06 UTC
- Author: "Lily Lidong Chen"
- Title: "Post-Quantum Cryptography Standardization"
- XML creator: "Chen, Lily"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 17
- Bytes: 450486
Notes from djb, last edited 20230625 17:50:02 UTC:
Draft slides for a public talk.
Includes a few editing comments from Ray Perlner.
"Since 2012":
"Bi-weekly post-quantum cryptography
seminars";
"Guest researchers and invited
speakers";
"Research publications and
presentations";
"Participation in international projects and activities"
#weveshownallourwork
"It will be an open procedure":
In fact,
the public wasn't able to see the
bi-weekly seminars,
the invited talks,
the NSA input,
etc.,
before or after the competition began.
#claimingtransparency
20160502 01:59:00
file 20240318/link regarding ntrumls_pqntrusign_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:34:32 UTC
- PDF date: 20240313 14:34:30 -0400
- PDF creation date: 20230126 13:36:10 -0500
- Email date: 20160502 01:59:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "link regarding ntrumls/pqntrusign"
- Pages: 1
- Bytes: 79912
Notes from djb, last edited 20240417 22:58:35 UTC:
Sending link to John Schanck's thesis
"Practical Lattice Cryptosystems:
NTRUEncrypt and NTRUMLS".
20160503 08:51:00
file 20240827/SC27 study period on quantum computing resistan..._Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:58:08 UTC
- Email date: 20160503 08:51:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Daniel Smith(b) (6)"
- Email subject: "SC27 study period on quantum computing resistant cryptography"
- Pages: 8
- Bytes: 375832
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding ISO documents.
20160504 02:12:28
file 20240325/Re_ news_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:09:22 UTC
- PDF date: 20240318 13:09:21 -0400
- PDF creation date: 20230126 13:48:59 -0500
- Email date: 20160504 02:12:28
- Email from: "Moody, Dustin (Fed)"
- Email to: "Jordan, Stephen P (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed)"
- Email subject: "Re: news"
- Pages: 1
- Bytes: 168727
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing the word "boffin".
20160505 01:08:32
file 20240311/Key establishment_agreement_transport in the PQ..._2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:42:30 UTC
- PDF date: 20240307 13:42:29 -0500
- PDF creation date: 20230126 13:29:35 -0500
- Email date: 20160505 01:08:32
- PDF attachments: "CFP v9.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Barker, Elaine B. (Fed)"
- Email subject: "Key establishment/agreement/transport in the PQC Call"
- Pages: 1
- Bytes: 163251
Notes from djb, last edited 20240311 19:56:24 UTC:
"Thanks again for your comments on our PQC call for submissions. We’ve been working through the
comments, and I wanted to take you up on your offer to help with the terminology we use for key-
exchange in the call. We understand that we probably should use the correct terms from 56A/B,
however, we worry that many of our target audience are not as familiar with the term key
agreement as they are with key exchange. So we wonder what we should do. If would be nice to use
key exchange if we can, as more people understand what we mean by that.
Also, we are seeking to replace our key establishment algorithms from 56A/B. Currently, there is not
a good option for a direct replacement for Diffie-Hellman. We’re still asking for key exchange (key
agreement), because it would be nice if someone comes up with a good scheme, however it might
not happen. The main reason we’re asking for PQC encryption is to use it for key transport, as we are
not sure we will have a good PQC key agreement scheme. We don’t want to standardize PQC
encryption for general encryption usage.
Having said that, would you mind going through the document once again and suggesting what
terms to use for key establishment/agreement/transport? I left your comments about them in place,
so you should hopefully be able to find the right spots quickly."
20160505 01:12:45
file 20240325/_Shall_ vs _must_ in the PQC CFP_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 10:42:44 UTC
- PDF date: 20240319 11:42:43 -0400
- PDF creation date: 20230126 10:37:21 -0500
- Email date: 20160505 01:12:45
- PDF attachments: "CFP v9.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene C. (Fed)"
- Email subject: ""Shall" vs "must" in the PQC CFP"
- Pages: 1
- Bytes: 159055
Notes from djb, last edited 20240417 22:58:35 UTC:
"A few of the comments we received back last week dealt with using the terms “shall” and “must”. I
believe “shall” has a very strict meaning for our standards documents. To my mind, the word “must”
means the same thing, but maybe isn’t quite as strong. In the attached (cleaned-up) version of the
CFP, we have 60 uses of “shall” and 19 of “must”. Can everyone search through the document, using
CONTROL+F, and see if any of the “shall”s or “must”s cause us any problems? Or if we should switch
any of the “shall”s to “must”s, or even to “should”? I read through them all, and they seemed fine to
me."
20160505 01:21:53
file 20240325/Re_ quick PQC CFP question_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 12:46:26 UTC
- PDF date: 20240315 13:46:24 -0400
- PDF creation date: 20230126 15:11:38 -0500
- Email date: 20160505 01:21:53
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: quick PQC CFP question"
- Pages: 1
- Bytes: 125694
Notes from djb, last edited 20240417 22:58:35 UTC:
"You can specify that it should be a plain text file."
20160505 01:36:32
file 20240325/RE_ PQC talks_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:48:40 UTC
- PDF date: 20240318 13:48:39 -0400
- PDF creation date: 20230126 14:35:18 -0500
- Email date: 20160505 01:36:32
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Jordan, Stephen P (Fed)"
- Email cc: "Chen, Lily (Fed); Peralta, Rene C. (Fed)"
- Email subject: "RE: PQC talks"
- Pages: 2
- Bytes: 147367
Notes from djb, last edited 20240417 22:58:35 UTC:
"I’m not opposed to trying this out. It would be great to spread out the workload. However, I worry
that not everyone will read the paper, and then the meeting won’t be very effective. Perhaps we can
discuss this on Tuesday, and set a schedule for which papers on which days."
From an earlier message:
"We can probably start resuming our meetings with the NSA, where we have someone talk on a
topic/paper. They are going to get several talks prepared, and we need to do the same here."
Other comments show that NIST generally expected only one person to go through a paper.
No apparent recognition of how error-prone this is.
#nsa
20160505 01:37:00
file 20240311/RE_ Key establishment_agreement_transport in th..._1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:42:04 UTC
- PDF date: 20240307 13:42:03 -0500
- PDF creation date: 20230126 13:29:33 -0500
- Email date: 20160505 01:37:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Barker, Elaine B. (Fed)"
- Email subject: "RE: Key establishment/agreement/transport in the PQC Call"
- Pages: 1
- Bytes: 114997
Notes from djb, last edited 20240311 19:56:24 UTC:
"That sounds good."
20160505 03:52:52
file 20240318/PQC_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:32:00 UTC
- PDF date: 20240314 13:31:57 -0400
- PDF creation date: 20230126 14:26:26 -0500
- Email date: 20160505 03:52:52
- PDF attachments: "ebb suggestions for CFP v9.docx"
- Email from: "Barker, Elaine B. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "PQC"
- Pages: 1
- Bytes: 175132
Notes from djb, last edited 20240417 22:58:35 UTC:
"There are some issues that I’m not sure about; see my questions."
20160505 10:46:17
file 20240325/Re_ travel to ETSI workshop in Toronto_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 12:48:56 UTC
- PDF date: 20240319 13:48:55 -0400
- PDF creation date: 20230126 15:48:08 -0500
- Email date: 20160505 10:46:17
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Boisvert, Ronald F. (Fed)"
- Email subject: "Re: travel to ETSI workshop in Toronto?"
- Pages: 2
- Bytes: 109117
Notes from djb, last edited 20240417 22:58:35 UTC:
Travel approvals.
20160505 11:11:27
file 20240325/Fw_ travel to ETSI workshop in Toronto_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 12:48:36 UTC
- PDF date: 20240319 13:48:35 -0400
- PDF creation date: 20230126 15:48:06 -0500
- Email date: 20160505 11:11:27
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Graham, Catherine J. (Fed)"
- Email subject: "Fw: travel to ETSI workshop in Toronto?"
- Pages: 2
- Bytes: 109916
Notes from djb, last edited 20240417 22:58:35 UTC:
Travel approvals.
20160505 17:00:00 UTC
file 20240311/Key establishment_agreement_transport in the PQ..._2.pdf-attachment-CFP v9.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:42:30 UTC
- XML date: 20160505 17:00:00 UTC
- XML creation date: 20160502 16:07:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 69803
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20160505 17:00:00 UTC
file 20240325/_Shall_ vs _must_ in the PQC CFP_2.pdf-attachment-CFP v9.docx:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 10:42:44 UTC
- XML date: 20160505 17:00:00 UTC
- XML creation date: 20160502 16:07:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 69803
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160505 19:50:00 UTC
file 20240318/PQC_2.pdf-attachment-ebb suggestions for CFP v9.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:32:00 UTC
- XML date: 20160505 19:50:00 UTC
- XML creation date: 20160505 18:19:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Barker, Elaine B."
- Pages: 21
- Bytes: 86952
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160506 01:06:45
file 20240726/RE_ Oscar Garcia Morchon.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 10:35:38 UTC
- PDF date: 20240723 12:35:37 -0400
- PDF creation date: 20230126 14:10:46 -0500
- Email date: 20160506 01:06:45
- Email from: "Sonmez Turan, Meltem (Assoc)"
- Email to: "Smith-Tone, Daniel C. (Fed)"
- Email subject: "RE: Oscar Garcia Morchon"
- Pages: 1
- Bytes: 122003
Notes from djb, last edited 20240801 23:15:11 UTC:
"When is he available ? Is he in the DC area?"
Down thread:
"Oscar is the HIMMO guy. He is wanting to come and give a presentation at NIST, and we
thought it might be nice if we could fit it in while I'm here. Is there some time in the next
couple of weeks that would work to invite him? His HIMMO thing is being advertised as
lightweight and post-quantum."
20160506 02:10:00
file 20240318/RE_ PQC_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:30:48 UTC
- PDF date: 20240314 13:30:46 -0400
- PDF creation date: 20230126 14:26:24 -0500
- Email date: 20160506 02:10:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Barker, Elaine B. (Fed)"
- Email subject: "RE: PQC"
- Pages: 1
- Bytes: 108493
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for going through it, and helping us with the terminology. I think your suggestions should
work pretty well. We (the PQC team) will meet next Tuesday and review them."
20160506 09:32:00
file 20240726/latest version of PQC Call.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 11:29:14 UTC
- PDF date: 20240723 13:29:13 -0400
- PDF creation date: 20230126 13:32:39 -0500
- Email date: 20160506 09:32:00
- PDF attachments: "CFP v9.1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "latest version of PQC Call"
- Pages: 1
- Bytes: 147205
Notes from djb, last edited 20240801 23:15:11 UTC:
"I don’t know if the lawyers need the latest version of the Call or not. I’ve attached it. There are no
major changes, but we did make several of the suggestions sent to us by the rest of our group."
20160506 11:05:50
file 20240325/Re_ _Shall_ vs _must_ in the PQC CFP_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 10:42:14 UTC
- PDF date: 20240319 11:42:12 -0400
- PDF creation date: 20230126 10:37:20 -0500
- Email date: 20160506 11:05:50
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Peralta, Rene C. (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed);Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "Re: "Shall" vs "must" in the PQC CFP"
- Pages: 2
- Bytes: 117385
Notes from djb, last edited 20240417 22:58:35 UTC:
"This is more of a stylistic issue, but I think it's not great to overuse "shall" and "must," because then
people stop paying attention to them. I wonder if we can use "will" when talking about minor details,
and only use "shall" and "must" when it's really important?"
"For instance, in the first sentence of a paragraph, use "shall": submitter SHALL include a complete
description of the algorithms. But in the rest of the paragraph, use "will": this description WILL
include a list of recommended parameter settings, etc."
"Obviously this is a judgement call..."
"Other specific notes:"
"- On page 1, "Submission packages should be sent to:" -> SHALL"
"- On page 7, "a set of KAT vectors shall be included to exercise every table entry" -> maybe we want
to relax this requirement? This requirement makes sense when we're talking about S-boxes, but may
be tedious and unhelpful when it's a lookup table for sampling from a gaussian distribution."
"- In general, I think we should leave the designers a fair amount of freedom in how they design the
KAT tests, since it will probably vary a lot from one scheme to another. Maybe we can just have one
strongly-worded sentence at the beginning: "Each scheme must be accompanied by a complete set
of KATs that exercise all functionalities, all parameter settings and all sub-components of the
scheme. Completeness of the KATs will be considered in evaluating the suitability of the scheme."
After that, we give specific but non-binding advice using the word "should." "
"Obviously this is also a judgement call..."
20160506 12:17:38
file 20240318/RE_ polishing the CFP(1)_4.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:27:54 UTC
- PDF date: 20240314 10:27:51 -0400
- PDF creation date: 20230126 14:20:32 -0500
- Email date: 20160506 12:17:38
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: polishing the CFP"
- Pages: 1
- Bytes: 117052
Notes from djb, last edited 20240417 22:58:35 UTC:
"I’ll ask Stephen to polish.
I agree with what you said about Shall’s, etc. I will make those changes. As for the key
establishment/agreement/exchange, I am waiting to hear Lily’s opinion."
20160506 13:28:00 UTC
file 20240318/RE_ polishing the CFP_3.pdf-attachment-CFP v9.1.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:27:34 UTC
- XML date: 20160506 13:28:00 UTC
- XML creation date: 20160506 13:27:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 67735
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160506 13:28:00 UTC
file 20240726/latest version of PQC Call.pdf-attachment-CFP v9.1.docx:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 11:29:14 UTC
- XML date: 20160506 13:28:00 UTC
- XML creation date: 20160506 13:27:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 67735
20160506 18:04:00 UTC
file 20240311/FW_ First FRN asking for comments on PQC requir..._1.pdf-attachment-RFC on PQC in FRN.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:33:28 UTC
- XML date: 20160506 18:04:00 UTC
- XML creation date: 20160506 16:47:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 5
- Bytes: 32236
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft Federal Register notice.
20160508
file 20230105/AWACS-PQC-2016-05082016.pdf:
- FOIA delivery date: 20230105
- FOIA file date: 20221025 06:45:46 UTC
- PDF date: 20220907 21:36:10 -0400
- PDF creation date: 20220907 21:35:53 -0400
- Date: 20160508
- Author: "Lily Lidong Chen"
- PDF author: "Chen, Lily"
- Title: "NIST Post-Quantum Cryptography Standardization"
- PDF title: "Challenges in Post Quantum Cryptography Standardization"
- Pages: 19
- Bytes: 181173
Notes from djb, last edited 20230625 17:50:02 UTC:
Slides of a public talk given 2016.05.08.
"It will be an open procedure"
#claimingtransparency
"NIST will encourage public analysis on the submitted algorithms"
"For interoperability reasons,
we do not want to select too many algorithms for each function"
"Quantum Security" of
"80 bits" for "SHA256/SHA3-256 (collision)":
#error
NIST radically changed this evaluation later.
20160510 03:23:00
file 20240311/FW_ First FRN asking for comments on PQC requir..._1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:33:28 UTC
- PDF date: 20240307 10:33:26 -0500
- PDF creation date: 20230126 12:22:33 -0500
- Email date: 20160510 03:23:00
- PDF attachments: "RFC on PQC in FRN.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew (Fed)"
- Email subject: "FW: First FRN asking for comments on PQC requirements/criteria"
- Pages: 1
- Bytes: 142281
Notes from djb, last edited 20240311 19:56:24 UTC:
"I was just checking that you got this. Is there anything I should change? We probably need to move
quick on it still, so that it’s in the FRN in June."
Previous message:
"Okay, I used the SHA-3 request for comments and the template I had for the FIPS 186 FRN to create
the attached document. It basically asks for comments and says the requirements and criteria will be
posted at www.nist.gov/pqcrypto. Take a look, and let me know what to change."
20160510 03:28:34
file 20240318/Re_ polishing the CFP(1)_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:27:16 UTC
- PDF date: 20240314 10:27:14 -0400
- PDF creation date: 20230126 14:20:28 -0500
- Email date: 20160510 03:28:34
- PDF attachments: "CFP v9.2.docx"
- Email from: "Jordan, Stephen P (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: polishing the CFP"
- Pages: 2
- Bytes: 199467
Notes from djb, last edited 20240417 22:58:35 UTC:
"I have given a once-over to the cfp and attached the result (with changes tracked). Most of the
changes were minor, with the most substantial change being to the section about defining bits
of quantum security. In that section, some of the sentences seemed extremely confusing, so I
simplified the discussion somewhat, at the risk of losing some of the original intended nuance.
So, I think, amongst my modifications, those are the ones that should be looked at the most
carefully."
"The level of formality still varies somewhat from section to section, but I was reluctant to do
too much heavy rewriting at this point considering that many of the sentences are the result
of negotiation and consensus-reaching at previous meetings."
This comes from previous discussion of editing the document
"so it doesn’t appear so much that it was written by different people".
20160510 08:00:00
file 20240318/RE_ polishing the CFP_3.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:27:34 UTC
- PDF date: 20240314 10:27:31 -0400
- PDF creation date: 20230126 14:20:30 -0500
- Email date: 20160510 08:00:00
- PDF attachments: "CFP v9.1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "RE: polishing the CFP"
- Pages: 1
- Bytes: 180480
Notes from djb, last edited 20240417 22:58:35 UTC:
Sending draft CFP upon request.
20160510 19:23:00 UTC
file 20240318/Re_ polishing the CFP(1)_2.pdf-attachment-CFP v9.2.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:27:16 UTC
- XML date: 20160510 19:23:00 UTC
- XML creation date: 20160510 17:46:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Jordan, Stephen P (Fed)"
- Pages: 22
- Bytes: 71754
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160511 09:50:40
file 20240318/Re_ polishing the CFP_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:26:38 UTC
- PDF date: 20240314 10:26:36 -0400
- PDF creation date: 20230126 14:20:26 -0500
- Email date: 20160511 09:50:40
- Email from: "Moody, Dustin (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: polishing the CFP"
- Pages: 3
- Bytes: 129066
Notes from djb, last edited 20240417 22:58:35 UTC:
"I see them."
20160512 01:46:47
file 20240325/Target Security Strength section_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 12:38:46 UTC
- PDF date: 20240319 13:38:44 -0400
- PDF creation date: 20230126 15:39:32 -0500
- Email date: 20160512 01:46:47
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Target Security Strength section"
- Pages: 2
- Bytes: 159764
Notes from djb, last edited 20240417 22:58:35 UTC:
"Stephen modified the last couple of paragraphs of section 4.A.4. His changes appear fine to
me. I’ve included the text of the section below. Let me know if you have any problems with it."
20160512 10:06:01
file 20240311/FRN comments_3.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:14:00 UTC
- PDF date: 20240307 13:13:58 -0500
- PDF creation date: 20230126 12:27:32 -0500
- Email date: 20160512 10:06:01
- PDF attachments: "RFC on PQC in FRN-arr.docx"
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "FRN comments"
- Pages: 1
- Bytes: 117685
Notes from djb, last edited 20240311 19:56:24 UTC:
"I've attached a few comments on your RFC. I think it's in pretty good shape. I have a few
editorial suggestions, but they're fairly minor. Are you going to send this around to the PQC
team?"
20160512 13:59:00 UTC
file 20240311/FRN comments_3.pdf-attachment-RFC on PQC in FRN-arr.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:14:00 UTC
- XML date: 20160512 13:59:00 UTC
- XML creation date: 20160512 13:55:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Regenscheid, Andrew (Fed)"
- Pages: 6
- Bytes: 35248
Notes from djb, last edited 20240311 19:56:24 UTC:
Editing draft Federal Register notice.
20160512 15:53:00 UTC
file 20240311/Re_ FRN comments_2.pdf-attachment-RFC on PQC in FRN v2.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:13:34 UTC
- XML date: 20160512 15:53:00 UTC
- XML creation date: 20160512 15:53:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 6
- Bytes: 32635
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft Federal Register notice.
20160512 15:53:00 UTC
file 20240318/RE_ PQC Request for Comments for the FRN_1.pdf-attachment-RFC on PQC in FRN v2.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:27:34 UTC
- XML date: 20160512 15:53:00 UTC
- XML creation date: 20160512 15:53:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 6
- Bytes: 32635
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FRN.
20160513 15:47:58 +0200
file 20240726/Re_ question about Quantum Communications appli..._1.pdf-attachment-93056_Quantum Manifesto_WEB.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240611 09:29:40 UTC
- PDF date: 20160513 15:47:58 +0200
- PDF creation date: 20160513 15:47:48 +0200
- PDF author: "Studio Dumbar"
- Pages: 20
- Bytes: 2045909
20160516 07:59:13
file 20240318/Re_ NIST IR 8105_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 14:20:22 UTC
- PDF date: 20240313 15:20:20 -0400
- PDF creation date: 20230126 13:53:02 -0500
- Email date: 20160516 07:59:13
- Email from: "Peralta, Rene (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: NIST IR 8105"
- Pages: 1
- Bytes: 111968
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing reusing the "port-quantum IR" for "a Beacon IR".
20160516 12:03:04
file 20240827/Talk.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240809 10:11:20 UTC
- PDF date: 20240809 12:11:18 -0400
- PDF creation date: 20230126 15:39:17 -0500
- Email date: 20160516 12:03:04
- Email from: "Smith-Tone, Daniel (Fed)"
- Email to: "Sonmez Turan, Meltem (Fed)"
- Email subject: "Talk"
- Pages: 2
- Bytes: 123143
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding talk announcement.
Looks like the abstract was Daniel Smith-Tone copying from a paper on HIMMO:
"This is entirely made up. It could be the case that he talks about Mickey Mouse. I actually
have no clue."
20160517 09:12:10
file 20240318/RE_ PQC Request for Comments for the FRN_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:27:34 UTC
- PDF date: 20240314 12:27:31 -0400
- PDF creation date: 20230126 14:34:10 -0500
- Email date: 20160517 09:12:10
- PDF attachments: "RFC on PQC in FRN v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Scholl, Matthew A. (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed);Peralta, Rene C. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "RE: PQC Request for Comments for the FRN"
- Pages: 1
- Bytes: 156495
Notes from djb, last edited 20240417 22:58:35 UTC:
"Just a reminder – I need any comments back by the COB today."
20160518 02:35:08
file 20240726/Re_ Hybrid Modes.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240722 10:50:00 UTC
- PDF date: 20240722 12:49:58 -0400
- PDF creation date: 20230126 13:00:57 -0500
- Email date: 20160518 02:35:08
- Email from: "Dworkin, Morris J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Hybrid Modes"
- Pages: 1
- Bytes: 124722
Notes from djb, last edited 20240801 23:15:11 UTC:
"Thanks for the invitation; I’ll plan to come in for the meeting."
20160518 07:05:17
file 20240311/Re_ FRN comments_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:13:34 UTC
- PDF date: 20240307 13:13:31 -0500
- PDF creation date: 20230126 12:27:30 -0500
- Email date: 20160518 07:05:17
- PDF attachments: "RFC on PQC in FRN v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: FRN comments"
- Pages: 1
- Bytes: 153463
Notes from djb, last edited 20240311 19:56:24 UTC:
"I didn't too much feedback on the attached RFC for the FRN, but I think it's in good shape. Can
you send it to Jennifer? We'd like to have this go out sometime in June."
20160518 08:05:00
file 20240726/RE_ Hybrid mode.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240722 10:50:28 UTC
- PDF date: 20240722 12:50:27 -0400
- PDF creation date: 20230126 13:00:55 -0500
- Email date: 20160518 08:05:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin"
- Email subject: "RE: Hybrid mode"
- Pages: 1
- Bytes: 110574
Notes from djb, last edited 20240801 23:15:11 UTC:
Planning meeting to discuss NSA comments on CFP, and to discuss hybrids.
#nsa
20160523 09:06:00
file 20240325/Reading Club talk June 8_4.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:18:28 UTC
- PDF date: 20240318 14:18:26 -0400
- PDF creation date: 20230126 15:17:54 -0500
- Email date: 20160523 09:06:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Dworkin, Morris J. (Fed)"
- Email subject: "Reading Club talk June 8"
- Pages: 1
- Bytes: 103323
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here's the abstract:"
"In the last few years multivariate public key cryptography has experienced an infusion of new ideas for encryption.
Among these new strategies is the ABC Simple Matrix family of encryption schemes which utilize the structure of a
large matrix algebra to construct effectively invertible systems of nonlinear equations hidden by an isomorphism of
polynomials. The cubic version of the ABC Simple Matrix Encryption was developed with provable security in
mind and was published including a heuristic security argument claiming that an attack on the scheme should be at
least as difficult as solving a random system
of quadratic equations over a finite field.
In this work, we prove that these claims are erroneous. We present a complete key recovery attack breaking full
sized instances of the scheme. Interestingly, the same attack applies to the quadratic version of ABC, but is far less
efficient; thus, the enhanced security scheme is less secure than the original."
20160524 01:01:00
file 20240318/PQC CFP draft_4.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:43:24 UTC
- PDF date: 20240314 10:43:21 -0400
- PDF creation date: 20230126 14:29:58 -0500
- Email date: 20160524 01:01:00
- PDF attachments: "CFP v9.3.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Dang, Quynh (Fed)"
- Email subject: "PQC CFP draft"
- Pages: 1
- Bytes: 147911
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for agreeing to re-word the part of the CFP dealing with hybrid modes. It’s in the middle of p3."
20160524 01:09:17
file 20240318/PQC CFP_3.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:43:04 UTC
- PDF date: 20240314 10:43:02 -0400
- PDF creation date: 20230126 14:29:49 -0500
- Email date: 20160524 01:09:17
- PDF attachments: "CFP v9.3.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "PQC CFP"
- Pages: 1
- Bytes: 181370
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here’s what you “volunteered” to take a look at:
- The NSA’s comment on section 2.B.1 paragraph 3. I believe you wanted to add something
- Section 2.B.1 paragraph 5. Did you want to give any examples of compatibility constructs?
- Any changes to the security section that you and Ray come up with."
#nsa
20160524 02:17:23
file 20240318/Minimal edits to make quantum security section ..._3.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:49:16 UTC
- PDF date: 20240313 14:49:15 -0400
- PDF creation date: 20230126 13:42:47 -0500
- Email date: 20160524 02:17:23
- PDF attachments: "CFP v9.3_RayEditsOn4a.4.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Minimal edits to make quantum security section self consistent."
- Pages: 1
- Bytes: 125992
Notes from djb, last edited 20240417 22:58:35 UTC:
Editing draft of CFP.
20160524 11:22:04
file 20240325/Raison d'etre Calik_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 12:50:10 UTC
- PDF date: 20240315 13:50:08 -0400
- PDF creation date: 20230126 15:12:44 -0500
- Email date: 20160524 11:22:04
- Email from: "Peralta, Rene (Fed)"
- Email to: "Calik, Cagdas (IntlAssoc); Sonmez Turan, Meltem (Fed)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Raison d"etre Calik"
- Pages: 1
- Bytes: 86338
Notes from djb, last edited 20240417 22:58:35 UTC:
"Dr. Cagdas will leverage his knowledge of complexity theory, algorithmics, and circuit complexity to perform
research in support of the
following projects: lightweight cryptography, post-quantum cryptography,
interactive proofs, and combinational circuit complexity. The outcome of his research will impact the next
generation of cryptographic standards and enhance NIST leadership role in these areas."
20160524 16:59:00 UTC
file 20240318/PQC CFP draft_4.pdf-attachment-CFP v9.3.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:43:24 UTC
- XML date: 20160524 16:59:00 UTC
- XML creation date: 20160524 13:37:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 69135
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160524 16:59:00 UTC
file 20240318/PQC CFP_3.pdf-attachment-CFP v9.3.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:43:04 UTC
- XML date: 20160524 16:59:00 UTC
- XML creation date: 20160524 13:37:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 69135
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160524 18:14:00 UTC
file 20240318/Minimal edits to make quantum security section ..._3.pdf-attachment-CFP v9.3_RayEditsOn4a.4.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:49:16 UTC
- XML date: 20160524 18:14:00 UTC
- XML creation date: 20160524 18:14:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 21
- Bytes: 68889
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160525 01:37:51
file 20240318/PQC talk_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:08:32 UTC
- PDF date: 20240314 13:08:28 -0400
- PDF creation date: 20230126 14:34:52 -0500
- Email date: 20160525 01:37:51
- PDF attachments: "Crypto in PQ world.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed)"
- Email subject: "PQC talk"
- Pages: 1
- Bytes: 1511797
Notes from djb, last edited 20240417 22:58:35 UTC:
"Next week I’ll be giving a talk to the automotive industry about post-quantum cryptography. I’ve
attached my slides. I was hoping someone could take a quick look through them and make sure I am
not saying anything really wrong, since I have a few on quantum computers, which are not my area
of expertise. I used our NIST crypto club talk as a source of inspiration, and took some of the
slides/ideas from that."
20160525 08:42:25
file 20240318/Re_ PQC CFP draft_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:42:34 UTC
- PDF date: 20240314 10:42:32 -0400
- PDF creation date: 20230126 14:29:57 -0500
- Email date: 20160525 08:42:25
- Email from: "Dang, Quynh (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC CFP draft"
- Pages: 2
- Bytes: 155905
Notes from djb, last edited 20240417 22:58:35 UTC:
"That makes sense!"
Context is discussion of hybrids.
20160525 17:33:51 UTC
file 20240318/PQC talk_2.pdf-attachment-Crypto in PQ world.pptx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:08:32 UTC
- XML date: 20160525 17:33:51 UTC
- XML creation date: 20160523 17:58:45 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 20
- Bytes: 1443988
Notes from djb, last edited 20240417 22:58:35 UTC:
Similar to other slides,
but has a line
"How long will a car in the field?",
which makes it a talk for a car conference.
20160526 02:25:42
file 20240325/RE_ Reading Club talk June 8_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:17:56 UTC
- PDF date: 20240318 14:17:54 -0400
- PDF creation date: 20230126 15:17:51 -0500
- Email date: 20160526 02:25:42
- Email from: "Sonmez Turan, Meltem (Assoc)"
- Email to: "Perlner, Ray A. (Fed); Dworkin, Morris J. (Fed)"
- Email subject: "RE: Reading Club talk June 8"
- Pages: 2
- Bytes: 228092
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks Ray and Morrie!"
20160526 07:08:30
file 20240318/Re_ PQC talk_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:08:04 UTC
- PDF date: 20240314 13:08:02 -0400
- PDF creation date: 20230126 14:34:50 -0500
- Email date: 20160526 07:08:30
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "Re: PQC talk"
- Pages: 1
- Bytes: 167440
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for the comments!"
20160526 10:28:09
file 20240325/Re_ PQC API_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:13:24 UTC
- PDF date: 20240318 13:13:23 -0400
- PDF creation date: 20230126 14:27:48 -0500
- Email date: 20160526 10:28:09
- PDF attachments: "image001.png"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: PQC API"
- Pages: 1
- Bytes: 304323
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes, that is correct. Signatures, Encryption, and Key-exchange (for which DH is an example). Ray, correct me if I'm wrong."
20160526 11:03:24
file 20240325/Fwd_ Reading Club talk June 8_3.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:18:08 UTC
- PDF date: 20240318 14:18:07 -0400
- PDF creation date: 20230126 15:17:52 -0500
- Email date: 20160526 11:03:24
- Email from: "Dworkin, Morris J. (Fed)"
- Email to: "Sonmez Turan, Meltem (Fed)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Fwd: Reading Club talk June 8"
- Pages: 2
- Bytes: 174485
Notes from djb, last edited 20240417 22:58:35 UTC:
"Ray already sent me his abstract, below."
20160527 01:59:41
file 20240318/Re_ Minimal edits to make quantum security sect..._1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:48:22 UTC
- PDF date: 20240313 14:48:20 -0400
- PDF creation date: 20230126 13:42:43 -0500
- Email date: 20160527 01:59:41
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: Minimal edits to make quantum security section self consistent."
- Pages: 1
- Bytes: 151137
Notes from djb, last edited 20240417 22:58:35 UTC:
"Great! Dustin, could you take Ray and my changes and merge them into the main document?"
20160527 10:12:00
file 20240318/Re_ PQC CFP_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:42:00 UTC
- PDF date: 20240314 10:41:57 -0400
- PDF creation date: 20230126 14:29:46 -0500
- Email date: 20160527 10:12:00
- PDF attachments: "CFP v9.3 edited YKL.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC CFP"
- Pages: 1
- Bytes: 216934
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here are my changes. For the quantum security section, Ray sent me some edits, I'm going to look at
them now, and will hopefully send them to you soon. Sorry for the delay..."
20160527 12:49:50
file 20240318/Re_ Minimal edits to make quantum security sect...(1)_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:48:58 UTC
- PDF date: 20240313 14:48:55 -0400
- PDF creation date: 20230126 13:42:45 -0500
- Email date: 20160527 12:49:50
- PDF attachments: "CFP v9.3_RayEditsOn4a.4_YKL-Edits.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: Minimal edits to make quantum security section self consistent."
- Pages: 1
- Bytes: 205022
Notes from djb, last edited 20240417 22:58:35 UTC:
"I edited the quantum security section some more."
"- I added some simple advice: if you have a quantum algorithm, report both the time and space
complexity, and if possible, say what is the tradeoff between them. I tried to keep this separate from
the more complicated discussion about how to define quantum bits of security."
"- I said that this is preliminary guidance from NIST, and we will discuss with the community as we go
forward."
"- I said some more about the possibility of defining quantum bits of security with respect to SHA-256
rather than AES-128. (Since we are already doing this in some of our target security strengths.) It is
problematic because these two definitions (SHA vs AES) are not equivalent."
20160527 14:06:00 UTC
file 20240318/Re_ PQC CFP_1.pdf-attachment-CFP v9.3 edited YKL.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:42:00 UTC
- XML date: 20160527 14:06:00 UTC
- XML creation date: 20160524 13:37:00 UTC
- XML creator: "rene"
- XML last-modified-by: "yikailiu"
- Pages: 21
- Bytes: 85875
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
Edit notes have a comment about patents:
"However, NIST recognizes that it may be difficult to find a suitable PQC algorithm that is completely patent-free. (This is in contrast to SHA-3 and AES.)"
What discussions led to this note?
#needmorerecords
#slowingdownpqcrypto
20160527 16:38:00 UTC
file 20240318/Re_ Minimal edits to make quantum security sect...(1)_2.pdf-attachment-CFP v9.3_RayEditsOn4a.4_YKL-Edits.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:48:58 UTC
- XML date: 20160527 16:38:00 UTC
- XML creation date: 20160524 18:14:00 UTC
- XML creator: "rene"
- XML last-modified-by: "yikailiu"
- Pages: 22
- Bytes: 92413
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160531 11:05:03
file 20240726/Latest version of the CFP.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 11:28:48 UTC
- PDF date: 20240723 13:28:47 -0400
- PDF creation date: 20230126 13:33:00 -0500
- Email date: 20160531 11:05:03
- PDF attachments: "CFP v9.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene C. (Fed)"
- Email subject: "Latest version of the CFP"
- Pages: 1
- Bytes: 164628
Notes from djb, last edited 20240801 23:15:11 UTC:
"Hope everyone had a nice long weekend. I’ve attached the latest version of the CFP, which
incorporates some changes to clarify some of the things the NSA comments discussed. Most of them
are minor. The biggest addition is to the quantum security section in 4.A.4, which Ray and Yi-Kai
wrote. We also removed any mention of FIPS or validation when talking about hybrid modes. We can
address that in a FAQ on our website. Let me know if there are any comments on anything. Thanks!"
#nsa
20160531 14:57:00 UTC
file 20240325/Re_ Sample documents for PQC Call For Proposals(10)_4.pdf-attachment-CFP v9.4.docx:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:19:50 UTC
- XML date: 20160531 14:57:00 UTC
- XML creation date: 20160524 13:37:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 22
- Bytes: 68992
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20160531 14:57:00 UTC
file 20240726/Latest version of the CFP.pdf-attachment-CFP v9.4.docx:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 11:28:48 UTC
- XML date: 20160531 14:57:00 UTC
- XML creation date: 20160524 13:37:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 22
- Bytes: 68992
20160601 05:10:34
file 20240827/Re_ Summer Visit to NIST_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:54:52 UTC
- Email date: 20160601 05:10:34
- Email from: "Nicky Mouha"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Re: Summer Visit to NIST"
- Pages: 2
- Bytes: 127447
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing guest researchership with Nicky Mouha.
Several lines of redactions,
presumably not about NIST post-quantum discussions.
20160602 02:27:00
file 20240325/RE_ Sample documents for PQC Call For Proposals(2)_7.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:22:06 UTC
- PDF date: 20240318 15:22:04 -0400
- PDF creation date: 20230126 15:31:11 -0500
- Email date: 20160602 02:27:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Sample documents for PQC Call For Proposals"
- Pages: 2
- Bytes: 159649
Notes from djb, last edited 20240417 22:58:35 UTC:
"sure"
20160602 05:24:56
file 20240325/Re_ Sample documents for PQC Call For Proposals(6)_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:19:04 UTC
- PDF date: 20240318 15:19:02 -0400
- PDF creation date: 20230126 15:31:07 -0500
- Email date: 20160602 05:24:56
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: Sample documents for PQC Call For Proposals"
- Pages: 3
- Bytes: 111503
Notes from djb, last edited 20240417 22:58:35 UTC:
"I just took a quick look at the API. Do we need to provide some mechanism for submitters to specify the lengths of
the public keys and secret keys, and the length of the random input? In EBACS, it looks like submitters will define
these parameters in a header file, but I couldn't find this in Larry's notes."
20160602 05:28:45
file 20240325/Re_ Sample documents for PQC Call For Proposals(5)_3.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:19:20 UTC
- PDF date: 20240318 15:19:18 -0400
- PDF creation date: 20230126 15:31:05 -0500
- Email date: 20160602 05:28:45
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: Sample documents for PQC Call For Proposals"
- Pages: 3
- Bytes: 112335
Notes from djb, last edited 20240417 22:58:35 UTC:
"Also, if you forward this to Larry, tell him thanks for putting this together!"
20160602 10:16:57
file 20240325/Re_ Sample documents for PQC Call For Proposals(10)_4.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:19:50 UTC
- PDF date: 20240318 15:19:48 -0400
- PDF creation date: 20230126 15:31:17 -0500
- Email date: 20160602 10:16:57
- PDF attachments: "CFP v9.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "Re: Sample documents for PQC Call For Proposals"
- Pages: 2
- Bytes: 241758
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for the API page. I'll get Sara to post it when we post the Call For Proposals. Do you
have the other files that you are working on? (I think it's the KAT and intermediate values)."
20160602 10:29:11
file 20240325/Re_ Sample documents for PQC Call For Proposals(9)_5.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:20:28 UTC
- PDF date: 20240318 15:20:26 -0400
- PDF creation date: 20230126 15:31:13 -0500
- Email date: 20160602 10:29:11
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "Re: Sample documents for PQC Call For Proposals"
- Pages: 2
- Bytes: 167938
Notes from djb, last edited 20240417 22:58:35 UTC:
"Great!"
20160602 11:06:23
file 20240827/Re_ Latest version of the CFP(5)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:37:10 UTC
- Email date: 20160602 11:06:23
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: Latest version of the CFP"
- Pages: 26
- Bytes: 852997
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing call for proposals.
20160602 11:29:03
file 20240827/Re_ Latest version of the CFP(4)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:34:58 UTC
- Email date: 20160602 11:29:03
- Email from: "Peralta, Rene (Fed)"
- Email to: "(b) (6) ; Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: Latest version of the CFP"
- Pages: 3
- Bytes: 116669
Notes from djb, last edited 20241002 20:43:30 UTC:
"I don't have strong feelings about this. My inclination is to tell the submitters
that it is incumbent upon them to convince us and the community at large
of their security claims (and leave it at that)."
"Ray told me he expects people to argue security by saying something like
- the best algorithm we can think of is XXX
- an analysis of XXX shows that these parameters are good enough."
"I don't like that too much. I would rather see an argument like
- the security seems closely related to well-studied problem XXX (e.g. subset-sum)
- a (very conservative) estimate is that breaking the proposed algorithm with this parameter
set is at least as hard as solving XXX of a given size. Ergo my security claim."
"I guess I would rather not steer the submitters to a particular security argument.
But I am willing to go with whatever the rest of the team wants."
20160603 12:53:37 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-Crypto in PQ world.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160603 12:53:37 UTC
- XML creation date: 20160523 17:58:45 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 1445922
Notes from djb, last edited 20240225 11:49:06 UTC:
Looks like "Crypto in PQ world -DoC.pdf".
20160606 01:11:17
file 20240827/Re_ Latest version of the CFP_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:37:44 UTC
- Email date: 20160606 01:11:17
- Email from: "(b) (6)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed)"
- Email cc: "Chen, Lily (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: Latest version of the CFP"
- Pages: 4
- Bytes: 173281
Notes from djb, last edited 20241002 20:43:30 UTC:
"With no explanation we run the risk of everyone choosing their own arbitrary definition after
which we need to spend much more time deriving results that should be the responsibility of
the submitters. Even with reasonable effort and honesty from submitters, there could be a lot
of discrepancy if we don't provide some guidance on this."
20160606 12:29:44
file 20240827/Re_ Latest version of the CFP(3)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:32:12 UTC
- Email date: 20160606 12:29:44
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); (b) (6) ; Perlner, Ray A. (Fed)"
- Email cc: "Chen, Lily (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: Latest version of the CFP"
- Pages: 24
- Bytes: 554976
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20160606 12:51:58
file 20240827/Re_ Latest version of the CFP(2)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:30:32 UTC
- Email date: 20160606 12:51:58
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6) ; Perlner, Ray A. (Fed)"
- Email subject: "Re: Latest version of the CFP"
- Pages: 3
- Bytes: 168551
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20160607 04:04:55
file 20240325/RE_ Sample documents for PQC Call For Proposals(1)_8.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:22:28 UTC
- PDF date: 20240318 15:22:27 -0400
- PDF creation date: 20230126 15:31:01 -0500
- Email date: 20160607 04:04:55
- Email from: "Perlner, Ray (Fed)"
- Email to: "Bassham, Lawrence E. (Fed); Moody, Dustin (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: Sample documents for PQC Call For Proposals"
- Pages: 3
- Bytes: 126481
Notes from djb, last edited 20240417 22:58:35 UTC:
"I think the key exchange API can be simplified to four algorithms"
"Initiator_generate should be a randomized algorithm that outputs the Initiator's key exchange message (KEI) and an
initiator private key (SKI)
Responder_generate should be a randomized algorithm that takes KEI as input and outputs a responder key
exchange message (KER) and private key (SKR)
Initiator_recover should be a non-randomized algorithm that inputs KER and SKI and generates a shared secret (SS)
Responder_recover should be a non-randomized algorithm that inputs KEI and SKR and generates the same shared
secret."
"(Actually you could combine Responder_recover and Responder_generate, since all the inputs of the former are
inputs or outputs of the latter, and they're done by the same party, but it might be more confusing.)"
20160607 04:40:13
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(4)_5.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:24:34 UTC
- PDF date: 20240319 14:24:31 -0400
- PDF creation date: 20230126 15:53:56 -0500
- Email date: 20160607 04:40:13
- Email from: "Sokol, Annie W. (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed)"
- Email subject: "RE: Updates on NIST Post-Quantum Cryptography Standardization Plan"
- Pages: 1
- Bytes: 127897
Notes from djb, last edited 20240417 22:58:35 UTC:
"I will update the agenda and look out for your slides."
20160607 19:12:49 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-PQCrypto 2016 v3.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160607 19:12:49 UTC
- XML creation date: 20130729 13:52:36 UTC
- XML creator: "Moody, Dustin"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 16
- Bytes: 116234
Notes from djb, last edited 20240225 11:49:06 UTC:
Should compare to "PQCrypto 2016.pptx".
20160607 20:50:25 UTC
file 20240325/RE_ Reminder_ Crypto Reading Club - June 8_1.pdf-attachment-KRACCABCSMES.pptx:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:17:42 UTC
- XML date: 20160607 20:50:25 UTC
- XML creation date: 20160601 15:13:33 UTC
- XML creator: "Perlner, Ray (Fed)"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 28
- Bytes: 1585681
Notes from djb, last edited 20240417 22:58:35 UTC:
"Key Recovery Attack on The Cubic ABC Simple-Matrix Encryption Scheme"
20160608
file 20230105/Asia-PQC-2016-06082016.pdf:
- FOIA delivery date: 20230105
- FOIA file date: 20221025 06:45:02 UTC
- PDF date: 20220907 21:35:49 -0400
- PDF creation date: 20220907 21:35:33 -0400
- Date: 20160608
- Author: "Lily Lidong Chen"
- PDF author: "Chen, Lily"
- Title: "NIST Post-Quantum Cryptography Standardization"
- PDF title: "Challenges in Post Quantum Cryptography Standardization"
- Pages: 17
- Bytes: 176204
Notes from djb, last edited 20230125 23:38:54 UTC:
Slides of a public talk given on 2016.06.08.
Similar to the 2016.05.08 talk,
although some edits.
20160608 02:46:48
file 20240325/Re_ slides for ISPAB_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 12:26:20 UTC
- PDF date: 20240319 13:26:19 -0400
- PDF creation date: 20230126 15:36:37 -0500
- Email date: 20160608 02:46:48
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: slides for ISPAB"
- Pages: 3
- Bytes: 174245
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks, Let's discuss tomorrow."
20160608 06:15:52
file 20240325/Re_ Visit by Gorjan Alagic (June 20-24)_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:13:06 UTC
- PDF date: 20240318 14:13:05 -0400
- PDF creation date: 20230126 15:54:29 -0500
- Email date: 20160608 06:15:52
- Email from: "Chen, Lily (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "Re: Visit by Gorjan Alagic (June 20-24)"
- Pages: 2
- Bytes: 114791
Notes from djb, last edited 20240417 22:58:35 UTC:
"Maybe we can have him to come June 21, Tuesday, using our regular time holding for PQC
meeting."
20160608 09:47:00
file 20240325/RE_ Reminder_ Crypto Reading Club - June 8_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:17:42 UTC
- PDF date: 20240318 14:17:40 -0400
- PDF creation date: 20230126 15:22:00 -0500
- Email date: 20160608 09:47:00
- PDF attachments: "KRACCABCSMES.pptx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "CRYPTO-CLUB"
- Email subject: "RE: Reminder: Crypto Reading Club - June 8"
- Pages: 1
- Bytes: 1661997
Notes from djb, last edited 20240417 22:58:35 UTC:
"Slides"
20160609 03:03:15
file 20240311/interesting recent paper_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:26:40 UTC
- PDF date: 20240307 13:26:38 -0500
- PDF creation date: 20230126 13:11:12 -0500
- Email date: 20160609 03:03:15
- Email from: "Stephen Jordan"
- Email to: "Mink, Alan (Assoc); Liu, Yi-Kai (Fed)"
- Email subject: "interesting recent paper"
- Pages: 1
- Bytes: 109978
Notes from djb, last edited 20240311 19:56:24 UTC:
"Quantum-Proof Extractors: Optimal up to Constant Factors
Kai-Min Chung, Gil Cohen, Thomas Vidick, Xiaodi Wu
http://arxiv.org/abs/1605.04194"
20160609 03:03:15
file 20240726/interesting recent paper.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 09:04:00 UTC
- PDF date: 20240723 11:03:58 -0400
- PDF creation date: 20230126 13:11:12 -0500
- Email date: 20160609 03:03:15
- Email from: "Stephen Jordan"
- Email to: "Mink, Alan (Assoc); Liu, Yi-Kai (Fed)"
- Email subject: "interesting recent paper"
- Pages: 1
- Bytes: 109980
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding a link to a paper on extractors.
20160609 09:20:28
file 20240325/slides for ISPAB_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 12:26:04 UTC
- PDF date: 20240319 13:26:02 -0400
- PDF creation date: 20230126 15:36:35 -0500
- Email date: 20160609 09:20:28
- PDF attachments: "ISPAB PQC update-06092016.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "slides for ISPAB"
- Pages: 1
- Bytes: 490738
Notes from djb, last edited 20240417 22:58:35 UTC:
No text, just the attachment.
20160609 10:56:42 -0400
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(3)_4.pdf-attachment-ISPAB PQC update2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:24:20 UTC
- PDF date: 20160609 10:56:42 -0400
- PDF creation date: 20160609 10:56:42 -0400
- PDF author: "Moody, Dustin (Fed)"
- PDF title: "Update on the NIST PQC Project"
- Pages: 25
- Bytes: 844258
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft (?) ISPAB slides.
20160609 11:02:00
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(3)_4.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:24:20 UTC
- PDF date: 20240319 14:24:18 -0400
- PDF creation date: 20230126 15:53:53 -0500
- Email date: 20160609 11:02:00
- PDF attachments: "ISPAB PQC update2.pdf"; "ISPAB PQC update2.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Sokol, Annie W. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "RE: Updates on NIST Post-Quantum Cryptography Standardization Plan"
- Pages: 1
- Bytes: 1314125
Notes from djb, last edited 20240417 22:58:35 UTC:
"I’m attaching the powerpoint (and pdf) versions I will use for my presentation. As far as advance
material, I assume they’ve already seen it, but if not, our Report on Post-Quantum Cryptography
(NISTIR 8105) available at http://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8105.pdf would be good."
20160609 11:48:29
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(2)_3.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:23:58 UTC
- PDF date: 20240319 14:23:57 -0400
- PDF creation date: 20230126 15:53:51 -0500
- Email date: 20160609 11:48:29
- Email from: "Sokol, Annie W. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed); Sirk, Donna J. (Fed)"
- Email subject: "RE: Updates on NIST Post-Quantum Cryptography Standardization Plan"
- Pages: 1
- Bytes: 128570
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thank you for sending the presentation. We will provide copies of both NIST IR 8105 and
presentation as hand-outs at the meeting."
20160609 13:19:14 UTC
file 20240325/slides for ISPAB_1.pdf-attachment-ISPAB PQC update-06092016.pptx:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 12:26:04 UTC
- XML date: 20160609 13:19:14 UTC
- XML creation date: 20160607 19:12:52 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 25
- Bytes: 428591
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft (?) ISPAB slides.
20160609 14:55:58 UTC
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(3)_4.pdf-attachment-ISPAB PQC update2.pptx:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:24:20 UTC
- XML date: 20160609 14:55:58 UTC
- XML creation date: 20160607 19:12:52 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 432999
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft (?) ISPAB slides.
20160610 08:24:00
file 20240827/RE_ FYI_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:02:20 UTC
- Email date: 20160610 08:24:00
- Email from: "Chen, Lily (Fed)"
- Email to: "(b) (6)"
- Email subject: "RE: FYI"
- Pages: 1
- Bytes: 101004
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing talk.
Redactions seem to be of Timothy Grance's email address.
20160613 01:25:35
file 20240325/RE_ Upcoming PQC meetings_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:07:58 UTC
- PDF date: 20240318 14:07:57 -0400
- PDF creation date: 20230126 15:49:59 -0500
- Email date: 20160613 01:25:35
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed)"
- Email subject: "RE: Upcoming PQC meetings"
- Pages: 1
- Bytes: 128967
Notes from djb, last edited 20240417 22:58:35 UTC:
"I think we can invite other members to attend for these two talks. How about “internal-crypto” or
CRYPTO-CLUB (include externals and need visitor registration)?"
20160613 08:12:00
file 20240325/RE_ Re_ seminars_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 10:40:38 UTC
- PDF date: 20240319 11:40:36 -0400
- PDF creation date: 20230126 15:17:08 -0500
- Email date: 20160613 08:12:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Jordan, Stephen P (Fed)"
- Email subject: "RE: Re: seminars"
- Pages: 3
- Bytes: 193305
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes, I’ll take care of the room. Thanks."
20160614 08:47:00
file 20240325/RE_ pqcrypto webpage_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:53:12 UTC
- PDF date: 20240318 13:53:10 -0400
- PDF creation date: 20230126 14:38:50 -0500
- Email date: 20160614 08:47:00
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: pqcrypto webpage"
- Pages: 1
- Bytes: 124800
Notes from djb, last edited 20240417 22:58:35 UTC:
"Hey Dustin – Thanks for the heads up! The next few days are pretty crazy with getting the EO
Commission details out before the meeting at Berkeley next Tuesday. Next week, while everyone is
there, it should lighten up a bit."
20160614 09:32:44
file 20240325/Re_ Item to be published in the FRN_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 14:22:10 UTC
- PDF date: 20240315 15:22:09 -0400
- PDF creation date: 20230126 13:25:17 -0500
- Email date: 20160614 09:32:44
- Email from: "Mukes, Vickie J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed)"
- Email subject: "Re: Item to be published in the FRN"
- Pages: 1
- Bytes: 118315
Notes from djb, last edited 20240417 22:58:35 UTC:
"Will do,"
20160614 11:46:34
file 20240325/RE_ Sample documents for PQC Call For Proposals_6.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:20:48 UTC
- PDF date: 20240318 15:20:47 -0400
- PDF creation date: 20230126 15:30:55 -0500
- Email date: 20160614 11:46:34
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "RE: Sample documents for PQC Call For Proposals"
- Pages: 2
- Bytes: 171516
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thank you Larry!"
20160614 11:47:56
file 20240325/FW_ Sample documents for PQC Call For Proposals_6.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:21:12 UTC
- PDF date: 20240318 15:21:10 -0400
- PDF creation date: 20230126 15:30:51 -0500
- Email date: 20160614 11:47:56
- PDF attachments: "API.rtf"; "KAT.rtf"; "VariableMsg_2048.txt"; "VariableLabel_2048.txt"; "IntermediateValues_2048.rtf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "FW: Sample documents for PQC Call For Proposals"
- Pages: 2
- Bytes: 315850
Notes from djb, last edited 20240417 22:58:35 UTC:
"Take a look at what Larry sent, and let us know if there is anything that needs to be fixed. Thanks!"
20160614 12:06:00 UTC
file 20240311/EXAMPLE FILES - Documents to soon post on PQC w..._1.pdf-attachment-CFP announcement.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 08:53:40 UTC
- XML date: 20160614 12:06:00 UTC
- XML creation date: 20160608 19:23:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 13278
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft announcement of draft call for proposals.
"It is intended that the new public-key cryptography standards will specify one or more additional unclassified, publicly disclosed digital signature, public-key
encryption, and key-establishment algorithms that are available royalty-free worldwide, and are capable of protecting sensitive government information well into the
foreseeable future, including after the advent of quantum computers."
20160614 12:41:05 -0400
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(1)_2.pdf-attachment-ISPAB PQC update2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:23:44 UTC
- PDF date: 20160614 12:41:05 -0400
- PDF creation date: 20160614 12:41:05 -0400
- PDF author: "Moody, Dustin (Fed)"
- PDF title: "Update on the NIST PQC Project"
- Pages: 25
- Bytes: 844281
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft (?) slides for ISPAB.
20160614 12:42:00
file 20240325/RE_ Updates on NIST Post-Quantum Cryptography S...(1)_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:23:44 UTC
- PDF date: 20240319 14:23:41 -0400
- PDF creation date: 20230126 15:53:49 -0500
- Email date: 20160614 12:42:00
- PDF attachments: "ISPAB PQC update2.pdf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Sokol, Annie W. (Fed)"
- Email subject: "RE: Updates on NIST Post-Quantum Cryptography Standardization Plan"
- Pages: 1
- Bytes: 903433
Notes from djb, last edited 20240417 22:58:35 UTC:
"I’ve attached a slightly updated .pdf file for my presentation. Thanks!"
20160614 16:40:39 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-ISPAB PQC update2.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160614 16:40:39 UTC
- XML creation date: 20160607 19:12:52 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 433036
Notes from djb, last edited 20240225 11:49:06 UTC:
Looks similar to other talks.
"We see our role as managing a process of achieving community consensus in a transparent and timely manner"
#claimingtransparency
20160615 04:05:27
file 20240827/Re_ Question_Redacted_001.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:35:10 UTC
- Email date: 20160615 04:05:27
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "(b) (6) ; Chen, Lily (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: Question"
- Pages: 1
- Bytes: 102695
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing how to get cost estimates from people working on building quantum computers.
20160615 09:28:08
file 20240325/Re_ Updates on NIST Post-Quantum Cryptography S..._1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:23:24 UTC
- PDF date: 20240319 14:23:23 -0400
- PDF creation date: 20230126 15:53:44 -0500
- Email date: 20160615 09:28:08
- Email from: "Sokol, Annie W. (Fed)"
- Email to: "Moody, Dustin (Fed); Sirk, Donna J. (Fed)"
- Email subject: "Re: Updates on NIST Post-Quantum Cryptography Standardization Plan"
- Pages: 2
- Bytes: 173490
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thank you."
20160616 01:46:47
file 20240325/Re_ another tracker Q..._1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:13:08 UTC
- PDF date: 20240315 14:13:05 -0400
- PDF creation date: 20230126 11:31:35 -0500
- Email date: 20160616 01:46:47
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Stine, Kevin M. (Fed)"
- Email subject: "Re: another tracker Q..."
- Pages: 1
- Bytes: 131100
Notes from djb, last edited 20240417 22:58:35 UTC:
"This is the outcome for the June FRN. IF you need a date then make it Q4."
20160616 02:27:34
file 20240827/RE_ Reminder - PQC FAQ.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240808 11:31:22 UTC
- PDF date: 20240808 13:31:20 -0400
- PDF creation date: 20230126 15:21:06 -0500
- Email date: 20160616 02:27:34
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Peralta, Rene C. (Fed)"
- Email subject: "RE: Reminder - PQC FAQ"
- Pages: 3
- Bytes: 161772
Notes from djb, last edited 20241002 20:43:30 UTC:
FAQ editing.
20160616 03:35:40
file 20240827/Re_ Fw_ Reminder - PQC FAQ_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:01:44 UTC
- Email date: 20160616 03:35:40
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: Fw: Reminder - PQC FAQ"
- Pages: 3
- Bytes: 182810
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing planned FAQ entries.
20160616 09:55:12
file 20240325/Re_ Sample documents for PQC Call For Proposals_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:18:46 UTC
- PDF date: 20240318 15:18:44 -0400
- PDF creation date: 20230126 15:30:46 -0500
- Email date: 20160616 09:55:12
- PDF attachments: "API.rtf"
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: Sample documents for PQC Call For Proposals"
- Pages: 4
- Bytes: 138298
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here’s the updated API file. Give that a read to make sure I didn’t miss anything."
20160617 08:18:29
file 20240325/RE_ fips 186_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:54:58 UTC
- PDF date: 20240315 14:54:57 -0400
- PDF creation date: 20230126 12:21:31 -0500
- Email date: 20160617 08:18:29
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kelsey, John M. (Fed)"
- Email subject: "RE: fips 186"
- Pages: 1
- Bytes: 124113
Notes from djb, last edited 20240417 22:58:35 UTC:
"Andy probably knows as much as I do, but here’s my take. We opened FIPS 186 for comments,
received several, and have had several meetings about what revisions to make. There are some
pretty minor ones involving things like prime generation, which nobody seemed to have a problem
with. The two more substantive issues were: are we going to add new curves, and if so how/which
ones? And also, there seemed support for adding a deterministic signature scheme (but which
one?).
It seems we’ve decided that we will add the two curves the CFRG is going to standardize (Curve
25519 and Ed448). For now, that’s what we know for sure. We’ve been slowly trying to feel out
people’s opinion if that is sufficient. The other thing that we might do is decide to add some
pseudorandom curves (like the Brainpool ones, or generate new ones). We don’t yet know if we will
do that or not.
As for which signature scheme to add, I don’t think our discussions ever settled that. I think several
of us wanted to know what you thought, but you were gone when we had a few of the meetings.
The main possibilities seem to be a deterministic ECDSA, or a Schnorr-type scheme (of which there
are a few). We should probably decide on that.
Right now, Andy and Lily are in the process of trying to hire a contractor to help us out with the
actual writing. They seem to feel this is necessary. I think the hope is that we can get that finalized
sometime this year. It feels to me we are moving pretty slow on all this, but I regularly ask Andy and
Lily, who seem okay with the pace. I think some of the wind has gone out of the sails of all this, due
to PQC, and the NSA’s pronouncements about ECC. It feels to me a lot of the urgency and animated
conversation about new curves seems to have died down a bit, which might explain our slow pace
somewhat. Anyway, that’s where things stand with FIPS 186 as I know it. Let me know if you have
any other questions about it."
20160617 10:49:45
file 20240311/RE_ First drafts of selection memo for RIT (2) ..._1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:28:26 UTC
- PDF date: 20240307 10:28:23 -0500
- PDF creation date: 20230126 12:21:58 -0500
- Email date: 20160617 10:49:45
- Email from: "Bursie, Yolanda L. (Fed)"
- Email to: "Chen, Lily (Fed); Scholl, Matthew A. (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "itlgrant"
- Email subject: "RE: First drafts of selection memo for RIT (2) and Wollongong"
- Pages: 1
- Bytes: 166220
Notes from djb, last edited 20240311 19:56:24 UTC:
Discussing funding for RIT and Wollongong.
"Three reviews together in one email for a given proposal is fine."
20160622 03:38:32
file 20240311/Invite to European PQC meeting_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:35:42 UTC
- PDF date: 20240307 13:35:40 -0500
- PDF creation date: 20230126 13:18:58 -0500
- Email date: 20160622 03:38:32
- PDF attachments: "invitation.docx"
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Invite to European PQC meeting"
- Pages: 1
- Bytes: 182096
Notes from djb, last edited 20240311 19:56:24 UTC:
"I’m going to send this letter out to our European colleagues. Can you take a quick look at it first?"
20160622 03:43:39
file 20240311/Re_ Invite to European PQC meeting_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:35:14 UTC
- PDF date: 20240307 13:35:13 -0500
- PDF creation date: 20230126 13:18:56 -0500
- Email date: 20160622 03:43:39
- Email from: "Chen, Lily (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Invite to European PQC meeting"
- Pages: 1
- Bytes: 113872
Notes from djb, last edited 20240311 19:56:24 UTC:
"It looks fine to me."
20160622 19:37:00 UTC
file 20240311/Invite to European PQC meeting_2.pdf-attachment-invitation.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:35:42 UTC
- XML date: 20160622 19:37:00 UTC
- XML creation date: 20160622 15:48:00 UTC
- XML creator: "Regenscheid, Andrew (Fed)"
- XML last-modified-by: "Regenscheid, Andrew (Fed)"
- Pages: 1
- Bytes: 107716
Notes from djb, last edited 20240311 19:56:24 UTC:
"Dear colleagues,"
"It was great meeting you last December when our organizations gathered to discuss cryptographic standards and research. Of course, I’d like to thank BSI again
for hosting that meeting, as well as Manfred personally for all of his efforts to organize it. We thought this was incredibly valuable discussion and would like to
continue these meetings as a forum to discuss our on-going and future work."
"One of the next steps we identified last December was a follow-up discussion focused on quantum-resistant cryptography. I understand many of you will be
attending the ETSI/IQC Workshop on Quantum Safe Cryptography in Toronto. I think this will provide a good opportunity for us to meet again."
"We’d like to invite you to participate in a one-day meeting on 22 September, following the ESTI workshop. We’ve reserved a conference room at the Hilton Toronto
Hotel, which I hope is a convenient location for all of us. Tentatively, I would propose that we begin at 0900 and finish at 1700."
"As mentioned above, we’d like to focus the discussion on quantum-resistant cryptography. Specifically, discussion topics may include:
1) security requirements and evaluation criteria for quantum-resistant algorithms,
2) the progress of quantum computing technology,
3) current transition plans to quantum-resistant algorithms and standards, and
4) the use of hybrid schemes."
"Of course, additional discussion topics are always welcome. Please let me what other topics you’d like to discuss and I would be happy to work them into the
agenda."
"I will send out additional details on the agenda and logistics for this meeting as we get closer to the date. In the meantime, please let me know if you, or
others from your organizations, plan to attend."
Obviously this was aimed at Manfred Lochter. Who else?
#needmorerecords
20160623 10:17:43
file 20240827/Zhang Tan Paper_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 13:01:32 UTC
- Email date: 20160623 10:17:43
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "Zhang Tan Paper"
- Pages: 15
- Bytes: 377838
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing MQ security.
20160625 01:37:17
file 20240726/Fw_ Update to protocol integration._Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:18:48 UTC
- Email date: 20160625 01:37:17
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "(b) (6)"
- Email subject: "Fw: Update to protocol integration."
- Pages: 8
- Bytes: 124755
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding extractor discussion to somebody.
20160628 02:54:36
file 20240827/RE_ NIST-NSA TWG meeting.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240724 08:16:10 UTC
- PDF date: 20240724 10:16:09 -0400
- PDF creation date: 20230126 14:03:30 -0500
- Email date: 20160628 02:54:36
- Email from: "Chen, Lily (Fed)"
- Email to: "Barker, Elaine B. (Fed)"
- Email subject: "RE: NIST-NSA TWG meeting"
- Pages: 1
- Bytes: 118152
Notes from djb, last edited 20241002 20:43:30 UTC:
"There is a hybrid mode update. An IETF draft specifies a hybrid cipher suite
https://tools.ietf.org/html/draft-whyte-qsh-tls12-01. The final premaster secret is the concatenation
of all the secret values, established by classical method and by quantum-safe method. To Validate
the Hybrid mode, the key derivation test will need to be modified to allow form the final premaster
secret. William Whyte from Security Innovation also suggested another method to input the secret
values established through quantum-safe algorithm in the SuppPrivInfo portion of key derivation
function. Claim that it will not require any change of the current testing. NIST decision on whether to
approve such hybrid mode will be rely on the acceptance of IETF community. The discussion at the
meeting indicated that the impact on the performance, in particular, the data size, may prevent
from a general acceptance of the hybrid mode."
20160628 07:14:12
file 20240325/report _ meeting_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:13:10 UTC
- PDF date: 20240318 15:13:08 -0400
- PDF creation date: 20230126 15:22:24 -0500
- Email date: 20160628 07:14:12
- Email from: "McKay, Kerry A. (Fed)"
- Email to: "Bassham, Lawrence E. (Fed); Sonmez Turan, Meltem (Fed)"
- Email subject: "report & meeting"
- Pages: 1
- Bytes: 93861
Notes from djb, last edited 20240417 22:58:35 UTC:
"We need to discuss the report – particularly the templates, timeline, and a workshop CFP. I’m on vacation
next week, so I’ve proposed a meeting for Tuesday 7/12. If that works for both of you, please send me any
comments/changes you’ve made to the report by the morning of 7/11."
20160629 01:42:00
file 20240311/RE_ FRN for Dustin's Post-Quantum Crypto_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:12:58 UTC
- PDF date: 20240307 13:12:57 -0500
- PDF creation date: 20230126 12:27:34 -0500
- Email date: 20160629 01:42:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Mukes, Vickie J. (Fed); Kerman, Sara J. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "RE: FRN for Dustin"s Post-Quantum Crypto"
- Pages: 1
- Bytes: 134305
Notes from djb, last edited 20240311 19:56:24 UTC:
"I am pretty sure that we haven’t received anything from Melissa yet. Tomorrow, we will ask them
when Andy and I go to meet them."
20160629 12:13:02
file 20240311/EXAMPLE FILES - Documents to soon post on PQC w..._1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 08:53:40 UTC
- PDF date: 20240307 09:53:37 -0500
- PDF creation date: 20230126 12:16:55 -0500
- Email date: 20160629 12:13:02
- PDF attachments: "API (1).rtf"; "VariableLabel_2048.txt"; "VariableMsg_2048.txt"; "IntermediateValues_2048.rtf"; "KAT.rtf"; "CFP announcement.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "EXAMPLE FILES - Documents to soon post on PQC webpage"
- Pages: 1
- Bytes: 239404
Notes from djb, last edited 20240311 19:56:24 UTC:
Logistics of web-page updates.
"I haven't attached the main document, as the lawyers gave me several revisions to make."
20160630 12:42:38
file 20240827/Re_ Hold for NIST_PCI-SSC Teleconference.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240725 12:48:02 UTC
- PDF date: 20240725 14:48:00 -0400
- PDF creation date: 20230126 12:56:29 -0500
- Email date: 20160630 12:42:38
- Email from: "Vadim Okun"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email cc: "Black, Paul E. (Fed)"
- Email subject: "Re: Hold for NIST/PCI-SSC Teleconference"
- Pages: 1
- Bytes: 190601
Notes from djb, last edited 20241002 20:43:30 UTC:
Logistics for call with the PCI Security Standards Council
regarding many topics, including post-quantum crypto.
20160704 12:05:35
file 20231219/FAQs_4.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231213 11:51:46 UTC
- PDF date: 20231213 12:51:44 -0500
- PDF creation date: 20230130 11:36:26 -0500
- Email date: 20160704 12:05:35
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "FAQs"
- Pages: 3
- Bytes: 182896
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing postings.
20160705 04:56:35
file 20231219/FAQ_3_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231218 10:51:10 UTC
- PDF date: 20231218 11:51:09 -0500
- PDF creation date: 20231218 11:51:09 -0500
- Email date: 20160705 04:56:35
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); (b) (6) Perlner, Ray A. (Fed)"
- Email subject: "FAQ"
- Pages: 3
- Bytes: 287991
Notes from djb, last edited 20240112 23:05:08 UTC:
Redacts the email address of a recipient.
#needmorerecords
Editing FAQ entries.
20160705 04:57:46
file 20240726/Re_ Tentative changes to address _standardizati..._1_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:54:22 UTC
- Email date: 20160705 04:57:46
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: Tentative changes to address "standardization" comment"
- Pages: 2
- Bytes: 150316
Notes from djb, last edited 20240801 23:15:11 UTC:
"Sounds good to me. Thanks Ray!"
20160705 05:17:53
file 20231219/RE_ FAQ(1)_2_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231218 11:58:30 UTC
- PDF date: 20231218 12:58:28 -0500
- PDF creation date: 20231218 12:58:28 -0500
- Email date: 20160705 05:17:53
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); (b) (6) Perlner, Ray A. (Fed)"
- Email subject: "RE: FAQ"
- Pages: 3
- Bytes: 348816
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing FAQ.
20160705 05:30:36
file 20240215/Re_ PQC pdf files_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:00:32 UTC
- PDF date: 20240208 10:00:31 -0500
- PDF creation date: 20230130 11:58:28 -0500
- Email date: 20160705 05:30:36
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC pdf files?"
- Pages: 1
- Bytes: 120516
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing file formats.
20160705 05:57:41
file 20231219/RE_ FAQ_1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231218 12:03:42 UTC
- PDF date: 20231218 13:03:40 -0500
- PDF creation date: 20231218 13:03:40 -0500
- Email date: 20160705 05:57:41
- Email from: "Perlner, Ray (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed); (b) (6)"
- Email subject: "RE: FAQ"
- Pages: 3
- Bytes: 325519
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing FAQ.
20160705 11:36:21
file 20240726/Resolution to handle comments on _standardization_3_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:56:42 UTC
- Email date: 20160705 11:36:21
- Email from: "Chen, Lily (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed); (b) (6)"
- Email subject: "Resolution to handle comments on "standardization""
- Pages: 3
- Bytes: 225861
Notes from djb, last edited 20240801 23:15:11 UTC:
"Attached please see some proposed text to address Ajit comments on “standardization”.
These text shall be checked and polished before we include them in the call for submissions."
20160705 12:39:25
file 20240215/Re_ PQC main document draft_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:59:16 UTC
- PDF date: 20240207 13:59:14 -0500
- PDF creation date: 20230130 11:58:13 -0500
- Email date: 20160705 12:39:25
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: PQC main document draft"
- Pages: 2
- Bytes: 162699
Notes from djb, last edited 20240225 11:49:06 UTC:
Logistics regarding edits to drafts.
"(omitting comment about how much I like lawyers)"
Kerman:
"I know it’s not a competition" with a smiley.
This sounds like it's alluding to previous discussions where someone was insisting on this not being a competition;
what exactly happened in those discussions?
#needmorerecords
20160706 04:35:00
file 20231219/FW_ Zhang Tan Paper_1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231218 12:51:32 UTC
- PDF date: 20231218 13:51:31 -0500
- PDF creation date: 20231218 13:51:31 -0500
- Email date: 20160706 04:35:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "(b) (6)"
- Email subject: "FW: Zhang Tan Paper"
- Pages: 15
- Bytes: 434665
Notes from djb, last edited 20240112 23:05:08 UTC:
Redacted email addresses.
One of them looks like Daniel Smith-Tone.
#needmorerecords
20160707 08:34:00
file 20231219/Could we set up a meeting with Chuck_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:36:22 UTC
- PDF date: 20231212 10:36:21 -0500
- PDF creation date: 20230130 11:32:34 -0500
- Email date: 20160707 08:34:00
- Email from: "Chen, Lily (Fed)"
- Email to: "White, Ginger (Fed)"
- Email cc: "Dodson, Donna F (Fed)"
- Email subject: "Could we set up a meeting with Chuck?"
- Pages: 1
- Bytes: 105146
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics for meeting with "Chuck" regarding IPR.
20160707 09:02:00
file 20231219/after 11_30 tomorrow meet with Chuck_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:03:14 UTC
- PDF date: 20231212 10:03:14 -0500
- PDF creation date: 20230130 11:29:04 -0500
- Email date: 20160707 09:02:00
- Email from: "Chen, Lily (Fed)"
- Email to: "White, Ginger (Fed); Dodson, Donna F (Fed)"
- Email cc: "Grayson, Nakia (Fed)"
- Email subject: "after 11:30 tomorrow meet with Chuck?"
- Pages: 2
- Bytes: 116758
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics for meeting with "Chuck" regarding IPR.
What happened in that meeting?
#needmorerecords
20160708 02:25:00
file 20231219/RE_ IPR policy AES vs. SHA-3_1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 11:46:02 UTC
- Email date: 20160708 02:25:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Regenscheid, Andrew (Fed); Dodson, Donna F (Fed)"
- Email subject: "RE: IPR policy AES vs. SHA-3"
- Pages: 2
- Bytes: 162765
Notes from djb, last edited 20240112 23:05:08 UTC:
IPR discussion.
#needmorerecords
20160713 03:25:14
file 20240215/Updated FAQ document for PQC_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:49:36 UTC
- PDF date: 20240208 13:49:35 -0500
- PDF creation date: 20230130 12:12:52 -0500
- Email date: 20160713 03:25:14
- PDF attachments: "FAQ v2.docx"; "PQC-Call for Proposals-Draft v1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Updated FAQ document for PQC"
- Pages: 1
- Bytes: 176185
Notes from djb, last edited 20240225 11:49:06 UTC:
Sending
near-final draft of call for proposals,
and update of public FAQ.
20160713 03:37:06
file 20240215/RE_ next step_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:32:36 UTC
- PDF date: 20240207 13:32:35 -0500
- PDF creation date: 20230130 11:51:32 -0500
- Email date: 20160713 03:37:06
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: next step"
- Pages: 1
- Bytes: 145728
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussion of patent-related scheduling and options.
""Please encourage the lawyers to move quickly! The time they take gets subtracted off of our
revision time. Thanks!
Chen:
"Could you follow up with Jennifer NIST about the IPR text they promised to provide?"
"We will need to prepare a note for Chuck on the IPR statement."
20160713 17:24:00 UTC
file 20240215/Updated FAQ document for PQC_1.pdf-attachment-FAQ v2.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:49:36 UTC
- XML date: 20160713 17:24:00 UTC
- XML creation date: 20160713 17:24:00 UTC
- XML creator: "Chen, Lily (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 2
- Bytes: 16826
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of "Frequent Asked Questions"
20160713 19:22:00 UTC
file 20240124/RE_ pqc webpage(1)_2.pdf-attachment-PQC-Call for Proposals-Draft v1.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:38:24 UTC
- XML date: 20160713 19:22:00 UTC
- XML creation date: 20160713 19:21:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 68450
Notes from djb, last edited 20240225 11:49:06 UTC:
Early draft of the call for proposals.
Comment from "Jillavenkatesa":
"This indicates that the RF licensing terms apply only during the search/competition phase. However, para 4 in 2.D.1 seems to indicate that the RF obligation
extends in perpetuity if the cryptosystem is selected for standardization. Can NIST dictate such terms?"
"Should my submission be selected for standardization, I hereby agree not to place any restrictions on the use of the cryptosystem, intending it to be available on
a worldwide, non-exclusive, royalty-free basis."
"The algorithms shall be publicly disclosed and available worldwide without royalties or any intellectual property restrictions."
#inconsistency
20160713 19:22:00 UTC
file 20240215/Updated FAQ document for PQC_1.pdf-attachment-PQC-Call for Proposals-Draft v1.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:49:36 UTC
- XML date: 20160713 19:22:00 UTC
- XML creation date: 20160713 19:21:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 68450
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20160714 07:32:37 -0400
file 20221014/intermediate-values-2048.pdf:
- FOIA delivery date: 20221014
- FOIA file date: 20220823 19:00:00 UTC
- PDF date: 20160714 07:32:37 -0400
- PDF creation date: 20160714 07:32:35 -0400
- Pages: 4
- Bytes: 37518
Notes from djb, last edited 20221018 10:44:20 UTC:
Exact copy of
https://csrc.nist.gov/csrc/media/projects/post-quantum-cryptography/documents/example-files/intermediate-values-2048.pdf.
20160715 07:49:57
file 20240215/Re_ A couple easy steps toward moving our stuff..._1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:01:36 UTC
- PDF date: 20240207 13:01:35 -0500
- PDF creation date: 20230130 11:28:12 -0500
- Email date: 20160715 07:49:57
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "Re: A couple easy steps toward moving our stuff for post-quantum crypto"
- Pages: 2
- Bytes: 111108
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussion of some important post-quantum issues.
Some quotes here are from messages earlier in thread.
"This motivates my suggestion: when thinking about how our current protocols can be adapted to use new public key
algorithms, try to document any hard limits on key sizes and other performance characteristics. What, exactly,
could post-quantum crypto do that would really ruin your day?"
The actual answer is that,
for the vast majority of protocols,
post-quantum crypto doesn't "really ruin your day":
it usually just works, and the exceptions are usually easy to fix.
NIST's later decisions assumed that various post-quantum performance differences were important for deployment,
without using the type of documentation suggested here to justify these assumptions.
#inconsistency
#ftqcic
"Then communicate this information to the NIST post-quantum crypto team."
What about communicating it publicly?
#weveshownallourwork
What efforts did NIST make to collect this data?
What did it do with the data?
#needmorerecords
Delaying quantum breaks:
"For ECC, increasing its key sizes are not that effective comparing to RSA and DH."
#error
"Ensure that all the protocols and algorithms that we approve in the future at least can support 256-bit security
level symmetric algorithms."
Later NIST public statements claim, incorrectly, that AES-128 is just fine.
#inconsistency
What happened to the suggested 256-bit requirement?
#needmorerecords
This would have stopped some subsequent attacks.
"Wherever possible, ensure that protocols and such that we approve in the future that use public key algorithms
can be adapted to much bigger sizes of key and message, and any other weird behavior that some PQ algorithms
need (like stateful signatures or non-negligible error probabilities)."
20160718 08:40:56
file 20231219/[Crypto-club] Google tests PQC_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231204 09:19:42 UTC
- PDF date: 20231204 10:19:41 -0500
- PDF creation date: 20230130 12:57:17 -0500
- Email date: 20160718 08:40:56
- PDF attachments: "ATT00001.txt"
- Email from: "crypto-club-bounces@nist.gov on behalf of Vassilev, Apostol (Fed)"
- Email to: "CRYPTO-CLUB"
- Email subject: "[Crypto-club] Google tests PQC"
- Pages: 1
- Bytes: 92123
Notes from djb, last edited 20240112 23:05:08 UTC:
Sending around a link regarding Google's New Hope experiment.
20160718 11:15:54
file 20240215/Links to FAQ_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 11:58:50 UTC
- PDF date: 20240207 12:58:48 -0500
- PDF creation date: 20230130 11:44:53 -0500
- Email date: 20160718 11:15:54
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Links to FAQ"
- Pages: 1
- Bytes: 138744
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing edits to web pages.
20160719 01:21:31
file 20240215/RE_ Update - CFP-PQC(1)_2.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:13:34 UTC
- PDF date: 20240208 13:13:31 -0500
- PDF creation date: 20230130 12:12:36 -0500
- Email date: 20160719 01:21:31
- PDF attachments: "llc-PQC-Call for Proposals-Draft v1.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Regenscheid, Andrew R. (Fed); Scholl, Matthew A. (Fed)"
- Email subject: "RE: Update - CFP-PQC"
- Pages: 2
- Bytes: 217773
Notes from djb, last edited 20240225 11:49:06 UTC:
Moody:
"I have some text ready that says we prefer royalty free, but I don't know exactly how I should
modify the IPR statements. I will try and do it, and then send it to you and Andy."
Chen:
"It turned out that Henry is on leave this week. Instead of waiting, let’s try to generate some text
based on Henry’s suggestion to incorporate the option of claiming IPR under the ANSI term. I think
Andy has passed the hardcopy of AES draft CFP with the term. We will try to be clear about our
strong preference on RF."
20160719 01:32:35
file 20240215/RE_ Update - CFP-PQC_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:12:24 UTC
- PDF date: 20240208 13:12:23 -0500
- PDF creation date: 20230130 12:12:34 -0500
- Email date: 20160719 01:32:35
- PDF attachments: "PQC-Call for Proposals-Draft v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Liu, Yi-Kai (Fed); Regenscheid, Andrew R. (Fed); Scholl, Matthew A. (Fed)"
- Email subject: "RE: Update - CFP-PQC"
- Pages: 2
- Bytes: 216617
Notes from djb, last edited 20240225 11:49:06 UTC:
Approving changes.
20160719 01:54:14
file 20240124/FW_ PQC Project Page Menu_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:35:44 UTC
- PDF date: 20240123 10:35:42 -0500
- PDF creation date: 20230130 11:58:40 -0500
- Email date: 20160719 01:54:14
- PDF attachments: "image001.png"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "FW: PQC Project Page Menu"
- Pages: 1
- Bytes: 585908
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing web-page update.
20160719 09:29:36
file 20240124/Re_ PQC Project Page Menu_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:12 UTC
- PDF date: 20240123 10:36:10 -0500
- PDF creation date: 20230130 11:58:43 -0500
- Email date: 20160719 09:29:36
- PDF attachments: "image001.png"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: PQC Project Page Menu"
- Pages: 1
- Bytes: 579558
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing web pages.
20160719 11:35:21
file 20240215/RE_ Real world cryptography conference_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:11:40 UTC
- PDF date: 20240208 10:11:38 -0500
- PDF creation date: 20230130 12:05:17 -0500
- Email date: 20160719 11:35:21
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email cc: "Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: Real world cryptography conference"
- Pages: 1
- Bytes: 125961
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing invitation to give RWC 2017 talk.
20160719 11:46:33
file 20240215/RE_ Update - CFP-PQC(2)_3.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:13:58 UTC
- PDF date: 20240208 13:13:56 -0500
- PDF creation date: 20230130 12:12:38 -0500
- Email date: 20160719 11:46:33
- PDF attachments: "PQC-Call for Proposals-Draft v1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Liu, Yi-Kai (Fed); Regenscheid, Andrew R. (Fed); Scholl, Matthew A. (Fed)"
- Email subject: "RE: Update - CFP-PQC"
- Pages: 2
- Bytes: 215428
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing regarding patents.
20160719 15:45:00 UTC
file 20240215/RE_ Update - CFP-PQC(2)_3.pdf-attachment-PQC-Call for Proposals-Draft v1.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:13:58 UTC
- XML date: 20160719 15:45:00 UTC
- XML creation date: 20160713 19:21:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 69125
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20160719 17:21:00 UTC
file 20240215/RE_ Update - CFP-PQC(1)_2.pdf-attachment-llc-PQC-Call for Proposals-Draft v1.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:13:34 UTC
- XML date: 20160719 17:21:00 UTC
- XML creation date: 20160719 17:18:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 21
- Bytes: 71101
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20160719 17:31:00 UTC
file 20240215/RE_ Update - CFP-PQC_1.pdf-attachment-PQC-Call for Proposals-Draft v2.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:12:24 UTC
- XML date: 20160719 17:31:00 UTC
- XML creation date: 20160719 16:56:00 UTC
- Title: Summary of Draft Call for Proposals Comments and Changes
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 21
- Bytes: 68906
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20160721 05:12:22
file 20240716/RE_ Final Agenda for Vint Cerf Visit - Friday, ..._1_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240207 13:53:12 UTC
- Email date: 20160721 05:12:22
- Email from: "Boehm, Jason (Fed)"
- Email to: "Marth, Lisa D. (Fed); Romine, Charles H. (Fed); St Pierre, James A. (Fed); Dodson, Donna F (Fed); Scholl,Matthew A. (Fed); Roberts, Kamie (Fed); Chen, Lily (Fed); Regenscheid, Andrew R. (Fed); Moody, Dustin (Fed);Kelsey, John M. (Fed); Perlner, Ray A. (Fed); Greer, Chris (Fed); Battou, Abdella (Fed); Stine, Kevin M. (Fed);Pillitteri, Victoria Yan (Fed); Boisvert, Ronald F. (Fed)"
- Email subject: "RE: Final Agenda for Vint Cerf Visit - Friday, July 22"
- Pages: 1
- Bytes: 114874
Notes from djb, last edited 20240726 21:43:58 UTC:
Lots of redactions.
What happened here?
#needmorerecords
20160722 13:56:22 -0400
file 20240726/Re_ question about Quantum Communications appli..._1.pdf-attachment-Quantum_Info_Sci_Report_2016_07_22 final.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240611 09:29:40 UTC
- PDF date: 20160722 13:56:22 -0400
- PDF creation date: 20160722 13:56:22 -0400
- Pages: 23
- Bytes: 1268966
20160726 03:13:35
file 20240124/RE_ pqc webpage_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:37:34 UTC
- PDF date: 20240123 10:37:33 -0500
- PDF creation date: 20230130 12:00:14 -0500
- Email date: 20160726 03:13:35
- Email from: "Foti, James (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Kerman, Sara J. (Fed)"
- Email subject: "RE: pqc webpage"
- Pages: 3
- Bytes: 135295
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing logistics for call for proposals.
20160726 11:26:57
file 20240124/RE_ pqc webpage(1)_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:38:24 UTC
- PDF date: 20240123 10:38:23 -0500
- PDF creation date: 20230130 12:00:18 -0500
- Email date: 20160726 11:26:57
- PDF attachments: "PQC-Call for Proposals-Draft v1.docx"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed); Foti, James (Fed)"
- Email subject: "RE: pqc webpage"
- Pages: 1
- Bytes: 197565
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing web pages.
In a quoted message:
"So we just finished meeting with the lawyers, and made really good progress. Henry is going to send
us the final text we need for the IPR section, and he already signed the FRN notice. Andy and Matt
said that means the FRN will likely be published on Friday, so we need to have the webpage ready
for Friday."
20160726 11:44:27
file 20240124/Re_ pqc evaluation criteria doc(1)_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:39:28 UTC
- PDF date: 20240122 11:39:26 -0500
- PDF creation date: 20230130 11:56:58 -0500
- Email date: 20160726 11:44:27
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: pqc evaluation criteria doc"
- Pages: 1
- Bytes: 111504
Notes from djb, last edited 20240225 11:49:06 UTC:
Sharing draft call for proposals.
20160726 11:50:16
file 20240215/Re_ PQC CFP going live Friday_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:54:42 UTC
- PDF date: 20240207 13:54:40 -0500
- PDF creation date: 20230130 11:56:32 -0500
- Email date: 20160726 11:50:16
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC CFP going live Friday"
- Pages: 1
- Bytes: 125131
Notes from djb, last edited 20240225 11:49:06 UTC:
Moody:
"We met with the lawyers today, who promised to give us by the end of the day the text they want
for some small changes to the IPR sections. They signed off on the FRN notice, which means that we
will be going live on Friday."
"Welcome to Carl Miller, who just started with us at NIST this week, as well as Thinh Dang, a
Pathways student."
20160727 02:44:02
file 20240124/Re_ pqc evaluation criteria doc_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:35:20 UTC
- PDF date: 20240122 11:35:18 -0500
- PDF creation date: 20230130 11:56:56 -0500
- Email date: 20160727 02:44:02
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: pqc evaluation criteria doc"
- Pages: 1
- Bytes: 116000
Notes from djb, last edited 20240225 11:49:06 UTC:
"I looked over the stuff at www.nit.gov/pqcrypto, and the slides from your talk at PQCrypto 2016. The
competition looks very interesting, and I’m looking forward to finding out more at future meetings. When
the CFP goes out I’ll let Chris Peikert at Michigan know (he works on lattice-based cryptography). Talk to you
later!"
20160728 08:57:27
file 20231219/An item for the weekly_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:04:00 UTC
- PDF date: 20231212 10:03:58 -0500
- PDF creation date: 20230130 11:29:45 -0500
- Email date: 20160728 08:57:27
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Folk, Alex R. (Fed)"
- Email subject: "An item for the weekly"
- Pages: 1
- Bytes: 117211
Notes from djb, last edited 20240112 23:05:08 UTC:
Notification of upcoming draft call for submissions.
20160728 09:01:45
file 20240124/Re_ PQC FRN update_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:01:02 UTC
- PDF date: 20240122 13:01:00 -0500
- PDF creation date: 20230130 11:57:53 -0500
- Email date: 20160728 09:01:45
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: PQC FRN update"
- Pages: 1
- Bytes: 157739
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing timing of call for proposals.
20160728 09:05:05
file 20240124/PQC FRN update_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:00:28 UTC
- PDF date: 20240122 13:00:25 -0500
- PDF creation date: 20230130 11:57:51 -0500
- Email date: 20160728 09:05:05
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Perlner, Ray A. (Fed); Peralta,Rene C. (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed)"
- Email subject: "PQC FRN update"
- Pages: 1
- Bytes: 86012
Notes from djb, last edited 20240225 11:49:06 UTC:
Logistics.
20160728 09:20:18
file 20240215/Re_ PQC FRN - Comment Closing Date_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:56:10 UTC
- PDF date: 20240207 13:56:08 -0500
- PDF creation date: 20230130 11:57:22 -0500
- Email date: 20160728 09:20:18
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed); Scholl, Matthew A. (Fed)"
- Email subject: "Re: PQC FRN - Comment Closing Date"
- Pages: 1
- Bytes: 164465
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing timing of public comment period.
20160728 09:47:44
file 20231219/Re_ Post-Quantum Cryptography Requirements and ..._1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 11:44:12 UTC
- PDF date: 20231215 12:44:10 -0500
- PDF creation date: 20230130 11:55:44 -0500
- Email date: 20160728 09:47:44
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Post-Quantum Cryptography Requirements and Evaluation Criteria FRN Publication Date: 08-02-2016"
- Pages: 3
- Bytes: 169951
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics regarding CFP.
20160729 02:14:09
file 20240215/Re_ New IP text_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:29:04 UTC
- PDF date: 20240207 13:29:03 -0500
- PDF creation date: 20230130 11:50:25 -0500
- Email date: 20160729 02:14:09
- PDF attachments: "image001.png"
- Email from: "Chen, Lily (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: New IP text?"
- Pages: 1
- Bytes: 523905
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussion of patent text and other text in call for proposals.
"Henry keeps saying he'll get it to us. Last night he said "first thing in the morning," which has turned into "sometime today." I've been having the other lawyers
up there poke him for us whenever they see him today."
"Sara knows this might be something we need to finish on Monday morning. While certainly far from ideal, I think we handle that fine so long as there isn't a big
problem with whatever text Henry provides."
20160729 08:28:00
file 20240215/RE_ Per our discussion_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:33:50 UTC
- PDF date: 20240207 13:33:48 -0500
- PDF creation date: 20230130 11:54:29 -0500
- Email date: 20160729 08:28:00
- PDF attachments: "image001.png"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: Per our discussion"
- Pages: 1
- Bytes: 474064
Notes from djb, last edited 20240225 11:49:06 UTC:
"Still no sign of the CFP from the lawyers?"
"None that I have received!"
20160801 02:01:05
file 20240405/RE_ Crypto Reading Club - Aug. 3_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 11:55:46 UTC
- PDF date: 20240402 13:55:45 -0400
- PDF creation date: 20230130 13:31:08 -0500
- Email date: 20160801 02:01:05
- Email from: "Sonmez Turan, Meltem (Assoc)"
- Email to: "Smith-Tone, Daniel C. (Fed)"
- Email subject: "RE: Crypto Reading Club - Aug. 3"
- Pages: 1
- Bytes: 124847
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks !"
20160801 03:10:10
file 20240716/Re_ [Crypto-club] Crypto Reading Club - August 3.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 08:54:36 UTC
- PDF date: 20240715 10:54:34 -0400
- PDF creation date: 20230130 13:05:25 -0500
- Email date: 20160801 03:10:10
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Sonmez Turan, Meltem (Fed); Chen, Lily (Fed)"
- Email cc: "Dworkin, Morris J. (Fed)"
- Email subject: "Re: [Crypto-club] Crypto Reading Club - August 3"
- Pages: 2
- Bytes: 161142
Notes from djb, last edited 20240726 21:43:58 UTC:
"Thanks."
Regarding Miller being added to crypto-club mailing list.
20160802 02:22:20
file 20240325/Re_ Crypto Rump Session(1)_4.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:52:58 UTC
- PDF date: 20240320 13:52:56 -0400
- PDF creation date: 20230130 13:32:17 -0500
- Email date: 20160802 02:22:20
- Email from: "Chen, Lily (Fed)"
- Email to: "Peralta, Rene C. (Fed); Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: Crypto Rump Session"
- Pages: 1
- Bytes: 114452
Notes from djb, last edited 20240417 22:58:35 UTC:
"It is in the web. See the link http://csrc.nist.gov/groups/ST/post-quantum-crypto/index.html ."
20160802 02:31:09
file 20240325/RE_ Crypto Rump Session(3)_3.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:52:20 UTC
- PDF date: 20240320 13:52:19 -0400
- PDF creation date: 20230130 13:32:14 -0500
- Email date: 20160802 02:31:09
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene C. (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed)"
- Email subject: "RE: Crypto Rump Session"
- Pages: 2
- Bytes: 143169
Notes from djb, last edited 20240417 22:58:35 UTC:
"Sure, why not?"
20160802 04:37:00
file 20240405/Questions for 800-158 Review_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 09:00:14 UTC
- PDF date: 20240402 11:00:11 -0400
- PDF creation date: 20230130 14:58:59 -0500
- Email date: 20160802 04:37:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Questions for 800-158 Review"
- Pages: 1
- Bytes: 105806
Notes from djb, last edited 20240417 22:58:35 UTC:
"Is it reasonable to limit the scope of the document to “search resistance” (leaving authentication,
collision resistance, online attacks, crypto misuse, and quantum-resistance out of scope)?"
20160802 08:01:11
file 20240405/News item for post-quantum crypto_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:35:36 UTC
- PDF date: 20240402 09:35:35 -0400
- PDF creation date: 20230130 14:11:20 -0500
- Email date: 20160802 08:01:11
- Email from: "Foti, James (Fed)"
- Email to: "O"Reilly, Patrick D. (Fed)"
- Email cc: "Chen, Lily (Fed); Kerman, Sara J. (Fed)"
- Email subject: "News item for post-quantum crypto"
- Pages: 1
- Bytes: 129183
Notes from djb, last edited 20240417 22:58:35 UTC:
"I’m sure you saw today’s FRN about the post-quantum crypto draft criteria:
https://federalregister.gov/a/2016-18150
Besides posting it on the FRN page, could you please also post it as a CSRC News item and send it out
via GovDelivery?"
20160802 10:25:07
file 20240325/Re_ Crypto Rump Session(2)_5.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:53:24 UTC
- PDF date: 20240320 13:53:22 -0400
- PDF creation date: 20230130 13:32:19 -0500
- Email date: 20160802 10:25:07
- Email from: "Peralta, Rene (Fed)"
- Email to: "Chen, Lily (Fed); Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: Crypto Rump Session"
- Pages: 1
- Bytes: 115820
Notes from djb, last edited 20240417 22:58:35 UTC:
"Sure, my calendar is up to date. Or we can play it by ear."
20160803 09:00:00
file 20240325/RE_ Crypto Rump Session(1)_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:51:46 UTC
- PDF date: 20240320 13:51:44 -0400
- PDF creation date: 20230130 13:32:09 -0500
- Email date: 20160803 09:00:00
- PDF attachments: "Crypto2016-rump session-V2.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Peralta, Rene (Fed); Perlner, Ray (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "RE: Crypto Rump Session"
- Pages: 1
- Bytes: 636274
Notes from djb, last edited 20240417 22:58:35 UTC:
"Made some changes.
See attached."
20160803 09:56:00
file 20240716/FW_ [Crypto-club] Reminder - TODAY _ Crypto Rea....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 08:53:28 UTC
- PDF date: 20240715 10:53:27 -0400
- PDF creation date: 20230130 13:05:46 -0500
- Email date: 20160803 09:56:00
- PDF attachments: "ATT00001.txt"
- Email from: "Chen, Lily (Fed)"
- Email to: "Nicky Mouha"
- Email subject: "FW: [Crypto-club] Reminder - TODAY : Crypto Reading Club - August 3"
- Pages: 1
- Bytes: 144251
Notes from djb, last edited 20240726 21:43:58 UTC:
"Daniel Smith-Tone will give a talk titled Multivariate Cryptography with “Big” Algebraic Structures.
Abstract: Since near the beginning of the history of multivariate public key cryptography there have
been two basic strategies for constructing multivariate digital signatures and multivariate public key
encryption schemes. These classes are often characterized as “Big Field” or “Small Field” schemes.
Relaxing the definitions slightly we can encompass some more recent constructions, changing the
moniker “Big Field” schemes to “Big Structure” schemes. We will discuss some of the basic techniques
used to construct multivariate schemes, some of the new ideas for potentially achieving efficient
encryption, and the main cryptanalytic techniques in this area. If there is sufficient time for
preparation, we can play around with some computational examples."
20160803 12:58:38 UTC
file 20240325/RE_ Crypto Rump Session(1)_2.pdf-attachment-Crypto2016-rump session-V2.pptx:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:51:46 UTC
- XML date: 20160803 12:58:38 UTC
- XML creation date: 20151116 14:26:06 UTC
- XML creator: "Chen, Lily"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 5
- Bytes: 842665
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft (?) slides for Crypto 2016 rump session.
20160804 01:09:51
file 20240405/Re_ News-level events_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 08:44:38 UTC
- PDF date: 20240403 10:44:36 -0400
- PDF creation date: 20230130 14:11:51 -0500
- Email date: 20160804 01:09:51
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Smith-Tone, Daniel C. (Fed); Chen, Lily (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: News-level events"
- Pages: 1
- Bytes: 107936
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing quantum progress,
and discussing mechanisms for NIST to be notified of research results before the general public.
#weveshownallourwork
20160804 08:39:15
file 20240405/fortnightly Tuesday meetings_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:58:52 UTC
- PDF date: 20240401 13:58:50 -0400
- PDF creation date: 20230130 13:38:57 -0500
- Email date: 20160804 08:39:15
- Email from: "Peralta, Rene (Fed)"
- Email to: "Gerrits, Thomas Dr. (Fed)"
- Email cc: "Miller, Carl A. (Fed)"
- Email subject: "fortnightly Tuesday meetings"
- Pages: 1
- Bytes: 81994
Notes from djb, last edited 20240417 22:58:35 UTC:
"Carl Miller just joined the Computer Security Division. His areas of research
include randomness and quantum information processing. Could you
add him to the mailing list for the Tuesday meetings, and grant him access
to the shared folder?"
20160805 10:25:06
file 20240325/Re_ Crypto Rump Session_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:51:00 UTC
- PDF date: 20240320 13:50:59 -0400
- PDF creation date: 20230130 13:32:05 -0500
- Email date: 20160805 10:25:06
- Email from: "Peralta, Rene (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Re: Crypto Rump Session"
- Pages: 2
- Bytes: 112665
Notes from djb, last edited 20240417 22:58:35 UTC:
Fixing typo.
20160805 11:50:44
file 20240827/Re_ News Clips for Friday, August 5, 2016.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240801 12:02:50 UTC
- PDF date: 20240801 14:02:49 -0400
- PDF creation date: 20230130 14:10:46 -0500
- Email date: 20160805 11:50:44
- Email from: "Brady, Mary C. (Fed)"
- Email to: "Stine, Kevin M. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: News Clips for Friday, August 5, 2016"
- Pages: 4
- Bytes: 174278
Notes from djb, last edited 20241002 20:43:30 UTC:
Pointers to recent NIST advertising.
20160805 11:59:59
file 20240405/NIST Seeks Comments for Post-Quantum Cryptograp..._1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:38:26 UTC
- PDF date: 20240402 09:38:24 -0400
- PDF creation date: 20230130 14:12:21 -0500
- Email date: 20160805 11:59:59
- Email from: "NIST Computer Security Resource Center"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "NIST Seeks Comments for Post-Quantum Cryptography: Proposed Requirements and Evaluation Criteria"
- Pages: 1
- Bytes: 215571
Notes from djb, last edited 20240417 22:58:35 UTC:
Internal redistribution of public notice.
20160808 01:37:39
file 20240325/an accessible followup to my notes on min-entro..._1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 14:45:46 UTC
- PDF date: 20240319 15:45:45 -0400
- PDF creation date: 20230130 13:24:47 -0500
- Email date: 20160808 01:37:39
- Email from: "Emanuel Knill"
- Email to: "Bierhorst, Peter L. (Assoc); Glancy, Scott C. (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed)"
- Email subject: "an accessible followup to my notes on min-entropy estimation"
- Pages: 5
- Bytes: 134012
Notes from djb, last edited 20240417 22:58:35 UTC:
Quantum information theory.
20160809 01:42:00
file 20240405/RE_ Where Are the Draft Criteria_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:47:20 UTC
- PDF date: 20240403 11:47:18 -0400
- PDF creation date: 20230130 15:19:49 -0500
- Email date: 20160809 01:42:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: Where Are the Draft Criteria?"
- Pages: 1
- Bytes: 146535
Notes from djb, last edited 20240417 22:58:35 UTC:
"The easiest way to find csd stuff is to be familiar with http://csrc.nist.gov .
For the draft requirements and evaluation criteria, visit http://www.nist.gov/pqcrypto
If you have any question to locate the stuff, please let me know."
20160809 02:28:45
file 20240726/Re_ Include Carl and Jacob to the discussions(2)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:53:34 UTC
- Email date: 20160809 02:28:45
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Miller, Carl A. (Fed); Chen, Lily (Fed); Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed); Perlner, RayA. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); (b) (6) Jordan, Stephen P(Fed)"
- Email subject: "Re: Include Carl and Jacob to the discussions"
- Pages: 1
- Bytes: 117266
Notes from djb, last edited 20240801 23:15:11 UTC:
Scheduling.
20160809 07:54:26
file 20240405/Re_ Meeting to Discuss PQC Project_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 08:24:12 UTC
- PDF date: 20240403 10:24:10 -0400
- PDF creation date: 20230130 14:03:35 -0500
- Email date: 20160809 07:54:26
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: Meeting to Discuss PQC Project?"
- Pages: 1
- Bytes: 176742
Notes from djb, last edited 20240417 22:58:35 UTC:
Meeting logistics.
20160809 09:58:49
file 20240726/Re_ Carl Miller(1)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240726 09:04:58 UTC
- Email date: 20160809 09:58:49
- Email from: "Peralta, Rene (Fed)"
- Email to: "Miller, Carl A. (Fed); Kuo, Paulina S. (Fed)"
- Email subject: "Re: Carl Miller"
- Pages: 2
- Bytes: 113670
Notes from djb, last edited 20240801 23:15:11 UTC:
Planning internal meetings.
20160810 08:34:49
file 20240726/Re_ Include Carl and Jacob to the discussions(1)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:53:12 UTC
- Email date: 20160810 08:34:49
- Email from: "Peralta, Rene (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Include Carl and Jacob to the discussions"
- Pages: 1
- Bytes: 110929
Notes from djb, last edited 20240801 23:15:11 UTC:
Down thread indicates frequent meetings with NSA:
"Is anyone opposed to Tuesdays afternoon? We could do it right after lunch, which would
probably work for the NSA people."
#nsa
20160810 11:46:06
file 20240726/Re_ Include Carl and Jacob to the discussions_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:53:56 UTC
- Email date: 20160810 11:46:06
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Jordan, Stephen P (Fed); Miller, Carl A. (Fed); Chen, Lily (Fed); Moody, Dustin (Fed); (b) (6)"
- Email cc: "Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: Include Carl and Jacob to the discussions"
- Pages: 2
- Bytes: 117374
Notes from djb, last edited 20240801 23:15:11 UTC:
Scheduling.
20160811 02:25:29
file 20240405/Re_ quantum information journal club(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 08:05:30 UTC
- PDF date: 20240402 10:05:28 -0400
- PDF creation date: 20230130 14:53:50 -0500
- Email date: 20160811 02:25:29
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Glancy, Scott C. (Fed)"
- Email cc: "Jordan, Stephen P (Fed)"
- Email subject: "Re: quantum information journal club"
- Pages: 2
- Bytes: 108279
Notes from djb, last edited 20240417 22:58:35 UTC:
Meeting logistics.
20160811 04:33:03
file 20240405/Re_ quantum information journal club_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 08:05:08 UTC
- PDF date: 20240402 10:05:07 -0400
- PDF creation date: 20230130 14:53:48 -0500
- Email date: 20160811 04:33:03
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Jordan, Stephen P (Fed); Glancy, Scott C. (Fed)"
- Email subject: "Re: quantum information journal club"
- Pages: 2
- Bytes: 112859
Notes from djb, last edited 20240417 22:58:35 UTC:
IT issues.
20160811 08:12:41
file 20240405/Re_ Can You Sign Me Up to the PQC Draft Proposa..._1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 11:43:54 UTC
- PDF date: 20240402 13:43:52 -0400
- PDF creation date: 20230130 13:28:41 -0500
- Email date: 20160811 08:12:41
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Re: Can You Sign Me Up to the PQC Draft Proposal Comments List?"
- Pages: 1
- Bytes: 113605
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes. I'll do it next week when I am back."
20160815 10:37:00
file 20240405/Mail_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:41:16 UTC
- PDF date: 20240402 09:41:15 -0400
- PDF creation date: 20230130 13:03:02 -0500
- Email date: 20160815 10:37:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 1
- Bytes: 80323
Notes from djb, last edited 20240417 22:58:35 UTC:
"https://s3.amazonaws.com/files.douglas.stebila.ca/files/research/presentations/20160812-SAC.pdf"
"https://github.com/open-quantum-safe/liboqs"
20160816 11:49:09
file 20240405/Re_ Talking to Outside Parties and Stakeholders_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:41:18 UTC
- PDF date: 20240403 11:41:16 -0400
- PDF creation date: 20230130 15:12:23 -0500
- Email date: 20160816 11:49:09
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Chen, Lily (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: Talking to Outside Parties and Stakeholders"
- Pages: 2
- Bytes: 111235
Notes from djb, last edited 20240417 22:58:35 UTC:
"Lily and Dustin can probably tell you more, but I think the simplest strategy is the following: you should talk with
other people from your perspective as an independent researcher, NOT claiming to represent NIST's position."
"So, you can say that you think having more Ring-LWE challenges would benefit the whole PQC research
community, which includes NIST. But write it in a way that indicates it is your personal opinion, not an official
statement from NIST."
20160816 15:47:33 -0400
file 20240716/[Crypto-club] QCrypt public lecture - _Cryptogr....pdf-attachment-QCrypt_lecture_email.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 08:39:40 UTC
- PDF date: 20160816 15:47:33 -0400
- PDF creation date: 20160815 17:51:16 -0400
- Pages: 1
- Bytes: 913967
Notes from djb, last edited 20240726 21:43:58 UTC:
Advertisement for lecture by Mosca.
20160817 07:38:51
file 20240726/Fw_ FW_ SAC 2016 notification for paper 104_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:13:02 UTC
- Email date: 20160817 07:38:51
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email subject: "Fw: FW: SAC 2016 notification for paper 104"
- Pages: 6
- Bytes: 123355
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding to someone a report of paper acceptance.
20160817 11:57:45
file 20240716/[Crypto-club] QCrypt public lecture - _Cryptogr....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 08:39:40 UTC
- PDF date: 20240715 10:39:39 -0400
- PDF creation date: 20230130 13:05:43 -0500
- Email date: 20160817 11:57:45
- PDF attachments: "QCrypt_lecture_email.pdf"; "ATT00001.txt"
- Email from: "crypto-club-bounces@nist.gov on behalf of Liu, Yi-Kai (Fed)"
- Email to: "CRYPTO-CLUB"
- Email subject: "[Crypto-club] QCrypt public lecture - "Cryptography and Cybersecurity in the Quantum Era""
- Pages: 1
- Bytes: 1030141
Notes from djb, last edited 20240726 21:43:58 UTC:
"As part of the QCrypt conference next month, we're having Michele Mosca give a public lecture on "Cryptography
and Cybersecurity in the Quantum Era." If you're at all interested in this topic, I really recommend going. Michele is
an excellent speaker, as well as an accomplished researcher."
20160818 01:52:39
file 20240716/Re_ [Crypto-club] QCrypt public lecture - _Cryp....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 08:38:50 UTC
- PDF date: 20240715 10:38:48 -0400
- PDF creation date: 20230130 13:05:37 -0500
- Email date: 20160818 01:52:39
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "Re: [Crypto-club] QCrypt public lecture - "Cryptography and Cybersecurity in the Quantum Era""
- Pages: 1
- Bytes: 107513
Notes from djb, last edited 20240726 21:43:58 UTC:
Discussing conference registration.
20160818 12:33:57
file 20240726/Edwards isogeny paper.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240719 12:14:54 UTC
- PDF date: 20240719 14:14:52 -0400
- PDF creation date: 20230130 13:33:55 -0500
- Email date: 20160818 12:33:57
- PDF attachments: "edwardsisogenies-final revision.pdf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Dang, Thinh H. (Fed)"
- Email subject: "Edwards isogeny paper"
- Pages: 1
- Bytes: 387875
Notes from djb, last edited 20240801 23:15:11 UTC:
No text, just attachment.
20160822 09:50:15
file 20240726/Re_ ITL Science Day, October 13, 2016.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 11:04:20 UTC
- PDF date: 20240723 13:04:19 -0400
- PDF creation date: 20230130 13:58:59 -0500
- Email date: 20160822 09:50:15
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "White, Ginger (Fed)"
- Email subject: "Re: ITL Science Day, October 13, 2016"
- Pages: 2
- Bytes: 107411
Notes from djb, last edited 20240801 23:15:11 UTC:
Poster planning.
20160823 01:18:56
file 20240405/Re_ Open Quantum-Safe library_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 08:48:48 UTC
- PDF date: 20240403 10:48:47 -0400
- PDF creation date: 20230130 14:40:02 -0500
- Email date: 20160823 01:18:56
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Open Quantum-Safe library"
- Pages: 1
- Bytes: 121559
Notes from djb, last edited 20240417 22:58:35 UTC:
"I got it. Just did a quick look at it, but I image we can make them work together. Seems like the
interface between the two might be algorithm specific."
20160823 02:18:39
file 20240827/Re_ Multi-Talk_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:44:48 UTC
- Email date: 20160823 02:18:39
- Email from: "(b) (6)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Multi-Talk"
- Pages: 1
- Bytes: 153958
Notes from djb, last edited 20241002 20:43:30 UTC:
Looks like email from Daniel Smith-Tone
scheduling meetings.
Mentions "Brad"; maybe NSA's Brad Lackey?
#nsa
#needmorerecords
20160826 04:16:24
file 20240405/Re_ Number of Papers to Add_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 08:45:30 UTC
- PDF date: 20240403 10:45:28 -0400
- PDF creation date: 20230130 14:37:17 -0500
- Email date: 20160826 04:16:24
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Re: Number of Papers to Add?"
- Pages: 1
- Bytes: 104831
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing additions of papers to some list.
#needmorerecords
20160826 12:47:04
file 20240827/Re_ ITL Science Day, October 13, 2016(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:03:42 UTC
- Email date: 20160826 12:47:04
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Daniel Smith; (b) (6)"
- Email subject: "Re: ITL Science Day, October 13, 2016"
- Pages: 3
- Bytes: 116464
Notes from djb, last edited 20241002 20:43:30 UTC:
Poster logistics.
20160829 01:54:51
file 20240726/Poster for ITL Science Day - October 13.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 10:57:10 UTC
- PDF date: 20240723 12:57:08 -0400
- PDF creation date: 20230130 14:45:21 -0500
- Email date: 20160829 01:54:51
- Email from: "Sonmez Turan, Meltem (Assoc)"
- Email to: "lightweight-crypto"
- Email subject: "Poster for ITL Science Day - October 13"
- Pages: 1
- Bytes: 94382
Notes from djb, last edited 20240801 23:15:11 UTC:
Planning a poster on lightweight crypto.
20160829 02:00:21
file 20240405/RE_ PQC Workshop - 2018(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:51:00 UTC
- PDF date: 20240402 09:50:59 -0400
- PDF creation date: 20230130 14:49:54 -0500
- Email date: 20160829 02:00:21
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC Workshop - 2018"
- Pages: 2
- Bytes: 158180
Notes from djb, last edited 20240417 22:58:35 UTC:
Conference logistics.
20160829 08:41:25
file 20240726/ITL Science Day posters.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 10:57:58 UTC
- PDF date: 20240723 12:57:56 -0400
- PDF creation date: 20230130 13:58:50 -0500
- Email date: 20160829 08:41:25
- Email from: "Moody, Dustin (Fed)"
- Email to: "White, Ginger (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "ITL Science Day posters"
- Pages: 1
- Bytes: 132456
Notes from djb, last edited 20240801 23:15:11 UTC:
Proposing a poster presentation.
20160829 14:25:59 UTC
file 20230915/ITL Science Day poster_4.pdf-attachment-pqc-poster-2016.pptx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:22:44 UTC
- XML date: 20160829 14:25:59 UTC
- XML creation date: 20060816 00:00:00 UTC
- Author: "pqc@nist.gov"
- XML creator: "Liu, Yi-Kai"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 29168801
Notes from djb, last edited 20230915 23:13:56 UTC:
Poster summarizing fragments of post-quantum cryptography.
#scramble
20160830 11:53:37
file 20240405/RE_ PQC Workshop - 2018_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:50:44 UTC
- PDF date: 20240402 09:50:42 -0400
- PDF creation date: 20230130 14:49:52 -0500
- Email date: 20160830 11:53:37
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: PQC Workshop - 2018"
- Pages: 2
- Bytes: 139611
Notes from djb, last edited 20240417 22:58:35 UTC:
Conference logistics.
20160831 04:04:00
file 20240325/Comp Registrations RE_ 2018 PCQ Attendees and ..._1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:50:08 UTC
- PDF date: 20240320 13:50:06 -0400
- PDF creation date: 20230130 13:30:46 -0500
- Email date: 20160831 04:04:00
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Comp Registrations RE: 2018 PCQ Attendees and Hotels"
- Pages: 4
- Bytes: 130969
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes, one author/speaker per submission was provided a complimentary registration. FYI - We also provided comp
codes to NIST participants (so they were included in the total comp count)."
20160831 04:04:36
file 20240325/RE_ 2018 PCQ Attendees and Hotels_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:50:50 UTC
- PDF date: 20240319 14:50:49 -0400
- PDF creation date: 20230130 13:19:52 -0500
- Email date: 20160831 04:04:36
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: 2018 PCQ Attendees and Hotels"
- Pages: 4
- Bytes: 136257
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes, one author/speaker per submission was provided a complimentary registration. FYI - We also provided comp
codes to NIST participants (so they were included in the total comp count)."
20160831 08:00:21
file 20240827/Re_ PQC workshop numbers_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:30:32 UTC
- Email date: 20160831 08:00:21
- Email from: "(b) (6)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed);Alperin-Sheriff, Jacob (Fed); Miller, Carl A. (Fed)"
- Email subject: "Re: PQC workshop numbers"
- Pages: 1
- Bytes: 127859
Notes from djb, last edited 20241002 20:43:30 UTC:
Maybe from Daniel Smith-Tone?
"I think it will be larger because there are more relevant disciplines for this project than for
SHA-3. I think that in the range of 250 is a reasonable guess. This wild guess is based on an
estimate that only about half of those who wanted to attend pqcrypto this year were able."
20160831 10:22:00
file 20240325/FW_ 2018 PQC Attendees and Hotels_3.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:51:24 UTC
- PDF date: 20240319 14:51:23 -0400
- PDF creation date: 20230130 13:20:00 -0500
- Email date: 20160831 10:22:00
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Norris, Mary Lou (Fed)"
- Email subject: "FW: 2018 PQC Attendees and Hotels"
- Pages: 2
- Bytes: 119958
Notes from djb, last edited 20240417 22:58:35 UTC:
"After discussing with the team, and based on the email below with thoughts, we feel good going
with 150 attending our PQC Workshop. I was going to go back to Maria with that number. Will cc
you. OK?"
20160831 12:45:18
file 20240325/RE_ 2018 PCQ Attendees and Hotels(1)_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:51:08 UTC
- PDF date: 20240319 14:51:06 -0400
- PDF creation date: 20230130 13:19:54 -0500
- Email date: 20160831 12:45:18
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: 2018 PCQ Attendees and Hotels"
- Pages: 4
- Bytes: 143346
Notes from djb, last edited 20240417 22:58:35 UTC:
"I believe they did...I can confirm to be sure, but they may take a day or two."
20160901 09:11:03
file 20230816/today-1.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 09:02:34 UTC
- PDF date: 20230814 11:02:32 -0400
- PDF creation date: 20230131 09:17:02 -0500
- Email date: 20160901 09:11:03
- Email from: "Peralta, Rene (Fed)"
- Email to: "Sonmez Turan, Meltem (Fed); Calik, Cagdas (IntlAssoc)"
- Email subject: "today"
- Pages: 1
- Bytes: 83639
20160902 09:53:14
file 20230915/Re_ Request for info on planned major announcem....pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:46:50 UTC
- PDF date: 20230912 11:46:47 -0400
- PDF creation date: 20230131 08:42:07 -0500
- Email date: 20160902 09:53:14
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Pillitteri, Victoria Yan (Fed); Stine, Kevin M. (Fed); Dodson, Donna F (Fed)"
- Email subject: "Re: Request for info on planned major announcements/deliverables for first 100 days of 2017 and 2017"
- Pages: 2
- Bytes: 167766
Notes from djb, last edited 20230915 23:13:56 UTC:
Discussing possible advertisements by executive-branch higher-ups.
20160903
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..6.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:35:34 +0000
- PDF creation date: 20161003 20:35:34 +0000
- Date: 20160903
- Author: "Danilo Gligoroski"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 95961
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov, cc'ing pqc-forum.
Proposed requiring, rather than just encouraging, specification of scaled-down parameter sets.
Proposed encouraging attacks to be demonstrated on the scaled-down parameter sets.
"In the heat of the debates and the competition,
there will be a lot of overrated attacks that actually are not so efficient as the attackers would claim."
20160903
file 20230210/Two Suggestions - Liu, Yi-Kai (Fed).pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:25:12 +0000
- PDF creation date: 20161003 20:25:12 +0000
- Date: 20160903
- Author: "Danilo Gligoroski"
- Title: "Two Suggestions"
- Pages: 1
- Bytes: 87848
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov.
Looks like this was then resent to pqc-comments@nist.gov and pqc-forum,
with a different subject line.
20160904
file 20230210/Comment on Post-Quantum Cryptography Requirements and E...pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:27:29 +0000
- PDF creation date: 20161003 20:27:29 +0000
- Date: 20160904
- Author: "Damien Stehlé"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 1
- Bytes: 78625
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov.
"What is the rationale for not letting the adversary
make essentially as many queries as the target security?"
"Clearly, the classical and
quantum bit security of a given scheme can differ. But why
are the ratios 1/2 and 2/3 put forward as targets?"
20160906 04:39:58
file 20230915/Re_ ITL Science Day, October 13, 2016 - Posters_5.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:25:00 UTC
- PDF date: 20230912 10:24:58 -0400
- PDF creation date: 20230131 07:57:59 -0500
- Email date: 20160906 04:39:58
- Email from: "Emanuel Knill"
- Email to: "Glancy, Scott C. (Fed); Bierhorst, Peter L. (Assoc); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Mink, Alan (Assoc)"
- Email subject: "Re: ITL Science Day, October 13, 2016 - Posters"
- Pages: 1
- Bytes: 120507
Notes from djb, last edited 20230915 23:13:56 UTC:
Discussion of a poster on "Quantum Randomness Certified by the Impossibility of Superluminal Signaling".
20160906 07:16:42
file 20230915/RE_ Alias request.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:44:32 UTC
- PDF date: 20230912 11:44:31 -0400
- PDF creation date: 20230131 07:29:37 -0500
- Email date: 20160906 07:16:42
- Email from: "Foti, James (Fed)"
- Email to: "Moody, Dustin (Fed); itac; ngaliases"
- Email cc: "Perlner, Ray A. (Fed); Kerman, Sara J. (Fed)"
- Email subject: "RE: Alias request"
- Pages: 1
- Bytes: 131905
Notes from djb, last edited 20230915 23:13:56 UTC:
"Thanks for the clarification. Looks like the alias is working properly again…"
20160907
file 20230210/RE_ Comment on Post-Quantum Cryptography Requirements a...pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:28:02 +0000
- PDF creation date: 20161003 20:28:02 +0000
- Date: 20160907
- Author: "Perlner, Ray (Fed)"
- Title: "RE: Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 114699
Notes from djb, last edited 20230625 17:50:02 UTC:
Email from NIST back to Damien Stehlé.
What happened to "open and transparent"?
Why did some submitters get to see this information while the general public didn't?
#inconsistency
#weveshownallourwork
(This round of comments to NIST was
put online
three months later,
but replies from NIST appear to have been kept secret.)
"As a side note, if we do consider 2^64 online queries to be a realistic attack model, one of the first things we would need is a
block cipher with a larger block size than 128 bits.":
No.
#error
There are well-known AES-based constructions (and SHA-3-based constructions) that remain secure for this number of queries.
(They aren't as efficient as ChaCha20, but that's a separate issue.)
"Our target security strengths are designed so that, if we need to transition to higher security
strengths, as we did when moving from 80 bits to 112 bits of security, starting around 2010, we can time transitions for the new
algorithms to coincide with those for algorithms we have already standardized (in particular AES, SHA2, and SHA3.)"
Was this rationale ever made clear in public? If so, where?
#needmorerecords
This NIST email pointed to a
NIST FAQ,
but this FAQ did not say that the point of NIST's security categories
was to synchronize the timing of future public-key transitions with future AES/SHA transitions.
Meanwhile NIST was making public comments such as
"we'd expect security strengths 2 on up to be secure for 50 years or more, and we wouldn't be
terribly surprised if security strength 1 lasted that long as well" (2016.11.22).
If NIST thought AES-128 and SHA-256 were so strong,
why was NIST worrying about the timing of transitions away from those standards?
This doesn't make sense.
#inconsistency
Meanwhile it doesn't seem that the public was being given an opportunity to understand NIST's rationale
and to comment upon the rationale before these "categories" were set in stone.
NIST's final public call for submissions gave a different story
for the purpose of the security "categories":
"The goals of this
classification are:
1) To facilitate meaningful performance comparisons between the submitted
algorithms, by ensuring, insofar as possible, that the parameter sets being
compared provide comparable security.
2) To allow NIST to make prudent future decisions regarding when to transition to
longer keys.
3) To help submitters make consistent and sensible choices regarding what
symmetric primitives to use in padding mechanisms or other components of their
schemes requiring symmetric cryptography.
4) To better understand the security/performance tradeoffs involved in a given
design approach."
The second part claims that the "categories" will help NIST make "prudent" decisions regarding transitions,
but says nothing about synchronizing the timing of future public-key transitions with future AES/SHA transitions.
The third part is about helping submitters, not about NIST's future transitions.
The first and fourth parts are about security/performance tradeoffs and comparisons.
#inconsistency
"Given the poor parallelization of Grover‐like attacks, the difficulty of constructing quantum computing hardware, and the
overhead associated with reversibility and fault tolerance, it seems likely that in practice, the security of postquantum schemes will
still be limited by the best classical attack."
Where are the calculations that led NIST to this claim?
#needmorerecords
For comparison, NIST in 2023 publicly wrote
"in the likely scenario where the limiting
attack on AES128 is Grover’s algorithm, this would further increase the security margin of
Kyber512 over AES128 in practice."
So the best attack against AES-128 changed from "likely ... classical" to "likely ... Grover"?
What happened to the "the poor parallelization of Grover‐like attacks, the difficulty of constructing quantum computing hardware, and the
overhead associated with reversibility and fault tolerance"?
#inconsistency
20160907 02:13:25
file 20230915/Science Day Poster_3.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:21:38 UTC
- PDF date: 20230912 10:21:36 -0400
- PDF creation date: 20230131 08:44:01 -0500
- Email date: 20160907 02:13:25
- PDF attachments: "pqc-poster-2016.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Science Day Poster"
- Pages: 1
- Bytes: 6778776
Notes from djb, last edited 20230915 23:13:56 UTC:
"I made the changes you recommended. I decided just to remove isogeny-based schemes, and stick
with the main ones."
20160907 02:42:17
file 20230915/PQC annual report_15.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:27:08 UTC
- PDF date: 20230912 11:27:07 -0400
- PDF creation date: 20230131 08:17:39 -0500
- Email date: 20160907 02:42:17
- PDF attachments: "pqc annual report 2016.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Miller, Carl A. (Fed); Alperin-Sheriff, Jacob (Fed); Jordan, Stephen P (Fed); Peralta, Rene C.(Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Liu,Yi-Kai (Fed)"
- Email subject: "PQC annual report"
- Pages: 1
- Bytes: 114292
Notes from djb, last edited 20230915 23:13:56 UTC:
"As the fiscal year ends, we have to submit our write-up of the PQC project for the Annual Report.
I’ve attached a draft. Let me know if
you have any comments/suggestions.
Thanks!"
20160907 03:00:35
file 20230915/Re_ PQC annual report(1)_14.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:26:42 UTC
- PDF date: 20230912 11:26:39 -0400
- PDF creation date: 20230131 08:17:38 -0500
- Email date: 20160907 03:00:35
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Miller, Carl A. (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed);Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Liu, Yi-Kai(Fed)"
- Email subject: "Re: PQC annual report"
- Pages: 2
- Bytes: 136882
Notes from djb, last edited 20230915 23:13:56 UTC:
Logistics.
20160907 03:09:00
file 20230915/RE_ Science Day Poster_2.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:21:00 UTC
- PDF date: 20230912 10:20:59 -0400
- PDF creation date: 20230131 08:44:00 -0500
- Email date: 20160907 03:09:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Mukes, Vickie J. (Fed)"
- Email subject: "RE: Science Day Poster"
- Pages: 1
- Bytes: 114840
Notes from djb, last edited 20230915 23:13:56 UTC:
Poster discussion.
Quoting "I decided just to remove isogeny-based schemes, and stick with the main ones."
20160907 12:05:51
file 20230915/ITL Science Day poster_4.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:22:44 UTC
- PDF date: 20230912 10:22:40 -0400
- PDF creation date: 20230131 07:57:47 -0500
- Email date: 20160907 12:05:51
- PDF attachments: "pqc-poster-2016.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed)"
- Email subject: "ITL Science Day poster"
- Pages: 1
- Bytes: 6781646
Notes from djb, last edited 20230915 23:13:56 UTC:
"I’ve attached the ITL Science Day poster for PQC. I modified the one we’ve used in the past to have
some details about our standardization
plan. Let me know if you want anything
changed."
20160907 18:10:12 UTC
file 20230915/Science Day Poster_3.pdf-attachment-pqc-poster-2016.pptx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:21:38 UTC
- XML date: 20160907 18:10:12 UTC
- XML creation date: 20060816 00:00:00 UTC
- XML creator: "Liu, Yi-Kai"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 29168950
20160907 18:40:00 UTC
file 20230915/PQC annual report_15.pdf-attachment-pqc annual report 2016.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:27:08 UTC
- XML date: 20160907 18:40:00 UTC
- XML creation date: 20160907 18:40:00 UTC
- XML creator: "Dang, Quynh"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 16261
Notes from djb, last edited 20230915 23:13:56 UTC:
"NIST researchers have held regular seminars throughout FY 2016. The presentation topics include the latest published results, synopsis of security analysis, and status reports in
the areas of quantum computation, hash-based signatures, coding-based cryptography, lattice-based cryptography, and multivariate cryptography. Through these presentations and
discussions, the team has made significant progress in understanding the strengths and weaknesses of the existing cryptographic schemes in each category."
"Email project team: pqc@nist.gov"
#nsa
20160908 23:39:00 UTC
file 20230915/2016 Annual Report - Write-up to Update (POST ..._12.pdf-attachment-Post Quantum_DMoody-YLiu-LChen.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:24:18 UTC
- XML date: 20160908 23:39:00 UTC
- XML creation date: 20160908 23:38:00 UTC
- XML creator: "O'Reilly, Patrick D. (Fed)"
- XML last-modified-by: "O'Reilly, Patrick D. (Fed)"
- Pages: 2
- Bytes: 13891
Notes from djb, last edited 20230915 23:13:56 UTC:
"The focus of the Post-Quantum Cryptography project is to identify candidate quantum-resistant systems that are secure against both quantum and classical computers, as well as the
impact that such post-quantum algorithms will have on current protocols and security infrastructures."
In fact, the project didn't investigate the impact on protocols and security infrastructures.
#inconsistency
"In FY 2015, NIST researchers held regular seminars. The presentation topics included the latest published results; a synopsis of the security analysis; and status reports in the
areas of quantum computation, hash-based signatures, coding-based cryptography, lattice-based cryptography, and multivariate cryptography. Through these presentations and
discussions, the team made significant progress in understanding the strengths and weaknesses of the existing cryptographic schemes in each category. The project team is planning to
create evaluation criteria for post-quantum cryptography schemes for standardization."
What happened in these seminars?
#needmorerecords
Was any of this shown to the public?
#weveshownallourwork
"Email project team: pqc@nist.gov"
#nsa
20160909 04:41:28
file 20230816/Slides for ETSI workshop-2.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 08:51:52 UTC
- PDF date: 20230814 10:51:50 -0400
- PDF creation date: 20230131 08:46:31 -0500
- Email date: 20160909 04:41:28
- PDF attachments: "ETSI-2016-0909.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Slides for ETSI workshop"
- Pages: 1
- Bytes: 858917
20160909 11:29:00
file 20230915/RE_ PQC annual report_13.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:25:56 UTC
- PDF date: 20230912 11:25:55 -0400
- PDF creation date: 20230131 08:17:35 -0500
- Email date: 20160909 11:29:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: PQC annual report"
- Pages: 4
- Bytes: 113430
Notes from djb, last edited 20230915 23:13:56 UTC:
"It will be great if you can start to summarize the comments when we receive more comments, at least, to group them
together and pick some critical issues. Actually the week after the deadline, Dustin and I will be at ETSI Quantum-
Safe workshop. You and Ray will be in the office. We will communicate through e-mails."
20160909 20:37:54 UTC
file 20230816/Slides for ETSI workshop-2.pdf-attachment-ETSI-2016-0909.pptx:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 08:51:52 UTC
- XML date: 20160909 20:37:54 UTC
- XML creation date: 20151116 14:26:06 UTC
- XML creator: "Chen, Lily"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 12
- Bytes: 1065907
20160912 06:07:31
file 20230915/Re_ randomness at the optics teleconference(2)_4.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:06:20 UTC
- PDF date: 20230912 11:06:18 -0400
- PDF creation date: 20230131 08:28:34 -0500
- Email date: 20160912 06:07:31
- Email from: "Peralta, Rene (Fed)"
- Email to: "Miller, Carl A. (Fed); Gerrits, Thomas Dr. (Fed); Glancy, Scott C. (Fed)"
- Email cc: "Jordan, Stephen P (Fed); Kuo, Paulina S. (Fed)"
- Email subject: "Re: randomness at the optics teleconference"
- Pages: 2
- Bytes: 117617
Notes from djb, last edited 20230915 23:13:56 UTC:
Logistics.
20160912 06:09:38
file 20230915/Re_ randomness at the optics teleconference(1)_3.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:05:40 UTC
- PDF date: 20230912 11:05:37 -0400
- PDF creation date: 20230131 08:28:33 -0500
- Email date: 20160912 06:09:38
- Email from: "Peralta, Rene (Fed)"
- Email to: "Miller, Carl A. (Fed)"
- Email subject: "Re: randomness at the optics teleconference"
- Pages: 2
- Bytes: 115690
Notes from djb, last edited 20230915 23:13:56 UTC:
Meeting logistics.
20160912 18:44:49 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-ETSI-2016-0909dm.pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20160912 18:44:49 UTC
- XML creation date: 20151116 14:26:06 UTC
- XML creator: "Chen, Lily"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 12
- Bytes: 1067393
Notes from djb, last edited 20240225 11:49:06 UTC:
Looks like ETSI-2016-0909.docx.
20160913
file 20230210/Comment on Post-Quantum Cryptography Requirements and ...pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:28:54 +0000
- PDF creation date: 20161003 20:28:54 +0000
- Date: 20160913
- Author: "Aline Gouget"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 158447
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov
pointing out that the claimed collision-search costs
listed by NIST in its draft call for submissions
had been debunked
in 2009.
20160913
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..2.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:29:30 +0000
- PDF creation date: 20161003 20:29:30 +0000
- Date: 20160913
- Author: "Mike Brown" and "Atsushi Yamada"
- Title: "Comment on Post-Quantum Cryptography Requirements and Evaluation Criteria."
- Pages: 2
- Bytes: 116140
Notes from djb, last edited 20230218 16:05:00 UTC:
Email from patent troll ISARA to pqc-comments@nist.gov
with various suggestions.
For example:
"It is unclear the reason to include optimized source code within the submission package. Typically, optimizations are a way
for industry to differentiate product offerings from each other and as such should be considered out of scope for the
standardization process."
20160913 04:54:25
file 20230816/Thoughts on How I'm Compiling Comments So Far_-1.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 09:01:54 UTC
- PDF date: 20230814 11:01:52 -0400
- PDF creation date: 20230131 09:16:10 -0500
- Email date: 20160913 04:54:25
- PDF attachments: "Organizing Comments on Draft.docx"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email cc: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Thoughts on How I"m Compiling Comments So Far?"
- Pages: 1
- Bytes: 206532
20160913 08:09:51
file 20230815/pqc mailing list-4.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:09:32 UTC
- PDF date: 20230814 10:09:31 -0400
- PDF creation date: 20230131 08:21:27 -0500
- Email date: 20160913 08:09:51
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "pqc mailing list"
- Pages: 1
- Bytes: 82169
Notes from djb, last edited 20230909 22:51:01 UTC:
"Can you give me a list of who receives mail sent to the pqc@nist.gov address?"
#nsa
20160913 09:05:58
file 20230815/Re_ pqc mailing list(1)-3.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:09:16 UTC
- PDF date: 20230814 10:09:14 -0400
- PDF creation date: 20230131 08:21:26 -0500
- Email date: 20160913 09:05:58
- Email from: "Peralta, Rene (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Re: pqc mailing list"
- Pages: 2
- Bytes: 152798
Notes from djb, last edited 20230910 09:53:01 UTC:
Saying that pqc@nist.gov currently contains the following names
(and suggesting
"add Jacob Alperin ?
add Carl Miller ?
remove Adam O'neill ?"):
- "Yi-Kai Liu" (NIST)
- "William Polk" (NIST)
- "Stephen Jordan" (NIST)
- "Scott Simon" (#nsa)
- "Ray Perlner" (NIST)
- "Rene Peralta" (NIST)
- "Nick Gajcowski" (#nsa)
- "Mark Motley" (#nsa)
- "Lily Chen" (NIST)
- "Laurie Law" (#nsa)
- "John McVey" (#nsa)
- "Jonathan Katz" (QuICS, which says it's a partnership between UMD and NIST)
- "Jerry Solinas" (#nsa; previously known for generating NSA's elliptic curves; reportedly heading NSA's post-quantum efforts since 2004)
- "Jacob Farinholt" (Naval Surface Warfare Center, US Navy; moved in 2019 to Booz Allen Hamilton)
- "Evan Bullock" (?)
- "Dustin Moody" (NIST)
- "Daniel Kirkwood" (#nsa)
- "David Tuller" (#nsa)
- "Daniel Smith" (NIST)
- "David Hubbard" (#nsa, currently Director of Legislative Affairs)
- "Bill Fefferman" (QuICS)
- "Bradley C. Lackey" (#nsa)
- "Adam O'neill" (was a NIST visitor)
For comparison,
https://web.archive.org/web/20230910091944/https://csrc.nist.gov/CSRC/media/Events/ISPAB-MARCH-2014-MEETING/documents/a_quantum_world_v1_ispab_march_2014.pdf
lists its authorship as
"Post Quantum Cryptography Team,
National Institute of Standards and Technology (NIST),
pqc@nist.gov"
and keeps NSA's presence on "NIST's" post-quantum team secret.
20160913 09:24:50
file 20230815/Re_ pqc mailing list-2.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:09:00 UTC
- PDF date: 20230814 10:08:58 -0400
- PDF creation date: 20230131 08:21:25 -0500
- Email date: 20160913 09:24:50
- Email from: "Peralta, Rene (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: pqc mailing list"
- Pages: 2
- Bytes: 153182
Notes from djb, last edited 20230909 22:51:01 UTC:
Saying names have been added to pqc@nist.gov:
- "Jacob Alperin-Sheriff"
- "Carl Miller"
- "Thinh Dang (Quynh's brother who is interning here)"
- "Rich Davis (radavi1@nsa.gov)"
#nsa
20160913 09:26:40
file 20230815/pqc mailing list-1 .pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:08:44 UTC
- PDF date: 20230814 10:08:43 -0400
- PDF creation date: 20230131 08:21:28 -0500
- Email date: 20160913 09:26:40
- Email from: "Peralta, Rene (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "pqc mailing list"
- Pages: 1
- Bytes: 97675
20160913 20:52:00 UTC
file 20230816/Thoughts on How I'm Compiling Comments So Far_-1.pdf-attachment-Organizing Comments on Draft.docx:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 09:01:54 UTC
- XML date: 20160913 20:52:00 UTC
- XML creation date: 20160913 19:37:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 3
- Bytes: 123367
20160914
file 20230210/[Pqc-forum] Implementation Issues - Liu, Yi-Kai (Fed).pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:30:38 +0000
- PDF creation date: 20161003 20:30:38 +0000
- Date: 20160914
- Author: "Laszlo Hars"
- Title: "Implementation Issues"
- Pages: 1
- Bytes: 159148
Notes from djb, last edited 20230218 16:05:01 UTC:
Public email to pqc-forum with same comments sent to pqc-comments@nist.gov.
20160914 01:41:01
file 20230915/Re_ BF crypto - resources(1)_2.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:38:28 UTC
- PDF date: 20230912 11:38:26 -0400
- PDF creation date: 20230131 07:32:18 -0500
- Email date: 20160914 01:41:01
- Email from: "Black, Paul E. (Fed)"
- Email to: "Yesha, Yaacov (Fed); Bojanova, Irena V. (Fed); Yan Wu; Peralta, Rene C. (Fed); Kelsey, John M. (Fed)"
- Email subject: "Re: BF crypto - resources"
- Pages: 2
- Bytes: 124356
Notes from djb, last edited 20230915 23:13:56 UTC:
"That's CWE-327 Use of a Broken or Risky Cryptographic Algorithm (2.9)"
"One can Google CWE and key word, and one often gets a hit."
20160914 19:16:00 UTC
file 20230210/Comments on the NIST call for PQC standards (1).docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- XML date: 20160914 19:16:00 UTC
- XML creation date: 20160911 13:19:00 UTC
- Author: Not listed, but XML metadata says "Jintai Ding".
- Title: "Comments and questions on the NIST call for PQC standards."
- XML creator: "Jintai Ding"
- XML last-modified-by: "Jintai Ding"
- Pages: 2
- Bytes: 115192
Notes from djb, last edited 20230218 16:05:01 UTC:
"what if the submission infringes on others’ patent or patent application and does not disclose it?"
"Must each submission submit at least one set of parameters for each security target?"
"If an attack on a scheme requires an tremendous memory, can it be considered secure?"
"What is the threshold for decryption failure?"
20160914 19:16:00 UTC
file 20230210/Comments on the NIST call for PQC standards.docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- XML date: 20160914 19:16:00 UTC
- XML creation date: 20160911 13:19:00 UTC
- XML creator: "Jintai Ding"
- XML last-modified-by: "Jintai Ding"
- Pages: 2
- Bytes: 115186
Notes from djb, last edited 20230218 16:05:01 UTC:
Not byte-for-byte identical to "Comments on the NIST call for PQC standards (1).docx",
but no evident differences in the text.
20160915
file 20230210/About stateful hash-based signatures - Liu, Yi-Kai (Fed).pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:32:12 +0000
- PDF creation date: 20161003 20:32:12 +0000
- Date: 20160915
- Author: "Ahto Truu"
- Title: "About stateful hash-based signatures"
- Pages: 1
- Bytes: 69830
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov
asking about stateful hash-based signatures.
20160915
file 20230210/Comment - Liu, Yi-Kai (Fed).pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:32:45 +0000
- PDF creation date: 20161003 20:32:45 +0000
- Date: 20160915
- Author: "Jan Seidl"
- Title: "Comment"
- Pages: 1
- Bytes: 85025
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov
suggesting a change from "should" to "required"
regarding analysis of how security and performance depend on parameters.
20160915
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..3.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:31:31 +0000
- PDF creation date: 20161003 20:31:31 +0000
- Date: 20160915
- Author: "Vadim Lyubashevsky"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 1
- Bytes: 118636
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov.
"I do not understand the relationship that is drawn between the security of public
key primitives and brute‐force attacks on SHA/AES.
Unlike SHA/AES, the best attacks against public key primitives are not brute force,
so there is no reason to assume that the effect of Grover’s algorithm on the quantum security of such primitives
is analogous to its effect on symmetric ones such as SHA/AES. ...
But just because one needs to increase the security of the hash
function does not imply that anything needs to be increased in the rest of the construction.
For example, there are no known quantum algorithms for
lattice reduction that outperform classical ones by any significant margin. ...
I believe that it would
be very wasteful to set parameters so that the whole public key scheme is 256‐bit secure classically when what we really want is that the scheme
cannot be broken in 2128 time on a quantum computer."
20160915
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..4.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:33:16 +0000
- PDF creation date: 20161003 20:33:16 +0000
- Date: 20160915
- Author: "David Jao"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 114101
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov.
"I would like to see assembly
optimizations (at least inline ASM) allowed for the optimized
implementation, because otherwise the implementation would not be
representative of real‐world conditions, especially for number‐theoretic
cryptography which relatively speaking benefits more from assembly
optimization than other families of cryptosystems."
"It is not clear what security model NIST is proposing for key establishment."
20160915
file 20230210/comments-pqc-call.txt:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- Date: 20160915
- Author: "Tanja Lange"
- Title: "Comments on 'Proposed Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process', draft from August 2016"
- Bytes: 11369
20160915 02:15:30
file 20230815/Re_ PQC comments(2)-4.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:56:48 UTC
- PDF date: 20230814 09:56:47 -0400
- PDF creation date: 20230131 08:19:15 -0500
- Email date: 20160915 02:15:30
- PDF attachments: "Organizing Comments on Draft.docx"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC comments"
- Pages: 1
- Bytes: 266489
20160915 02:19:40
file 20230815/Re_ PQC comments(1)-3.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:56:20 UTC
- PDF date: 20230814 09:56:19 -0400
- PDF creation date: 20230131 08:19:13 -0500
- Email date: 20160915 02:19:40
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC comments"
- Pages: 2
- Bytes: 130559
Notes from djb, last edited 20230909 22:51:01 UTC:
Email about reminding Jonathan Katz of NIST's deadline for comments.
Quoted email says
"Just a reminder the comment period for our draft PQC requirements ends tomorrow. If you know
anyone who you think needs a reminder, then let them know. ...
Please don’t worry about responding back to the authors of the comments we receive. We don’t
usually write individual responses when we make a public call for comments. We will discuss the
comments together, and if we feel we want to reply back to anyone, we can then do so at that point."
20160915 05:13:50
file 20230915/Re_ BF crypto - resources_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:37:44 UTC
- PDF date: 20230912 11:37:42 -0400
- PDF creation date: 20230131 07:32:15 -0500
- Email date: 20160915 05:13:50
- Email from: "Yesha, Yaacov (Fed)"
- Email to: "Peralta, Rene C. (Fed); Black, Paul E. (Fed); Bojanova, Irena V. (Fed); Yan Wu; Kelsey, John M. (Fed)"
- Email subject: "Re: BF crypto - resources"
- Pages: 3
- Bytes: 158419
Notes from djb, last edited 20230915 23:13:56 UTC:
"This is a very good point. Using plain RSA may be considered
using an adequate algorithm, namely, RSA, without a crucial additional step that is needed for
making the whole process adequate. This may be considered a different type of weakness
than using an encryption algorithm that is not adequate."
20160915 06:35:46
file 20230815/Re_ MC of the Counting function (8,4) is 6.(1)-2.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 06:58:48 UTC
- PDF date: 20230814 08:58:47 -0400
- PDF creation date: 20230131 08:03:41 -0500
- Email date: 20160915 06:35:46
- PDF attachments: "MultComp3.pdf"
- Email from: "Peralta, Rene (Fed)"
- Email to: "Calik, Cagdas (IntlAssoc)"
- Email cc: "Sonmez Turan, Meltem (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: MC of the Counting function (8,4) is 6."
- Pages: 2
- Bytes: 138474
20160915 09:31:00
file 20230815/RE_ PQC comments-5.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:57:04 UTC
- PDF date: 20230814 09:57:02 -0400
- PDF creation date: 20230131 08:19:16 -0500
- Email date: 20160915 09:31:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: PQC comments"
- Pages: 1
- Bytes: 116700
Notes from djb, last edited 20230909 22:51:01 UTC:
Logistics.
20160915 12:18:40
file 20230815/pqc hash signatures-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:07:50 UTC
- PDF date: 20230814 10:07:48 -0400
- PDF creation date: 20230131 08:20:24 -0500
- Email date: 20160915 12:18:40
- Email from: "Moody, Dustin (Fed)"
- Email to: "Dang, Quynh H. (Fed)"
- Email subject: "pqc hash signatures"
- Pages: 1
- Bytes: 85693
Notes from djb, last edited 20230909 22:51:01 UTC:
"Do you want to respond, since you are our contact with the IETF? The best person for him to contact
might be Andreas Hulsing. As for our part, we don’t have a timeline. We are largely following the
IETF as you know."
20160915 15:31:22 -0400
file 20230815/Re_ MC of the Counting function (8,4) is 6.(1)-2.pdf-attachment-MultComp3.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 06:58:48 UTC
- PDF date: 20160915 15:31:22 -0400
- PDF creation date: 20160915 15:31:22 -0400
- PDF title: "MultComp3.dvi"
- Pages: 1
- Bytes: 24179
20160915 18:14:00 UTC
file 20230815/Re_ PQC comments(2)-4.pdf-attachment-Organizing Comments on Draft.docx:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:56:48 UTC
- XML date: 20160915 18:14:00 UTC
- XML creation date: 20160915 18:12:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 5
- Bytes: 143274
20160916
file 20230206/ETSI-2016-0916R1.pdf:
- FOIA delivery date: 20230206
- FOIA file date: 20221209 16:46:00 UTC
- PDF date: 20220907 21:40:58 -0400
- PDF creation date: 20220907 21:40:41 -0400
- Date: 20160916
- Author: "Lily Chen and Dustin Moody"
- PDF author: "Chen, Lily"
- Title: "Towards Post-Quantum Cryptography Standardization"
- PDF title: "Challenges in Post Quantum Cryptography Standardization"
- Pages: 12
- Bytes: 283591
Notes from djb, last edited 20230625 17:50:02 UTC:
Slides of an external talk on 2016.09.16.
Are these the final slides?
"Received comments from N individuals/teams"
"The following metrics are considered as the minimum security strength
at different levels to enable transition from one security level to another"
"Quantum Security" of "80 bits" for "SHA256/SHA3-256" collisions.
#error
"Hybrid mode may not be considered as a long term quantum resistant
solution for its implementation burden (a double edge sword)":
This comes right after saying what NIST "will" do,
so readers could read "may not" as "shall not"
rather than as "perhaps will not".
#missingclarity
20160916
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..5.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:34:05 +0000
- PDF creation date: 20161003 20:34:05 +0000
- Date: 20160916
- Author: "Christian Rechberger" and "Martin Lauridsen" and "Willi Meier"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 1
- Bytes: 92070
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov
requesting a separation between signature modes and underlying primitives.
20160916
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..7.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:36:37 +0000
- PDF creation date: 20161003 20:36:37 +0000
- Date: 20160916
- Author: "Peter Schwabe"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 1
- Bytes: 83337
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov
suggesting that passive security be allowed as a target
and suggesting that "128‐bits of pre‐quantum and post‐quantum security" be allowed as a target.
20160916
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..8.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:37:17 +0000
- PDF creation date: 20161003 20:37:17 +0000
- Date: 20160916
- Author: "Derek Atkins"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 110153
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov
suggesting 8-bit and 16-bit microcontrollers as targets
and suggesting an API that dynamically allocates memory for keys and signatures.
20160916
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..9.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:37:48 +0000
- PDF creation date: 20161003 20:37:48 +0000
- Date: 20160916
- Author: "Douglas Stebila"
- Title: "Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 117584
Notes from djb, last edited 20230218 16:05:01 UTC:
Email to pqc-comments@nist.gov.
"I suggest omitting security levels below 128 bits of quantum security."
"It would be unfortunate if promising submissions were disqualified because of cryptanalytic advances shaved e.g. 10 bits of security
off of a 128‐bit‐level submission."
"2) Royalty‐free"
20160916
file 20230210/NIST PQC Comments from Microsoft.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20160916 16:43:45 -0700
- PDF creation date: 20160916 16:43:45 -0700
- Date: 20160916
- Author: "Brian A. LaMacchia" (writing as "We", meaning "Microsoft Corporation")
- PDF author: "Karen Easterbrook"
- Title: "Subject: Comments on Proposed Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process"
- Pages: 5
- Bytes: 608812
Notes from djb, last edited 20230218 16:05:01 UTC:
Letter to NIST.
"... an open and transparent process with clear technical guidelines and
evaluation criteria will help ensure that the results of this process are trusted and credible"
"It is critical that NIST maintain the same intellectual property rights
disclosure and release requirements that were set out for the SHA-3 competition, namely
that all submitters be required to release any and all IP claims as a condition of entry,
and that each submitter agree to unrestricted, royalty-free use of their work."
"Additionally, we note that the proposed approach to Intellectual Property Rights for this
competition conflicts with NIST’s stated commitment in NISTIR 7977 on this specific
issue."
"This process is clearly a competition as defined in NISTIR 7977, so NIST must adhere to
the IPR commitments it made for competitions in that document."
"To ensure that “optimized implementations” reflect what would be deployed, and to
enable apples-to-apples comparisons, all “optimized implementations” submitted for
this effort should be designed to be constant-time. Second-round updates to
submissions may make updates to fix constant-time-related bugs in first-round submissions."
"The performance evaluation of “optimized implementations” must be done by NIST
directly or by an independent and neutral third party not affiliated with any party
involved in any submission. The tools used in this evaluation must be open,
independent, auditable and neutral, their code must be freely published for inspection,
and must not be owned by or affiliated with any party involved in any submission. No
submitter can be involved in performance evaluation in any capacity."
"The performance evaluation should cover the following platforms at a minimum: a 64-bit
processor “server class” and a 32-bit processor “mobile class”. In addition, testing should
be conducted on 8-bit and 32-bit microcontrollers, and be evaluated on at least one
alternative hardware platform (e.g., FPGA)."
"We suggest that NIST remove target levels (1), (2) and (3) and replace
them with a target level of 128 bits classical security / 128 bits quantum security, and
that this new level be the minimum target level."
20160916
file 20230210/Re_ [Pqc-forum] Comment on Post-Quantum Cryptography Re...pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:35:57 +0000
- PDF creation date: 20161003 20:35:57 +0000
- Date: 20160916
- Author: "alan szepieniec"
- Title: "Re: [Pqc‐forum] Comment on Post‐Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 113724
Notes from djb, last edited 20230218 16:05:01 UTC:
Public email to pqc-forum,
pointing out a way that submitters could evade the goal of a requirement to provide scaled-down parameters.
20160916
file 20230915/ETSI-2016-0916.pptx:
- FOIA delivery date: 20230915
- FOIA file date: 20230323 13:38:36 UTC
- XML date: 20230323 18:38:36 UTC
- XML creation date: 20151116 14:26:06 UTC
- Date: 20160916
- Author: "Lily Chen and Dustin Moody"
- Title: "Towards Post-Quantum Cryptography Standardization"
- XML creator: "Chen, Lily"
- XML last-modified-by: "Scholl, Matthew A. (Fed)"
- Pages: 12
- Bytes: 1066910
Notes from djb, last edited 20230915 23:13:56 UTC:
"After about four years of preparation, NIST published a Federal Register Notice (FRN) August 2, 2016"
Claims that SHA3-256 has only "80 bits" collision resistance. #error
20160916 08:36:37
file 20230815/Re_ MC of the Counting function (8,4) is 6-1..pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 06:58:28 UTC
- PDF date: 20230814 08:58:27 -0400
- PDF creation date: 20230131 08:03:40 -0500
- Email date: 20160916 08:36:37
- Email from: "Peralta, Rene (Fed)"
- Email to: "Calik, Cagdas (IntlAssoc)"
- Email cc: "Sonmez Turan, Meltem (Fed)"
- Email subject: "Re: MC of the Counting function (8,4) is 6."
- Pages: 2
- Bytes: 117381
20160916 09:37:37
file 20230816/Slides foe ETSI Workshop-1.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 08:51:36 UTC
- PDF date: 20230814 10:51:34 -0400
- PDF creation date: 20230131 08:46:29 -0500
- Email date: 20160916 09:37:37
- PDF attachments: "ETSI-2016-0916.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Slides foe ETSI Workshop"
- Pages: 1
- Bytes: 840399
20160916 10:15:35
file 20230915/quantum_tps.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:03:52 UTC
- PDF date: 20230912 11:03:49 -0400
- PDF creation date: 20230131 08:25:02 -0500
- Email date: 20160916 10:15:35
- PDF attachments: "Quantum talking points.docx"
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "quantum tps"
- Pages: 1
- Bytes: 157675
Notes from djb, last edited 20230915 23:13:56 UTC:
"Here is my start and I will finish
these in the morning."
20160916 11:18:00
file 20230815/next pqc talk_-2.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:52:42 UTC
- PDF date: 20230814 09:52:40 -0400
- PDF creation date: 20230131 08:09:54 -0500
- Email date: 20160916 11:18:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "next pqc talk?"
- Pages: 1
- Bytes: 82125
Notes from djb, last edited 20230909 22:51:01 UTC:
Asking for a 2016.09.30 talk on "Ding’s extension field ideas".
20160916 11:44:00
file 20230815/RE_ next pqc talk_-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:52:24 UTC
- PDF date: 20230814 09:52:22 -0400
- PDF creation date: 20230131 08:09:53 -0500
- Email date: 20160916 11:44:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel Smith"
- Email subject: "RE: next pqc talk?"
- Pages: 1
- Bytes: 153877
20160916 13:35:28 UTC
file 20230816/Slides foe ETSI Workshop-1.pdf-attachment-ETSI-2016-0916.pptx:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 08:51:36 UTC
- XML date: 20160916 13:35:28 UTC
- XML creation date: 20151116 14:26:06 UTC
- XML creator: "Chen, Lily"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 12
- Bytes: 1067065
20160916 15:44:57 UTC
file 20230105/ETSI-2016-0916 Ray.pptx:
- FOIA delivery date: 20230105
- FOIA file date: 20221107 17:52:00 UTC
- XML date: 20160916 15:44:57 UTC
- XML creation date: 20151116 14:26:06 UTC
- Author: "Lily Chen and Dustin Moody"
- Title: "Towards Post-Quantum Cryptography Standardization"
- XML creator: "Chen, Lily"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 12
- Bytes: 1079179
Notes from djb, last edited 20230125 23:38:54 UTC:
Draft slides for a public talk.
20160917
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..11.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:39:31 +0000
- PDF creation date: 20161003 20:39:31 +0000
- Date: 20160917
- Author: "Frank Morgner"
- Title: "Comment on Post-Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 2
- Bytes: 91376
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov.
"Unfortunately, standardization committees in general have suffered from a decline in credebility in the past years.
Many people think that the standardization process can be manipulated by powerful industry lobbying and governmental intrests.
We think, that a modern standardization should include the maximum amount of transparency possible."
20160917
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..12.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:40:01 +0000
- PDF creation date: 20161003 20:40:01 +0000
- Date: 20160917
- Author: "Laszlo Hars"
- Title: "Comment on Post-Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 1
- Bytes: 154016
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov.
"Maybe NIST could consider another set of evaluation critera, resistance against traditional physical attacks."
20160917
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..13.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:40:29 +0000
- PDF creation date: 20161003 20:40:29 +0000
- Date: 20160917
- Author: "D. J. Bernstein"
- Title: "Comment on Post-Quantum Cryptography Requirements and Evaluation Criteria"
- Pages: 7
- Bytes: 244251
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov.
Author put these comments online
on 2016.10.30.
20160917 02:14:00 UTC
file 20230915/quantum_tps.pdf-attachment-Quantum talking points.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:03:52 UTC
- XML date: 20160917 02:14:00 UTC
- XML creation date: 20160917 00:02:00 UTC
- XML creator: "Microsoft Office User"
- XML last-modified-by: "Microsoft Office User"
- Pages: 1
- Bytes: 81751
20160917 23:48:50 UTC
file 20230816/NIST PQC Comments from Microsoft-2 copy.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 09:21:00 UTC
- PDF date: 20160917 23:48:50 UTC
- PDF creation date: 20160917 23:48:50 UTC
- PDF author: "Karen Easterbrook"
- Pages: 5
- Bytes: 412925
Notes from djb, last edited 20230909 22:51:01 UTC:
Public comments from Brian A. LaMacchia on behalf of Microsoft.
"It is critical that NIST maintain the same intellectual property rights
disclosure and release requirements that were set out for the SHA-3 competition, namely
that all submitters be required to release any and all IP claims as a condition of entry,
and that each submitter agree to unrestricted, royalty-free use of their work."
"This process is clearly a competition as defined in NISTIR 7977, so NIST must adhere to
the IPR commitments it made for competitions in that document."
"To ensure that “optimized implementations” reflect what would be deployed, and to
enable apples-to-apples comparisons, all “optimized implementations” submitted for
this effort should be designed to be constant-time."
"The performance evaluation of “optimized implementations” must be done by NIST
directly or by an independent and neutral third party not affiliated with any party
involved in any submission. The tools used in this evaluation must be open,
independent, auditable and neutral, their code must be freely published for inspection,
and must not be owned by or affiliated with any party involved in any submission. No
submitter can be involved in performance evaluation in any capacity."
"First, some proposed quantum-resistant schemes may have
benefits when combined with certain classical schemes ...
For a practical example of such ancillary benefits see C. Costello, P. Longa and M. Naehrig, Efficient Algorithms for
Supersingular Isogeny Diffie-Hellman, recently presented at Crypto 2016 and available online at
http://eprint.iacr.org/2016/413. In this paper the authors present a post-quantum key agreement scheme based
on supersingular isogenies, and in Section 8 they present a strong ECDH+SIDH hybrid (“BigMont”) that leverages
the underlying field arithmetic of the post-quantum scheme to provide a parallel ECDH key exchange for very little
overhead. NIST’s current proposed language would prohibit NIST from considering hybrid benefits from such
schemes."
20160919 08:05:46
file 20230816/Received Comments 9_1-18-6-1.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230815 10:15:28 UTC
- PDF date: 20230815 12:15:25 -0400
- PDF creation date: 20230131 08:31:58 -0500
- Email date: 20160919 08:05:46
- PDF attachments: "com9_1-18.zip"
- Email from: "Chen, Lily (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed);Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Alperin-Sheriff, Jacob (Fed); Miller, Carl A. (Fed)"
- Email subject: "Received Comments 9/1-18"
- Pages: 39
- Bytes: 3125483
Notes from djb, last edited 20230909 22:51:01 UTC:
"The main commented areas are (in order of the number of comments). I think we will need to
further separate the comments to the each topics.
1. Quantum security strength
2. Key exchange (KEM vs. DHish)
3. IPR
4. Hybrid mode"
Includes copies of various public comments.
20160919 08:09:07
file 20230816/Fw_ Received Comments 9_1-18-5.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 08:17:36 UTC
- PDF date: 20230814 10:17:33 -0400
- PDF creation date: 20230131 08:31:55 -0500
- Email date: 20160919 08:09:07
- PDF attachments: "com9_1-18.zip"
- Email from: "Chen, Lily (Fed)"
- Email to: "Scholl, Matthew A. (Fed); Regenscheid, Andrew R. (Fed); Dodson, Donna F (Fed)"
- Email subject: "Fw: Received Comments 9/1-18"
- Pages: 1
- Bytes: 2823521
20160919 09:03:41
file 20230815/Re_ Received Comments 9_1-18(3)-4.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:17:18 UTC
- PDF date: 20230814 10:17:16 -0400
- PDF creation date: 20230131 08:31:54 -0500
- Email date: 20160919 09:03:41
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Perlner, Ray A. (Fed); Moody, Dustin (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Miller, Carl A. (Fed)"
- Email subject: "Re: Received Comments 9/1-18"
- Pages: 2
- Bytes: 123954
20160919 09:07:44
file 20230815/Re_ Received Comments 9_1-18(2)-3.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:17:00 UTC
- PDF date: 20230814 10:16:58 -0400
- PDF creation date: 20230131 08:31:52 -0500
- Email date: 20160919 09:07:44
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Perlner, Ray A. (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: Received Comments 9/1-18"
- Pages: 2
- Bytes: 129979
20160919 10:16:08
file 20230815/Re_ Received Comments 9_1-18(1)-2.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:16:44 UTC
- PDF date: 20230814 10:16:42 -0400
- PDF creation date: 20230131 08:31:50 -0500
- Email date: 20160919 10:16:08
- PDF attachments: "Bernstein and Lange.docx"; "Organized Draft Comments.docx"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Chen, Lily (Fed); Perlner, Ray A. (Fed); Moody, Dustin (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Liu,Yi-Kai (Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Miller, Carl A. (Fed)"
- Email subject: "Re: Received Comments 9/1-18"
- Pages: 2
- Bytes: 335432
Notes from djb, last edited 20230909 22:51:01 UTC:
"The following two documents contain
1. [Bernstein and Lange] the comments by the dynamic duo of D.J. Bernstein and Tanja Lange, whose
complete comments are put together one after another in a separate file per Lily’s request
2. [Organized Draft Comments] All of our received comments (including those of Bernstein and Lange,
as well as the nonsensical comments by our buddy Mr. W1SD0M) have been organized to the best of
my ability by which part of the draft they refer to, and should make it a little easier to wade through
them and incorporate the good ones over the next few months.
"
20160919 10:18:31
file 20230815/Re_ Received Comments 9_1-18-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:16:20 UTC
- PDF date: 20230814 10:16:17 -0400
- PDF creation date: 20230131 08:31:48 -0500
- Email date: 20160919 10:18:31
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Perlner, Ray A. (Fed); Moody, Dustin (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Miller, Carl A. (Fed)"
- Email subject: "Re: Received Comments 9/1-18"
- Pages: 2
- Bytes: 119911
20160919 14:13:00 UTC
file 20230815/Re_ Received Comments 9_1-18(1)-2.pdf-attachment-Organized Draft Comments.docx:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:16:44 UTC
- XML date: 20160919 14:13:00 UTC
- XML creation date: 20160919 14:08:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 30
- Bytes: 74144
20160919 14:15:00 UTC
file 20230815/Re_ Received Comments 9_1-18(1)-2.pdf-attachment-Bernstein and Lange.docx:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:16:44 UTC
- XML date: 20160919 14:15:00 UTC
- XML creation date: 20160919 14:06:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 13
- Bytes: 134266
20160920 06:56:46
file 20230815/Re_ minimum uncertainty wavepackets(1)-2.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:01:36 UTC
- PDF date: 20230814 09:01:34 -0400
- PDF creation date: 20230131 08:06:21 -0500
- Email date: 20160920 06:56:46
- Email from: "Scott Glancy"
- Email to: "Jordan, Stephen P (Fed); Knill, Emanuel H. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: minimum uncertainty wavepackets"
- Pages: 1
- Bytes: 114043
20160920 06:59:58
file 20230815/Re_ minimum uncertainty wavepackets-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:01:18 UTC
- PDF date: 20230814 09:01:16 -0400
- PDF creation date: 20230131 08:06:19 -0500
- Email date: 20160920 06:59:58
- Email from: "Stephen Jordan"
- Email to: "Glancy, Scott C. (Fed); Knill, Emanuel H. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: minimum uncertainty wavepackets"
- Pages: 1
- Bytes: 115459
20160920 08:34:13
file 20230816/PQC comments-2_with_Comments.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230815 06:42:46 UTC
- PDF date: 20230815 08:42:43 -0400
- PDF creation date: 20230131 08:19:10 -0500
- Email date: 20160920 08:34:13
- PDF attachments: "Comments9-1-18.zip"
- Email from: "Dustin Moody"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Chen, Lily (Fed); Daniel Smith; Perlner, Ray A. (Fed); Alperin-Sheriff,Jacob (Fed); Miller, Carl A. (Fed); Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "PQC comments"
- Pages: 39
- Bytes: 3081521
Notes from djb, last edited 20230909 22:51:01 UTC:
"I'm attaching an updated version which has a couple of comments she missed. The
most important of which is Jintai Ding's. (The other ones were basically spam or not serious
ones)."
20160920 09:08:15
file 20230815/Re_ PQC comments-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 07:54:10 UTC
- PDF date: 20230814 09:54:09 -0400
- PDF creation date: 20230131 08:18:55 -0500
- Email date: 20160920 09:08:15
- Email from: "Peralta, Rene (Fed)"
- Email to: "Dustin Moody; Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Chen, Lily (Fed); Daniel Smith; Perlner, Ray A. (Fed);Alperin-Sheriff, Jacob (Fed); Miller, Carl A. (Fed); Jordan, Stephen P (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: PQC comments"
- Pages: 1
- Bytes: 131128
Notes from djb, last edited 20230909 22:51:01 UTC:
"Let us agree that we don't need to discuss "Know's", "Wisdom",. Any other than we can dispose of quickly ?"
Quoted email says
"I'm attaching an updated version which has a couple of comments she missed. The
most important of which is Jintai Ding's. (The other ones were basically spam or not serious
ones)."
20160920 19:37:00 UTC
file 20230915/2016 Annual Report - Write-up to Update (POST ..._12.pdf-attachment-2016_Annual-Report-OUTLINE_template.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:24:18 UTC
- XML date: 20160920 19:37:00 UTC
- XML creation date: 20160914 18:44:00 UTC
- XML creator: "O'Reilly, Patrick D. (Fed)"
- XML last-modified-by: "O'Reilly, Patrick D. (Fed)"
- Pages: 2
- Bytes: 18301
Notes from djb, last edited 20230915 23:13:56 UTC:
Reporting template.
20160921 12:53:37
file 20230915/2016 Annual Report - Write-up to Update (POST ..._12.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:24:18 UTC
- PDF date: 20230912 11:24:17 -0400
- PDF creation date: 20230131 07:23:06 -0500
- Email date: 20160921 12:53:37
- PDF attachments: "Post Quantum_DMoody-YLiu-LChen.docx"; "2016_Annual-Report-OUTLINE_template.docx"
- Email from: "O"Reilly, Patrick D. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Chen, Lily (Fed)"
- Email subject: "2016 Annual Report - Write-up to Update (POST QUANTUM CRYPTOGRAPHY)"
- Pages: 1
- Bytes: 160284
Notes from djb, last edited 20230915 23:13:56 UTC:
"As mentioned in yesterday’s email, attached you will find last year’s annual report (2015)
write-up for your project/program submission (Post Quantum Cryptography).
Please review last year’s write-up, make necessary updates to match your project’s
accomplishments/highlights for this
past year (October 1, 2015 to
September 30, 2016)."
20160922 05:24:15
file 20230816/RE_ VCAT cyber convening-1.pdf:
- FOIA delivery date: 20230816
- FOIA file date: 20230814 09:03:10 UTC
- PDF date: 20230814 11:03:09 -0400
- PDF creation date: 20230131 09:19:15 -0500
- Email date: 20160922 05:24:15
- Email from: "Roberts, Kamie (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email subject: "RE: VCAT cyber convening"
- Pages: 3
- Bytes: 244509
20160923
file 20230915/Foreign Trip Report-09232016dm-ykl.doc:
- FOIA delivery date: 20230915
- FOIA file date: 20230323 13:20:08 UTC
- Date: 20160923
- Bytes: 43008
Notes from djb, last edited 20230915 23:13:56 UTC:
"Created: 03/23/2023, 20:20:00, mcooley"
"Modified: 03/23/2023, 20:20:00, Scholl, Matthew A. (Fed)"
"Name of Traveler(s): Lidong Chen, Dustin Moody, Andrew Regenscheid, and Yi-Kai Liu"
"Purpose of trip: To speak and serve as panelists at the 4th ETSI/IQC Workshop on Quantum-Safe Cryptography, and to meet with European Government Representatives to discuss strategies and technical issues on post-quantum cryptography."
Contacts include
"Colin Whorlow, Head of International Standards, CESG, UK"
#nsa
"On September 22, Andrew Regenscheid, Dustin Moody, and Lidong Chen met with European government agencies, including BSI (Germany), ANSSI (France), CESG (UK), NSM (Norway), and NCSA
(Sweden). At this meeting, each agency updated their progress in quantum related projects. The representatives also discussed confidence and developments for each of the primary PQC
families. It is a common understanding among the agencies that QKD cannot replace post-quantum cryptography, and shall not be considered as a standalone solution. The agencies also
verbally discussed their comments and suggestions on NIST’s call for proposals."
What exactly happened at these meetings?
#needmorerecords
20160923
file 20230915/Foreign trip report_2.pdf-attachment-Foreign Trip Report-09232016.doc:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:50:44 UTC
- Date: 20160923
- Bytes: 38400
20160923
file 20230915/Re_ Foreign trip report_1.pdf-attachment-Foreign Trip Report-09232016dm-ykl.doc:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:50:20 UTC
- Date: 20160923
- Bytes: 42496
20160925 01:54:41
file 20230915/Re_ randomness at the optics teleconference_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:04:44 UTC
- PDF date: 20230912 11:04:43 -0400
- PDF creation date: 20230131 08:28:31 -0500
- Email date: 20160925 01:54:41
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kuo, Paulina S. (Fed)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Re: randomness at the optics teleconference"
- Pages: 3
- Bytes: 112584
Notes from djb, last edited 20230915 23:13:56 UTC:
Meeting logistics.
20160925 01:54:41
file 20230915/Re_ randomness at the optics teleconference_2.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:05:16 UTC
- PDF date: 20230912 11:05:14 -0400
- PDF creation date: 20230131 08:28:31 -0500
- Email date: 20160925 01:54:41
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kuo, Paulina S. (Fed)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Re: randomness at the optics teleconference"
- Pages: 3
- Bytes: 112584
Notes from djb, last edited 20230915 23:13:56 UTC:
Logistics.
20160926
file 20230210/Re_ A few more PQC comments - Liu, Yi-Kai (Fed).pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:42:53 +0000
- PDF creation date: 20161003 20:42:53 +0000
- Date: 20160926
- Author: "Alperin-Sheriff, Jacob (Fed)"
- Title: "Re: A few more PQC comments"
- Pages: 2
- Bytes: 155826
Notes from djb, last edited 20230625 17:50:02 UTC:
#weveshownallourwork
Email to eight other NIST people
(Moody, Chen, Perlner, Peralta, Liu, Jordan, Miller, Smith)
regarding how to pick numerical security targets.
Quotes email from Moody,
which in turn quotes Peter Campbell from CESG
and alludes to input from ANSSI.
20160926 01:07:29
file 20230915/Re_ [Itl_mgmt] Due Monday_ FY17 Critical Miles....pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:42:52 UTC
- PDF date: 20230912 11:42:50 -0400
- PDF creation date: 20230131 07:10:40 -0500
- Email date: 20160926 01:07:29
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Roberts, Kamie (Fed)"
- Email subject: "Re: [Itl_mgmt] Due Monday: FY17 Critical Milestones"
- Pages: 3
- Bytes: 218544
Notes from djb, last edited 20230915 23:13:56 UTC:
Discussion related to "milestones", the first being the following:
"Initiate Open Competition for Quantum Resistant Cryptographic Algorithms. Finalize types of
algorithms for development, requirements for external submissions and evaluation criteria
for next generation Quantum Resistant Cryptography. FY17 Q3 [CYB 15 Initiative]"
20160926 01:28:52
file 20230815/PQC file on webpage-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:06:54 UTC
- PDF date: 20230814 10:06:52 -0400
- PDF creation date: 20230131 08:20:05 -0500
- Email date: 20160926 01:28:52
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "PQC file on webpage"
- Pages: 1
- Bytes: 85881
Notes from djb, last edited 20230909 22:51:01 UTC:
Email about further fixes to documents NIST had released.
20160926 02:08:16
file 20230915/Re_ ACMD SEMINAR SERIES_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:04:38 UTC
- PDF date: 20230912 10:04:37 -0400
- PDF creation date: 20230131 07:27:53 -0500
- Email date: 20160926 02:08:16
- PDF attachments: "image001.png"; "image002.png"
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kuo, Paulina S. (Fed); Peralta, Rene C. (Fed)"
- Email subject: "Re: ACMD SEMINAR SERIES"
- Pages: 2
- Bytes: 270738
Notes from djb, last edited 20230915 23:13:56 UTC:
Seminar logistics.
20160926 02:11:54
file 20230815/PQC FAQ update-3.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:05:36 UTC
- PDF date: 20230814 10:05:35 -0400
- PDF creation date: 20230131 08:19:47 -0500
- Email date: 20160926 02:11:54
- PDF attachments: "FAQ v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "PQC FAQ update"
- Pages: 1
- Bytes: 110821
Notes from djb, last edited 20230909 22:51:01 UTC:
"I made some small fixes in the FAQ
document on our PQC webpage. ...
Wiener was misspelled,
and one of the links didn’t work."
I had pointed out these errors
in my 2016.09.17 email to NIST,
saying that the draft
"needs a general round of proofreading".
20160926 11:33:11
file 20230915/FW_ ACMD SEMINAR SERIES_2.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:04:58 UTC
- PDF date: 20230912 10:04:56 -0400
- PDF creation date: 20230131 07:27:55 -0500
- Email date: 20160926 11:33:11
- PDF attachments: "image003.png"; "image004.png"
- Email from: "Boisvert, Ronald F (Fed)"
- Email to: "Division 771 Gaithersburg Staff"
- Email subject: "FW: ACMD SEMINAR SERIES"
- Pages: 2
- Bytes: 282650
Notes from djb, last edited 20230915 23:13:56 UTC:
Seminar announcement.
20160926 12:57:41
file 20230915/Re_ A few more PQC comments.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:43:50 UTC
- PDF date: 20230912 11:43:48 -0400
- PDF creation date: 20230131 07:25:42 -0500
- Email date: 20160926 12:57:41
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Liu, Yi-Kai (Fed); Jordan,Stephen P (Fed); Miller, Carl A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email subject: "Re: A few more PQC comments"
- Pages: 2
- Bytes: 134999
Notes from djb, last edited 20230915 23:13:56 UTC:
"I know the 2^64 question was already asked by at least one person (I think Vadim)."
"But I don’t think the “very long term" thing is relevant, unless there are any concrete uses for signatures
that don’t involve some sort of certificate with an expiration date."
"Otherwise (if all concrete uses do involve a certificate), it should be much easier to upper bound the
maximum number of possible chosen messages one could realistically expect by answering:
1. What is the NIST standard on lifecycle length for a certificate? Is it a year? Six months? Two years?
2. What are the maximum number of signatures any given entity (that is to say, holder(s) of a specific
signing key) issues per second in today’s world?
Then note that ~ 2^25 seconds/year, and add some padding of 1000 or so, and end up with a bound that
should hold."
20160926 18:10:00 UTC
file 20230815/PQC FAQ update-3.pdf-attachment-FAQ v2.docx:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:05:36 UTC
- XML date: 20160926 18:10:00 UTC
- XML creation date: 20160713 17:24:00 UTC
- XML creator: "Chen, Lily (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 2
- Bytes: 17179
20160926 18:42:00 UTC
file 20230915/RE_ 2016 Annual Report - Need Project List Updated(2)_11.pdf-attachment-pqc annual report 2016.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:23:14 UTC
- XML date: 20160926 18:42:00 UTC
- XML creation date: 20160907 18:40:00 UTC
- XML creator: "Dang, Quynh"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 2
- Bytes: 16743
20160926 18:49:00 UTC
file 20230915/RE_ 2016 Annual Report - Need Project List Updated(2)_11.pdf-attachment-ecc annual report 2016.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:23:14 UTC
- XML date: 20160926 18:49:00 UTC
- XML creation date: 20160926 18:41:00 UTC
- XML creator: "O'Reilly, Patrick D. (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 13309
20160927 10:30:00
file 20230815/RE_ PQC FAQ update(1)-2.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:05:20 UTC
- PDF date: 20230814 10:05:19 -0400
- PDF creation date: 20230131 08:19:45 -0500
- Email date: 20160927 10:30:00
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC FAQ update"
- Pages: 2
- Bytes: 155958
Notes from djb, last edited 20230909 22:51:01 UTC:
Conference logistics and web-page logistics.
20160928 03:29:00
file 20230915/Foreign trip report_2.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:50:44 UTC
- PDF date: 20230912 10:50:42 -0400
- PDF creation date: 20230131 07:44:49 -0500
- Email date: 20160928 03:29:00
- PDF attachments: "Foreign Trip Report-09232016.doc"
- Email from: "Chen, Lily (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed); Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Foreign trip report"
- Pages: 1
- Bytes: 98493
Notes from djb, last edited 20230915 23:13:56 UTC:
"This is a rough draft to start with.
Please look into it, fill in content,
and make changes."
20160928 03:50:02
file 20230815/RE_ PQC FAQ update-1.pdf:
- FOIA delivery date: 20230815
- FOIA file date: 20230814 08:04:58 UTC
- PDF date: 20230814 10:04:56 -0400
- PDF creation date: 20230131 08:19:44 -0500
- Email date: 20160928 03:50:02
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: PQC FAQ update"
- Pages: 3
- Bytes: 212279
Notes from djb, last edited 20230909 22:51:01 UTC:
Conference logistics.
20160929 01:33:21
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(2)_9.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:21:44 UTC
- PDF date: 20230912 11:21:43 -0400
- PDF creation date: 20230131 07:22:00 -0500
- Email date: 20160929 01:33:21
- Email from: "Dang, Quynh (Fed)"
- Email to: "McKay, Kerry A. (Fed); Dang, Quynh H. (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); Barker, Elaine B. (Fed);Bassham, Lawrence E. (Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner,Ray A. (Fed); Kelsey, John M. (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: 2016 Annual Report - Need Project List Updated"
- Pages: 5
- Bytes: 164515
Notes from djb, last edited 20230915 23:13:56 UTC:
More annual-report logistics.
20160929 02:43:30
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(1)_8.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:20:42 UTC
- PDF date: 20230912 11:20:41 -0400
- PDF creation date: 20230131 07:21:58 -0500
- Email date: 20160929 02:43:30
- PDF attachments: "Key Management_EBarker-LChen-QDang-DMoody-RPe.docx"
- Email from: "Barker, Elaine B. (Fed)"
- Email to: "Dang, Quynh H. (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); McKay, Kerry A. (Fed); Bassham, Lawrence E.(Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner, Ray A. (Fed); Kelsey,John M. (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: 2016 Annual Report - Need Project List Updated"
- Pages: 4
- Bytes: 340774
Notes from djb, last edited 20230915 23:13:56 UTC:
"Here is my key-management report. It¹s quite long after beefing it up with more information and a
couple of figures. The others I have to do should be considerably shorter.
Lily: Please read the 56A and 56C topics carefully to see if I¹ve included everything."
Quoting more annual-report email.
20160929 02:52:47
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(7)_7.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:19:36 UTC
- PDF date: 20230912 11:19:34 -0400
- PDF creation date: 20230131 07:21:49 -0500
- Email date: 20160929 02:52:47
- PDF attachments: "LWC_AnnualReport_FY16.docx"
- Email from: "Dang, Quynh (Fed)"
- Email to: "Dang, Quynh H. (Fed); Barker, Elaine B. (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); McKay, Kerry A. (Fed);Bassham, Lawrence E. (Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner,Ray A. (Fed); Kelsey, John M. (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed); Sonmez Turan,Meltem (Fed)"
- Email cc: "lightweight-crypto; Chen, Lily (Fed); Sonmez Turan, Meltem (Fed)"
- Email subject: "Re: 2016 Annual Report - Need Project List Updated"
- Pages: 5
- Bytes: 188976
Notes from djb, last edited 20230915 23:13:56 UTC:
"Attached is write-up for
light-weight crypto project."
20160929 02:53:24
file 20230915/Re_ Foreign trip report_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:50:20 UTC
- PDF date: 20230912 10:50:19 -0400
- PDF creation date: 20230131 07:44:47 -0500
- Email date: 20160929 02:53:24
- PDF attachments: "Foreign Trip Report-09232016dm-ykl.doc"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Foreign trip report"
- Pages: 1
- Bytes: 129571
Notes from djb, last edited 20230915 23:13:56 UTC:
"I added a couple of details about
QCrypt and QKD."
20160929 03:17:23
file 20230915/Key Management Figures_6.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:18:40 UTC
- PDF date: 20230912 11:18:38 -0400
- PDF creation date: 20230131 07:59:00 -0500
- Email date: 20160929 03:17:23
- PDF attachments: "Key Transport example.pptx"; "Key Agreement example[.pptx"
- Email from: "Barker, Elaine B. (Fed)"
- Email to: "Dang, Quynh H. (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); McKay, Kerry A. (Fed); Bassham, Lawrence E.(Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner, Ray A. (Fed); Kelsey,John M. (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Key Management Figures"
- Pages: 5
- Bytes: 279803
Notes from djb, last edited 20230915 23:13:56 UTC:
"Attached are the two figures for the
key-management part of the annual
report."
Quotes email regarding
further text collection for annual report.
20160929 09:37:25
file 20231110/Re_ FW_ [csa-announcements] Quantum-Safe Securi...(1)_2.pdf:
- FOIA delivery date: 20231110
- FOIA file date: 20230921 10:07:32 UTC
- PDF date: 20230921 13:07:30 -0400
- PDF creation date: 20230131 07:45:50 -0500
- Email date: 20160929 09:37:25
- Email from: "Bohn, Robert B. (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Re: FW: [csa-announcements] Quantum-Safe Security Glossary Peer Review"
- Pages: 2
- Bytes: 259889
Notes from djb, last edited 20231110 16:46:46 UTC:
Politics.
20160929 09:38:22
file 20230915/Re_ PQC talk.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:45:08 UTC
- PDF date: 20230912 11:45:07 -0400
- PDF creation date: 20230131 08:23:04 -0500
- Email date: 20160929 09:38:22
- Email from: "Dang, Quynh (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC talk"
- Pages: 1
- Bytes: 113421
20160929 09:41:53
file 20230915/RE_ 2016 Annual Report - Need Project List Updated(2)_11.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:23:14 UTC
- PDF date: 20230912 11:23:13 -0400
- PDF creation date: 20230131 07:22:08 -0500
- Email date: 20160929 09:41:53
- PDF attachments: "pqc annual report 2016.docx"; "ecc annual report 2016.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Dang, Quynh H. (Fed); Chen, Lily (Fed); Barker, Elaine B. (Fed); McKay, Kerry A. (Fed); Bassham, Lawrence E.(Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner, Ray A. (Fed); Kelsey,John M. (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "RE: 2016 Annual Report - Need Project List Updated"
- Pages: 3
- Bytes: 191344
Notes from djb, last edited 20230915 23:13:56 UTC:
"I’ve attached write-ups for PQC and ECC."
Quoting more annual-report email.
20160929 11:38:12
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(3)_10.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:22:22 UTC
- PDF date: 20230912 11:22:19 -0400
- PDF creation date: 20230131 07:22:02 -0500
- Email date: 20160929 11:38:12
- PDF attachments: "fy2016-Transport Layer Security_KMcKay-LChen.docx"
- Email from: "McKay, Kerry A. (Fed)"
- Email to: "Dang, Quynh H. (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); Barker, Elaine B. (Fed); Bassham, Lawrence E.(Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner, Ray A. (Fed); Kelsey,John M. (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: 2016 Annual Report - Need Project List Updated"
- Pages: 4
- Bytes: 184511
Notes from djb, last edited 20230915 23:13:56 UTC:
"The TLS writeup is attached."
20160929 11:57:15
file 20231110/Re_ FW_ [csa-announcements] Quantum-Safe Securi...._1pdf.pdf:
- FOIA delivery date: 20231110
- FOIA file date: 20230921 10:06:34 UTC
- PDF date: 20230921 13:06:32 -0400
- PDF creation date: 20230131 07:45:49 -0500
- Email date: 20160929 11:57:15
- Email from: "Alan Mink"
- Email to: "Chen, Lily (Fed); Bohn, Robert B. (Fed); Boisvert, Ronald F. (Fed)"
- Email cc: "Jordan, Stephen P (Fed); Mink, Alan (Assoc)"
- Email subject: "Re: FW: [csa-announcements] Quantum-Safe Security Glossary Peer Review"
- Pages: 2
- Bytes: 263255
Notes from djb, last edited 20231110 16:46:46 UTC:
Politics.
20160929 15:34:00 UTC
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(3)_10.pdf-attachment-fy2016-Transport Layer Security_KMcKay-LChen.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:22:22 UTC
- XML date: 20160929 15:34:00 UTC
- XML creation date: 20160923 14:52:00 UTC
- XML creator: "O'Reilly, Patrick D. (Fed)"
- XML last-modified-by: "Kerry McKay"
- Pages: 1
- Bytes: 16029
20160929 16:15:29 UTC
file 20230915/Key Management Figures_6.pdf-attachment-Key Agreement example[.pptx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:18:40 UTC
- XML date: 20160929 16:15:29 UTC
- XML creation date: 20140924 14:03:44 UTC
- XML creator: "Barker, Elaine B."
- XML last-modified-by: "Barker, Elaine B."
- Pages: 1
- Bytes: 57909
20160929 16:32:47 UTC
file 20230915/Key Management Figures_6.pdf-attachment-Key Transport example.pptx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:18:40 UTC
- XML date: 20160929 16:32:47 UTC
- XML creation date: 20140924 14:03:44 UTC
- XML creator: "Barker, Elaine B."
- XML last-modified-by: "Barker, Elaine B."
- Pages: 1
- Bytes: 54049
20160929 18:38:00 UTC
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(1)_8.pdf-attachment-Key Management_EBarker-LChen-QDang-DMoody-RPe.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:20:42 UTC
- XML date: 20160929 18:38:00 UTC
- XML creation date: 20160929 14:06:00 UTC
- XML creator: "O'Reilly, Patrick D. (Fed)"
- XML last-modified-by: "Barker, Elaine B."
- Pages: 6
- Bytes: 189643
20160929 18:49:00 UTC
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(7)_7.pdf-attachment-LWC_AnnualReport_FY16.docx:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:19:36 UTC
- XML date: 20160929 18:49:00 UTC
- XML creation date: 20160929 18:49:00 UTC
- XML creator: "Bassham, Lawrence E (Fed)"
- XML last-modified-by: "Microsoft Office User"
- Pages: 1
- Bytes: 14530
20160930 04:21:38
file 20230915/Re_ randomness at Science Day_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 08:10:04 UTC
- PDF date: 20230912 10:10:03 -0400
- PDF creation date: 20230131 08:27:56 -0500
- Email date: 20160930 04:21:38
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Glancy, Scott C. (Fed)"
- Email subject: "Re: randomness at Science Day"
- Pages: 3
- Bytes: 110283
Notes from djb, last edited 20230915 23:13:56 UTC:
Logistics for "Quantum Randomness Certified by the Impossibility of Superluminal Signaling" poster.
20160930 08:50:07
file 20230915/RE_ 2016 Annual Report - Need Project List Updated(1)_4.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:16:42 UTC
- PDF date: 20230912 11:16:40 -0400
- PDF creation date: 20230131 07:21:47 -0500
- Email date: 20160930 08:50:07
- Email from: "Chen, Lily (Fed)"
- Email to: "Dang, Quynh H. (Fed)"
- Email subject: "RE: 2016 Annual Report - Need Project List Updated"
- Pages: 5
- Bytes: 165547
Notes from djb, last edited 20230915 23:13:56 UTC:
"I am not worrying to beat the deadline. But I concerned that the way we worked did not consider
every one’s schedule. Our team members are busy with extremely heavy load. People cannot wait
for each one to come in, comment it and then send to you in one day’s working hours. It has become
a mass unspecified multiple party protocol and people have no way to follow.
The purpose to assign one person, which is you, to organize it is to collect all the draft, put them
together, send to the group to review as we did in the previous years. Even for me, digging out every
one from the mass e-mails has been a very time consuming work.
Don’t send more e-mails. Wait my next e-mail."
Quoting more report-collection email.
20160930 09:04:58
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(6)_3.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:15:58 UTC
- PDF date: 20230912 11:15:57 -0400
- PDF creation date: 20230131 07:21:45 -0500
- Email date: 20160930 09:04:58
- Email from: "Dang, Quynh (Fed)"
- Email to: "Chen, Lily (Fed); Dang, Quynh H. (Fed)"
- Email subject: "Re: 2016 Annual Report - Need Project List Updated"
- Pages: 5
- Bytes: 167977
Notes from djb, last edited 20230915 23:13:56 UTC:
"I read your message and worried that
other people could feel the same way
you did, so I clarified."
20160930 09:25:44
file 20230915/RE_ 2016 Annual Report - Need Project List Updated_2.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:15:08 UTC
- PDF date: 20230912 11:15:07 -0400
- PDF creation date: 20230131 07:21:44 -0500
- Email date: 20160930 09:25:44
- Email from: "Sonmez Turan, Meltem (Assoc)"
- Email to: "Chen, Lily (Fed); Dang, Quynh H. (Fed)"
- Email subject: "RE: 2016 Annual Report - Need Project List Updated"
- Pages: 5
- Bytes: 165844
Notes from djb, last edited 20230915 23:13:56 UTC:
More annual-report logistics.
20160930 09:26:09
file 20230915/Re_ 2016 Annual Report - Need Project List Updated(5)_1.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:13:58 UTC
- PDF date: 20230912 11:13:57 -0400
- PDF creation date: 20230131 07:21:42 -0500
- Email date: 20160930 09:26:09
- Email from: "Dang, Quynh (Fed)"
- Email to: "Sonmez Turan, Meltem (Fed); Dang, Quynh H. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: 2016 Annual Report - Need Project List Updated"
- Pages: 5
- Bytes: 168209
Notes from djb, last edited 20230915 23:13:56 UTC:
"No problems. Watch for emails from me. Please send your comments to the submitter of each section
separately (cc me and Liy) so that it
would be more efficient for the
submitter to resolve the comments."
20160930 12:08:53
file 20230915/Re_ Reminder - PQC meeting this Friday at 1pm.pdf:
- FOIA delivery date: 20230915
- FOIA file date: 20230912 09:45:42 UTC
- PDF date: 20230912 11:45:40 -0400
- PDF creation date: 20230131 08:35:52 -0500
- Email date: 20160930 12:08:53
- Email from: "Peralta, Rene (Fed)"
- Email to: "Daniel C Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu)"
- Email cc: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Chen, Lily (Fed)"
- Email subject: "Re: Reminder - PQC meeting this Friday at 1pm"
- Pages: 1
- Bytes: 152704
Notes from djb, last edited 20230915 23:13:56 UTC:
"I'll have to miss this. But it looks like your work is having some impact.
That's great!"
Quoting email about
"a PQC talk next week, on Friday, Sept. 30th, at 1pm. Note - this is after lunch, and
not before lunch like we typically do. Daniel Smith-Tone will talk on some of Jintai Ding's ideas
on extension field schemes."
Ending says
"Brad/Dave/Jerry, let me know who I
need to register"
#nsa
20161003
file 20240311/Foreign travel trip report_1.pdf-attachment-Foreign Trip Report-ETSI-Quantum-Safe-2016.doc:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:35:22 UTC
- Date: 20161003
- Bytes: 41472
Notes from djb, last edited 20240311 19:56:24 UTC:
Same as the other version?
#nsa
20161003 01:19:15
file 20240311/Foreign travel trip report_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:35:22 UTC
- PDF date: 20240307 10:35:21 -0500
- PDF creation date: 20230131 11:16:18 -0500
- Email date: 20161003 01:19:15
- PDF attachments: "Foreign Trip Report-ETSI-Quantum-Safe-2016.doc"
- Email from: "Chen, Lily (Fed)"
- Email to: "Scholl, Matthew A. (Fed); Honeycutt, Diane C. (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed); Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Foreign travel trip report"
- Pages: 1
- Bytes: 132724
Notes from djb, last edited 20240311 19:56:24 UTC:
Discussing draft of report on foreign travel.
#nsa
20161003 11:51:04
file 20240325/Re_ Foreign trip report_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:58:34 UTC
- PDF date: 20240315 14:58:31 -0400
- PDF creation date: 20230131 11:16:29 -0500
- Email date: 20161003 11:51:04
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Chen, Lily (Fed); Liu, Yi-Kai (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: Foreign trip report"
- Pages: 2
- Bytes: 109345
Notes from djb, last edited 20240417 22:58:35 UTC:
"No comments from me. This looks good."
20161003 11:59:04
file 20240325/Reminder - internal PQC meeting tomorrow at 9_3..._2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:10:38 UTC
- PDF date: 20240318 15:10:37 -0400
- PDF creation date: 20230131 13:03:00 -0500
- Email date: 20161003 11:59:04
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); Perlner, Ray A. (Fed); DanielC Smith (daniel-c.smith@louisville.edu) (daniel-c.smith@louisville.edu); Bassham, Lawrence E. (Fed); Miller, CarlA. (Fed)"
- Email subject: "Reminder - internal PQC meeting tomorrow at 9:30am in B-341"
- Pages: 1
- Bytes: 97723
Notes from djb, last edited 20240417 22:58:35 UTC:
"We will go over the public comments we received on our draft call."
20161003 20:38:45 +0000
file 20230210/Comment on Post-Quantum Cryptography Requirements and E..10.pdf:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:06:16 UTC
- PDF date: 20161003 20:38:45 +0000
- PDF creation date: 20161003 20:38:45 +0000
- Author: "Richard Barnes" and "James Jones"
- Title: "Evaluation Criteria"
- Pages: 3
- Bytes: 148919
Notes from djb, last edited 20230218 16:05:00 UTC:
Email to pqc-comments@nist.gov.
"1. Submitted algorithms must be usable without compensation to patent holders (RAND-Z, not only RAND) and implementations must bear an open-source license"
"2. Algorithms need to be evaluated as they will be used"
20161004 01:54:22
file 20240325/RE_ Post PQC comments_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:12:10 UTC
- PDF date: 20240318 13:12:09 -0400
- PDF creation date: 20230131 12:34:38 -0500
- Email date: 20161004 01:54:22
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "RE: Post PQC comments"
- Pages: 1
- Bytes: 117830
Notes from djb, last edited 20240417 22:58:35 UTC:
"I think we shall post the comments we received."
20161004 03:22:45 UTC
file 20240311/FW_ First draft_ VCAT Presentation on NSCI_2.pdf-attachment-NSCI_forVCAT.pptx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:13:30 UTC
- XML date: 20161004 03:22:45 UTC
- XML creation date: 20150707 17:40:09 UTC
- XML creator: "Corey, Pamela L"
- XML last-modified-by: "Boisvert, Ronald F (Fed)"
- Pages: 13
- Bytes: 1019629
Notes from djb, last edited 20240311 19:56:24 UTC:
Slides on public high-performance computing.
20161004 03:27:09
file 20240311/FW_ First draft_ VCAT Presentation on NSCI_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:13:30 UTC
- PDF date: 20240307 10:13:29 -0500
- PDF creation date: 20230131 11:15:18 -0500
- Email date: 20161004 03:27:09
- PDF attachments: "NSCI_forVCAT.pptx"
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Badger, Mark Lee (Fed)"
- Email subject: "FW: First draft: VCAT Presentation on NSCI"
- Pages: 1
- Bytes: 826398
Notes from djb, last edited 20240311 19:56:24 UTC:
Ronald Boisvert had sent a message to ten NIST people;
this is forwarding that message.
20161004 04:22:23
file 20240311/RE_ Re_ randomness at Science Day_4.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:40:00 UTC
- PDF date: 20240307 13:39:59 -0500
- PDF creation date: 20230131 12:58:47 -0500
- Email date: 20161004 04:22:23
- Email from: "Bierhorst, Peter L. (Assoc)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: Re: randomness at Science Day"
- Pages: 4
- Bytes: 124981
Notes from djb, last edited 20240311 19:56:24 UTC:
Discussing a poster on quantum randomness.
20161004 07:55:22
file 20240318/Re_ Speaker Registration, Agenda, Etc.(1)_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 12:32:22 UTC
- PDF date: 20240313 13:32:20 -0400
- PDF creation date: 20230131 13:09:42 -0500
- Email date: 20161004 07:55:22
- Email from: "McKay, Kerry A. (Fed)"
- Email to: "Kerman, Sara J. (Fed); lightweight-crypto2016"
- Email subject: "Re: Speaker Registration, Agenda, Etc."
- Pages: 1
- Bytes: 157633
Notes from djb, last edited 20240417 22:58:35 UTC:
"Please begin follow-ups. I can attend the meeting with you on Thursday. We will get back to you later today
regarding a time frame for the agenda."
20161004 10:30:34
file 20240318/pqc draft call website_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:17:18 UTC
- PDF date: 20240314 11:17:16 -0400
- PDF creation date: 20230131 12:41:26 -0500
- Email date: 20161004 10:30:34
- Email from: "Perlner, Ray (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "pqc draft call website"
- Pages: 1
- Bytes: 84468
Notes from djb, last edited 20240417 22:58:35 UTC:
Pointing to http://csrc.nist.gov/groups/ST/post-quantum-crypto/documents/call-for-proposals-draft-aug-2016.pdf.
20161005 01:08:53
file 20240325/Re_ RNG _ FPGAs_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:14:24 UTC
- PDF date: 20240318 15:14:23 -0400
- PDF creation date: 20230131 13:04:50 -0500
- Email date: 20161005 01:08:53
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Mink, Alan (Assoc); Peralta, Rene C. (Fed)"
- Email cc: "Mink, Alan (Assoc); Liu, Yi-Kai (Fed)"
- Email subject: "Re: RNG & FPGAs"
- Pages: 1
- Bytes: 182159
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for the info. I’ll look into it."
20161005 02:16:32
file 20240311/FAQ entry for CCA_CMA query complexity_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 08:55:30 UTC
- PDF date: 20240307 09:55:29 -0500
- PDF creation date: 20230131 11:11:52 -0500
- Email date: 20161005 02:16:32
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Peralta, Rene C. (Fed); Smith-Tone, DanielC. (Fed)"
- Email subject: "FAQ entry for CCA/CMA query complexity"
- Pages: 1
- Bytes: 103527
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft FAQ entry.
Looks like what ended up being posted.
20161005 02:40:14
file 20240311/Re_ First draft_ VCAT Presentation on NSCI_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:12:52 UTC
- PDF date: 20240307 10:12:49 -0500
- PDF creation date: 20230131 11:15:16 -0500
- Email date: 20161005 02:40:14
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Boisvert, Ronald F. (Fed)"
- Email subject: "Re: First draft: VCAT Presentation on NSCI"
- Pages: 1
- Bytes: 188502
Notes from djb, last edited 20240311 19:56:24 UTC:
"The slides were pretty good either way and I suspect will be needed again."
20161005 08:48:40
file 20240311/Re_ internal PQC meeting(2)_3.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:29:54 UTC
- PDF date: 20240307 13:29:52 -0500
- PDF creation date: 20230131 11:30:18 -0500
- Email date: 20161005 08:48:40
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: internal PQC meeting"
- Pages: 1
- Bytes: 119736
Notes from djb, last edited 20240311 19:56:24 UTC:
"Sorry I had to miss yesterday. Can I get a brief fill-in on any important decisions etc. that were made?"
20161005 09:41:00
file 20240311/RE_ internal PQC meeting(1)_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:29:28 UTC
- PDF date: 20240307 13:29:26 -0500
- PDF creation date: 20230131 11:30:15 -0500
- Email date: 20161005 09:41:00
- PDF attachments: "final CFP.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: internal PQC meeting"
- Pages: 2
- Bytes: 213616
Notes from djb, last edited 20240311 19:56:24 UTC:
Lists (draft) decisions regarding many "minor" issues that had been raised by the public,
as the result of a meeting on 4 October 2016.
#weveshownallourwork
"Skipped the IPR/legal stuff. Lily and I have a meeting with the NIST lawyers to address it."
"Submitters don’t have to give parameters for all 5 levels. Especially as parameters for one level are automatically parameters for all lower levels."
Later NIST criticized submissions that had gaps in their lists of parameters.
#inconsistency
20161005 12:00:29 -0400
file 20230925/revising our PQC paper_4.pdf-attachment-KRACABCSMMES-v2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:45:26 UTC
- PDF date: 20161005 12:00:29 -0400
- PDF creation date: 20161005 12:00:29 -0400
- Pages: 16
- Bytes: 315994
Notes from djb, last edited 20231001 22:32:48 UTC:
Draft paper "Key Recovery Attack on the Cubic ABC Simple Matrix Multivariate Encryption Scheme".
20161005 12:00:29 -0400
file 20240827/revising our PQC paper.pdf-attachment-KRACABCSMMES-v2.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240808 11:41:04 UTC
- PDF date: 20161005 12:00:29 -0400
- PDF creation date: 20161005 12:00:29 -0400
- Pages: 16
- Bytes: 315994
Notes from djb, last edited 20241002 20:43:30 UTC:
"Key Recovery Attack on the Cubic ABC Simple Matrix Multivariate Encryption Scheme"
20161005 12:20:06
file 20240827/Proposed edits to security strengths section.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240724 13:16:26 UTC
- PDF date: 20240724 15:16:25 -0400
- PDF creation date: 20230131 12:47:59 -0500
- Email date: 20161005 12:20:06
- PDF attachments: "final CFP Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Peralta, Rene C. (Fed); Smith-Tone, DanielC. (Fed)"
- Email subject: "Proposed edits to security strengths section"
- Pages: 1
- Bytes: 178750
Notes from djb, last edited 20241002 20:43:30 UTC:
"Since I will be gone for the next PQC meeting, Dustin asked me to try rewriting the security strengths
section (which I have now divided into 4.A.4 and 4.A.5) See attached"
20161005 13:40:00 UTC
file 20240311/RE_ internal PQC meeting(1)_2.pdf-attachment-final CFP.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:29:28 UTC
- XML date: 20161005 13:40:00 UTC
- XML creation date: 20161004 18:46:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 22
- Bytes: 73426
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20161005 16:19:00 UTC
file 20240827/Proposed edits to security strengths section.pdf-attachment-final CFP Ray.docx:
- FOIA delivery date: 20240827
- FOIA file date: 20240724 13:16:26 UTC
- XML date: 20161005 16:19:00 UTC
- XML creation date: 20161005 16:19:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 25
- Bytes: 80437
Notes from djb, last edited 20241002 20:43:30 UTC:
Draft call for proposals.
20161006 04:50:41
file 20240827/Re_ .pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240808 08:56:28 UTC
- PDF date: 20240808 10:56:27 -0400
- PDF creation date: 20230131 10:44:37 -0500
- Email date: 20161006 04:50:41
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Carl Alexander Miller"
- Email subject: "Re:"
- Pages: 1
- Bytes: 101398
Notes from djb, last edited 20241002 20:43:30 UTC:
No evident post-quantum content.
20161006 09:38:21
file 20240318/Re_ Speaker Registration, Agenda, Etc._1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 12:30:26 UTC
- PDF date: 20240313 13:30:24 -0400
- PDF creation date: 20230131 13:09:39 -0500
- Email date: 20161006 09:38:21
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Kerman, Sara J. (Fed); McKay, Kerry A. (Fed); lightweight-crypto2016"
- Email subject: "Re: Speaker Registration, Agenda, Etc."
- Pages: 1
- Bytes: 150733
Notes from djb, last edited 20240417 22:58:35 UTC:
"I just registered using the comp code."
20161006 12:22:43
file 20240325/Re_ chat on Tues re_ quantum crypto_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:32:12 UTC
- PDF date: 20240315 14:32:11 -0400
- PDF creation date: 20230131 11:02:59 -0500
- Email date: 20161006 12:22:43
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Carnahan, Lisa J. (Fed)"
- Email subject: "Re: chat on Tues re: quantum crypto?"
- Pages: 1
- Bytes: 83919
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks. Will do."
20161007 04:05:14
file 20240325/RE_ bullets for crypto_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:26:06 UTC
- PDF date: 20240315 14:26:04 -0400
- PDF creation date: 20230131 11:02:24 -0500
- Email date: 20161007 04:05:14
- Email from: "Roberts, Kamie (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email subject: "RE: bullets for crypto"
- Pages: 1
- Bytes: 144603
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks Matt."
In previous message:
"Engaged and Led International Efforts in QRC at U of Waterloo, QSafe in Fukuoka Japan, BSI and
Fraunhofer in Germany."
20161007 05:24:00
file 20240827/RE_ Proposed edits to security strengths section_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:31:06 UTC
- Email date: 20161007 05:24:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Peralta, Rene C. (Fed); Liu, Yi-Kai (Fed); Moody, Dustin (Fed); Bassham, LawrenceE. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, Stephen P (Fed); Miller, Carl A. (Fed); Smith-Tone, DanielC. (Fed)"
- Email subject: "RE: Proposed edits to security strengths section"
- Pages: 5
- Bytes: 148463
Notes from djb, last edited 20241002 20:43:30 UTC:
Four-line redaction in the middle of a discussion of security.
#needmorerecords
20161007 10:10:16
file 20240311/latest version of Key Management write-up_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:48:16 UTC
- PDF date: 20240307 13:48:14 -0500
- PDF creation date: 20230131 11:35:41 -0500
- Email date: 20161007 10:10:16
- PDF attachments: "Key Management_version 3.docx"
- Email from: "Dang, Quynh (Fed)"
- Email to: "Chen, Lily (Fed); Barker, Elaine B. (Fed); Moody, Dustin (Fed); McKay, Kerry A. (Fed); Bassham, Lawrence E.(Fed); Peralta, Rene C. (Fed); Dworkin, Morris J. (Fed); Chang, Shu-jen H. (Fed); Perlner, Ray A. (Fed); Kelsey,John M. (Fed); Sonmez Turan, Meltem (Fed); Regenscheid, Andrew R. (Fed); Cooper, David (Fed); SonmezTuran, Meltem (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "latest version of Key Management write-up."
- Pages: 6
- Bytes: 324082
Notes from djb, last edited 20240311 19:56:24 UTC:
Discussing internal reports.
"The latest version of key management write-up is attached."
"Please finish your reviews and comment makings by the end of this week!"
20161007 14:04:00 UTC
file 20240311/latest version of Key Management write-up_1.pdf-attachment-Key Management_version 3.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:48:16 UTC
- XML date: 20161007 14:04:00 UTC
- XML creation date: 20161007 14:04:00 UTC
- XML creator: "O'Reilly, Patrick D. (Fed)"
- XML last-modified-by: "Dang, Quynh (Fed)"
- Pages: 6
- Bytes: 159451
Notes from djb, last edited 20240311 19:56:24 UTC:
Text on key management.
No obvious connection to post-quantum crypto.
20161010 03:15:26
file 20240325/Re_ Reminder - internal PQC meeting Tuesday 9_3..._1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 14:10:12 UTC
- PDF date: 20240318 15:10:10 -0400
- PDF creation date: 20230131 13:03:01 -0500
- Email date: 20161010 03:15:26
- Email from: "Moody, Dustin (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "Re: Reminder - internal PQC meeting Tuesday 9:30 am"
- Pages: 1
- Bytes: 113346
Notes from djb, last edited 20240417 22:58:35 UTC:
Meeting logistics.
20161010 03:21:57
file 20240311/Re_ internal PQC meeting_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:28:34 UTC
- PDF date: 20240307 13:28:33 -0500
- PDF creation date: 20230131 11:30:10 -0500
- Email date: 20161010 03:21:57
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: internal PQC meeting"
- Pages: 1
- Bytes: 115311
Notes from djb, last edited 20240311 19:56:24 UTC:
"Ok, I’ll come for the first hour. (That last meeting wasn’t in my area of expertise but this one might
be closer.) See you then!"
Thread is talking about a meeting on 11 October 2016:
"A big part of the discussion tomorrow will be on how to define quantum security."
#scramble
#weveshownallourwork
20161012 01:26:42
file 20240827/Status update on PQC CFP_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 13:00:32 UTC
- Email date: 20161012 01:26:42
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6) ; Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone;Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed);Perlner, Ray A. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Status update on PQC CFP"
- Pages: 25
- Bytes: 817505
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20161012 04:11:07
file 20240325/Re_ Tomorrow's TWG_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:03:28 UTC
- PDF date: 20240318 14:03:26 -0400
- PDF creation date: 20230131 14:13:14 -0500
- Email date: 20161012 04:11:07
- Email from: "Barker, Elaine B. (Fed)"
- Email to: "Chen, Lily (Fed); Dworkin, Morris J. (Fed); Scholl, Matthew A. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Tomorrow"s TWG"
- Pages: 1
- Bytes: 125239
Notes from djb, last edited 20240417 22:58:35 UTC:
"I will be there."
20161012 08:46:43
file 20240311/FW_ ITL Science Day_3.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:39:36 UTC
- PDF date: 20240307 13:39:34 -0500
- PDF creation date: 20230131 11:34:38 -0500
- Email date: 20161012 08:46:43
- Email from: "Chen, Lily (Fed)"
- Email to: "Dang, Quynh H. (Fed); Miller, Carl A. (Fed); Alperin-Sheriff, Jacob (Fed); Regenscheid, Andrew R. (Fed);Dworkin, Morris J. (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Peralta, Rene C. (Fed); Chang, Shu-jen H. (Fed); Barker, Elaine B. (Fed); Kelsey, JohnM. (Fed); Cooper, David (Fed); McKay, Kerry A. (Fed); Bassham, Lawrence E. (Fed); Sonmez Turan, Meltem(Fed); Burr, William E. (Assoc); Calik, Cagdas (IntlAssoc); Mouha, Nicky W. (Assoc)"
- Email subject: "FW: ITL Science Day"
- Pages: 1
- Bytes: 140420
Notes from djb, last edited 20240311 19:56:24 UTC:
"Please notice that two posters from our group will participate in the Science Day poster session.
8:30-12:30 Post-Quantum Cryptography by PQC team
1:20 – 3:20 Lightweight Cryptography by Lightweight Crypto team"
#weveshownallourwork
20161012 09:20:00
file 20240827/FW_ pqc article that quotes me_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 07:49:54 UTC
- Email date: 20161012 09:20:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email subject: "FW: pqc article that quotes me"
- Pages: 1
- Bytes: 106484
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding link to Wired article.
20161012 13:43:00 UTC
file 20240311/FRN for PQC_1.pdf-attachment-final CFP.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 10:44:48 UTC
- XML date: 20161012 13:43:00 UTC
- XML creation date: 20161004 18:46:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 23
- Bytes: 73020
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20161013 02:35:00
file 20240318/RE_ PQC comments summary_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:47:40 UTC
- PDF date: 20240314 10:47:38 -0400
- PDF creation date: 20230131 12:39:22 -0500
- Email date: 20161013 02:35:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: PQC comments summary"
- Pages: 1
- Bytes: 113690
Notes from djb, last edited 20240417 22:58:35 UTC:
"I don’t have any pre-determined length in mind. It doesn’t need to be long. Just however long it ends
up being. I think we also want to avoid naming commenters by name. We just want to summarize
what the comments said. Hope that helps."
20161013 04:47:03
file 20240726/FW_ News article_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:14:04 UTC
- Email date: 20161013 04:47:03
- Email from: "Miller, Carl A. (Fed)"
- Email to: "(b) (6)"
- Email subject: "FW: News article"
- Pages: 1
- Bytes: 109437
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding a magazine link to someone.
20161014 07:56:38
file 20240827/Re_ Status update on PQC CFP_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:53:28 UTC
- Email date: 20161014 07:56:38
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "Re: Status update on PQC CFP"
- Pages: 4
- Bytes: 193204
Notes from djb, last edited 20241002 20:43:30 UTC:
"I think of the whole thing as a standardization process. The writing of the standard is only the
final stage at the end. We are plagued a bit by not having a good word like "competition"."
20161014 09:43:02
file 20240325/Re_ Final versions of pQC and ECC_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:52:34 UTC
- PDF date: 20240315 14:52:33 -0400
- PDF creation date: 20230131 11:13:19 -0500
- Email date: 20161014 09:43:02
- Email from: "Moody, Dustin (Fed)"
- Email to: "Dang, Quynh H. (Fed)"
- Email subject: "Re: Final versions of pQC and ECC"
- Pages: 1
- Bytes: 123830
Notes from djb, last edited 20240417 22:58:35 UTC:
"I just updated it. I was slow to do so."
20161017 02:39:23
file 20240311/FRN for PQC_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 10:44:48 UTC
- PDF date: 20240307 11:44:47 -0500
- PDF creation date: 20230131 11:16:49 -0500
- Email date: 20161017 02:39:23
- PDF attachments: "PQC FRN 2.docx"; "final CFP.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed)"
- Email subject: "FRN for PQC"
- Pages: 1
- Bytes: 195433
Notes from djb, last edited 20240311 19:56:24 UTC:
"I don’t want to get delayed again by the FRN, so to get the ball rolling I’ve made a draft for the PQC
FRN. I made it very simple, just basically pointing to our webpage for all the details. Let me know if
you think I need to add anything.
Andy, I’ve also attached the latest version of our Call. I believe you were wanting to strengthen the
text where we state our preference for royalty-free. That occurs in the final paragraph before
Section 2.D.1. Do you want to edit it? If you want, we can also add a bullet 4.C.3 to list our IPR
preference as one of the evaluation criteria. Does that seem a good spot to you?"
20161017 04:27:17
file 20240827/RE_ Status update on PQC CFP(5)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:51:52 UTC
- PDF date: 20240815 14:51:21 -0400
- PDF creation date: 20230131 13:10:22 -0500
- Email date: 20161017 04:27:17
- PDF attachments: "final CFP 20161017Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); (b) (6) ; Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed);Daniel Smith-Tone; Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Peralta, Rene C. (Fed);Smith-Tone, Daniel C. (Fed)"
- Email subject: "RE: Status update on PQC CFP"
- Pages: 29
- Bytes: 628083
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20161017 08:48:22
file 20240311/FW_ ITL Science Day Follow-Up - Poster Awards_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:39:20 UTC
- PDF date: 20240307 13:39:18 -0500
- PDF creation date: 20230131 11:34:41 -0500
- Email date: 20161017 08:48:22
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Moody, Dustin (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed)"
- Email subject: "FW: ITL Science Day Follow-Up - Poster Awards"
- Pages: 1
- Bytes: 251715
Notes from djb, last edited 20240311 19:56:24 UTC:
"Congratulations!"
20161017 10:51:57
file 20240318/post quantum_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:30:58 UTC
- PDF date: 20240314 10:30:56 -0400
- PDF creation date: 20230131 12:34:50 -0500
- Email date: 20161017 10:51:57
- Email from: "Guttman, Barbara (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "post quantum"
- Pages: 1
- Bytes: 85479
Notes from djb, last edited 20240417 22:58:35 UTC:
"I was downstairs chatting with Lisa and Gordon stopped by, so we ended up talking about your
competition. Gordon thinks you are free to go free only. He thinks this is a local decision based on
your analysis on how to best accomplish your mission. He has talked to Henry about this. He seemed
surprised that CSD is going with the compromise position. He doesn’t think this is necessary. Lisa is
happy to do anything she can to document this and help you.
I am presuming you are lightweight cryptoing. I’ll be around later today. Or talk to Lisa."
Which Lisa and Gordon is this referring to?
One guess is that "free only" means requiring submissions to be patent-free:
i.e., this is saying that the computer-security division was allowed to have that requirement but, to the surprise of others in NIST, didn't.
If that's the correct interpretation, why didn't the division do this?
#inconsistency
#slowingdownpqcrypto
#needmorerecords
20161017 18:32:00 UTC
file 20240311/FRN for PQC_1.pdf-attachment-PQC FRN 2.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 10:44:48 UTC
- XML date: 20161017 18:32:00 UTC
- XML creation date: 20161017 17:19:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 4
- Bytes: 32749
Notes from djb, last edited 20240311 19:56:24 UTC:
Editing draft Federal Register notice.
20161017 18:32:00 UTC
file 20240318/PQC FRN_1.pdf-attachment-PQC FRN 2.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:06:14 UTC
- XML date: 20161017 18:32:00 UTC
- XML creation date: 20161017 17:19:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 4
- Bytes: 32749
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FRN.
20161017 20:22:00 UTC
file 20240827/RE_ Status update on PQC CFP(5)_Redacted.pdf-attachment-final CFP 20161017Ray.docx:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:51:52 UTC
- XML date: 20161017 20:22:00 UTC
- XML creation date: 20161017 17:25:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 27
- Bytes: 85252
Notes from djb, last edited 20241002 20:43:30 UTC:
Draft call for proposals.
20161018 01:15:00
file 20240827/RE_ PQC FAQ update_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:22:52 UTC
- Email date: 20161018 01:15:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email subject: "RE: PQC FAQ update"
- Pages: 1
- Bytes: 158462
Notes from djb, last edited 20241002 20:43:30 UTC:
Logistics.
20161018 01:26:15
file 20240318/Re_ New API_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 14:11:32 UTC
- PDF date: 20240313 15:11:30 -0400
- PDF creation date: 20230131 11:42:40 -0500
- Email date: 20161018 01:26:15
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: New API"
- Pages: 1
- Bytes: 123009
Notes from djb, last edited 20240417 22:58:35 UTC:
"Mucho gusto"
20161018 01:29:52
file 20240318/FW_ New API_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 14:11:12 UTC
- PDF date: 20240313 15:11:11 -0400
- PDF creation date: 20230131 11:42:38 -0500
- Email date: 20161018 01:29:52
- PDF attachments: "API.rtf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, StephenP (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed); Perlner, Ray A.(Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "FW: New API"
- Pages: 1
- Bytes: 133037
Notes from djb, last edited 20240417 22:58:35 UTC:
Sending around API.rtf.
20161018 09:59:23
file 20240827/RE_ Status update on PQC CFP(4)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:49:54 UTC
- Email date: 20161018 09:59:23
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "RE: Status update on PQC CFP"
- Pages: 2
- Bytes: 140344
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20161018 10:01:21
file 20240827/RE_ Status update on PQC CFP(3)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:47:48 UTC
- PDF date: 20240815 14:47:39 -0400
- PDF creation date: 20230131 13:10:18 -0500
- Email date: 20161018 10:01:21
- PDF attachments: "final CFP v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "RE: Status update on PQC CFP"
- Pages: 29
- Bytes: 614134
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding draft call for proposals.
20161018 10:45:00
file 20240827/RE_ Status update on PQC CFP(2)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:43:40 UTC
- PDF date: 20240815 14:43:39 -0400
- PDF creation date: 20230131 13:10:16 -0500
- Email date: 20161018 10:45:00
- PDF attachments: "final CFP v2 Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Status update on PQC CFP"
- Pages: 29
- Bytes: 616864
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20161018 12:28:11
file 20240827/Re_ FW_ Proposed edits to security strengths se...(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:01:02 UTC
- Email date: 20161018 12:28:11
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: FW: Proposed edits to security strengths section"
- Pages: 4
- Bytes: 125602
Notes from djb, last edited 20241002 20:43:30 UTC:
Thread shows secret controversy within NIST
regarding some of NIST's most important mistakes in setting up the competition rules,
specifically NIST's emphasis on pre-quantum security and NIST's failure to define cost metrics.
#weveshownallourwork
#needmorerecords
20161018 13:56:00 UTC
file 20240827/RE_ Status update on PQC CFP(3)_Redacted.pdf-attachment-final CFP v2.docx:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:47:48 UTC
- XML date: 20161018 13:56:00 UTC
- XML creation date: 20161018 13:56:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 27
- Bytes: 84402
Notes from djb, last edited 20241002 20:43:30 UTC:
Draft call for proposals.
20161018 14:41:00 UTC
file 20240827/RE_ Status update on PQC CFP(2)_Redacted.pdf-attachment-final CFP v2 Ray.docx:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:43:40 UTC
- XML date: 20161018 14:41:00 UTC
- XML creation date: 20161018 14:17:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Ray Perlner"
- Pages: 27
- Bytes: 86161
Notes from djb, last edited 20241002 20:43:30 UTC:
Draft call for proposals.
20161019 01:51:26
file 20240827/RE_ Status update on PQC CFP(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:41:28 UTC
- Email date: 20161019 01:51:26
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "RE: Status update on PQC CFP"
- Pages: 29
- Bytes: 1410529
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing call for proposals.
20161019 01:55:36
file 20240318/Please give any comments on the proposed changes_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:20:58 UTC
- PDF date: 20240314 10:20:55 -0400
- PDF creation date: 20230131 12:34:17 -0500
- Email date: 20161019 01:55:36
- PDF attachments: "final CFP v3.docx"; "API.rtf"; "new FAQ.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, StephenP (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed); Perlner, Ray A.(Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Please give any comments on the proposed changes"
- Pages: 1
- Bytes: 210351
Notes from djb, last edited 20240417 22:58:35 UTC:
"I’ve attached the latest version of the CFP. Please everybody read it by next Wednesday October
26th, and let me know of any wording changes that you suggest. We very carefully checked our
original CFP, and I want lots of eyes on our proposed changes for the revision. Ray is still going to be
editing 4.A.5, so don’t worry too much about that section. We’ll also be removing section 4.A.6 to
the FAQ. I’ve attached Larry’s API, and the newest FAQ questions that people have written."
20161019 09:57:56
file 20240325/Re_ NIST SP 800-90 series_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:11:12 UTC
- PDF date: 20240318 13:11:11 -0400
- PDF creation date: 20230131 12:25:22 -0500
- Email date: 20161019 09:57:56
- Email from: "Miller, Carl A. (Fed)"
- Email to: "McKay, Kerry A. (Fed); Kelsey, John M. (Fed); Sonmez Turan, Meltem (Fed)"
- Email subject: "Re: NIST SP 800-90 series"
- Pages: 2
- Bytes: 132003
Notes from djb, last edited 20240417 22:58:35 UTC:
Meeting logistics.
20161019 11:53:00
file 20240325/RE_ Typos_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:04:32 UTC
- PDF date: 20240318 14:04:30 -0400
- PDF creation date: 20230131 14:13:47 -0500
- Email date: 20161019 11:53:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene (Fed)"
- Email subject: "RE: Typos"
- Pages: 1
- Bytes: 110063
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks!"
20161019 12:31:58
file 20240311/FW_ ITL Science Day Follow-Up - Poster Awards(1)_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:39:04 UTC
- PDF date: 20240307 13:39:03 -0500
- PDF creation date: 20230131 11:34:40 -0500
- Email date: 20161019 12:31:58
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Smith-Tone, Daniel C.(Fed); Alperin-Sheriff, Jacob (Fed); Miller, Carl A. (Fed)"
- Email cc: "Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed)"
- Email subject: "FW: ITL Science Day Follow-Up - Poster Awards"
- Pages: 1
- Bytes: 247006
Notes from djb, last edited 20240311 19:56:24 UTC:
"Congratulations on a great poster and presentation!"
Replying to "Best Poster Award" being given to four posters including:
"Post-Quantum Cryptography - Dustin Moody, Lily Chen, Ray Perlner, Rene
Peralta, Daniel Smith-Tone, Jacob Alperin-Sheriff, Carl Miller, Yi-Kai Liu
and Stephen Jordan"
20161019 17:16:00 UTC
file 20240318/Please give any comments on the proposed changes_1.pdf-attachment-new FAQ.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:20:58 UTC
- XML date: 20161019 17:16:00 UTC
- XML creation date: 20161012 13:46:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 13365
Notes from djb, last edited 20240417 22:58:35 UTC:
Some FAQ entries.
20161019 17:49:00 UTC
file 20240318/Please give any comments on the proposed changes_1.pdf-attachment-final CFP v3.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:20:58 UTC
- XML date: 20161019 17:49:00 UTC
- XML creation date: 20161019 17:49:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 27
- Bytes: 85542
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161020 08:39:14
file 20240827/Fw_ Status update on PQC CFP_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 07:58:16 UTC
- Email date: 20161020 08:39:14
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Alperin-Sheriff, Jacob (Fed); daniel-c.smith@louisville.edu"
- Email subject: "Fw: Status update on PQC CFP"
- Pages: 30
- Bytes: 2118203
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing edits to call for proposals.
Down thread:
"We had a meeting with the NIST lawyers. They said we need to keep our IPR statements as they
currently are (meaning we can’t have only royalty free algorithms). There will probably be a
few lines added into the CFP strengthening our language that we have a strong preference for
royalty-free, and that it will be used as an evaluation criteria. Andy would also like to add a line
that we will commit to having at least one algorithm of each type be royalty-free."
#slowingdownpqcrypto
20161021 02:26:22
file 20240726/RE_ FAQ update(3)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:44:48 UTC
- Email date: 20161021 02:26:22
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); (b) (6) Liu, Yi-Kai (Fed); Chen, Lily (Fed); Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: FAQ update"
- Pages: 3
- Bytes: 240509
Notes from djb, last edited 20240801 23:15:11 UTC:
FAQ editing.
20161021 03:59:09
file 20240726/RE_ FAQ update(2)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:42:50 UTC
- PDF date: 20240723 14:42:49 -0400
- PDF creation date: 20230131 11:12:44 -0500
- Email date: 20161021 03:59:09
- PDF attachments: "new FAQ-1 Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Moody, Dustin (Fed); (b) (6) Chen, Lily (Fed); Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: FAQ update"
- Pages: 6
- Bytes: 252390
Notes from djb, last edited 20240801 23:15:11 UTC:
"Not sure what happened. Try now."
20161021 19:58:00 UTC
file 20240726/RE_ FAQ update(2)_Redacted.pdf-attachment-new FAQ-1 Ray.docx:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:42:50 UTC
- XML date: 20161021 19:58:00 UTC
- XML creation date: 20161021 14:46:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 4
- Bytes: 26672
20161023 05:01:27 UTC
file 20240726/Fw_ First cut at a summary of our thinking on s..._2.pdf-attachment-DW4_gr_qsc001v010101p.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240722 08:32:14 UTC
- PDF date: 20161023 05:01:27 UTC
- PDF creation date: 20161023 05:01:27 UTC
- PDF author: "Louise Webster"
- PDF title: "ETSI GR QSC 001 V1.1.1"
- PDF subject: "Quantum-Safe Cryptography (QSC)"
- PDF keywords: "algorithm, authentication, confidentiality security"
- Pages: 42
- Bytes: 877834
20161023 08:45:46
file 20240726/Re_ FAQ update(1)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:41:00 UTC
- Email date: 20161023 08:45:46
- Email from: "(b) (6)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Perlner, Ray A. (Fed); Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Chen, Lily (Fed)"
- Email subject: "Re: FAQ update"
- Pages: 2
- Bytes: 167162
Notes from djb, last edited 20240801 23:15:11 UTC:
Apparently from Daniel Smith-Tone.
"That's actually a good idea. Do we indicate that the submitters should specify
compiler/options/flags? I feel like we did. Instead of specifying and exact compiler and option
set, perhaps it is better for us to require that simply some common compiler and options are
used without demanding a single option. Then the submitters can be responsible for these
issues, but free to do anything that we can easily deal with. I'm curious what Larry thinks."
20161024 11:18:00
file 20240325/RE_ PQC Bi-Weekly Meetings into 2017_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:23:42 UTC
- PDF date: 20240318 13:23:41 -0400
- PDF creation date: 20230131 12:37:41 -0500
- Email date: 20161024 11:18:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: PQC Bi-Weekly Meetings into 2017"
- Pages: 1
- Bytes: 113785
Notes from djb, last edited 20240417 22:58:35 UTC:
"It couldn’t hurt to extend it through April of 2017. Thanks for the reminder on Dec. 9th."
20161024 11:50:00
file 20240318/RE_ Meet today or tomorrow_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:41:02 UTC
- PDF date: 20240313 14:41:01 -0400
- PDF creation date: 20230131 11:39:06 -0500
- Email date: 20161024 11:50:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: Meet today or tomorrow?"
- Pages: 1
- Bytes: 100736
Notes from djb, last edited 20240417 22:58:35 UTC:
Logistics.
20161024 11:50:40
file 20240318/FW_ Meet today or tomorrow_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:40:38 UTC
- PDF date: 20240313 14:40:36 -0400
- PDF creation date: 20230131 11:39:05 -0500
- Email date: 20161024 11:50:40
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "FW: Meet today or tomorrow?"
- Pages: 1
- Bytes: 105316
Notes from djb, last edited 20240417 22:58:35 UTC:
Logistics.
20161025 10:37:58
file 20240726/RE_ FAQ update_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:46:06 UTC
- Email date: 20161025 10:37:58
- Email from: "Moody, Dustin (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: FAQ update"
- Pages: 3
- Bytes: 236829
Notes from djb, last edited 20240801 23:15:11 UTC:
FAQ editing.
20161025 12:56:30
file 20240318/PQC docs_9.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:03:18 UTC
- PDF date: 20240314 11:03:14 -0400
- PDF creation date: 20230131 12:40:56 -0500
- Email date: 20161025 12:56:30
- PDF attachments: "final CFP v4.docx"; "FAQ 2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Daniel Smith-Tone; Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Chen, Lily (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "PQC docs"
- Pages: 1
- Bytes: 198101
Notes from djb, last edited 20240417 22:58:35 UTC:
"Attached are the most recent versions of the FAQ and CFP. Please use them as you edit. Here are the
assignments:
Daniel – edit your FAQ bullet
Ray – write a post summarizing our approach to quantum security in the CFP for the pqc-forum
Yi-Kai – edit Ray’s FAQ bullets on quantum security, in addition to 4.A.5
Dustin – write a post summarizing our changes dealing with KEMs, along with the API to be posted in
the pqc-forum
Jacob – write a summary of the comments and how we responded to them
Daniel, Ray, Yi-Kai (and myself). Please get these done this week. Next week we hit November."
20161025 16:23:00 UTC
file 20240318/PQC docs_9.pdf-attachment-FAQ 2.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:03:18 UTC
- XML date: 20161025 16:23:00 UTC
- XML creation date: 20161025 16:23:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 4
- Bytes: 23532
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FAQ entries.
20161025 16:52:00 UTC
file 20240318/PQC docs_9.pdf-attachment-final CFP v4.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:03:18 UTC
- XML date: 20161025 16:52:00 UTC
- XML creation date: 20161025 16:30:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 23
- Bytes: 76447
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161026 01:41:44
file 20240311/FW_ News Clips from Wednesday, October 26, 2016_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 12:21:10 UTC
- PDF date: 20240307 13:21:08 -0500
- PDF creation date: 20230131 12:22:51 -0500
- Email date: 20161026 01:41:44
- PDF attachments: "ATT00001.txt"
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Boyens, Jon M. (Fed)"
- Email subject: "FW: News Clips from Wednesday, October 26, 2016"
- Pages: 3
- Bytes: 259211
Notes from djb, last edited 20240311 19:56:24 UTC:
Nothing obviously relevant to post-quantum crypto.
20161026 02:55:29
file 20240318/RE_ PQC website question_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 12:18:50 UTC
- PDF date: 20240314 13:18:48 -0400
- PDF creation date: 20230131 12:45:55 -0500
- Email date: 20161026 02:55:29
- Email from: "Foti, James (Fed)"
- Email to: "Kerman, Sara J. (Fed); Moody, Dustin (Fed)"
- Email subject: "RE: PQC website question"
- Pages: 2
- Bytes: 159076
Notes from djb, last edited 20240417 22:58:35 UTC:
"Sorry for the confusion. Yes, the new version of CSRC will have an FAQ “feature” that is particular to
a given project, such as PQC. The Answer field will have the superscript and subscript capability, and
we can turn on that capability in the Question field if you think you’ll need it.
When the new version of CSRC is rolled out early next year, PQC will be there, and anyone going to
www.nist.gov/pqcrypto or to http://csrc.nist.gov/groups/ST/post-quantum-crypto/ will automatically
be redirected to the new site (which will probably be “csrc.nist.gov/projects/post-quantum-crypto”
we can set up additional aliases, too, such as “csrc.nist.gov/projects/pqcrypto”."
20161026 03:08:52
file 20240325/updated pqc-forum post on KEMs_2.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:20:18 UTC
- PDF date: 20240319 14:20:17 -0400
- PDF creation date: 20230131 14:14:25 -0500
- Email date: 20161026 03:08:52
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "updated pqc-forum post on KEMs"
- Pages: 1
- Bytes: 104651
Notes from djb, last edited 20240417 22:58:35 UTC:
"Does this seem fine to you?"
20161026 03:16:29
file 20240325/updated draft post for pqc-forum on KEMs_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 13:20:00 UTC
- PDF date: 20240319 14:19:58 -0400
- PDF creation date: 20230131 14:14:03 -0500
- Email date: 20161026 03:16:29
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed); Daniel Smith-Tone; Alperin-Sheriff, Jacob (Fed)"
- Email subject: "updated draft post for pqc-forum on KEMs"
- Pages: 1
- Bytes: 142837
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here’s updated text for a post on the pqc-forum to get feedback to our approach with KEMs."
20161026 03:20:16
file 20240325/Re_ Someone from 772 interested in PQC_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 13:01:12 UTC
- PDF date: 20240318 14:01:11 -0400
- PDF creation date: 20230131 13:06:43 -0500
- Email date: 20161026 03:20:16
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Someone from 772 interested in PQC"
- Pages: 1
- Bytes: 128422
Notes from djb, last edited 20240417 22:58:35 UTC:
"I know who he is. He sometimes came to reading club. Meltem knows him as well. His
supervisor talked with me a couple of years ago. I told his supervisor that he can attend our
meetings and contribute to our project. But he has never directly talked with me."
"Let me talk with him when I am back."
20161026 03:22:07
file 20240318/Re_ PQC docs(4)_7.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:02:06 UTC
- PDF date: 20240314 11:02:04 -0400
- PDF creation date: 20230131 12:40:50 -0500
- Email date: 20161026 03:22:07
- PDF attachments: "final CFP v4-YKL.docx"; "FAQ 2-YKL.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Perlner, Ray A. (Fed); Chen, Lily (Fed); Moody, Dustin (Fed); Daniel Smith-Tone; Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: PQC docs"
- Pages: 2
- Bytes: 222368
Notes from djb, last edited 20240417 22:58:35 UTC:
"I made some edits to the CFP and FAQ, mainly having to do with quantum security."
"Ray, I didn't change any of your meanings, I just revised the text to make it clearer. What do you think?"
"In particular, I'm much more comfortable now with your approach to measuring quantum security. But it really
requires a lot of explanation to see why it makes sense. This was hard to follow in the earlier drafts of the CFP and
the FAQ, but I think it is much clearer now."
"Lily, sorry I didn't see your comments while I was editing the draft. Anyway, we can still edit some more."
20161026 03:26:07
file 20240726/Fw_ First cut at a summary of our thinking on s..._2.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240722 08:32:14 UTC
- PDF date: 20240722 10:32:12 -0400
- PDF creation date: 20230131 11:14:40 -0500
- Email date: 20161026 03:26:07
- PDF attachments: "DW4_gr_qsc001v010101p.pdf"
- Email from: "Chen, Lily (Fed)"
- Email to: "Dodson, Donna F (Fed)"
- Email subject: "Fw: First cut at a summary of our thinking on security strengths for the forum."
- Pages: 4
- Bytes: 745054
Notes from djb, last edited 20240801 23:15:11 UTC:
Some discussion of setting security targets.
Down thread:
"A number of commenters suggested making a
change in the opposite direction. Some even suggested going so far as to treat an algorithm
with 128 bits of classical security and no quantum speedup, as being equivalently strong to a
256-bit block cipher, since both have “128 bits of quantum security.” We don’t think this is
reasonable. We can come up with plausible computation models where something with 192
bits of classical security and no quantum speedup might be as hard to break as AES 256 (and
we can come up with plausible models where nothing with less than 256 bits of classical
security is as hard to break as AES256) but we can’t come up with a reasonable justification for
treating something with much less than 192 bits of classical security as being as strong as AES
256."
This shows how NIST's focus on depth limits,
in combination with NIST targeting various pre-quantum security levels,
ended up creating pressure to go beyond 128 bits post-quantum.
This doesn't show why NIST thought it was a good idea to target pre-quantum security levels in the first place.
#needmorerecords
20161026 03:48:36
file 20240318/Re_ PQC docs(3)_6.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:01:38 UTC
- PDF date: 20240314 11:01:35 -0400
- PDF creation date: 20230131 12:40:48 -0500
- Email date: 20161026 03:48:36
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC docs"
- Pages: 3
- Bytes: 126902
Notes from djb, last edited 20240417 22:58:35 UTC:
"Let me try to start reading about it."
20161026 04:03:56
file 20240726/Fw_ PQC docs_5_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:16:48 UTC
- Email date: 20161026 04:03:56
- Email from: "Peralta, Rene (Fed)"
- Email to: "(b) (6)"
- Email subject: "Fw: PQC docs"
- Pages: 32
- Bytes: 633144
Notes from djb, last edited 20240801 23:15:11 UTC:
Discussing call for proposals and FAQ.
20161026 04:30:55
file 20240311/RE_ First cut at a summary of our thinking on s..._1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240307 09:05:54 UTC
- PDF date: 20240307 10:05:53 -0500
- PDF creation date: 20230131 11:14:38 -0500
- Email date: 20161026 04:30:55
- Email from: "Perlner, Ray (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Chen, Lily (Fed); Peralta, Rene C. (Fed); Moody, Dustin (Fed); Alperin-Sheriff, Jacob (Fed);Bassham, Lawrence E. (Fed); Daniel Smith-Tone; Jordan, Stephen P (Fed); Miller, Carl A. (Fed); Smith-Tone,Daniel C. (Fed)"
- Email subject: "RE: First cut at a summary of our thinking on security strengths for the forum."
- Pages: 6
- Bytes: 143773
Notes from djb, last edited 20240311 19:56:24 UTC:
Important thread shedding light on the major changes in security-level requests
between the draft call for submissions and the final call for submissions.
#weveshownallourwork
#scramble
20161026 05:24:22
file 20240318/RE_ PQC docs(1)_4.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:00:04 UTC
- PDF date: 20240314 11:00:01 -0400
- PDF creation date: 20230131 12:40:43 -0500
- Email date: 20161026 05:24:22
- PDF attachments: "final CFP v4-YKL-Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Chen, Lily (Fed); Moody, Dustin (Fed); Daniel Smith-Tone; Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "RE: PQC docs"
- Pages: 3
- Bytes: 216691
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here are my comments on Yi-Kai's edits to section 4.A.5. For the most part, I like them, but I did think some stuff
should be moved to footnotes, and there was about a paragraph worth of material in the intro which seemed
confusing, and looked like it could be eliminated without doing too much damage. As for the stuff concerning
simple heuristics for assigning security categories, if you just know the classical security strength, and that there are
only generic quantum speedups, I think it can be moved to the FAQ, but at the same time, I worry that not everyone
will read the FAQ, and I'd like to at least allude in the CFP to the fact that, if you're just concerned about making
sure you're in the appropriate security strength category, and not about quantifying your security margin, it isn't so
hard to do it."
20161026 09:59:54
file 20240325/Proposed post to the pqc-forum on KEMs and the API_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 12:05:44 UTC
- PDF date: 20240315 13:05:42 -0400
- PDF creation date: 20230131 12:48:39 -0500
- Email date: 20161026 09:59:54
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, StephenP (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed); Perlner, Ray A.(Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Proposed post to the pqc-forum on KEMs and the API"
- Pages: 4
- Bytes: 230516
Notes from djb, last edited 20240417 22:58:35 UTC:
"We’d also like to get some feedback on our approach to using KEMs, as that was the
other main area of comments we received. I’ve written a first attempt at such a post to
be made on the pqc-forum (see below). Let me know what you think by the end of this
week. We also plan to post the updated API, so we can let some of the more
knowledgeable people in that field give us their input."
20161026 11:57:33
file 20240318/Re_ PQC docs(5)_8.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:02:48 UTC
- PDF date: 20240314 11:02:44 -0400
- PDF creation date: 20230131 12:40:54 -0500
- Email date: 20161026 11:57:33
- PDF attachments: "llc-final CFP v4.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Daniel Smith-Tone; Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Peralta, Rene C. (Fed); Jordan, Stephen P (Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: PQC docs"
- Pages: 2
- Bytes: 229679
Notes from djb, last edited 20240417 22:58:35 UTC:
"Attached please see my comments on CFPv4. I noticed that we added a
fairly amount of details and explanations. The details and explanations
help people understand what we are asking for. On the other hand, the
details often need to be handled more carefully and think about the
impacts. Here are two places I feel we shall check.
1. KEM concept. In the current draft, we consider an ephemeral DH like
scheme (e.g. New Hope) as a KEM. Then converting KEM to a public-key
encryption is not intuitive at all. I cannot see why we need it other than
security proofs. The recipient will need to send something in order to
receive "public key encrypted" something. Usually, for public key
encryption, we use static public key, not ephemeral public key.
Furthermore, we have to assume an authenticated encryption (like
GCM), which in my opinion, is not very reasonable. What we really need
is (1) public key encryption (use either ephemeral or static public key)
(2) Key agreement (like ephemeral DH). In practice, we may need to
convert (1) to (2) (use one time public key), not from (2) to (1).
Please notice that, in 56B KEM-KWS is to use RSA to "encapsulate" a
value, then derive a key from the "value" and used it to do key wrap.
The KEM in 56B is different from what we called KEM.
2. Quantum security levels (1, 3, 5) vs. (2, 4 ).
I understand that for two algorithms A and B with parameter sets
providing 128 bit classical security. If A satisfies level 1 quantum
security while B satisfies level 2 quantum security, then we are in favor
of algorithm B. However, A and B must be from different families, they
will not be compared only on quantum security levels in the future but
other properties. I also feel that level 2 is a special case of level 1. Level
1 means Groverizer effect less than 100%, assuming 100% is to make
square root of classical security level, while Level 2 means Groverizer
effect equal to 0% meaning no effect at all. Again, a give algorithm will
fit into either (1, 3, 5) or (2, 4) with parameter choices. A given
algorithm will never reasonably provide 1, 2, 3, 4, 5 levels with different
selection of parameters. Introducing levels 2 and 4 complicated our
statement."
20161026 12:00:00 UTC
file 20240318/Re_ PQC docs(5)_8.pdf-attachment-llc-final CFP v4.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:02:48 UTC
- XML date: 20161026 12:00:00 UTC
- XML creation date: 20161026 08:02:00 UTC
- XML creator: "rene"
- XML last-modified-by: "NIST NIST"
- Pages: 23
- Bytes: 96046
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161026 18:27:00 UTC
file 20230210/final CFP v4-YKL.docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:04:54 UTC
- XML date: 20161026 18:27:00 UTC
- XML creation date: 20161025 16:30:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 25
- Bytes: 93942
Notes from djb, last edited 20230218 16:05:01 UTC:
Draft of call for submissions, including editing notes.
"NIST understands that this will require submitters to perform a more thorough analysis than has been done in most previous research."
"Move to FAQ? This sounds more like informal advice to submitters, rather than a formal part of the CFP.
Also, if there is disagreement about this, I’d rather have it be in the FAQ, not the CFP."
20161026 18:27:00 UTC
file 20240318/Re_ PQC docs(4)_7.pdf-attachment-final CFP v4-YKL.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:02:06 UTC
- XML date: 20161026 18:27:00 UTC
- XML creation date: 20161025 16:30:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 25
- Bytes: 84252
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161026 19:10:00 UTC
file 20230210/FAQ 2-YKL.docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:04:54 UTC
- XML date: 20161026 19:10:00 UTC
- XML creation date: 20161025 16:23:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 4
- Bytes: 35188
Notes from djb, last edited 20230218 16:05:01 UTC:
Draft of NIST's FAQ with editing notes.
Some interesting points:
e.g., Yi-Kai Liu deleting
"The best we can hope for
is to offer selections
that most experts can agree are good options,
since there will likely be no consensus
of what constitutes a best option".
20161026 19:10:00 UTC
file 20240318/Re_ PQC docs(4)_7.pdf-attachment-FAQ 2-YKL.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:02:06 UTC
- XML date: 20161026 19:10:00 UTC
- XML creation date: 20161025 16:23:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 4
- Bytes: 25500
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FAQ entries, with editing notes showing more arguments about security levels.
#weveshownallourwork
20161026 21:14:00 UTC
file 20230210/final CFP v4-YKL-Ray.docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:04:54 UTC
- XML date: 20161026 21:14:00 UTC
- XML creation date: 20161026 20:58:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 26
- Bytes: 96698
Notes from djb, last edited 20230625 17:50:02 UTC:
Draft of call for submissions, including editing notes.
"Is this really true.
Yes, if submitters want to precisely quantify their security margin,
they will need to do a detailed security analysis.
If they just want to make sure they have some margin,
it shouldn’t be so hard."
"I feel like a little paranoia about community nitpicking is healthy.":
So NIST isn't driven by a desire to do its job correctly,
but by fear of having errors publicly exposed?
Is this why NIST carried out almost all of its evaluation process in secret?
Is this why NIST illegally stonewalled this FOIA request
until NIST was dragged into court?
#weveshownallourwork
As for "nitpicking":
Small-sounding mistakes ended up cascading into
years of delay in post-quantum deployment,
exposing years of user data to large-scale attackers.
NIST should not have assumed that it could tell which mistakes would matter;
it should have worked hard to get everything right,
and should have enthusiastically enlisted the help of the community in checking every detail.
20161026 21:14:00 UTC
file 20240318/RE_ PQC docs(1)_4.pdf-attachment-final CFP v4-YKL-Ray.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 10:00:04 UTC
- XML date: 20161026 21:14:00 UTC
- XML creation date: 20161026 20:58:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 26
- Bytes: 87007
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
Editing notes discuss security levels.
Should compare to other versions around this time.
20161027 02:23:40
file 20240318/Re_ PQC docs(2)_3.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:59:30 UTC
- PDF date: 20240314 10:59:26 -0400
- PDF creation date: 20230131 12:40:40 -0500
- Email date: 20161027 02:23:40
- PDF attachments: "final CFP v4.3.docx"; "FAQ 2.1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: PQC docs"
- Pages: 3
- Bytes: 271480
Notes from djb, last edited 20240417 22:58:35 UTC:
"I cleaned up Ray's comments on Yi-Kai's revision, and added references in the footnotes, etc.
The ball is back in Yi-Kai's court. Can you take a look at Ray's outstanding comments (there
aren't too many), and see if what he proposes is acceptable. Also, decide if the end of 4.A.5
stays or goes in the FAQ. I've also attached the FAQ so you can see what it currently has."
20161027 05:02:57
file 20240318/Re_ PQC docs(1)_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:58:46 UTC
- PDF date: 20240314 10:58:43 -0400
- PDF creation date: 20230131 12:40:37 -0500
- Email date: 20161027 05:02:57
- PDF attachments: "final CFP v4.3 YKL.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: PQC docs"
- Pages: 4
- Bytes: 224906
Notes from djb, last edited 20240417 22:58:35 UTC:
"Sure, I am fine with everything Ray has suggested."
"Regarding the 2nd paragraph of 4.A.5, I agree with Ray that it is a bit confusing, however I don't want to delete it
entirely, because it explains some of the motivation that is behind the security strength categories. Can we cut the
confusing parts but keep the rest, like this? (I also inserted this in the Word document, see attachment.)"
" "Because of these uncertainties, NIST is taking a conservative approach in laying out its security requirements.
NIST is formulating these requirements in a way that will ensure security in a variety of scenarios, representing a
broad range of possibilities regarding the future development of both classical and quantum computing technologies.
In addition, NIST recommends that submitters exceed these minimum requirements by some suitable margin, in
order to account for possible uncertainties in their own estimates of security strength." "
20161027 07:52:04
file 20240325/Re_ Real World Crypto_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240318 12:55:46 UTC
- PDF date: 20240318 13:55:44 -0400
- PDF creation date: 20230131 13:00:24 -0500
- Email date: 20161027 07:52:04
- PDF attachments: "OutlookEmoji-...png"
- Email from: "Peralta, Rene (Fed)"
- Email to: "Sonmez Turan, Meltem (Fed)"
- Email subject: "Re: Real World Crypto"
- Pages: 1
- Bytes: 115520
Notes from djb, last edited 20240417 22:58:35 UTC:
"I will be talking about post-quantum crypto. I am glad you are going too"
20161027 08:10:59
file 20240318/Re_ PQC docs_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:58:06 UTC
- PDF date: 20240314 10:58:03 -0400
- PDF creation date: 20230131 12:40:34 -0500
- Email date: 20161027 08:10:59
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: PQC docs"
- Pages: 4
- Bytes: 117834
Notes from djb, last edited 20240417 22:58:35 UTC:
"Sure, I think that sounds fine. I can live with that."
20161027 18:15:00 UTC
file 20240318/Re_ PQC docs(2)_3.pdf-attachment-final CFP v4.3.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:59:30 UTC
- XML date: 20161027 18:15:00 UTC
- XML creation date: 20161027 17:47:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 79692
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
Editing notes include security levels.
Looks like a subset of what's in other drafts.
20161027 18:16:00 UTC
file 20240318/Re_ PQC docs(2)_3.pdf-attachment-FAQ 2.1.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:59:30 UTC
- XML date: 20161027 18:16:00 UTC
- XML creation date: 20161026 19:30:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 4
- Bytes: 24112
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FAQ entries, with notes showing arguments about security levels.
#weveshownallourwork
20161027 20:56:00 UTC
file 20240318/Re_ PQC docs(1)_2.pdf-attachment-final CFP v4.3 YKL.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:58:46 UTC
- XML date: 20161027 20:56:00 UTC
- XML creation date: 20161027 17:47:00 UTC
- XML creator: "rene"
- XML last-modified-by: "yikailiu"
- Pages: 25
- Bytes: 102768
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
Security levels in edit notes.
#weveshownallourwork
20161028 01:10:29
file 20240827/Re_ Performance_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:52:02 UTC
- Email date: 20161028 01:10:29
- Email from: "Dworkin, Morris J. (Fed)"
- Email to: "(b) (6)"
- Email cc: "Dworkin, Morris J. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Re: Performance"
- Pages: 3
- Bytes: 187274
Notes from djb, last edited 20241002 20:43:30 UTC:
Planning a meeting.
20161028 01:10:59
file 20240318/Mail_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 09:15:54 UTC
- PDF date: 20240314 10:15:52 -0400
- PDF creation date: 20230131 10:44:20 -0500
- Email date: 20161028 01:10:59
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Pages: 1
- Bytes: 83757
Notes from djb, last edited 20240417 22:58:35 UTC:
"We certainly do not intend to disqualify Diffie-Hellman type PQC key exchange algorithms from
being submitted to us. If you look at the API we are suggesting to use, we believe that schemes such
as New Hope and the SIDH can fit the KEM framework."
20161028 09:41:43
file 20240311/(preliminary) final versions of CFP and FAQ_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240304 12:00:18 UTC
- PDF date: 20240304 13:00:16 -0500
- PDF creation date: 20230131 10:45:10 -0500
- Email date: 20161028 09:41:43
- PDF attachments: "FAQ 2.2.docx"; "final CFP v4.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, StephenP (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed); Perlner, Ray A.(Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "(preliminary) final versions of CFP and FAQ"
- Pages: 1
- Bytes: 196938
Notes from djb, last edited 20240311 19:56:24 UTC:
Everyone,
"Ray and Yi-Kai came to consensus on the quantum security section of the CFP. Yay!
As a result, we’ve now resolved all the comments. See the attached versions of the CFP and FAQ. We
plan to post on our approach to quantum security, our change regarding KEMs, and the API on the
pqc-forum today. We’ll see what feedback we get, which may prompt us to do one more round of
editing as a result."
20161028 11:08:25
file 20240311/RE_ (preliminary) final versions of CFP and FAQ_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240304 11:58:38 UTC
- PDF date: 20240304 12:58:37 -0500
- PDF creation date: 20230131 10:45:08 -0500
- Email date: 20161028 11:08:25
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "RE: (preliminary) final versions of CFP and FAQ"
- Pages: 1
- Bytes: 161862
Notes from djb, last edited 20240311 19:56:24 UTC:
"Thanks for noting that. The FAQ will get sent to Sara, and she then formats it and posts it (not as a
word document, but on a web page). I’ll try and fix it, and she’ll probably re-format as well."
20161028 11:30:32
file 20240726/Fw_ Key Establishment for PQC algorithms_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:13:36 UTC
- Email date: 20161028 11:30:32
- Email from: "Peralta, Rene (Fed)"
- Email to: "(b) (6)"
- Email subject: "Fw: Key Establishment for PQC algorithms"
- Pages: 1
- Bytes: 154561
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding a mailing-list message to someone.
20161028 11:30:58
file 20240726/Fw_ API for PQC algorithms_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:12:14 UTC
- Email date: 20161028 11:30:58
- Email from: "Peralta, Rene (Fed)"
- Email to: "(b) (6)"
- Email subject: "Fw: API for PQC algorithms"
- Pages: 4
- Bytes: 263822
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding API email.
20161028 12:29:00 UTC
file 20240311/(preliminary) final versions of CFP and FAQ_2.pdf-attachment-FAQ 2.2.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240304 12:00:18 UTC
- XML date: 20161028 12:29:00 UTC
- XML creation date: 20161028 12:25:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 4
- Bytes: 23667
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft FAQ.
20161028 13:34:00 UTC
file 20240311/(preliminary) final versions of CFP and FAQ_2.pdf-attachment-final CFP v4.4.docx:
- FOIA delivery date: 20240311
- FOIA file date: 20240304 12:00:18 UTC
- XML date: 20161028 13:34:00 UTC
- XML creation date: 20161028 12:17:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 73768
Notes from djb, last edited 20240311 19:56:24 UTC:
Draft CFP.
20161028 13:34:00 UTC
file 20240318/PQC FRN_1.pdf-attachment-final CFP v4.4.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:06:14 UTC
- XML date: 20161028 13:34:00 UTC
- XML creation date: 20161028 12:17:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 73768
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161028 13:34:00 UTC
file 20240318/PQC forum archive link_2.pdf-attachment-final CFP v4.4.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:02:40 UTC
- XML date: 20161028 13:34:00 UTC
- XML creation date: 20161028 12:17:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 73768
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161028 13:34:00 UTC
file 20240318/PQC summary_3.pdf-attachment-final CFP v4.4.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:32:28 UTC
- XML date: 20161028 13:34:00 UTC
- XML creation date: 20161028 12:17:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 73768
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161028 13:34:00 UTC
file 20240617/FW_ PQC forum archive link_1.pdf-attachment-final CFP v4.4.docx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 13:31:56 UTC
- XML date: 20161028 13:34:00 UTC
- XML creation date: 20161028 12:17:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 73768
20161031 01:55:00
file 20240318/PQC forum archive link_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:02:40 UTC
- PDF date: 20240314 12:02:37 -0400
- PDF creation date: 20230131 12:43:08 -0500
- Email date: 20161031 01:55:00
- PDF attachments: "final CFP v4.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "PQC forum archive link"
- Pages: 1
- Bytes: 169651
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here’s a link to the archive for viewing the past pqc-forum messages: https://email.nist.gov/pipermail/pqc-forum/"
"Also, Ray told me you’d like to possibly add in some text to the CFP to try and clarify what we’re
talking about with KEMs. Feel free to do so. The CFP is attached."
20161031 02:00:00
file 20240318/RE_ PQC forum archive link_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:02:04 UTC
- PDF date: 20240314 12:02:02 -0400
- PDF creation date: 20230131 12:43:07 -0500
- Email date: 20161031 02:00:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: PQC forum archive link"
- Pages: 1
- Bytes: 114902
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing IT issues.
20161031 02:22:21
file 20240325/Re_ [Pqc-forum] API for PQC algorithms_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 12:54:54 UTC
- PDF date: 20240315 13:54:51 -0400
- PDF creation date: 20230131 10:50:40 -0500
- Email date: 20161031 02:22:21
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: [Pqc-forum] API for PQC algorithms"
- Pages: 2
- Bytes: 113731
Notes from djb, last edited 20240417 22:58:35 UTC:
"I'll subscribe you so you see all the future messages. I don't think we need to respond right away (nor do I
think we even have to respond). Just wanted you to be aware."
20161031 03:30:58
file 20240318/Minor Change trying to Clarify the issues raise..._1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:58:00 UTC
- PDF date: 20240313 14:57:59 -0400
- PDF creation date: 20230131 11:41:05 -0500
- Email date: 20161031 03:30:58
- PDF attachments: "final CFP v4.4[2] tweaks by Jacob.docx"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Minor Change trying to Clarify the issues raised about key exchange versus KEM"
- Pages: 1
- Bytes: 171951
Notes from djb, last edited 20240417 22:58:35 UTC:
"I added a paragraph in Section 2.B.1, pursuant to a discussion Ray and I had today."
20161031 06:26:20
file 20240311/Re_ 2 travel requests for January(1)_2.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240304 12:13:48 UTC
- PDF date: 20240304 13:13:45 -0500
- PDF creation date: 20230131 10:55:56 -0500
- Email date: 20161031 06:26:20
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Chen, Lily (Fed); Mukes, Vickie J. (Fed)"
- Email subject: "Re: 2 travel requests for January"
- Pages: 2
- Bytes: 154484
Notes from djb, last edited 20240311 19:56:24 UTC:
Discussing travel to QIP.
20161031 06:33:00
file 20240311/Re_ 2 travel requests for January_1.pdf:
- FOIA delivery date: 20240311
- FOIA file date: 20240304 12:13:04 UTC
- PDF date: 20240304 13:13:03 -0500
- PDF creation date: 20230131 10:55:55 -0500
- Email date: 20161031 06:33:00
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Mukes, Vickie J. (Fed); Chen, Lily (Fed)"
- Email subject: "Re: 2 travel requests for January"
- Pages: 2
- Bytes: 119272
Notes from djb, last edited 20240311 19:56:24 UTC:
Discussing travel to QIP.
20161031 10:45:00
file 20240318/PQC FRN_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:06:14 UTC
- PDF date: 20240314 12:06:11 -0400
- PDF creation date: 20230131 12:43:22 -0500
- Email date: 20161031 10:45:00
- PDF attachments: "PQC FRN 2.docx"; "final CFP v4.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "PQC FRN"
- Pages: 1
- Bytes: 184658
Notes from djb, last edited 20240417 22:58:35 UTC:
"Just wanted to check that we will be on pace to get out an FRN by the end of November? The draft
FRN I wrote is attached.
I made it very simple, just basically pointing to our webpage for all the details. Let me know if you
think I need to add anything.
I’ve also attached the latest version of our Call. I believe you were wanting to strengthen the text
where we state our preference for royalty-free. That occurs in the final paragraph before Section
2.D.1. Do you want to edit it? If you want, we can also add a bullet 4.C.3 to list our IPR preference as
one of the evaluation criteria. Does that seem a good spot to you?"
#slowingdownpqcrypto
20161031 10:49:48
file 20240318/PQC summary_3.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:32:28 UTC
- PDF date: 20240314 12:32:25 -0400
- PDF creation date: 20230131 12:45:23 -0500
- Email date: 20161031 10:49:48
- PDF attachments: "final CFP v4.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "PQC summary"
- Pages: 1
- Bytes: 160439
Notes from djb, last edited 20240417 22:58:35 UTC:
"I just wanted to check on how it’s coming with a summary of the comments we received for the CFP
(and a summary of our changes). The somewhat finalized CFP is attached. Let me know if you need
help with anything."
20161031 10:59:55
file 20240318/Re_ PQC summary(1)_2.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:32:06 UTC
- PDF date: 20240314 12:32:04 -0400
- PDF creation date: 20230131 12:45:22 -0500
- Email date: 20161031 10:59:55
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC summary"
- Pages: 1
- Bytes: 125141
Notes from djb, last edited 20240417 22:58:35 UTC:
"It should be done in the next few days (unless I end up getting jury duty tomorrow, in which I will
come in on Sunday to finish it up)."
20161031 11:40:34
file 20240318/Re_ PQC summary_1.pdf:
- FOIA delivery date: 20240318
- FOIA file date: 20240314 11:31:46 UTC
- PDF date: 20240314 12:31:42 -0400
- PDF creation date: 20230131 12:45:20 -0500
- Email date: 20161031 11:40:34
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Peralta, Rene C. (Fed); Perlner, Ray A. (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Miller, Carl A. (Fed); Chen, Lily (Fed)"
- Email subject: "Re: PQC summary"
- Pages: 1
- Bytes: 129675
Notes from djb, last edited 20240417 22:58:35 UTC:
"I am also very stuck on how to explain or defend the KEM-oriented changes. We changed key-
agreement schemes to KEM, but they’re not the same things at all. It should be KEM = key transport,
something else = key agreement."
20161031 12:40:32
file 20240325/Re_ Another question_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240315 13:06:14 UTC
- PDF date: 20240315 14:06:12 -0400
- PDF creation date: 20230131 11:01:16 -0500
- Email date: 20161031 12:40:32
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "Re: Another question"
- Pages: 1
- Bytes: 150100
Notes from djb, last edited 20240417 22:58:35 UTC:
"Okay, I guess Ray and I can figure it out"
20161031 15:56:00 UTC
file 20240124/PQC FRN is almost ready_1.pdf-attachment-Comments to post unformatted.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- XML date: 20161031 15:56:00 UTC
- XML creation date: 20161031 15:27:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 40
- Bytes: 63712
Notes from djb, last edited 20240225 11:49:06 UTC:
Unformatted collection of comments on the call for proposals.
Should compare to what was posted.
20161031 19:25:00 UTC
file 20240318/Minor Change trying to Clarify the issues raise..._1.pdf-attachment-final CFP v4.4[2] tweaks by Jacob.docx:
- FOIA delivery date: 20240318
- FOIA file date: 20240313 13:58:00 UTC
- XML date: 20161031 19:25:00 UTC
- XML creation date: 20161031 19:25:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 24
- Bytes: 76556
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
"NIST is aware that a number of proposals have been made already for post-quantum key exchange protocols.. NIST expects that any cryptosystems it standardizes will
be widely used as building blocks in protocol constructions, and welcomes descriptions of how a submission integrates into existing protocols. As all existing
proposals for post-quantum key-exchange protocols that NIST is aware are built around KEM schemes, NIST believes that such key exchange protocols can be submitted
in the form of a KEM scheme."
#scramble
20161101 08:41:00
file 20240124/RE_ PQC FRN is almost ready_5.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:05:54 UTC
- PDF date: 20240122 13:05:52 -0500
- PDF creation date: 20230201 15:48:54 -0500
- Email date: 20161101 08:41:00
- PDF attachments: "llc-PQC FRN 2.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Regenscheid, Andrew (Fed)"
- Email subject: "RE: PQC FRN"
- Pages: 1
- Bytes: 143561
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing call for proposals.
20161101 09:14:23
file 20240124/Re_ PQC FRN is almost ready_4.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:05:30 UTC
- PDF date: 20240122 13:05:28 -0500
- PDF creation date: 20230201 15:48:50 -0500
- Email date: 20161101 09:14:23
- PDF attachments: "PQC FRN 2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: PQC FRN"
- Pages: 1
- Bytes: 141123
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing call for proposals.
20161101 09:37:43
file 20240726/Re_ WERB_3.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240208 13:27:58 UTC
- PDF date: 20240208 13:27:57 -0500
- PDF creation date: 20230201 16:21:10 -0500
- Email date: 20161101 09:37:43
- PDF attachments: "cryptanalysis2.bib"; "cryptanalysis2.tex"; "cryptanalysis2.pdf"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "Re: WERB?"
- Pages: 5
- Bytes: 340255
Notes from djb, last edited 20240801 23:15:11 UTC:
Paper editing.
20161101 11:37:48
file 20240215/Re_ Minor Change trying to Clarify the issues r..._1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:26:42 UTC
- PDF date: 20240207 13:26:40 -0500
- PDF creation date: 20230201 15:30:23 -0500
- Email date: 20161101 11:37:48
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Minor Change trying to Clarify the issues raised about key exchange versus KEM"
- Pages: 2
- Bytes: 154847
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussion still struggling to understand the basic landscape of security goals for public-key encryption.
#scramble
As context,
NIST's draft call for proposals a few months earlier
asked for "key exchange"
without using any of the clearly defined terminology from the literature.
In my
comments on that draft,
I wrote
"What I suspect will be most important in the long run is a CCA2-secure 'KEM' ...
[explaining what a KEM is and how it simplifies things] ...
One can easily combine a KEM with an authenticated cipher to produce a full-fledged public-key encryption scheme. But this understates the utility of a KEM: the
same session key can be reused to encrypt any number of messages in both directions, whereas wrapping the KEM in a public-key encryption scheme hides this
functionality. Using this public-key encryption scheme to encrypt another level of a shared session key would be frivolous extra complexity. Why not let submitters
simply submit a KEM, skipping the cipher? ...
What NIST calls 'key exchange' in the draft sounds to me like a poorly labeled KEM with intermediate security requirements: chosen-ciphertext security seems to be
required, but the interface sounds like it allows only one message before the key is thrown away. NIST should make clear if it instead meant a full-fledged KEM
allowing any number of ciphertexts. ...
Calling any of these systems 'key exchange' is deceptive for people who expect 'key exchange' to be a drop-in replacement for DH key exchange."
I recommended that NIST allow submissions of
public-key encryption schemes,
KEMs aiming for IND-CCA2 security,
single-message KEMs such as the original version of New Hope,
and DH.
"The particular things that have been suggested but were left out were:
1) (what Dan Bernstein calls) DH functions, which were not supported because:
a. They fit reasonably well into the KEM framework. (although we did explicitly mention
that we would consider additional properties of DH functions, like asynchronous key
exchange in section 4.C.1 of our CFP)"
One of the examples of "flexibility" in the draft of 4.C.1
was "optimized or implicitly authenticated" key exchange.
But the literature demonstrates a vast range of uses of DH,
starting with the original DH paper proposing that each user broadcast a long-term DH public key;
with no further communication,
each pair of users then has a shared secret,
which can then be used for symmetric encryption and symmetric authentication.
This isn't just "optimized".
It isn't just "asynchronous".
It's a completely different data flow,
where a linear number of broadcasts create a quadratic number of shared secrets.
If the broadcasts are secure then the public keys authenticate all users.
The "KEM framework" also doesn't provide this.
It's easy to convert DH into a KEM,
but most proposed KEMs don't seem to correspond to DH.
A different use of DH is for servers to broadcast their public DH keys
while each client makes up a short-term DH key to talk to a server.
The short-term key no longer identifies the client:
that's bad for applications that need client authentication,
but it can be good for applications where client identities should be private,
such as basic web browsing.
This one-sided use of DH is something where KEMs are good enough:
the server broadcasts a public KEM key,
and each client sends a KEM ciphertext.
Yet another use of DH is for both the client and the server to make up short-term DH keys.
(For KEMs, the server makes up a short-term KEM key, and the client sends a KEM ciphertext, or vice versa.)
This has the advantage of allowing secret keys to be erased after a little while,
so an attacker stealing hardware from both sides
can't retroactively decrypt recorded ciphertexts.
The disadvantage is that these keys no longer identify either side,
so an attacker can jump in the middle.
One way to address this is with the server signing the key exchange, as in TLS;
an alternative that's usually better is to replace the server's long-term signing key
with a long-term encryption key,
combining the second and third uses of DH (or these two uses of KEMs).
Is it possible that NIST's perspective on DH
is limited to the third use case,
and specifically the extreme of having each DH key used just once?
That NIST simply doesn't understand the importance, in the literature and in reality,
of DH keys as long-term public keys?
This blindness would explain why NIST's KEM decisions
have repeatedly highlighted key-generation time plus enc time plus dec time
as a performance metric.
It would explain why NIST thinks DH fits into "the KEM framework",
merely having some "additional properties" that might allow "optimized" key exchange.
Back to this FOIA document:
"b. There is no widely accepted security definition. (that we know of)."
#error
A call for DH proposals
would have cited a security definition from https://eprint.iacr.org/2012/732
(which wasn't the first paper on the topic,
but proves relationships between different definitions).
Of course, this would have required whoever was writing the call to be aware of the literature.
"Plausible security requirements (e.g. secure static-static key exchange) have not been met by any postquantum DH-like scheme that we know of"
#error
As the same paper notes,
one can use zero-knowledge techniques to ensure static security.
The paper doesn't cover any examples of post-quantum DH,
but CRS had already been published years earlier.
I had even noted this in my comments:
"There is one notable post-quantum example of the DH data flow, namely isogeny-based crypto. Security analysis of isogeny-based crypto is clearly in its infancy,
but if isogeny-based crypto does survive then the data flow will be an interesting feature."
Perhaps including DH in the call,
rather than forcing DH to be rephrased as KEMs with extra "flexibility",
would have usefully triggered submission of, and more attention to, CRS
and other proposals for post-quantum DH.
Or perhaps, for the sake of simplifying security review,
it would have been best to focus from the outset on what I said I suspected would be the the most important target,
namely IND-CCA2 KEMs.
What's clear is that NIST's rationale for focusing on only three of the targets that I recommended, and excluding DH,
consisted of ignorance of the literature.
This wasn't clear from the comments that
NIST posted as part of a pqc-forum message a few days later (4 Nov 2016 18:17:28 +0000):
"Diffie-Hellman is an extremely widely used primitive, and has a number of potentially useful special features, such as asynchronous key exchange, and secure key use
profiles ranging from static-static to ephemeral-ephemeral. However, NIST believes that in its most widely used applications, such as those requiring forward secrecy,
Diffie-Hellman can be replaced by any secure KEM with an efficient key generation algorithm. The additional features of Diffie-Hellman may be useful in some applications,
but there is no widely accepted security definition, of which NIST is aware, that captures everything one might want from a Diffie-Hellman replacement. Additionally, some
plausibly important security properties of Diffie-Hellman, such as a secure, static-static key exchange, appear difficult to meet in the postquantum setting. NIST
therefore recommends that schemes sharing some or all of the desirable features of Diffie-Hellman be submitted as KEMs, while documenting any additional functionality."
The added qualifiers in this public text
obscure the original mistakes that had led to NIST's decision.
"Difficult to meet": sure, most schemes seem unable to do this,
and the exceptions such as CRS took a while for the community to come up with;
this doesn't capture NIST's actual, secret, rationale ("have not been met by any postquantum DH-like scheme that we know of").
"Everything one might want": well, sure, nothing does everything that one might want.
"Potentially useful":
the reader thinks that this is acknowledging that any particular application
is potentially one of the applications where the extra features of DH are important.
The reader doesn't realize that
NIST simply doesn't realize the breadth of DH applications
and is writing "potentially useful" to mean that some abstract property of DH has been identified
that might potentially matter for some application someday.
If NIST had been transparent about what it was actually thinking
then the public could have taken steps to correct the underlying errors.
Instead NIST edited its text to hide what it was actually thinking.
#weveshownallourwork
20161101 12:39:00 UTC
file 20240124/RE_ PQC FRN is almost ready_5.pdf-attachment-llc-PQC FRN 2.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:05:54 UTC
- XML date: 20161101 12:39:00 UTC
- XML creation date: 20161101 12:28:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 4
- Bytes: 34061
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft announcement.
20161101 13:13:00 UTC
file 20240124/Re_ PQC FRN is almost ready_4.pdf-attachment-PQC FRN 2.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:05:30 UTC
- XML date: 20161101 13:13:00 UTC
- XML creation date: 20161101 13:13:00 UTC
- XML creator: "Shu-jen Chang"
- XML last-modified-by: "Microsoft Office User"
- Pages: 4
- Bytes: 30564
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft announcement.
20161101 21:27:06 -0400
file 20240726/Re_ WERB_3.pdf-attachment-cryptanalysis2.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240208 13:27:58 UTC
- PDF date: 20161101 21:27:06 -0400
- PDF creation date: 20161101 21:27:06 -0400
- Pages: 12
- Bytes: 217604
20161102 08:39:40 -0400
file 20240124/RE_ PQC Comments that we will want to post(1)_2.pdf-attachment-comments-draft-cfp-aug2016.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 13:25:22 UTC
- PDF date: 20161102 08:39:40 -0400
- PDF creation date: 20161102 08:37:50 -0400
- PDF author: "Moody, Dustin (Fed)"
- Pages: 38
- Bytes: 340877
Notes from djb, last edited 20240225 11:49:06 UTC:
Some (?) public comments.
Should compare to what ended up being posted.
20161102 08:43:00
file 20240124/RE_ PQC Comments that we will want to post(1)_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 13:25:22 UTC
- PDF date: 20240118 14:25:21 -0500
- PDF creation date: 20230201 15:47:15 -0500
- Email date: 20161102 08:43:00
- PDF attachments: "comments-draft-cfp-aug2016.pdf"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC Comments that we will want to post"
- Pages: 2
- Bytes: 489441
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing formatting of public comments to post.
20161102 08:54:58
file 20240124/RE_ PQC Comments that we will want to post_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240118 13:24:22 UTC
- PDF date: 20240118 14:24:21 -0500
- PDF creation date: 20230201 15:47:12 -0500
- Email date: 20161102 08:54:58
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: PQC Comments that we will want to post"
- Pages: 2
- Bytes: 173358
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing posting comments.
20161102 11:20:15 -0400
file 20240215/Re_ WERB(1)_2.pdf-attachment-cryptanalysis.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:26:26 UTC
- PDF date: 20161102 11:20:15 -0400
- PDF creation date: 20161102 11:20:15 -0400
- Pages: 12
- Bytes: 207384
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft survey paper.
20161102 11:34:44
file 20240215/Re_ WERB(1)_2.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:26:26 UTC
- PDF date: 20240208 13:26:25 -0500
- PDF creation date: 20230201 16:21:05 -0500
- Email date: 20161102 11:34:44
- PDF attachments: "cryptanalysis.pdf"
- Email from: "Jordan, Stephen P (Fed)"
- Email to: "Glancy, Scott C. (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: WERB"
- Pages: 1
- Bytes: 335586
Notes from djb, last edited 20240225 11:49:06 UTC:
Asking for review of a draft paper.
20161102 12:49:03
file 20240215/Summary of Draft Comments and Changes_2.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:51:22 UTC
- PDF date: 20240208 11:51:21 -0500
- PDF creation date: 20230201 16:16:43 -0500
- Email date: 20161102 12:49:03
- PDF attachments: "Draft Comments Summary.docx"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed);Chen, Lily (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); Miller, Carl A. (Fed); Bassham, Lawrence E.(Fed)"
- Email subject: "Summary of Draft Comments and Changes"
- Pages: 1
- Bytes: 239537
Notes from djb, last edited 20240225 11:49:06 UTC:
Asking for document review.
20161102 14:12:21
file 20221003/Demystifying Quantum Computing.ppt:
- FOIA delivery date: 20221003
- FOIA file date: 20220826 15:52:00 UTC
- Date: 20161102 14:12:21
- Author: "Ray Perlner"
- Title: "Demystifying Quantum Computing"
- Bytes: 188416
Notes from djb, last edited 20230625 17:50:02 UTC:
"Develop Public Key algorithms not based on factoring, discrete logs, (or anything else a quantum computer can do easily.)":
Why "develop"?
What about using algorithms that are already available?
#scramble
"Quantum Key Exchange/Distribution a.k.a. Quantum Cryptography may be part of the solution."
20161102 16:22:25 UTC
file 20240726/Re_ question about Quantum Communications appli..._1.pdf-attachment-gs-16-18-quantum-technologies-report.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240611 09:29:40 UTC
- PDF date: 20161102 16:22:25 UTC
- PDF creation date: 20161102 11:04:09 UTC
- PDF author: "Government Office for Science"
- PDF title: "The quantum age: technological opportunities"
- PDF attachments: "/Names"
- Pages: 64
- Bytes: 3299475
20161102 16:47:00 UTC
file 20240215/Summary of Draft Comments and Changes_2.pdf-attachment-Draft Comments Summary.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:51:22 UTC
- XML date: 20161102 16:47:00 UTC
- XML creation date: 20161013 19:04:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Alperin-Sheriff, Jacob (Fed)"
- Pages: 2
- Bytes: 154511
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of NIST summary of public comments on draft call for proposals.
20161103 08:47:20
file 20240215/Re_ Some rumor about lattice based_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:16:08 UTC
- PDF date: 20240208 10:16:07 -0500
- PDF creation date: 20230201 16:05:50 -0500
- Email date: 20161103 08:47:20
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Some rumor about lattice based"
- Pages: 1
- Bytes: 126402
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing rumors about Shor attacking lattices.
20161103 10:32:30
file 20240215/Re_ Summary of Draft Comments and Changes_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 10:50:34 UTC
- PDF date: 20240208 11:50:33 -0500
- PDF creation date: 20230201 16:16:34 -0500
- Email date: 20161103 10:32:30
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Daniel C Smith (daniel-c.smith@louisville.edu); Liu, Yi-Kai (Fed);Chen, Lily (Fed); Jordan, Stephen P (Fed); Peralta, Rene C. (Fed); Miller, Carl A. (Fed); Bassham, Lawrence E.(Fed)"
- Email subject: "Re: Summary of Draft Comments and Changes"
- Pages: 1
- Bytes: 124068
Notes from djb, last edited 20240225 11:49:06 UTC:
Approving edits.
20161103 11:23:17
file 20240215/RE_ PQC 2018 - Meeting Purpose_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:36:40 UTC
- PDF date: 20240207 13:36:39 -0500
- PDF creation date: 20230201 15:44:08 -0500
- Email date: 20161103 11:23:17
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC 2018 - Meeting Purpose"
- Pages: 2
- Bytes: 159034
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing statement of "meeting purpose" for "PQC 2018".
20161107 11:05:00
file 20240124/RE_ Quick discussion on PQC security posts in p..._3_Redacted.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 10:16:46 UTC
- Email date: 20161107 11:05:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: Quick discussion on PQC security posts in pqc-forum"
- Pages: 1
- Bytes: 116388
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing meeting logistics.
20161107 11:35:46
file 20240124/Re_ Quick discussion on PQC security posts in p...(1)_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:39:28 UTC
- PDF date: 20240123 10:39:26 -0500
- PDF creation date: 20230201 15:59:16 -0500
- Email date: 20161107 11:35:46
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Quick discussion on PQC security posts in pqc-forum"
- Pages: 2
- Bytes: 108214
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing meeting logistics.
In a quoted message:
"Quick discussion on PQC security posts in pqc-forum";
"I think it would be a good idea to talk about some of the posts we’ve had this last week or two in the pqc-forum."
#weveshownallourwork
20161107 11:59:00
file 20240215/RE_ PQC discusssion_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:55:36 UTC
- PDF date: 20240207 13:55:34 -0500
- PDF creation date: 20230201 15:47:45 -0500
- Email date: 20161107 11:59:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "RE: PQC discusssion"
- Pages: 1
- Bytes: 115020
Notes from djb, last edited 20240225 11:49:06 UTC:
In thread:
"Let’s meet for a quick discussion on PQC posts. Shouldn’t be a long meeting. We’ll just meet in my
office, as I think we’ll only have a handful of us.
The main thing we want to discuss are the posts on security (Dan’s and Vadim’s)."
20161108 02:31:02
file 20240124/Re_ PQC FRN is almost ready_3.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:04:36 UTC
- PDF date: 20240122 13:04:35 -0500
- PDF creation date: 20230201 15:48:47 -0500
- Email date: 20161108 02:31:02
- PDF attachments: "final CFP v4.4-ipr additions.docx"
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: PQC FRN"
- Pages: 1
- Bytes: 195681
Notes from djb, last edited 20240225 11:49:06 UTC:
"Here are some proposed IPR additions in Sections 2.D and 4.C.3.
Let me know what you think. We’re still waiting to hear back the lawyers on the FRN, but as you saw,
Jennifer and Henry are fine with our plan for the FRN."
20161108 04:08:15
file 20240124/Re_ PQC FRN is almost ready_2.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:54 UTC
- PDF date: 20240122 13:03:52 -0500
- PDF creation date: 20230201 15:48:44 -0500
- Email date: 20161108 04:08:15
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "Re: PQC FRN"
- Pages: 2
- Bytes: 160312
Notes from djb, last edited 20240225 11:49:06 UTC:
Editing call for proposals.
In a quoted message:
"Here are some proposed IPR additions in Sections 2.D and 4.C.3.
Let me know what you think. We’re still waiting to hear back the lawyers on the FRN, but as you saw,
Jennifer and Henry are fine with our plan for the FRN."
In another quoted message:
"I believe you were wanting to strengthen the text
where we state our preference for royalty-free."
20161108 09:48:27
file 20231219/[Crypto-club] Reminder_ Crypto Reading Club - N..._1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231204 09:16:40 UTC
- PDF date: 20231204 10:16:38 -0500
- PDF creation date: 20230201 14:45:28 -0500
- Email date: 20161108 09:48:27
- PDF attachments: "ATT00001.txt"
- Email from: "crypto-club-bounces@nist.gov on behalf of Sonmez Turan, Meltem (Assoc)"
- Email to: "CRYPTO-CLUB"
- Email subject: "[Crypto-club] Reminder: Crypto Reading Club - November 9"
- Pages: 1
- Bytes: 142561
Notes from djb, last edited 20240112 23:05:08 UTC:
Notice regarding internal talk on cost analysis of hash collisions.
20161108 16:54:00 UTC
file 20240124/PQC FRN is almost ready_1.pdf-attachment-FAQ 2.3.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- XML date: 20161108 16:54:00 UTC
- XML creation date: 20161103 19:26:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 5
- Bytes: 21449
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of FAQ.
20161108 19:29:00 UTC
file 20240124/Re_ PQC FRN is almost ready_3.pdf-attachment-final CFP v4.4-ipr additions.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:04:36 UTC
- XML date: 20161108 19:29:00 UTC
- XML creation date: 20161108 18:50:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Regenscheid, Andrew (Fed)"
- Pages: 24
- Bytes: 75404
Notes from djb, last edited 20240225 11:49:06 UTC:
This looks like where the following sentence was added:
"For that reason, NIST believes it is critical that this process lead to cryptographic standards that can be freely implemented in security technologies and products."
Also where the following evaluation criterion was added:
"4.C.3 Adoption Any factors that could hinder widespread adoption of the algorithm will be considered in the evaluation process, including, but not limited to,
intellectual property claims and licenses granted to implementers. NIST will consider the assurances made in the statements by the submitter(s) and any patent
owner(s), with a strong preference for submissions as to which there are commitments to license, without compensation, under reasonable terms and conditions that
are demonstrably free of unfair discrimination."
Later this was removed as an evaluation criterion,
although the text was still present elsewhere.
#inconsistency
20161109 14:12:00 UTC
file 20240124/PQC FRN is almost ready_1.pdf-attachment-Draft Comments Summary v2.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- XML date: 20161109 14:12:00 UTC
- XML creation date: 20161109 14:12:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 3
- Bytes: 22034
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of NIST summary of comments on call for proposals.
20161109 14:12:00 UTC
file 20240124/PQC files_1.pdf-attachment-Draft Comments Summary v2.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:42:04 UTC
- XML date: 20161109 14:12:00 UTC
- XML creation date: 20161109 14:12:00 UTC
- XML creator: "Alperin-Sheriff, Jacob (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 3
- Bytes: 22034
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of NIST summary of comments on call for proposals.
Should compare to final public summary.
20161109 18:27:39 UTC
file 20221003/Cost analysis of hash collisions.pptx:
- FOIA delivery date: 20221003
- FOIA file date: 20220826 15:52:00 UTC
- XML date: 20161109 18:27:39 UTC
- XML creation date: 20161101 19:27:41 UTC
- Author: "Ray Perlner"
- Title: "Cost analysis of hash collisions: Will quantum computers make SHARCS obsolete? [Bernstein 2009]" [bracketed part in original]
- XML creator: "Perlner, Ray (Fed)"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 34
- Bytes: 384867
Notes from djb, last edited 20230625 17:50:02 UTC:
"If you assume (as you should) that memory access times scale with distance":
For comparison,
in the competition,
NIST sometimes allowed submissions
to account for the costs of memory inside attacks.
#inconsistency
20161109 18:42:00 UTC
file 20240124/PQC FRN is almost ready_1.pdf-attachment-final CFP v4.5.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- XML date: 20161109 18:42:00 UTC
- XML creation date: 20161109 14:11:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 74558
Notes from djb, last edited 20240225 11:49:06 UTC:
Final (?) call for proposals.
20161109 18:42:00 UTC
file 20240124/PQC files_1.pdf-attachment-final CFP v4.5.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:42:04 UTC
- XML date: 20161109 18:42:00 UTC
- XML creation date: 20161109 14:11:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 74558
Notes from djb, last edited 20240225 11:49:06 UTC:
Final (?) call for proposals.
20161110 02:18:07
file 20240215/Re_ WERB_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:26:02 UTC
- PDF date: 20240208 13:26:00 -0500
- PDF creation date: 20230201 16:21:02 -0500
- Email date: 20161110 02:18:07
- Email from: "Stephen Jordan"
- Email to: "Glancy, Scott C. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: WERB"
- Pages: 2
- Bytes: 145780
Notes from djb, last edited 20240225 11:49:06 UTC:
Acknowledging suggestions from internal reviewer of draft paper.
Reviewer:
"I was surprised that you do not say much about cryptographic schemes
that are resistant to all known quantum algorithms."
Reviewer:
"I am not aware of an existing universal quantum
computer with tens of qubits. Can you give a citation?"
20161114 10:59:12
file 20231219/PQC Asia forum talk_3_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231218 10:55:16 UTC
- PDF date: 20231218 11:55:14 -0500
- PDF creation date: 20231218 11:55:14 -0500
- Email date: 20161114 10:59:12
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6) Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Daniel Smith-Tone"
- Email subject: "PQC Asia forum talk"
- Pages: 26
- Bytes: 711990
Notes from djb, last edited 20240112 23:05:08 UTC:
Draft slides for a public talk.
Redacted email address.
#needmorerecords
20161114 11:51:05
file 20231219/RE_ PQC Asia forum talk(1)_2_Redacted_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231218 12:45:02 UTC
- Email date: 20161114 11:51:05
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed); (b) (6) Liu, Yi-Kai (Fed); Daniel Smith-Tone"
- Email subject: "RE: PQC Asia forum talk"
- Pages: 26
- Bytes: 738577
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing draft slides for a public talk.
20161114 12:14:00
file 20231219/RE_ PQC Asia forum talk_1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 11:47:02 UTC
- Email date: 20161114 12:14:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray (Fed)"
- Email subject: "RE: PQC Asia forum talk"
- Pages: 1
- Bytes: 109828
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing draft slides for a public talk.
20161114 12:28:08
file 20231219/Re_ PQC API(1)_2.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:57:28 UTC
- PDF date: 20231215 10:57:26 -0500
- PDF creation date: 20230201 15:44:48 -0500
- Email date: 20161114 12:28:08
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC API"
- Pages: 1
- Bytes: 124915
Notes from djb, last edited 20240112 23:05:08 UTC:
Discussing API details.
20161114 15:41:00 UTC
file 20240124/PQC FRN is almost ready_1.pdf-attachment-CFP announcement 2.docx:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- XML date: 20161114 15:41:00 UTC
- XML creation date: 20161114 15:35:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 13886
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft announcement of call for proposals.
20161114 15:41:00 UTC
file 20240405/Re_ PQC FRN is almost ready(1)_2.pdf-attachment-CFP announcement 2.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:43:36 UTC
- XML date: 20161114 15:41:00 UTC
- XML creation date: 20161114 15:35:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 1
- Bytes: 13886
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft announcement.
20161116 10:15:00
file 20240124/PQC files_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 10:42:04 UTC
- PDF date: 20240122 11:42:02 -0500
- PDF creation date: 20230201 15:48:07 -0500
- Email date: 20161116 10:15:00
- PDF attachments: "final CFP v4.5.docx"; "Draft Comments Summary v2.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew (Fed)"
- Email subject: "PQC files"
- Pages: 1
- Bytes: 174900
Notes from djb, last edited 20240225 11:49:06 UTC:
"Attached are the current
(final) CFP, as well as the
response to comments received."
20161117 10:24:00
file 20240215/RE_ PQC_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 09:01:18 UTC
- PDF date: 20240208 10:01:17 -0500
- PDF creation date: 20230201 15:43:50 -0500
- Email date: 20161117 10:24:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Stephen Jordan"
- Email subject: "RE: PQC"
- Pages: 1
- Bytes: 100899
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussion of not having a "PQC meeting on November 25".
20161121
file 20240124/PQC FRN is almost ready_1.pdf-attachment-API v4.rtf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- Date: 20161121
- Author: "Moody, Dustin (Fed)"
- Bytes: 66339
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft API notes.
20161121 08:09:44
file 20231219/FW_ PQC API_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:57:00 UTC
- PDF date: 20231215 10:56:58 -0500
- PDF creation date: 20230201 15:44:37 -0500
- Email date: 20161121 08:09:44
- PDF attachments: "API4.rtf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Perlner, Ray A. (Fed)"
- Email subject: "FW: PQC API"
- Pages: 1
- Bytes: 121097
Notes from djb, last edited 20240112 23:05:08 UTC:
Editing API notes.
20161123 08:34:15 -0500
file 20240507/PQC slides_1.pdf-attachment-PQC Asia forum.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240506 09:50:20 UTC
- PDF date: 20161123 08:34:15 -0500
- PDF creation date: 20161123 08:34:15 -0500
- Author: Dustin Moody
- Title: The NIST PQC Standardization Process
- Pages: 25
- Bytes: 572402
Notes from djb, last edited 20240511 21:52:47 UTC:
"2012 – NIST begins PQC project"
"Much broader scope – three crypto primitives"
"Continue to categorize submissions into 5 rough security strength categories":
"Allows for more meaningful performance comparisons";
"Helps us make decisions on transition to longer keys"
20161128 02:13:00
file 20240215/Re_ Can We Look at This Paper by Eldar and Shor..._1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:05:28 UTC
- PDF date: 20240207 13:05:26 -0500
- PDF creation date: 20230201 15:06:55 -0500
- Email date: 20161128 02:13:00
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Re: Can We Look at This Paper by Eldar and Shor Next Week Sometime?"
- Pages: 2
- Bytes: 110491
Notes from djb, last edited 20240225 11:49:06 UTC:
Discussing paper by Eldar and Shor.
20161128 09:45:38
file 20240215/Re_ Meet today or tomorrow_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:18:36 UTC
- PDF date: 20240207 13:18:35 -0500
- PDF creation date: 20230201 15:29:53 -0500
- Email date: 20161128 09:45:38
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Peralta, Rene C. (Fed); Perlner, Ray A. (Fed); Smith-Tone,Daniel C. (Fed)"
- Email subject: "Re: Meet today or tomorrow"
- Pages: 1
- Bytes: 124214
Notes from djb, last edited 20240225 11:49:06 UTC:
Logistics of meeting to discuss "our target security strengths".
What happened at that meeting?
#needmorerecords
20161128 12:26:45
file 20240124/Re_ Quick discussion on PQC security posts in p..._1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:39:10 UTC
- PDF date: 20240123 10:39:08 -0500
- PDF creation date: 20230201 15:59:12 -0500
- Email date: 20161128 12:26:45
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: Quick discussion on PQC security posts in pqc-forum"
- Pages: 1
- Bytes: 112160
Notes from djb, last edited 20240225 11:49:06 UTC:
"The paper has in fact been fully withdrawn so we’re not meeting tomorrow morning."
20161128 13:04:12 UTC
file 20240124/PQC slides from various talks the past year_1.pdf-attachment-PQC Asia forum [Autosaved].pptx:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- XML date: 20161128 13:04:12 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 25
- Bytes: 714507
Notes from djb, last edited 20240225 11:49:06 UTC:
Should compare to PQC Asia forum talk_3_Redacted.pdf.
20161129 02:52:44
file 20231219/RE_ (1)_2.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:19:24 UTC
- PDF date: 20231215 10:19:23 -0500
- PDF creation date: 20230201 14:42:39 -0500
- Email date: 20161129 02:52:44
- PDF attachments: "FAQ 2.4.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Peralta, Rene C. (Fed); Smith-Tone, DanielC. (Fed)"
- Email subject: "RE:"
- Pages: 1
- Bytes: 186403
Notes from djb, last edited 20240112 23:05:08 UTC:
Editing FAQ.
20161129 03:02:23
file 20231219/FW_ 1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:18:12 UTC
- PDF date: 20231215 10:18:10 -0500
- PDF creation date: 20230201 14:42:30 -0500
- Email date: 20161129 03:02:23
- PDF attachments: "FAQ 2.3 Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "FW:"
- Pages: 1
- Bytes: 177753
Notes from djb, last edited 20240112 23:05:08 UTC:
FAQ editing.
20161129 03:29:26
file 20240215/trying to adress Yi-Kai's faq concerns_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:09:16 UTC
- PDF date: 20240208 13:09:14 -0500
- PDF creation date: 20230201 16:17:53 -0500
- Email date: 20161129 03:29:26
- PDF attachments: "final CFP v4.6 Ray2.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "trying to adress Yi-Kai"s faq concerns"
- Pages: 1
- Bytes: 137695
Notes from djb, last edited 20240225 11:49:06 UTC:
No text, just attachment.
20161129 03:43:03
file 20240215/update CFP_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:23:06 UTC
- PDF date: 20240208 13:23:05 -0500
- PDF creation date: 20230201 16:19:01 -0500
- Email date: 20161129 03:43:03
- PDF attachments: "final CFP v4.6.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Jordan, StephenP (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed); Perlner, Ray A.(Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "update CFP"
- Pages: 1
- Bytes: 166465
Notes from djb, last edited 20240225 11:49:06 UTC:
Updating call for proposals.
20161129 05:21:45
file 20240215/Re_ Background reading on crypto_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240207 12:04:32 UTC
- PDF date: 20240207 13:04:30 -0500
- PDF creation date: 20230201 15:03:26 -0500
- Email date: 20161129 05:21:45
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Background reading on crypto"
- Pages: 1
- Bytes: 116450
Notes from djb, last edited 20240225 11:49:06 UTC:
"Background reading on crypto"
Quoting Moody:
"I’m probably not the best person to ask for symmetric crypto. Even for public key, I’m not sure which
books are really good. I used Koblitz’s books, which are all pretty good. I never took a course on
“crypto” really. I have heard of the Katz & Lindell book, so it’s probably pretty good. Sorry I’m not
more help!"
Miller earlier in the thread:
"I’m planning to do some studying of classical crypto, and I’m curious if you have any
recommendations for good surveys or textbooks? Where I’m coming from is that I have a strong
math background, and I’ve also dealt with the quantum versions of some classical crypto concepts,
but I’ve not studied classical crypto formally. Thus something fairly broad/basic may be good to start.
So far I’ve found this book: http://www.nowpublishers.com/article/Details/TCS-001 , which looks
short and easily digestible. There’s also “Introduction to Modern Cryptography” by Katz & Lindell,
but that seems to be very popular and it’s hard to track down a library copy. Talk to you later!"
#scramble
20161129 11:00:06
file 20240124/PQC FRN is almost ready_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240122 12:03:18 UTC
- PDF date: 20240122 13:03:17 -0500
- PDF creation date: 20230201 15:49:51 -0500
- Email date: 20161129 11:00:06
- PDF attachments: "Draft Comments Summary v2.docx"; "final CFP v4.5.docx"; "CFP announcement 2.docx"; "FAQ 2.3.docx"; "API v4.rtf"; "Comments to post unformatted.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "PQC FRN is almost ready"
- Pages: 1
- Bytes: 290837
Notes from djb, last edited 20240225 11:49:06 UTC:
Logistics.
20161129 17:41:00 UTC
file 20230210/final CFP v4.5-YKL.docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:04:54 UTC
- XML date: 20161129 17:41:00 UTC
- XML creation date: 20161109 14:11:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 25
- Bytes: 89415
Notes from djb, last edited 20230625 17:50:02 UTC:
Draft of call for submissions, including editing notes.
"NIST expects that categories 1, 2 and 3
will provide sufficient security for a variety of cryptographic applications.
Categories 4 and 5 are of interest for research purposes,
as a hedge against the possibility of a future breakthrough in cryptanalysis."
See comments elsewhere on handling of 5.
#inconsistency
20161129 19:32:00 UTC
file 20230210/final CFP v4.6.docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:04:54 UTC
- XML date: 20161129 19:32:00 UTC
- XML creation date: 20161129 19:32:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 89374
Notes from djb, last edited 20230218 16:05:01 UTC:
Draft of call for submissions, including editing notes.
"Took out a large block of text here.
I think we will get in trouble by calling our approach “bits of security” and would rather simply avoid the term.
As for the rest, I think it should be covered in the FAQ."
20161129 19:50:00 UTC
file 20231219/FW_ 1.pdf-attachment-FAQ 2.3 Ray.docx:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:18:12 UTC
- XML date: 20161129 19:50:00 UTC
- XML creation date: 20161129 16:28:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Peralta, Rene (Fed)"
- Pages: 6
- Bytes: 24258
Notes from djb, last edited 20240112 23:05:08 UTC:
Draft of FAQ regarding call for submissions.
20161129 19:52:00 UTC
file 20231219/RE_ (1)_2.pdf-attachment-FAQ 2.4.docx:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 09:19:24 UTC
- XML date: 20161129 19:52:00 UTC
- XML creation date: 20161129 19:52:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 6
- Bytes: 27870
Notes from djb, last edited 20240112 23:05:08 UTC:
Draft of FAQ regarding call for submissions.
Dustin Moody comment:
"This question makes the security strength categories seem somewhat permanent by lumping them with what we will standardize.
Like Rene said, these are just our preliminary buckets to start comparing submissions.
We don’t know how the categories/levels we want will evolve over the next several years."
#inconsistency
#weveshownallourwork
Dustin Moody comment
regarding "clearly overkill" for categories 4 and 5:
"Can we come up with a better phrase? Maybe “excessive”? Also, if we are stating it is overkill, people will wonder why we are asking for it. Need to give a
reason why."
Dustin Moody deleting
"Flexibility is generally a good thing,
but it may be weighed against the complexity of implementing and testing for all available options.":
Was this nevertheless used as a secret criterion for evaluating submissions?
#needmorerecords
20161129 20:28:00 UTC
file 20240215/trying to adress Yi-Kai's faq concerns_1.pdf-attachment-final CFP v4.6 Ray2.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:09:16 UTC
- XML date: 20161129 20:28:00 UTC
- XML creation date: 20161129 20:28:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 25
- Bytes: 80430
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20161129 20:41:00 UTC
file 20230210/final CFP v4.6 (1).docx:
- FOIA delivery date: 20230210
- FOIA file date: 20230110 09:04:54 UTC
- XML date: 20161129 20:41:00 UTC
- XML creation date: 20161129 20:41:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 86666
Notes from djb, last edited 20230218 16:05:01 UTC:
Draft of call for submissions, including editing notes.
20161129 20:41:00 UTC
file 20240215/update CFP_1.pdf-attachment-final CFP v4.6.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:23:06 UTC
- XML date: 20161129 20:41:00 UTC
- XML creation date: 20161129 20:41:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 76974
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of call for proposals.
20161130 01:23:23
file 20231219/RE_ FAQ Questions(1)_2.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:39:26 UTC
- PDF date: 20231212 10:39:24 -0500
- PDF creation date: 20230201 15:14:38 -0500
- Email date: 20161130 01:23:23
- PDF attachments: "FAQ 2.4.1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: FAQ Questions"
- Pages: 1
- Bytes: 250714
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics regarding FAQ.
20161130 01:27:29
file 20231219/RE_ FAQ Questions_1.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:37:46 UTC
- PDF date: 20231212 10:37:43 -0500
- PDF creation date: 20230201 15:14:34 -0500
- Email date: 20161130 01:27:29
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: FAQ Questions"
- Pages: 2
- Bytes: 227224
Notes from djb, last edited 20240112 23:05:08 UTC:
Logistics regarding FAQ.
20161130 03:55:15
file 20240215/Updated FAQ questions_1.pdf:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:25:16 UTC
- PDF date: 20240208 13:25:14 -0500
- PDF creation date: 20230201 16:19:14 -0500
- Email date: 20161130 03:55:15
- PDF attachments: "FAQ 2.4.1 Ray.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Updated FAQ questions"
- Pages: 1
- Bytes: 84687
Notes from djb, last edited 20240225 11:49:06 UTC:
No text, just attachment.
20161130 11:53:58
file 20231219/Re_ (1)_1_Redacted.pdf:
- FOIA delivery date: 20231219
- FOIA file date: 20231215 11:48:08 UTC
- Email date: 20161130 11:53:58
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "(b) (6) ; Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller,Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C. (Fed); Perlner, Ray A. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Re:"
- Pages: 3
- Bytes: 197089
Notes from djb, last edited 20240112 23:05:08 UTC:
Content discussions of CFP editing.
Sheds light on how some changes happened.
#weveshownallourwork
20161130 12:02:00
file 20240124/PQC slides from various talks the past year_1.pdf:
- FOIA delivery date: 20240124
- FOIA file date: 20240123 09:36:46 UTC
- PDF date: 20240123 10:36:44 -0500
- PDF creation date: 20230201 15:51:30 -0500
- Email date: 20161130 12:02:00
- PDF attachments: "PQC Asia forum [Autosaved].pptx"; "ETSI-2016-0909dm.pptx"; "ISPAB PQC update2.pptx"; "PQCrypto 2016 v3.pptx"; "Crypto in PQ world.pptx"; "PQC Crypto Club Talk.pdf"; "rene - pqc slides.pptx"; "Dustin conclusion.pptx"; "ykliu-pqc-crypto-club-2016.pptx"; "Steven - Quantum Computing.pptx"; "Ray Code Based Crypto.ppt"; "Ray Hash-Based Signatures.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene (Fed)"
- Email subject: "PQC slides from various talks the past year"
- Pages: 1
- Bytes: 14881127
Notes from djb, last edited 20240225 11:49:06 UTC:
Forwarding slides of various talks.
20161130 16:54:00 UTC
file 20231219/RE_ FAQ Questions(1)_2.pdf-attachment-FAQ 2.4.1.docx:
- FOIA delivery date: 20231219
- FOIA file date: 20231212 09:39:26 UTC
- XML date: 20161130 16:54:00 UTC
- XML creation date: 20161130 16:54:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 6
- Bytes: 25314
Notes from djb, last edited 20240112 23:05:08 UTC:
Draft of FAQ regarding call for submissions.
20161130 16:54:00 UTC
file 20240405/Re_ PQC FRN is almost ready(1)_2.pdf-attachment-FAQ 2.4.1.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:43:36 UTC
- XML date: 20161130 16:54:00 UTC
- XML creation date: 20161130 16:54:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 6
- Bytes: 25314
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FAQ.
20161130 16:54:00 UTC
file 20240405/latest FAQ_4.pdf-attachment-FAQ 2.4.1.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:26:42 UTC
- XML date: 20161130 16:54:00 UTC
- XML creation date: 20161130 16:54:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 6
- Bytes: 25314
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FAQ.
20161130 20:54:00 UTC
file 20240215/Updated FAQ questions_1.pdf-attachment-FAQ 2.4.1 Ray.docx:
- FOIA delivery date: 20240215
- FOIA file date: 20240208 12:25:16 UTC
- XML date: 20161130 20:54:00 UTC
- XML creation date: 20161130 20:42:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Perlner, Ray (Fed)"
- Pages: 6
- Bytes: 27639
Notes from djb, last edited 20240225 11:49:06 UTC:
Draft of FAQ.
20161201 09:35:32
file 20240405/RE_ FAQs_5.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:26:58 UTC
- PDF date: 20240401 13:26:57 -0400
- PDF creation date: 20230206 11:58:29 -0500
- Email date: 20161201 09:35:32
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: FAQs"
- Pages: 1
- Bytes: 138864
Notes from djb, last edited 20240417 22:58:35 UTC:
"Changes have been incorporated.
Any word from Melissa?"
20161201 10:37:05
file 20240405/RE_ PQC - FRN Pub Date_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 08:58:52 UTC
- PDF date: 20240403 10:58:50 -0400
- PDF creation date: 20230206 12:33:54 -0500
- Email date: 20161201 10:37:05
- Email from: "Mukes, Vickie J. (Fed)"
- Email to: "Kerman, Sara J. (Fed); Moody, Dustin (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed)"
- Email subject: "RE: PQC - FRN Pub Date"
- Pages: 2
- Bytes: 182978
Notes from djb, last edited 20240417 22:58:35 UTC:
FRN logistics.
20161201 15:09:00 UTC
file 20240405/Re_ PQC FRN is almost ready(1)_2.pdf-attachment-final CFP 4.7 (1).docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:43:36 UTC
- XML date: 20161201 15:09:00 UTC
- XML creation date: 20161201 15:09:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 75394
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161201 15:09:00 UTC
file 20240405/latest CFP_1.pdf-attachment-final CFP 4.7.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:33:42 UTC
- XML date: 20161201 15:09:00 UTC
- XML creation date: 20161201 15:09:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 75394
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161202 03:30:32
file 20240405/Welcome to Subversion_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:49:54 UTC
- PDF date: 20240403 11:49:53 -0400
- PDF creation date: 20230206 12:59:19 -0500
- Email date: 20161202 03:30:32
- Email from: "Scott Glancy"
- Email to: "Mink, Alan (Assoc); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Welcome to Subversion"
- Pages: 2
- Bytes: 123340
Notes from djb, last edited 20240417 22:58:35 UTC:
Information about NIST's svn server.
20161202 07:56:56
file 20240325/A quantum talk at 10 today! If like to attend_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240319 14:25:42 UTC
- PDF date: 20240319 15:25:41 -0400
- PDF creation date: 20230206 11:50:41 -0500
- Email date: 20161202 07:56:56
- Email from: "Dang, Quynh (Fed)"
- Email to: "Dang, Thinh H. (Fed)"
- Email subject: "A quantum talk at 10 today! If like to attend."
- Pages: 1
- Bytes: 57662
Notes from djb, last edited 20240417 22:58:35 UTC:
No text.
20161208 02:56:00
file 20240405/PQC Website Menu Items_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:48:54 UTC
- PDF date: 20240402 09:48:53 -0400
- PDF creation date: 20230206 12:36:04 -0500
- Email date: 20161208 02:56:00
- PDF attachments: "PQC-RFC Screen Shot.docx"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Regenscheid, Andrew (Fed); Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "PQC Website Menu Items"
- Pages: 3
- Bytes: 411508
Notes from djb, last edited 20240417 22:58:35 UTC:
Disussing web-page updates.
20161208 08:28:56
file 20240827/Re_ CFP__Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 09:00:42 UTC
- Email date: 20161208 08:28:56
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email subject: "Re: CFP?"
- Pages: 1
- Bytes: 146737
Notes from djb, last edited 20241002 20:43:30 UTC:
"We think it will be out early next week. The people who had to approve/sign off were a bit
slow. When it is posted, it will be on www.nist.gov/pqcrypto"
20161208 08:38:06
file 20240405/Re_ PQC FRN is almost ready(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:43:36 UTC
- PDF date: 20240402 09:43:34 -0400
- PDF creation date: 20230206 12:35:16 -0500
- Email date: 20161208 08:38:06
- PDF attachments: "CFP announcement 2.docx"; "API v4.rtf"; "FAQ 2.4.1.docx"; "final CFP 4.7 (1).docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: PQC FRN is almost ready"
- Pages: 1
- Bytes: 242251
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161208 08:38:46
file 20240827/PQC CFP_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 08:54:32 UTC
- Email date: 20161208 08:38:46
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene C. (Fed); (b) (6)"
- Email subject: "PQC CFP"
- Pages: 26
- Bytes: 444451
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding copy of draft call for proposals.
20161208 08:51:30
file 20240405/Re_ PQC FRN is almost ready_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:42:36 UTC
- PDF date: 20240402 09:42:33 -0400
- PDF creation date: 20230206 12:35:13 -0500
- Email date: 20161208 08:51:30
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: PQC FRN is almost ready"
- Pages: 2
- Bytes: 143939
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161208 12:08:53
file 20240405/Re_ PQC Final CFP - Remove _Proposed__1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:02:28 UTC
- PDF date: 20240403 11:02:26 -0400
- PDF creation date: 20230206 12:35:01 -0500
- Email date: 20161208 12:08:53
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Kerman, Sara J. (Fed); Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: PQC Final CFP - Remove "Proposed"?"
- Pages: 2
- Bytes: 185908
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161208 19:44:00 UTC
file 20240405/PQC Website Menu Items_2.pdf-attachment-PQC-RFC Screen Shot.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:48:54 UTC
- XML date: 20161208 19:44:00 UTC
- XML creation date: 20161208 19:43:00 UTC
- XML creator: "Kerman, Sara J. (Fed)"
- XML last-modified-by: "Kerman, Sara J. (Fed)"
- Pages: 1
- Bytes: 192015
Notes from djb, last edited 20240417 22:58:35 UTC:
Screenshot of draft web page.
20161209 10:14:50
file 20240405/Re_ PQC Website Menu Items_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:48:28 UTC
- PDF date: 20240402 09:48:27 -0400
- PDF creation date: 20230206 12:36:02 -0500
- Email date: 20161209 10:14:50
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: PQC Website Menu Items"
- Pages: 3
- Bytes: 249654
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161212 01:10:00
file 20240325/CSD WERB Update_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:56:40 UTC
- PDF date: 20240320 13:56:38 -0400
- PDF creation date: 20230206 11:57:13 -0500
- Email date: 20161212 01:10:00
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Brown, Evelyn A (Fed)"
- Email subject: "CSD WERB Update"
- Pages: 1
- Bytes: 140231
Notes from djb, last edited 20240417 22:58:35 UTC:
"The following pub went to ITL today for review:
NIST SP 800-185: SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash and ParallelHash (Pub #
922422)"
20161214 01:30:28
file 20240405/latest CFP_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:33:42 UTC
- PDF date: 20240402 09:33:40 -0400
- PDF creation date: 20230206 12:21:38 -0500
- Email date: 20161214 01:30:28
- PDF attachments: "final CFP 4.7.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "latest CFP"
- Pages: 1
- Bytes: 154924
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here you go!"
20161214 09:29:00
file 20240405/RE_ Bill Fefferman's visit -Jan. 11, 2017_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 11:41:50 UTC
- PDF date: 20240402 13:41:47 -0400
- PDF creation date: 20230206 11:55:16 -0500
- Email date: 20161214 09:29:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: Bill Fefferman"s visit -Jan. 11, 2017"
- Pages: 1
- Bytes: 115858
Notes from djb, last edited 20240417 22:58:35 UTC:
"You are on my list. I sent an update a few minutes ago. Hope you get it this time.
The time is 10:00-11:00: Bill will give a talk. 11:00 – 12:00 Bill meet PQC team (Stephen and Carl
would not be available that day, rest of us will meet Bill). The room number is A318, Building 222)"
20161214 10:38:25
file 20240325/CFP to be posted soon_1.pdf:
- FOIA delivery date: 20240325
- FOIA file date: 20240320 12:35:32 UTC
- PDF date: 20240320 13:35:30 -0400
- PDF creation date: 20230206 11:55:32 -0500
- Email date: 20161214 10:38:25
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Dworkin, MorrisJ. (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C.(Fed); Perlner, Ray A. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "CFP to be posted soon"
- Pages: 1
- Bytes: 92978
Notes from djb, last edited 20240417 22:58:35 UTC:
"Andy just gave me an update on timing. The FRN should be coming soon, but is not quite ready. But,
we’ve received the go ahead to post our CFP on our website tomorrow or Friday. When we do so,
we’ll announce it on the pqc-forum, but I wanted to make sure you all knew it’s about to happen.
Our deadline for submissions will be November 30, 2017."
20161214 12:32:23
file 20240405/Re_ WERB_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:45:14 UTC
- PDF date: 20240403 11:45:13 -0400
- PDF creation date: 20230206 12:59:48 -0500
- Email date: 20161214 12:32:23
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "Re: WERB"
- Pages: 4
- Bytes: 144034
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing a paper submission.
20161215 01:56:40
file 20240405/RE_ Final CFP(3)_4.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:37:46 UTC
- PDF date: 20240401 13:37:44 -0400
- PDF creation date: 20230206 11:59:12 -0500
- Email date: 20161215 01:56:40
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 1
- Bytes: 120091
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 02:32:47
file 20240405/RE_ Final CFP(2)_3.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:37:28 UTC
- PDF date: 20240401 13:37:25 -0400
- PDF creation date: 20230206 11:59:11 -0500
- Email date: 20161215 02:32:47
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 2
- Bytes: 121077
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 02:36:00
file 20240405/RE_ Final CFP(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:36:42 UTC
- PDF date: 20240401 13:36:40 -0400
- PDF creation date: 20230206 11:59:10 -0500
- Email date: 20161215 02:36:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 2
- Bytes: 143644
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 02:59:10
file 20240405/RE_ Final CFP_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:36:24 UTC
- PDF date: 20240401 13:36:22 -0400
- PDF creation date: 20230206 11:59:08 -0500
- Email date: 20161215 02:59:10
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 3
- Bytes: 154792
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 03:20:10
file 20240405/Re_ WERB review for Stephen Jordan_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:45:00 UTC
- PDF date: 20240403 11:44:58 -0400
- PDF creation date: 20230206 13:00:19 -0500
- Email date: 20161215 03:20:10
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Jordan, Stephen P (Fed); Graham, Catherine J. (Fed)"
- Email subject: "Re: WERB review for Stephen Jordan"
- Pages: 3
- Bytes: 144551
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing a paper submission.
20161215 08:39:45
file 20240405/RE_ Final CFP(6)_9.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:40:36 UTC
- PDF date: 20240401 13:40:34 -0400
- PDF creation date: 20230206 11:59:22 -0500
- Email date: 20161215 08:39:45
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 1
- Bytes: 119988
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 09:36:21
file 20240405/latest FAQ_4.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:26:42 UTC
- PDF date: 20240401 13:26:40 -0400
- PDF creation date: 20230206 12:22:36 -0500
- Email date: 20161215 09:36:21
- PDF attachments: "FAQ 2.4.1.docx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "latest FAQ"
- Pages: 1
- Bytes: 109208
Notes from djb, last edited 20240417 22:58:35 UTC:
"The two implementation FAQ questions are at the top. If you can get this back soon, it’d be best. We
might post this afternoon."
20161215 09:55:58
file 20240405/Re_ latest FAQ_3.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:26:22 UTC
- PDF date: 20240401 13:26:21 -0400
- PDF creation date: 20230206 12:22:34 -0500
- Email date: 20161215 09:55:58
- PDF attachments: "FAQ 2.4.1-LB.docx"
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: latest FAQ"
- Pages: 1
- Bytes: 141605
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing FAQ.
20161215 10:37:00
file 20240405/RE_ One addition to an FAQ question_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:26:02 UTC
- PDF date: 20240401 13:26:01 -0400
- PDF creation date: 20230206 12:28:01 -0500
- Email date: 20161215 10:37:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: One addition to an FAQ question"
- Pages: 1
- Bytes: 158493
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 11:42:00
file 20240405/RE_ Final CFP(5)_8.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:40:18 UTC
- PDF date: 20240401 13:40:17 -0400
- PDF creation date: 20230206 11:59:21 -0500
- Email date: 20161215 11:42:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 2
- Bytes: 114214
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 11:49:49
file 20240405/FW_ Final CFP(1)_7.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:40:02 UTC
- PDF date: 20240401 13:40:01 -0400
- PDF creation date: 20230206 11:59:19 -0500
- Email date: 20161215 11:49:49
- PDF attachments: "final CFP 4.8 tracked changes.docx"; "final CFP 4.8.docx"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "FW: Final CFP"
- Pages: 1
- Bytes: 268409
Notes from djb, last edited 20240417 22:58:35 UTC:
Changing CFP based on feedback from NIST lawyers.
20161215 11:53:56
file 20240405/FW_ Final CFP_6.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:39:16 UTC
- PDF date: 20240401 13:39:13 -0400
- PDF creation date: 20230206 11:59:16 -0500
- Email date: 20161215 11:53:56
- PDF attachments: "final CFP 4.8 tracked changes.docx"; "final CFP 4.8.docx"; "final CFP 4.9-proposed removed from headings.docx"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "FW: Final CFP"
- Pages: 1
- Bytes: 344246
Notes from djb, last edited 20240417 22:58:35 UTC:
"Per a previous email from Andy, I believe all headings and titles should have “proposed” removed.
Final CFP 4.9 attached."
20161215 11:54:00
file 20240405/RE_ Final CFP(4)_5.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:38:04 UTC
- PDF date: 20240401 13:38:03 -0400
- PDF creation date: 20230206 11:59:14 -0500
- Email date: 20161215 11:54:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: Final CFP"
- Pages: 1
- Bytes: 112897
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161215 13:31:00 UTC
file 20240405/FW_ Final CFP(1)_7.pdf-attachment-final CFP 4.8 tracked changes.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:40:02 UTC
- XML date: 20161215 13:31:00 UTC
- XML creation date: 20161215 13:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 76716
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161215 13:31:00 UTC
file 20240405/FW_ Final CFP_6.pdf-attachment-final CFP 4.8 tracked changes.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:39:16 UTC
- XML date: 20161215 13:31:00 UTC
- XML creation date: 20161215 13:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 25
- Bytes: 76716
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161215 13:32:00 UTC
file 20240405/FW_ Final CFP(1)_7.pdf-attachment-final CFP 4.8.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:40:02 UTC
- XML date: 20161215 13:32:00 UTC
- XML creation date: 20161215 13:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 75408
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161215 13:32:00 UTC
file 20240405/FW_ Final CFP_6.pdf-attachment-final CFP 4.8.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:39:16 UTC
- XML date: 20161215 13:32:00 UTC
- XML creation date: 20161215 13:31:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 24
- Bytes: 75408
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161215 14:53:00 UTC
file 20240405/Re_ latest FAQ_3.pdf-attachment-FAQ 2.4.1-LB.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:26:22 UTC
- XML date: 20161215 14:53:00 UTC
- XML creation date: 20161215 14:47:00 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Bassham, Lawrence E (Fed)"
- Pages: 6
- Bytes: 26244
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft FAQ, adding an entry on multiple cores.
20161215 16:52:00 UTC
file 20240405/FW_ Final CFP_6.pdf-attachment-final CFP 4.9-proposed removed from headings.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 11:39:16 UTC
- XML date: 20161215 16:52:00 UTC
- XML creation date: 20161215 16:52:00 UTC
- XML creator: "rene"
- XML last-modified-by: "Kerman, Sara J. (Fed)"
- Pages: 25
- Bytes: 76842
Notes from djb, last edited 20240417 22:58:35 UTC:
Draft CFP.
20161216 02:21:59
file 20240405/xxx____1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 11:23:38 UTC
- PDF date: 20240403 13:23:37 -0400
- PDF creation date: 20230206 13:01:28 -0500
- Email date: 20161216 02:21:59
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "xxx????"
- Pages: 1
- Bytes: 112798
Notes from djb, last edited 20240417 22:58:35 UTC:
"Why does our final call for proposals say “Dated: xxx” at the bottom?"
20161218 01:35:00 UTC
file 20240405/Re_ Project Summaries for Division Yearly -- Yo...(2)_3.pdf-attachment-quantum_randomness_summary.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:54:38 UTC
- XML date: 20161218 01:35:00 UTC
- XML creation date: 20161216 20:40:00 UTC
- XML creator: "Ronald Boisvert"
- XML last-modified-by: "Glancy, Scott (Fed)"
- Pages: 8
- Bytes: 276551
Notes from djb, last edited 20240417 22:58:35 UTC:
Template for project summary.
20161219 08:31:52
file 20240405/RE_ one small fix_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 08:47:12 UTC
- PDF date: 20240403 10:47:11 -0400
- PDF creation date: 20230206 12:28:34 -0500
- Email date: 20161219 08:31:52
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: one small fix"
- Pages: 1
- Bytes: 117646
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing edit to published CFP.
20161219 09:56:56 -0500
file 20220914/call-for-proposals-final-dec-2016.pdf:
- FOIA delivery date: 20220914
- FOIA file date: 20220914 17:23:45 UTC
- PDF date: 20161219 09:56:56 -0500
- PDF creation date: 20161219 09:56:09 -0500
- Author: None listed.
- PDF author: "rene"
- Title: "Submission Requirements and Evaluation Criteria for the Post-Quantum Cryptography Standardization Process"
- Pages: 25
- Bytes: 230881
Notes from djb, last edited 20230125 23:38:54 UTC:
This is exactly
the final public version
of the call for proposals
from NIST's web site.
(NIST had also
published a marginally different
"final" version before that,
and a considerably different
draft version months earlier.)
For documents already on NIST's web site,
the FOIA request
had specifically asked for URLs, not copies.
Some other documents below were also public previously.
20161219 10:15:00
file 20240716/RE_ another modification to the pqc page(1).pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 09:50:38 UTC
- PDF date: 20240715 11:50:37 -0400
- PDF creation date: 20230206 11:53:25 -0500
- Date: 20161219 10:15:00
- Pages: 1
- Bytes: 142420
Notes from djb, last edited 20240726 21:43:58 UTC:
Web-page modification.
Why was this PDF edited after the lawsuit was filed?
20161219 14:22:00
file 20240716/RE_ another modification to the pqc page.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 09:50:18 UTC
- PDF date: 20240715 11:50:16 -0400
- PDF creation date: 20230206 11:53:24 -0500
- Date: 20161219 14:22:00
- Pages: 1
- Bytes: 141910
Notes from djb, last edited 20240726 21:43:58 UTC:
Why was this PDF edited after the lawsuit was filed?
#needmorerecords
20161220 09:08:00
file 20240405/RE_ FRN - PQC Nominations_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 11:57:00 UTC
- PDF date: 20240402 13:56:58 -0400
- PDF creation date: 20230206 12:00:20 -0500
- Email date: 20161220 09:08:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: FRN - PQC Nominations"
- Pages: 1
- Bytes: 226659
Notes from djb, last edited 20240417 22:58:35 UTC:
DIscussing web-page updates.
20161220 10:15:00
file 20240405/Re_ Project Summaries for Division Yearly -- Yo...(2)_3.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:54:38 UTC
- PDF date: 20240402 09:54:36 -0400
- PDF creation date: 20230206 12:37:31 -0500
- Email date: 20161220 10:15:00
- PDF attachments: "quantum_randomness_summary.docx"
- Email from: "Scott Glancy"
- Email to: "Orr, Lochi M. Mrs. (Fed)"
- Email cc: "Knill, Emanuel H. (Fed); Mink, Alan (Assoc); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Re: Project Summaries for Division Yearly -- Your input needed by Dec 20"
- Pages: 1
- Bytes: 382729
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here is a project summary about randomness for the quantum information section."
20161220 12:51:58
file 20240405/Re_ PQC Timeline_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:07:06 UTC
- PDF date: 20240403 11:07:05 -0400
- PDF creation date: 20230206 12:35:47 -0500
- Email date: 20161220 12:51:58
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: PQC Timeline"
- Pages: 1
- Bytes: 218123
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20161220 21:42:00
file 20240412/Checklist and Evaluation Procedures from SHA-3_5.pdf-attachment-submission eval procedure (used for SHA-3).doc:
- FOIA delivery date: 20240412
- FOIA file date: 20240412 09:29:06 UTC
- Date: 20161220 21:42:00
- Bytes: 57344
Notes from djb, last edited 20240420 20:41:56 UTC:
"Hash Submissions Evaluation Procedure"
20161221 06:35:08
file 20240405/Re_ Project Summaries for Division Yearly -- Yo...(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:53:56 UTC
- PDF date: 20240402 09:53:55 -0400
- PDF creation date: 20230206 12:37:28 -0500
- Email date: 20161221 06:35:08
- PDF attachments: "ykliu-project-summaries-2016.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Orr, Lochi M. Mrs. (Fed)"
- Email subject: "Re: Project Summaries for Division Yearly -- Your input needed by Dec 20"
- Pages: 2
- Bytes: 167519
Notes from djb, last edited 20240417 22:58:35 UTC:
Reporting two quantum-related projects.
20161221 07:00:37
file 20240405/Re_ Project Summaries for Division Yearly -- Yo..._1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:53:34 UTC
- PDF date: 20240402 09:53:32 -0400
- PDF creation date: 20230206 12:37:25 -0500
- Email date: 20161221 07:00:37
- PDF attachments: "pqc-project-summary-2016-final.docx"
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Orr, Lochi M. Mrs. (Fed)"
- Email cc: "Jordan, Stephen P (Fed)"
- Email subject: "Re: Project Summaries for Division Yearly -- Your input needed by Dec 20"
- Pages: 2
- Bytes: 170143
Notes from djb, last edited 20240417 22:58:35 UTC:
"Here is one more project summary, on "post-quantum cryptography." Thanks again, and sorry for being a bit late with this."
20161221 07:12:33
file 20240405/IEEE Software Magazine CFP_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240401 12:37:32 UTC
- PDF date: 20240401 14:37:30 -0400
- PDF creation date: 20230206 12:03:43 -0500
- Email date: 20161221 07:12:33
- Email from: "Voas, Jeff (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email cc: "Ferraiolo, David F. (Fed); Kuhn, D. Richard (Fed)"
- Email subject: "IEEE Software Magazine CFP"
- Pages: 1
- Bytes: 89182
Notes from djb, last edited 20240417 22:58:35 UTC:
Pointing to call for papers on software security.
Not clear why this was included for this FOIA.
20161221 23:27:00 UTC
file 20240405/Re_ Project Summaries for Division Yearly -- Yo...(1)_2.pdf-attachment-ykliu-project-summaries-2016.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:53:56 UTC
- XML date: 20161221 23:27:00 UTC
- XML creation date: 20151208 19:30:00 UTC
- XML creator: "Ronald Boisvert"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 2
- Bytes: 56380
Notes from djb, last edited 20240417 22:58:35 UTC:
Summaries of two Yi-Kai Liu quantum projects.
20161221 23:55:00 UTC
file 20240405/Re_ Project Summaries for Division Yearly -- Yo..._1.pdf-attachment-pqc-project-summary-2016-final.docx:
- FOIA delivery date: 20240405
- FOIA file date: 20240402 07:53:34 UTC
- XML date: 20161221 23:55:00 UTC
- XML creation date: 20151208 19:30:00 UTC
- XML creator: "Ronald Boisvert"
- XML last-modified-by: "Liu, Yi-Kai (Fed)"
- Pages: 2
- Bytes: 58306
Notes from djb, last edited 20240417 22:58:35 UTC:
Internal reporting of NIST's post-quantum project.
"While large quantum computers have not yet been built, they are believed to be a potential future threat to information security":
So we can't say they are a potential future threat,
but they're believed to be a potential future threat?
Maybe?
"For this reason, NIST is taking steps to standardize new cryptosystems that are secure against quantum attacks":
Where did the public CFP say that NIST specifically wanted new cryptosystems?
#inconsistency
"NIST has identified a set of core requirements for post-quantum cryptosystems, including digital signatures, and various forms of key encapsulation, key exchange
and key transport. This was done in order to focus attention on those functionalities that are the most useful for providing long-term security for commonly used
Internet applications. In addition, NIST has proposed a technical approach for measuring the security of these schemes against quantum attacks.":
If NIST had simply stuck to what the literature said, instead of making up its own path here,
then it wouldn't have been able to advertise this activity in this report.
Did this influence NIST to not stick to what the literature said?
#needmorerecords
20161230 09:00:28
file 20240405/Re_ Visiting CalTech_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 09:43:18 UTC
- PDF date: 20240403 11:43:16 -0400
- PDF creation date: 20230206 12:58:16 -0500
- Email date: 20161230 09:00:28
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Re: Visiting CalTech"
- Pages: 3
- Bytes: 138825
Notes from djb, last edited 20240417 22:58:35 UTC:
Travel approvals.
2017
file 20230105/Crypto in PQ world -DoC.pdf:
- FOIA delivery date: 20230105
- FOIA file date: 20221025 06:47:20 UTC
- PDF date: 20220907 21:36:47 -0400
- PDF creation date: 20220907 21:36:30 -0400
- Date: 2017?
- Author: "Dustin Moody, Lily Chen"
- PDF author: "Moody, Dustin (Fed)"
- Title: "Cryptography in a Post-Quantum World"
- PDF title: "Cryptography in a Post-Quantum World"
- Pages: 38
- Bytes: 1522804
Notes from djb, last edited 20230625 17:50:02 UTC:
Slides of a talk.
Was this talk public?
The "DoC" part of the filename suggests that this was a
presentation at a Department of Commerce event.
(NIST is one part of the Department of Commerce.)
#weveshownallourwork
QKD:
"Security can be proven
without imposing any restrictions
on the abilities of the eavesdropper,
which isn't possible with classical crypto"
#error
Various incorrect cryptosystem benchmarks
and incorrect asymptotics
labeled as "rough estimates for comparison purposes".
#error
The magnitude of the error varies from one system to another,
spoiling many comparisons.
Regarding large public keys:
"For most protocols,
if the public keys do not need to be exchanged,
it may not be a problem".
For comparison,
NIST's eventual selections ended up being driven primarily by
performance in poorly optimized protocols
that constantly exchange public keys.
#inconsistency
"Some ciphertext and signature sizes are not quite plausible":
Which sizes are not quite plausible for what?
#missingclarity
#ftqcic
"No easy 'drop-in' replacements"
#missingclarity
#ftqcic
"We see our role as managing a process
of achieving community consensus
in a transparent and timely manner"
(boldface in original)
#claimingtransparency
"~ 2012 — NIST begins PQC project"
"Possible third round of evaluation, if needed"
"Not exactly a competition - it is and it isn't"
"Minimal acceptability requirements"
including "Concrete values for parameters
meeting target security levels":
For comparison,
NIST subsequently dropped many submissions
in response to attacks
that appear to violate the target security levels,
but allowed some submissions
to change parameters in response to such attacks.
#inconsistency
For example,
it appears that the round-1 and round-2 versions of Kyber-512
are easier to break than AES-128
after various advances in lattice attacks,
meaning that Kyber-512 flunked this "minimal acceptability requirement".
The round-3 version of Kyber-512,
which NIST claims is as difficult to break as AES-128,
is not the same as the round-2 version:
the Kyber team modified the cryptosystem parameters,
and claimed that the modification gained security.
(The round-2 version is also
not the same as the round-1 version.)
For comparison,
the official version of this "requirement"
is effectively meaningless,
since it includes a
"to the best of the submitter’s knowledge"
qualifier.
The different version of this "requirement"
that NIST advertises in its talk
makes it sound as if
simply showing that the original Kyber-512
doesn't meet its security target
would be enough to remove Kyber-512 from consideration.
#inconsistency
20170103 04:57:31
file 20240827/Re_ Slides for RWC talk(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:37:56 UTC
- Email date: 20170103 04:57:31
- Email from: "Peralta, Rene (Fed)"
- Email to: "(b) (6) ; Perlner, Ray A. (Fed)"
- Email cc: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai(Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Smith-Tone, Daniel C. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Slides for RWC talk"
- Pages: 2
- Bytes: 137826
Notes from djb, last edited 20241002 20:43:30 UTC:
Editing slides.
20170103 09:42:47
file 20240827/Re_ Slides for RWC talk(2)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:38:28 UTC
- Email date: 20170103 09:42:47
- Email from: "Peralta, Rene (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Re: Slides for RWC talk"
- Pages: 2
- Bytes: 132476
Notes from djb, last edited 20241002 20:43:30 UTC:
Thread making ambiguous claims about lattice-based "key agreement".
#scramble
#missingclarity
20170103 10:37:34
file 20240716/RE_ [Itl_mgmt] FW_ News Clips from Tuesday, Jan....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 09:01:14 UTC
- PDF date: 20240715 11:01:12 -0400
- PDF creation date: 20230207 07:06:52 -0500
- Email date: 20170103 10:37:34
- Email from: "Moody, Dustin (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "RE: [Itl_mgmt] FW: News Clips from Tuesday, January 3, 2017"
- Pages: 1
- Bytes: 170945
Notes from djb, last edited 20240726 21:43:58 UTC:
"Thanks for catching that one! I’ll have to be one the lookout for articles from other places I’d never
expect."
20170104 02:50:37
file 20240726/Re_ Hash-based signatures(1)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:47:06 UTC
- Email date: 20170104 02:50:37
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Peralta, Rene C. (Fed); (b) (6) ; Liu, Yi-Kai (Fed)"
- Email cc: "Perlner, Ray A. (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Jordan, Stephen P (Fed); Miller, Carl A.(Fed); Moody, Dustin (Fed); Smith-Tone, Daniel C. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Hash-based signatures"
- Pages: 1
- Bytes: 134553
Notes from djb, last edited 20240801 23:15:11 UTC:
"A look through the CFP indicates that we didn’t address stateful vs. stateless, so looks like you’re not
a liar!"
"But I had thought the problems with stateful signatures go well beyond the size of the private keys …"
20170104 07:20:14
file 20240726/Re_ Hash-based signatures_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:47:32 UTC
- Email date: 20170104 07:20:14
- Email from: "Peralta, Rene (Fed)"
- Email to: "(b) (6) ; Perlner, Ray A. (Fed)"
- Email cc: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed); Liu, Yi-Kai (Fed); Bassham, Lawrence E. (Fed); Chen, Lily(Fed); Jordan, Stephen P (Fed); Miller, Carl A. (Fed); Smith-Tone, Daniel C. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Hash-based signatures"
- Pages: 3
- Bytes: 154163
Notes from djb, last edited 20240801 23:15:11 UTC:
"Thanks to all for the clarifications. There is no contradiction with what I stated.
NIST is interested in hash-based signatures. Stateful hash-based signatures
are out of scope for the PQC CFP but in scope for the PQC project."
"I also stated that the names of the people in the project is not a secret (most
are named as authors of the PQC report), and that we would make the list of
names public somehow."
20170104 09:17:23
file 20240716/FW_ [Itl_mgmt] FW_ News Clips from Tuesday, Jan....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 09:00:52 UTC
- PDF date: 20240715 11:00:50 -0400
- PDF creation date: 20230207 07:06:52 -0500
- Email date: 20170104 09:17:23
- PDF attachments: "ATT00001.txt"; "ATT00001.txt"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Smith-Tone, Daniel C. (Fed); Alperin-Sheriff,Jacob (Fed)"
- Email subject: "FW: [Itl_mgmt] FW: News Clips from Tuesday, January 3, 2017"
- Pages: 1
- Bytes: 175286
Notes from djb, last edited 20240726 21:43:58 UTC:
Down thread: "Hey Look! Nigeria Today. That’s a new one for us."
20170106 11:14:22
file 20240405/Re_ NAS forum for cyberresiliency(2)_3.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:36:46 UTC
- PDF date: 20240404 10:36:44 -0400
- PDF creation date: 20230207 07:48:59 -0500
- Email date: 20170106 11:14:22
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Dodson, Donna F (Fed); Chen, Lily (Fed)"
- Email subject: "Re: NAS forum for cyberresiliency"
- Pages: 1
- Bytes: 134052
Notes from djb, last edited 20240417 22:58:35 UTC:
Talk logistics.
20170108 03:58:48
file 20240726/Re_ International Cryptographic Module Conferen....pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240722 12:32:32 UTC
- PDF date: 20240722 14:32:31 -0400
- PDF creation date: 20230207 07:38:37 -0500
- Email date: 20170108 03:58:48
- Email from: "Chen, Lily (Fed)"
- Email to: "Cawthra, Jennifer L. (Fed)"
- Email cc: "Cooper, Michael Joseph (Fed)"
- Email subject: "Re: International Cryptographic Module Conference 2017"
- Pages: 2
- Bytes: 161640
Notes from djb, last edited 20240801 23:15:11 UTC:
Planning a conference submission.
20170108 04:41:39
file 20240405/Re_ NAS forum for cyberresiliency(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:36:32 UTC
- PDF date: 20240404 10:36:30 -0400
- PDF creation date: 20230207 07:48:59 -0500
- Email date: 20170108 04:41:39
- Email from: "Chen, Lily (Fed)"
- Email to: "Dodson, Donna F (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: NAS forum for cyberresiliency"
- Pages: 1
- Bytes: 135059
Notes from djb, last edited 20240417 22:58:35 UTC:
Talk logistics.
20170109 02:05:00
file 20240405/PQC talks_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:58:40 UTC
- PDF date: 20240404 10:58:38 -0400
- PDF creation date: 20230207 07:58:35 -0500
- Email date: 20170109 02:05:00
- Email from: "Moody, Dustin (Fed)"
- Email to: ""pqc@nist.gov""
- Email subject: "PQC talks"
- Pages: 1
- Bytes: 80799
Notes from djb, last edited 20240417 22:58:35 UTC:
"Now that we’re in a new year, we can start back up our pqc seminar. We don’t have anybody
scheduled for any talk’s right now, so we need some volunteers. Please let me know if you have a
paper/topic you’d like to speak on, and we can start creating a schedule."
20170109 09:36:14
file 20240827/FW_ Slides for RWC talk_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 07:53:46 UTC
- Email date: 20170109 09:36:14
- Email from: "Chen, Lily (Fed)"
- Email to: "Scholl, Matthew A. (Fed)"
- Email subject: "FW: Slides for RWC talk"
- Pages: 12
- Bytes: 250178
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding slides for RWC 2017 talk.
20170110 05:37:03
file 20240405/Re_ NAS forum for cyberresiliency_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:36:18 UTC
- PDF date: 20240404 10:36:17 -0400
- PDF creation date: 20230207 07:48:58 -0500
- Email date: 20170110 05:37:03
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: NAS forum for cyberresiliency"
- Pages: 1
- Bytes: 140391
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks, Lily. I think the audience is fairly technical and some people like Paul Kocher have the
background for a deep dive while others like Bob Blakely understand the issues. Does that help? I
would be happy to discuss this with the three of you if you like."
20170110 11:08:03
file 20240726/RE_ I think I figured out how to extend our cub...(1)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:48:24 UTC
- Email date: 20170110 11:08:03
- Email from: "Moody Dustin (Fed)"
- Email cc: "(6)Perlner Ray A. (Fed)"
- Email subject: "RE: I think I figured out how to extend our cubic ABC attack to the characteristic 2 case"
- Pages: 2
- Bytes: 252840
Notes from djb, last edited 20240801 23:15:11 UTC:
The timestamp on this message is missing a colon
(not marked as a redaction).
What happened here?
#needmorerecords
Discussing attack software.
20170111 08:40:00
file 20240405/RE_ Inquiries about PQC competition_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 11:40:48 UTC
- PDF date: 20240404 13:40:47 -0400
- PDF creation date: 20230207 07:38:17 -0500
- Email date: 20170111 08:40:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Miller, Carl A. (Fed); Chen, Lily (Fed)"
- Email subject: "RE: Inquiries about PQC competition"
- Pages: 1
- Bytes: 112891
Notes from djb, last edited 20240417 22:58:35 UTC:
"Sounds to me like you got it."
In response to:
"I just wanted to know if there’s any pitfalls that I should watch out for if someone is asking
information about one of our competitions. ...
And that we need to watch out for any unfair influence on
the outcome of the competition."
20170111 09:39:21
file 20240827/MUST attend! 10 to 11_ Room A318!_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 08:19:34 UTC
- Email date: 20170111 09:39:21
- Email from: "Dang, Quynh (Fed)"
- Email to: "Dang, Thinh H. (Fed)"
- Email subject: "MUST attend! 10 to 11: Room A318!"
- Pages: 1
- Bytes: 136714
Notes from djb, last edited 20241002 20:43:30 UTC:
Forwarding talk announcement.
20170111 09:41:00
file 20240412/RE_ PQC relevant talk_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 08:33:56 UTC
- PDF date: 20240410 10:33:54 -0400
- PDF creation date: 20230207 07:56:30 -0500
- Email date: 20170111 09:41:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Petzoldt, Albrecht R. (IntlAssoc)"
- Email subject: "RE: PQC relevant talk"
- Pages: 1
- Bytes: 138485
Notes from djb, last edited 20240420 20:41:56 UTC:
Seminar logistics.
20170112 11:49:00
file 20240412/RE_ PQC post_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 08:15:42 UTC
- PDF date: 20240410 10:15:40 -0400
- PDF creation date: 20230207 07:56:07 -0500
- Email date: 20170112 11:49:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: PQC post"
- Pages: 2
- Bytes: 181790
Notes from djb, last edited 20240420 20:41:56 UTC:
Discussing web-page updates.
20170116 04:43:00
file 20240412/Save the date_ QuICS Stakeholders Day Feb 28_3.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:03:02 UTC
- PDF date: 20240410 11:03:01 -0400
- PDF creation date: 20230207 08:06:13 -0500
- Email date: 20170116 04:43:00
- Email from: "Ronald Boisvert"
- Email to: "Beichl, Isabel M. (Assoc); Cloteaux, Brian D. (Fed); Tang, Xiao (Assoc); Kuo, Paulina S. (Fed); Ma, Lijun (Fed);Slattery, Oliver T. (Fed); Mink, Alan (Assoc); Chen, Lily (Fed); Peralta, Rene C. (Fed); Kelsey, John M. (Fed);Moody, Dustin (Fed); Perlner, Ray A. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "Save the date: QuICS Stakeholders Day Feb 28"
- Pages: 1
- Bytes: 103413
Notes from djb, last edited 20240420 20:41:56 UTC:
"The NIST/UMD Joint Center for Quantum Information and Computer
Science (QuICS) will be holding its annual Stakeholders Day the
morning of Tuesday February 28 in College Park."
20170116 04:43:09
file 20240716/[Itl_mgmt] Save the date_ QuICS Stakeholders Da....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 09:00:08 UTC
- PDF date: 20240715 11:00:07 -0400
- PDF creation date: 20230207 07:06:54 -0500
- Email date: 20170116 04:43:09
- PDF attachments: "ATT00001.txt"
- Email from: "itl_mgmt-bounces@nist.gov on behalf of Ronald Boisvert"
- Email to: "ITL_MGMT"
- Email subject: "[Itl_mgmt] Save the date: QuICS Stakeholders Day Feb 28"
- Pages: 1
- Bytes: 104770
Notes from djb, last edited 20240726 21:43:58 UTC:
No evident post-quantum content.
20170117 05:29:41
file 20240412/Re_ Save the date_ QuICS Stakeholders Day Feb 28(1)_2.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:02:42 UTC
- PDF date: 20240410 11:02:39 -0400
- PDF creation date: 20230207 08:06:13 -0500
- Email date: 20170117 05:29:41
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Chen, Lily (Fed); Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Re: Save the date: QuICS Stakeholders Day Feb 28"
- Pages: 2
- Bytes: 166737
Notes from djb, last edited 20240420 20:41:56 UTC:
Event logistics.
20170119 03:23:47
file 20240412/Re_ Save the date_ QuICS Stakeholders Day Feb 28_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:02:22 UTC
- PDF date: 20240410 11:02:19 -0400
- PDF creation date: 20230207 08:06:12 -0500
- Email date: 20170119 03:23:47
- Email from: "Peralta, Rene (Fed)"
- Email to: "Boisvert, Ronald F. (Fed)"
- Email subject: "Re: Save the date: QuICS Stakeholders Day Feb 28"
- Pages: 1
- Bytes: 140519
Notes from djb, last edited 20240420 20:41:56 UTC:
Event logistics.
20170119 05:58:25
file 20240716/Re_ [Itl_mgmt] Save the date_ QuICS Stakeholder....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 08:59:36 UTC
- PDF date: 20240715 10:59:34 -0400
- PDF creation date: 20230207 07:06:53 -0500
- Email date: 20170119 05:58:25
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Boisvert, Ronald F. (Fed)"
- Email subject: "Re: [Itl_mgmt] Save the date: QuICS Stakeholders Day Feb 28"
- Pages: 1
- Bytes: 129411
Notes from djb, last edited 20240726 21:43:58 UTC:
No evident post-quantum content.
20170127 02:37:45
file 20240405/Re_ National Security Hires_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 12:38:22 UTC
- PDF date: 20240404 14:38:20 -0400
- PDF creation date: 20230207 07:50:00 -0500
- Email date: 20170127 02:37:45
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Folk, Alex R. (Fed)"
- Email subject: "Re: National Security Hires?"
- Pages: 2
- Bytes: 160891
Notes from djb, last edited 20240417 22:58:35 UTC:
Sounds like "national security" exceptions were being made to normal NIST hiring procedures.
#nsa
#needmorerecords
20170127 05:16:07
file 20240405/Re_ Multivariate crypto_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 11:52:00 UTC
- PDF date: 20240404 13:51:58 -0400
- PDF creation date: 20230207 07:48:06 -0500
- Email date: 20170127 05:16:07
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Petzoldt, Albrecht R. (IntlAssoc)"
- Email subject: "Re: Multivariate crypto"
- Pages: 2
- Bytes: 135993
Notes from djb, last edited 20240417 22:58:35 UTC:
"Ok, thanks a lot for the references. I may give a talk on this topic in the PQC seminar (it will be
challenging to give a talk as a beginner in front of people who already know the subject, but I figure
it’s a good way to learn :)). Suggestions for topics are also welcome. Talk to you later!"
20170127 07:50:53
file 20240726/Fwd_ Explaining the upside and downside of D-Wa..._Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:19:42 UTC
- Email date: 20170127 07:50:53
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Williams, Carl J. Dr. (Fed)"
- Email subject: "Fwd: Explaining the upside and downside of D-Wave’s new quantum computer"
- Pages: 1
- Bytes: 153588
Notes from djb, last edited 20240801 23:15:11 UTC:
"Is this anything significant?"
20170127 08:18:00
file 20240827/RE_ Update_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:55:48 UTC
- Email date: 20170127 08:18:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Dang, Thinh H. (Fed)"
- Email subject: "RE: Update?"
- Pages: 4
- Bytes: 156614
Notes from djb, last edited 20241002 20:43:30 UTC:
Intern supervision.
20170131 01:26:46
file 20240726/Re_ I think I figured out how to extend our cub...(2)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:49:26 UTC
- Email date: 20170131 01:26:46
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Re: I think I figured out how to extend our cubic ABC attack to the characteristic 2 case"
- Pages: 7
- Bytes: 278224
Notes from djb, last edited 20240801 23:15:11 UTC:
Discussing attack software.
20170131 01:55:32
file 20240726/Re_ I think I figured out how to extend our cub...(1)_1_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:49:02 UTC
- Email date: 20170131 01:55:32
- Email from: "(b) (6)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Re: I think I figured out how to extend our cubic ABC attack to the characteristic 2 case"
- Pages: 10
- Bytes: 280607
Notes from djb, last edited 20240801 23:15:11 UTC:
Discussing attack software.
20170131 02:10:55
file 20240726/Re_ I think I figured out how to extend our cub..._Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:49:52 UTC
- Email date: 20170131 02:10:55
- Email from: "(b) (6)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Re: I think I figured out how to extend our cubic ABC attack to the characteristic 2 case"
- Pages: 12
- Bytes: 284435
Notes from djb, last edited 20240801 23:15:11 UTC:
Discussing attack software.
20170131 03:22:44
file 20240412/Slides update_3.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:12:30 UTC
- PDF date: 20240410 11:12:27 -0400
- PDF creation date: 20230207 08:08:01 -0500
- Email date: 20170131 03:22:44
- PDF attachments: "PQC-NAF-01312017.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Slides update"
- Pages: 1
- Bytes: 676591
Notes from djb, last edited 20240420 20:41:56 UTC:
Editing slides.
20170131 04:06:00
file 20240412/RE_ Slides update(1)_2.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:12:14 UTC
- PDF date: 20240410 11:12:13 -0400
- PDF creation date: 20230207 08:08:00 -0500
- Email date: 20170131 04:06:00
- PDF attachments: "PQC-NAF-01312017A.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Slides update"
- Pages: 2
- Bytes: 699613
Notes from djb, last edited 20240420 20:41:56 UTC:
Editing slides for upcoming talk.
20170131 04:41:00
file 20240412/RE_ Slides update_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:11:48 UTC
- PDF date: 20240410 11:11:47 -0400
- PDF creation date: 20230207 08:08:00 -0500
- Email date: 20170131 04:41:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Slides update"
- Pages: 3
- Bytes: 152071
Notes from djb, last edited 20240420 20:41:56 UTC:
Talk logistics.
20170131 05:08:00
file 20240405/RE_ IEEE S_P_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 11:37:58 UTC
- PDF date: 20240404 13:37:56 -0400
- PDF creation date: 20230207 07:37:58 -0500
- Email date: 20170131 05:08:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Kuhn, D. Richard (Fed)"
- Email subject: "RE: IEEE S&P"
- Pages: 1
- Bytes: 113459
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks for the samples. It will help a lot. I will need to submit the one with post-quantum crypto
special issue before the end of February. If I submit a draft for the general issue, I will need to make
a different angle, I guess. Let me think about. When I am working on special issue article, I might be
able to get some ideas."
20170131 20:21:18 UTC
file 20240412/Slides update_3.pdf-attachment-PQC-NAF-01312017.pptx:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:12:30 UTC
- XML date: 20170131 20:21:18 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 20
- Bytes: 586271
Notes from djb, last edited 20240420 20:41:56 UTC:
Slides.
Should compare to other version.
20170131 21:06:36 UTC
file 20240412/RE_ Slides update(1)_2.pdf-attachment-PQC-NAF-01312017A.pptx:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:12:14 UTC
- XML date: 20170131 21:06:36 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 20
- Bytes: 580548
Notes from djb, last edited 20240420 20:41:56 UTC:
Slides.
"Post-Quantum Cryptography and NIST Standardization"
"Lily Chen and Dustin Moody"
Where was this talk given? Was it public?
#needmorerecords
"2012 – NIST begins PQC project"
"Research and build NIST team"
"NIST PQC team – The most significant in the first mile"
"Consists of 10 NIST researchers in cryptography, quantum information, quantum algorithms"
"Hold bi-weekly seminars (internal and invited speakers)"
#weveshownallourwork
"NIST sees its role as managing a process of achieving community consensus in a transparent and timely manner"
#claimingtransparency
20170202 09:04:00
file 20240516/RE_ More for publishing_1.pdf:
- FOIA delivery date: 20240516
- FOIA file date: 20240516 08:26:12 UTC
- PDF date: 20240516 10:26:10 -0400
- PDF creation date: 20230208 12:38:16 -0500
- Email date: 20170202 09:04:00
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Foti, James (Fed)"
- Email subject: "RE: More for publishing"
- Pages: 2
- Bytes: 161405
Notes from djb, last edited 20240520 20:11:25 UTC:
Discussing web pages.
20170207 08:40:00
file 20240827/Re_ japanese visit_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:27:12 UTC
- Email date: 20170207 08:40:00
- Email from: "Dang, Quynh (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email cc: "Regenscheid, Andrew R. (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: japanese visit"
- Pages: 2
- Bytes: 139780
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing a "meeting with the Japanese" on 20170221.
#needmorerecords
20170208 09:49:00
file 20240426/FW_ hash-based signatures_1.pdf:
- FOIA delivery date: 20240426
- FOIA file date: 20240425 13:23:00 UTC
- PDF date: 20240425 15:22:57 -0400
- PDF creation date: 20230208 12:24:04 -0500
- Email date: 20170208 09:49:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "FW: hash-based signatures"
- Pages: 1
- Bytes: 131602
Notes from djb, last edited 20240506 18:31:57 UTC:
"Here’s what Quynh said. Do we need to do anything, or just wait for the IETF?"
20170210 12:40:00
file 20240617/RE_ right contact for quantum_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 09:16:08 UTC
- PDF date: 20240610 11:16:07 -0400
- PDF creation date: 20230208 13:01:38 -0500
- Email date: 20170210 12:40:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Stine, Kevin (Fed)"
- Email subject: "RE: right contact for quantum"
- Pages: 1
- Bytes: 131994
Notes from djb, last edited 20240624 05:27:25 UTC:
"The NIST effort of developing quantum resistant cryptography standards are for data in motion and
in storage. Please let them look at www.nist.gov/pacrypto for our process. I am one of the contact
person together with Dustin Moody and Yi-Kai Liu (math division)."
20170210 14:40:06 UTC
file 20240507/PQC isogeny schemes slides_1.pdf-attachment-PQC Isogeny Sigs.pptx:
- FOIA delivery date: 20240507
- FOIA file date: 20240506 09:44:02 UTC
- XML date: 20170210 14:40:06 UTC
- XML creation date: 20160607 13:50:21 UTC
- Title: Supersingular Isogeny Cryptography (signatures and Diffie-Hellman)
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Moody, Dustin (Fed)"
- Pages: 62
- Bytes: 4665697
Notes from djb, last edited 20240511 21:52:47 UTC:
Basically just copying and pasting pieces from three papers listed at the beginning.
20170210 21:53:00 UTC
file 20240617/Asia PQC_5.pdf-attachment-NIST Post-Quantum Cryptography Standradizatio.docx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:47:20 UTC
- XML date: 20170210 21:53:00 UTC
- XML creation date: 20170210 21:15:00 UTC
- XML creator: "Chen, Lily (Fed)"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 1
- Bytes: 13841
20170213 10:01:17
file 20240507/PQC isogeny schemes slides_1.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240506 09:44:02 UTC
- PDF date: 20240506 11:44:00 -0400
- PDF creation date: 20230208 12:48:20 -0500
- Email date: 20170213 10:01:17
- PDF attachments: "PQC Isogeny Sigs.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "PQC isogeny schemes slides"
- Pages: 1
- Bytes: 4651980
Notes from djb, last edited 20240511 21:52:47 UTC:
"Here you go!"
20170214 09:48:03
file 20240516/Re_ Collaboration_1.pdf:
- FOIA delivery date: 20240516
- FOIA file date: 20240516 07:56:46 UTC
- PDF date: 20240516 09:56:44 -0400
- PDF creation date: 20230208 12:13:31 -0500
- Email date: 20170214 09:48:03
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Collaboration"
- Pages: 1
- Bytes: 133292
Notes from djb, last edited 20240520 20:11:25 UTC:
"Ray and Jacob also mentioned to me about their trip to UMBC. In general, we welcome them to
come NIST for seminars if they like. They can jointly write papers with any of our team member. But
for students, I think it must go with SURF or pathway program, if they will come to NIST. For joint
workshops, I am not sure because we have our workshop planned for 2018. During the procedure
for PQC standardization, we have our own workshop to run. We need to be very clear that we have a
plan as outlined in our website and we have our objectives, which are what we must focus on in the
next few years."
20170214 12:27:53
file 20240726/RE_ Current Draft for our PQC paper improving o..._Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:40:02 UTC
- Email date: 20170214 12:27:53
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "RE: Current Draft for our PQC paper improving our attacks on cubic ABC for characteristic 2."
- Pages: 6
- Bytes: 208675
Notes from djb, last edited 20240801 23:15:11 UTC:
Paper planning.
20170216 10:28:56
file 20240507/RE_ Migration of PQC Pages(1)_2.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240503 10:31:56 UTC
- PDF date: 20240503 12:31:54 -0400
- PDF creation date: 20230208 12:37:58 -0500
- Email date: 20170216 10:28:56
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: Migration of PQC Pages"
- Pages: 2
- Bytes: 170208
Notes from djb, last edited 20240511 21:52:47 UTC:
Planning web pages.
20170216 11:34:17
file 20240507/RE_ Migration of PQC Pages_1.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240503 10:31:42 UTC
- PDF date: 20240503 12:31:39 -0400
- PDF creation date: 20230208 12:37:57 -0500
- Email date: 20170216 11:34:17
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "RE: Migration of PQC Pages"
- Pages: 2
- Bytes: 177088
Notes from djb, last edited 20240511 21:52:47 UTC:
"Sounds good. You’ve got it all covered!"
20170217 03:25:08
file 20240827/Re_ question_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:34:26 UTC
- Email date: 20170217 03:25:08
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: question"
- Pages: 2
- Bytes: 160747
Notes from djb, last edited 20241002 20:43:30 UTC:
Paper editing.
20170217 11:56:25
file 20240827/Re_ question(1)_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:33:46 UTC
- Email date: 20170217 11:56:25
- Email from: "Moody, Dustin (Fed)"
- Email to: "Perlner, Ray A. (Fed); (b) (6)"
- Email subject: "Re: question"
- Pages: 2
- Bytes: 160917
Notes from djb, last edited 20241002 20:43:30 UTC:
Paper editing.
20170221 02:08:25
file 20240516/RE_ request for travel Univ. of Malaga - Eurocr..._1.pdf:
- FOIA delivery date: 20240516
- FOIA file date: 20240516 10:46:06 UTC
- PDF date: 20240516 12:46:05 -0400
- PDF creation date: 20230208 13:01:20 -0500
- Email date: 20170221 02:08:25
- Email from: "Chen, Lily (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "RE: request for travel Univ. of Malaga - Eurocrypt and affiliated events"
- Pages: 3
- Bytes: 143209
Notes from djb, last edited 20240520 20:11:25 UTC:
Travel planning.
20170222 07:35:48
file 20240726/Re_ ieee_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:52:46 UTC
- Email date: 20170222 07:35:48
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "(b) (6)"
- Email subject: "Re: ieee"
- Pages: 16
- Bytes: 338346
Notes from djb, last edited 20240801 23:15:11 UTC:
Apparently to Stephen Jordan.
Paper editing.
20170222 07:57:24
file 20240726/ABC_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:10:42 UTC
- PDF date: 20240723 14:10:41 -0400
- PDF creation date: 20230208 12:09:25 -0500
- Email date: 20170222 07:57:24
- Email from: "(b) (6)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "ABC"
- Pages: 1
- Bytes: 121308
Notes from djb, last edited 20240801 23:15:11 UTC:
Discussing costs of "an ABC minrank attack".
20170222 121501
file 20240726/Re_ ieee(1)_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:51:36 UTC
- Email date: 20170222 121501
- Email from: redacted
- Email to: Liu, Yi-Kai
- Pages: 18
- Bytes: 502432
Notes from djb, last edited 20240801 23:15:11 UTC:
Many redactions.
#needmorerecords
20170224 08:42:00
file 20240617/the link for PQC discussion_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 11:37:44 UTC
- PDF date: 20240610 13:37:43 -0400
- PDF creation date: 20230208 13:05:24 -0500
- Email date: 20170224 08:42:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Scholl, Matthew (Fed)"
- Email subject: "the link for PQC discussion"
- Pages: 1
- Bytes: 86858
Notes from djb, last edited 20240624 05:27:25 UTC:
"http://www.databreachtoday.com/post-quantum-crypto-dont-do-anything-a-9737?rf=2017-02-23_ENEWS_SUB_DBT_Slot1&mkt_tok=eyJpIjoiWTJObVpUZGtOMk0wWkRkaCIsInQiOiJNNDVJZkdRQmdFUmJyNFVzNkR6YVwvcXpUNjFLZmFKb2NTbTgrS0sweWt0QXJMOGx0MFZcL2lwaDdmajJ0VVV6ekxLQlQrcWtvZGRKUXJTWFlpQnNKZnM2bFJCdGRVSEhyWmEzWWp6RksxWUZXMGZQNzZsalc3MVwvSjBGNnA4cTE4XC8ifQ%3D%3D"
20170228 01:09:00
file 20240827/RE_ When are you coming_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:56:18 UTC
- Email date: 20170228 01:09:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email subject: "RE: When are you coming?"
- Pages: 2
- Bytes: 159490
Notes from djb, last edited 20241002 20:43:30 UTC:
Planning talk by Daniel Smith-Tone.
Down thread:
"I want to talk about my new attack on HFE minus. It breaks
most parameters practically, so it's fairly impactful for considering parameters for Gui or
some other iteration of these things."
20170301 03:19:02
file 20240617/RE_ Review and Conflict form for Grant Proposal..._1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 13:00:40 UTC
- PDF date: 20240612 15:00:38 -0400
- PDF creation date: 20230208 15:56:30 -0500
- Email date: 20170301 03:19:02
- Email from: "itlgrant"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: Review and Conflict form for Grant Proposal #12349167"
- Pages: 1
- Bytes: 123906
Notes from djb, last edited 20240624 05:27:25 UTC:
"Thank you Dustin!"
20170301 08:01:00
file 20240617/RE_ March 23, 2017_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 08:33:26 UTC
- PDF date: 20240612 10:33:24 -0400
- PDF creation date: 20230208 14:27:34 -0500
- Email date: 20170301 08:01:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "RE: March 23, 2017"
- Pages: 1
- Bytes: 110621
Notes from djb, last edited 20240624 05:27:25 UTC:
Planning talk to NAS committee.
"Yes, I can do it. Who exactly is the talk being given to? Do you more info on when, where, how long,
etc?"
20170302 04:31:00
file 20240621/Review Request_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:14:16 UTC
- PDF date: 20240617 15:14:15 -0400
- PDF creation date: 20230208 15:56:42 -0500
- Email date: 20170302 04:31:00
- Email from: "Smith-Tone, Daniel (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "Review Request"
- Pages: 1
- Bytes: 82198
Notes from djb, last edited 20240628 14:24:55 UTC:
"Would you be available to help review a paper for PQCRYPTO? The paper is on a modular lattice
signature scheme. If you are able to help, I would need the review by about the 20th to be able to
input it into the system before my deadline. Please let me know. Thanks."
20170302 05:05:00
file 20240617/Asia PQC_5.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:47:20 UTC
- PDF date: 20240610 14:47:19 -0400
- PDF creation date: 20230208 13:52:22 -0500
- Email date: 20170302 05:05:00
- PDF attachments: "NIST Post-Quantum Cryptography Standradizatio.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "llchen@nist.gov"
- Email subject: "Asia PQC"
- Pages: 1
- Bytes: 89278
Notes from djb, last edited 20240624 05:27:25 UTC:
No text, just attachment.
20170306 12:14:48
file 20240621/Re_ WERB review(3)_3.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 08:35:04 UTC
- PDF date: 20240618 10:35:02 -0400
- PDF creation date: 20230208 16:07:16 -0500
- Email date: 20170306 12:14:48
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "Re: WERB review"
- Pages: 2
- Bytes: 135371
Notes from djb, last edited 20240628 14:24:55 UTC:
Discussing quantum key distribution.
20170307 13:01:52 -0500
file 20240617/Fwd_ Sigma Xi Katharine B. Gebbie Young Investi..._1.pdf-attachment-Stephen Jordan (YI poster).pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:43:56 UTC
- PDF date: 20170307 13:01:52 -0500
- PDF creation date: 20170307 13:01:44 -0500
- PDF author: "Shirley, Eric"
- PDF title: "PowerPoint Presentation"
- Pages: 1
- Bytes: 156810
20170309 03:23:36
file 20240617/The Third Asia PQC forum slides_4.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:47:06 UTC
- PDF date: 20240610 14:47:04 -0400
- PDF creation date: 20230208 16:02:38 -0500
- Email date: 20170309 03:23:36
- PDF attachments: "PQC Asia -03092017.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Perlner, Ray A. (Fed)"
- Email subject: "The Third Asia PQC forum slides"
- Pages: 1
- Bytes: 350977
Notes from djb, last edited 20240624 05:27:25 UTC:
Discussing slides for Third Asia PQC Forum.
20170309 04:32:20
file 20240621/Re_ WERB review(1)_2.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 08:34:48 UTC
- PDF date: 20240618 10:34:47 -0400
- PDF creation date: 20230208 16:07:15 -0500
- Email date: 20170309 04:32:20
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Knill, Emanuel H. (Fed)"
- Email cc: "Peralta, Rene C. (Fed)"
- Email subject: "Re: WERB review"
- Pages: 3
- Bytes: 113439
Notes from djb, last edited 20240628 14:24:55 UTC:
Discussing quantum key distribution.
20170309 05:20:00
file 20240617/RE_ The Third Asia PQC forum slides(2)_3.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:46:54 UTC
- PDF date: 20240610 14:46:52 -0400
- PDF creation date: 20230208 16:02:38 -0500
- Email date: 20170309 05:20:00
- PDF attachments: "PQC Asia -03092017Ray.pptx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Chen, Lily (Fed); Moody, Dustin (Fed)"
- Email subject: "RE: The Third Asia PQC forum slides"
- Pages: 1
- Bytes: 376895
Notes from djb, last edited 20240624 05:27:25 UTC:
"Here are my comments."
20170309 08:52:33
file 20240617/BITS PQC presentation_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:50:08 UTC
- PDF date: 20240610 14:50:07 -0400
- PDF creation date: 20230208 13:55:13 -0500
- Email date: 20170309 08:52:33
- PDF attachments: "Crypto in PQ world -BITS.pptx"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed); Chen, Lily (Fed)"
- Email subject: "BITS PQC presentation"
- Pages: 1
- Bytes: 1617338
Notes from djb, last edited 20240624 05:27:25 UTC:
"Adam told me to have a 15-20 minute presentation for BITS (Banking IT Standardization)
next Thursday. I've attached some slides I used at a talk I gave at a workshop for people
involved with security for vehicles. I got good feedback from that talk, that is was very
understandable, so I thought it would work well for this. Let me know if you have any
comments or suggestions."
20170309 10:59:00
file 20240617/About conference attendance_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:32:42 UTC
- PDF date: 20240610 14:32:41 -0400
- PDF creation date: 20230208 13:49:29 -0500
- Email date: 20170309 10:59:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Scholl, Matthew (Fed)"
- Email subject: "About conference attendance"
- Pages: 1
- Bytes: 81401
Notes from djb, last edited 20240624 05:27:25 UTC:
"CFRG (IETF Crypto Forum) will have a one day meeting before Eurocrypt. We will not send any one
specifically for this one-day meeting."
"I have included you in an e-mail string on conference attendance. I like to make sure that my
decision is not too harsh on the individual. The cost is only one factor in making the decision. I heard
the concerns about the arguments we made at CFRG. The arguments are not completely wrong. But
I think we shall play a role of contributor at the standard organizations and enhance NIST crypto
standards acceptance through contributing to different standard development procedure. Some of
the arguments may not help us to be a good player in the standard organizations."
"I stopped by your office after TWG meeting and saw that you have a rather full schedule today. If
you have advise on this please send by e-mail."
What happened here?
#needmorerecords
20170309 11:28:00
file 20240617/RE_ NIST-NSA TWG notes_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 11:04:44 UTC
- PDF date: 20240612 13:04:43 -0400
- PDF creation date: 20230208 14:34:24 -0500
- Email date: 20170309 11:28:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Barker, Elaine B. (Fed)"
- Email subject: "RE: NIST-NSA TWG notes"
- Pages: 1
- Bytes: 134407
Notes from djb, last edited 20240624 05:27:25 UTC:
"When IETF work on hash based signature is finalized NIST is planning to pull in them to a SP
and look into issues. It is still open on which hash based signature among XMSS and LMS or
both will be included."
"We will give presentations at BITS (March 16, 2018), National Academy of Science (March
24), ICMC (May 17), IAS (June 18-21), PQCrypto (June 26-28)"
"NISTIR 8114 is a technical report on lightweight cryptography. It will be published in the next
few days. We have call for proposals on profiles. The algorithms will be required to target
specific profiles."
20170309 11:35:00
file 20240617/RE_ BITS PQC presentation_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:49:54 UTC
- PDF date: 20240610 14:49:53 -0400
- PDF creation date: 20230208 13:55:13 -0500
- Email date: 20170309 11:35:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed); Regenscheid, Andrew (Fed)"
- Email subject: "RE: BITS PQC presentation"
- Pages: 1
- Bytes: 134014
Notes from djb, last edited 20240624 05:27:25 UTC:
"The slides are good. I am sure the talk will be well received."
"I am supposed to give a talk at ICMS “crypto module” community in May, which would be a talk in
between, some very technical people and some IT secure people."
20170309 11:51:26
file 20240716/a few thoughts for the _theory_ component of th....pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240711 11:21:14 UTC
- PDF date: 20240711 13:21:13 -0400
- PDF creation date: 20230208 13:49:07 -0500
- Email date: 20170309 11:51:26
- Email from: "Andrew Dienstfrey"
- Email to: "Shainline, Jeff (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "a few thoughts for the "theory" component of the neuromorphic work"
- Pages: 2
- Bytes: 177070
Notes from djb, last edited 20240726 21:43:58 UTC:
No evident post-quantum content.
20170309 13:45:27 UTC
file 20240617/BITS PQC presentation_2.pdf-attachment-Crypto in PQ world -BITS.pptx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:50:08 UTC
- XML date: 20170309 13:45:27 UTC
- XML creation date: 20160523 17:58:45 UTC
- XML creator: "Moody, Dustin (Fed)"
- XML last-modified-by: "Microsoft Office User"
- Pages: 22
- Bytes: 1732954
20170309 20:22:38 UTC
file 20240617/The Third Asia PQC forum slides_4.pdf-attachment-PQC Asia -03092017.pptx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:47:06 UTC
- XML date: 20170309 20:22:38 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 17
- Bytes: 256262
20170309 22:19:31 UTC
file 20240617/RE_ The Third Asia PQC forum slides(2)_3.pdf-attachment-PQC Asia -03092017Ray.pptx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:46:54 UTC
- XML date: 20170309 22:19:31 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 18
- Bytes: 259028
20170310 10:06:52
file 20240617/RE_ The Third Asia PQC forum slides(1)_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:46:38 UTC
- PDF date: 20240610 14:46:37 -0400
- PDF creation date: 20230208 16:02:37 -0500
- Email date: 20170310 10:06:52
- PDF attachments: "PQC Asia -03102017.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed)"
- Email subject: "RE: The Third Asia PQC forum slides"
- Pages: 1
- Bytes: 381801
Notes from djb, last edited 20240624 05:27:25 UTC:
"Attached please see a version after incorporate in Ray’s comments. Thank you, Ray."
"Ray added page 8. I added some details. There are certain redundancies with page 14 and page 17.
But I think it may be okay because page 8 is about requirements, page 14 is a summary on what
talked, page 17 is implementation details."
"Any more comments, please let me know. Thanks,"
20170310 14:10:20 UTC
file 20240617/RE_ The Third Asia PQC forum slides(1)_2.pdf-attachment-PQC Asia -03102017.pptx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:46:38 UTC
- XML date: 20170310 14:10:20 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 18
- Bytes: 257438
20170313 03:30:00
file 20240617/RE_ The Third Asia PQC forum slides_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:46:28 UTC
- PDF date: 20240610 14:46:26 -0400
- PDF creation date: 20230208 16:02:37 -0500
- Email date: 20170313 03:30:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "RE: The Third Asia PQC forum slides"
- Pages: 2
- Bytes: 133974
Notes from djb, last edited 20240624 05:27:25 UTC:
"Sorry I didn’t respond sooner. The slides look good to me, and I have no suggestions for any
changes!"
20170313 04:07:00
file 20240716/RE_ FW_ Review Request_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:55:14 UTC
- Email date: 20170313 04:07:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "(b) (6) ; Smith-Tone, Daniel (Fed)"
- Email subject: "RE: FW: Review Request"
- Pages: 2
- Bytes: 185158
Notes from djb, last edited 20240726 21:43:58 UTC:
Short review of a paper.
20170315 12:36:04
file 20240621/words_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 08:37:02 UTC
- PDF date: 20240618 10:37:00 -0400
- PDF creation date: 20230208 16:08:04 -0500
- Email date: 20170315 12:36:04
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "words"
- Pages: 1
- Bytes: 83273
Notes from djb, last edited 20240628 14:24:55 UTC:
"Post quantum secure method for generating a key pair"
"(in case you forgot….)"
20170316 01:16:22
file 20240726/Re_ question about Quantum Communications appli..._1.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240611 09:29:40 UTC
- PDF date: 20240611 11:29:39 -0400
- PDF creation date: 20230208 14:48:43 -0500
- Email date: 20170316 01:16:22
- PDF attachments: "93056_Quantum Manifesto_WEB.pdf"; "InnovateUK_QuantumTech_CO004_final.pdf"; "Quantum_Info_Sci_Report_2016_07_22 final.pdf"; "gs-16-18-quantum-technologies-report.pdf"
- Email from: "Stephen Jordan"
- Email to: "Liu, Yi-Kai (Fed); Slattery, Oliver T. (Fed)"
- Email subject: "Re: question about Quantum Communications applications"
- Pages: 2
- Bytes: 6032611
Notes from djb, last edited 20240801 23:15:11 UTC:
Advertising quantum technologies.
20170316 02:11:40
file 20240617/Fwd_ Sigma Xi Katharine B. Gebbie Young Investi..._1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:43:56 UTC
- PDF date: 20240611 10:43:55 -0400
- PDF creation date: 20230208 15:58:06 -0500
- Email date: 20170316 02:11:40
- PDF attachments: "Stephen Jordan (YI poster).pdf"
- Email from: "Ronald Boisvert"
- Email to: "Division 771"
- Email subject: "Fwd: Sigma Xi Katharine B. Gebbie Young Investigator Lecture: Stephen Jordan on March 30th"
- Pages: 1
- Bytes: 309791
Notes from djb, last edited 20240624 05:27:25 UTC:
Announcing internal talk about quantum algorithms for physics simulation.
20170316 09:21:19
file 20240617/Re_ API stuff_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:44:30 UTC
- PDF date: 20240610 14:44:29 -0400
- PDF creation date: 20230208 13:51:45 -0500
- Email date: 20170316 09:21:19
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Bassham, Lawrence E. (Fed)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Re: API stuff"
- Pages: 1
- Bytes: 159522
Notes from djb, last edited 20240624 05:27:25 UTC:
"What time and where?"
20170317 01:00:26
file 20240617/Re_ 1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 09:33:36 UTC
- PDF date: 20240611 11:33:35 -0400
- PDF creation date: 20230208 13:34:21 -0500
- Email date: 20170317 01:00:26
- Email from: "Dang, Thinh H. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re:"
- Pages: 1
- Bytes: 136047
Notes from djb, last edited 20240624 05:27:25 UTC:
Intern supervision.
20170317 02:11:28
file 20240716/Re_ Slides for RWC talk_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 13:01:34 UTC
- Email date: 20170317 02:11:28
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "(b) (6) ; Liu, Yi-Kai (Fed)"
- Email cc: "Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Jordan, Stephen P(Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Smith-Tone, Daniel C. (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Slides for RWC talk"
- Pages: 4
- Bytes: 174172
Notes from djb, last edited 20240726 21:43:58 UTC:
"This is a very old email I never commented on but it came up when I was searching for something
else in my past e-mails, but I figured I would point out that it’s obviously not known whether
NP=EXPTIME, as by the various time-hierarchy theorems we have that P is a proper subset of
EXPTIME, meaning that resolving NP?=EXPTIME would mean resolving P?=NP."
The "obvious" logic here is invalid.
The usual conjectures are that P is strictly smaller than NP, which is strictly smaller than EXPTIME;
but if P is equal to NP then NP is also strictly smaller than EXPTIME.
One cannot use these facts, and the knowledge that NP is strictly smaller than EXPTIME,
to resolve the question of whether P=NP.
#error
Down-thread comments are even more confused.
For example:
"Why aren't there polynomial-time quantum
algorithms that solve problems where the best classical algorithm is exponential-time?"
#error
#scramble
20170320 10:57:43
file 20240621/RE_ WERB Review_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 08:34:34 UTC
- PDF date: 20240618 10:34:32 -0400
- PDF creation date: 20230208 16:07:14 -0500
- Email date: 20170320 10:57:43
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "RE: WERB Review"
- Pages: 1
- Bytes: 138103
Notes from djb, last edited 20240628 14:24:55 UTC:
"Thanks! I’ll drop it off!"
20170321 02:29:01
file 20240617/Multivariate crypto_3.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:56:46 UTC
- PDF date: 20240611 10:56:45 -0400
- PDF creation date: 20230208 14:30:52 -0500
- Email date: 20170321 02:29:01
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Smith-Tone, Daniel C. (Fed)"
- Email subject: "Multivariate crypto"
- Pages: 1
- Bytes: 87064
Notes from djb, last edited 20240624 05:27:25 UTC:
"Hope you’re doing well – sorry I missed your talk last week (I was visiting CalTech). I have a quick
question for you, if you have a minute:"
"I’m planning to give a talk in the postquantum crypto seminar next week. The goal is to help me to
get more deeply into classical crypto and hopefully in the process show the audience something
new."
"Given my background (algebraic geometry & quantum crypto) I think multivariate crypto is probably
the best topic. So, the question is: can you think of any topics within multivariate crypto that might
be good material? An ideal topic would be one that hasn’t been covered before and that’s fairly
accessible (and it’s even better if it happens to have some algebraic geometry in it)."
20170321 02:33:00
file 20240617/RE_ next PQC seminar_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 08:36:32 UTC
- PDF date: 20240612 10:36:31 -0400
- PDF creation date: 20230208 14:32:06 -0500
- Email date: 20170321 02:33:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Miller, Carl A. (Fed)"
- Email subject: "RE: next PQC seminar"
- Pages: 2
- Bytes: 134547
Notes from djb, last edited 20240624 05:27:25 UTC:
"Yep."
20170322
file 20230105/Asia-PQC-3rd-03222017-p.pdf:
- FOIA delivery date: 20230105
- FOIA file date: 20221025 06:45:24 UTC
- PDF date: 20220907 21:35:29 -0400
- PDF creation date: 20220907 21:35:12 -0400
- Date: 20170322
- Author: "Lily Chen"
- PDF author: "Chen, Lily (Fed)"
- Title: "NIST PQC Standardization - Process, Issues and Strategies"
- PDF title: "Lightweight Cryptography Standards Development in ISO/IEC SC27"
- Pages: 18
- Bytes: 280421
Notes from djb, last edited 20230625 17:50:02 UTC:
Slides of a public talk given on 2017.03.22.
"2012 - PQC project begins"
Repeats mid-2016 claim of "Quantum Security" of
"80 bits" for "SHA256/SHA3-256 (collision)".
#error
"Other properties":
"Drop-in replacements - Compatibility with existing protocols and networks"
20170323 07:58:53
file 20240716/Re_ Multivariate crypto(1)_2_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:56:08 UTC
- Email date: 20170323 07:58:53
- Email from: "Miller, Carl A. (Fed)"
- Email to: "(b) (6)"
- Email subject: "Re: Multivariate crypto"
- Pages: 2
- Bytes: 161218
Notes from djb, last edited 20240726 21:43:58 UTC:
Apparently to Daniel Smith-Tone.
"Ok, thanks – I was able to find the book. I appreciate the help."
20170323 10:19:11 -0400
file 20240507/PQC slides_1.pdf-attachment-PQC-NAS.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240506 09:50:20 UTC
- PDF date: 20170323 10:19:11 -0400
- PDF creation date: 20170323 10:19:11 -0400
- Author: Lily Chen and Dustin Moody
- Title: Post-Quantum Cryptography and NIST Standardization
- Pages: 22
- Bytes: 591040
Notes from djb, last edited 20240511 21:52:47 UTC:
"Hold bi-weekly seminars (internal and invited speakers)"
#weveshownallourwork
"Gaussian simulation"
20170324 04:34:59
file 20240716/Re_ PQC seminar_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:57:54 UTC
- Email date: 20170324 04:34:59
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: PQC seminar"
- Pages: 1
- Bytes: 131051
Notes from djb, last edited 20240726 21:43:58 UTC:
"Here’s my abstract for the talk next week. (Apologies that it is fairly broad – I can make it more
specific if you’d like after I’ve developed the talk a little more.)"
20170324 04:55:49
file 20240716/Re_ Multivariate crypto_1_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:56:36 UTC
- Email date: 20170324 04:55:49
- Email from: "(b) (6)"
- Email to: "Miller, Carl A. (Fed)"
- Email subject: "Re: Multivariate crypto"
- Pages: 4
- Bytes: 167691
Notes from djb, last edited 20240726 21:43:58 UTC:
Apparently from Daniel Smith-Tone.
Explaining what the degree of regularity is.
20170324 05:37:55
file 20240617/Re_ MIT Club(1)_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:55:30 UTC
- PDF date: 20240611 10:55:28 -0400
- PDF creation date: 20230208 14:29:14 -0500
- Email date: 20170324 05:37:55
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Moody, Dustin (Fed); Scholl, Matthew A. (Fed)"
- Email cc: "Stine, Kevin M. (Fed); McBride, Tim (Fed); Chen, Lily (Fed); Regenscheid, Andrew R. (Fed); Yaga, Dylan J. (Fed)"
- Email subject: "Re: MIT Club"
- Pages: 2
- Bytes: 145555
Notes from djb, last edited 20240624 05:27:25 UTC:
"Thank you very much Dustin."
20170327 11:03:52
file 20240617/API meeting_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:44:16 UTC
- PDF date: 20240610 14:44:14 -0400
- PDF creation date: 20230208 13:51:44 -0500
- Email date: 20170327 11:03:52
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed); Jordan, Stephen P (Fed); Miller, Carl A. (Fed); Chen, Lily (Fed)"
- Email subject: "API meeting"
- Pages: 1
- Bytes: 87744
Notes from djb, last edited 20240624 05:27:25 UTC:
"If you’ve noticed, we’ve had a lot of discussion on the pqc-forum about API’s. Dan Bernstein just
posted a lengthy post this morning as well. We’re planning on holding a short informal meeting
about this at 3pm in B-341 for anyone who would like to attend. If you’re busy, or don’t want to
come, that’s fine. We just wanted to make sure everybody knows. Thanks,"
20170329
file 20240621/RE_ some small PQC updates(2)_3.pdf-attachment-FAQ-randomness.rtf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:20:52 UTC
- Date: 20170329
- Bytes: 47118
Notes from djb, last edited 20240628 14:24:55 UTC:
"Q: How does a submission obtain secure randomness?"
20170329
file 20240621/some small PQC updates_4.pdf-attachment-API_032917.rtf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:21:04 UTC
- Date: 20170329?
- Bytes: 11740
Notes from djb, last edited 20240628 14:24:55 UTC:
"PQC - API notes"
20170329
file 20240621/some small PQC updates_4.pdf-attachment-FAQ-randomness.rtf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:21:04 UTC
- Date: 20170329?
- Bytes: 2611
Notes from djb, last edited 20240628 14:24:55 UTC:
"Q: How does a submission obtain secure randomness?"
20170329 03:52:59
file 20240617/Re_ MIT Club_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:55:16 UTC
- PDF date: 20240611 10:55:15 -0400
- PDF creation date: 20230208 14:29:13 -0500
- Email date: 20170329 03:52:59
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: MIT Club"
- Pages: 3
- Bytes: 146236
Notes from djb, last edited 20240624 05:27:25 UTC:
"That works – I will send out an updated agenda."
20170329 08:22:26
file 20240617/FYI_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:45:00 UTC
- PDF date: 20240611 10:44:58 -0400
- PDF creation date: 20230208 14:20:39 -0500
- Email date: 20170329 08:22:26
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Bassham, Lawrence E. (Fed); Chen, Lily (Fed); Daniel Smith-Tone; Dworkin, MorrisJ. (Fed); Jordan, Stephen P (Fed); Liu, Yi-Kai (Fed); Miller, Carl A. (Fed); Moody, Dustin (Fed); Peralta, Rene C.(Fed); Perlner, Ray A. (Fed); Smith-Tone, Daniel C. (Fed)"
- Email subject: "FYI"
- Pages: 1
- Bytes: 93212
Notes from djb, last edited 20240624 05:27:25 UTC:
"Security Innovation announced they are releasing their patents:"
"https://globenewswire.com/news-release/2017/03/28/945815/0/en/Security-Innovation-Makes-
NTRUEncrypt-Patent-Free.html"
20170329 12:12:37
file 20240621/some small PQC updates_4.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:21:04 UTC
- PDF date: 20240617 15:21:03 -0400
- PDF creation date: 20230208 15:58:54 -0500
- Email date: 20170329 12:12:37
- PDF attachments: "FAQ-randomness.rtf"; "API_032917.rtf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "some small PQC updates"
- Pages: 1
- Bytes: 92117
Notes from djb, last edited 20240628 14:24:55 UTC:
Discussing FAQ updates.
20170329 12:26:36
file 20240621/RE_ some small PQC updates(2)_3.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:20:52 UTC
- PDF date: 20240617 15:20:51 -0400
- PDF creation date: 20230208 15:58:54 -0500
- Email date: 20170329 12:26:36
- PDF attachments: "FAQ-randomness.rtf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: some small PQC updates"
- Pages: 1
- Bytes: 130153
Notes from djb, last edited 20240628 14:24:55 UTC:
Discussing FAQ updates.
20170329 12:34:32
file 20240621/RE_ some small PQC updates(1)_2.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:20:40 UTC
- PDF date: 20240617 15:20:39 -0400
- PDF creation date: 20230208 15:58:53 -0500
- Email date: 20170329 12:34:32
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: some small PQC updates"
- Pages: 2
- Bytes: 119887
Notes from djb, last edited 20240628 14:24:55 UTC:
"I think it is probably v5, if that matters."
20170329 12:56:00
file 20240621/RE_ some small PQC updates_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:20:28 UTC
- PDF date: 20240617 15:20:27 -0400
- PDF creation date: 20230208 15:58:53 -0500
- Email date: 20170329 12:56:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: some small PQC updates"
- Pages: 2
- Bytes: 119662
Notes from djb, last edited 20240628 14:24:55 UTC:
Discussing web-page updates.
20170330
file 20240617/Re_ Change FIPS citing in SPHINCS paper_1.pdf-attachment-simpira-pq.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 08:12:20 UTC
- Date: 20170330?
- Pages: 12
- Bytes: 135926
20170330 04:31:16
file 20240617/Re_ Change FIPS citing in SPHINCS paper_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 08:12:20 UTC
- PDF date: 20240612 10:12:19 -0400
- PDF creation date: 20230208 13:57:28 -0500
- Email date: 20170330 04:31:16
- PDF attachments: "simpira-pq.pdf"
- Email from: "Mouha, Nicky W. (IntlAssoc)"
- Email to: "Kerman, Sara J. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Change FIPS citing in SPHINCS paper"
- Pages: 1
- Bytes: 258647
Notes from djb, last edited 20240624 05:27:25 UTC:
"Thanks for letting me know about this."
"I've corrected the references according to your suggestions, see attachment."
20170331
file 20221014/PQC Seminar 3-31-17.pdf:
- FOIA delivery date: 20221014
- FOIA file date: 20220823 19:18:00 UTC
- PDF date: 20220823 13:25:17 UTC
- PDF creation date: 20220823 13:25:17 UTC
- Date: 20170331
- Author: "Carl Miller"
- Title: "An Old Hack of Multivariate Cryptography (The Matsumoto-Imai Scheme)"
- Pages: 20
- Bytes: 2064046
Notes from djb, last edited 20230125 23:38:54 UTC:
Describes a few features of an old attack against one of the first multivariate cryptosystems.
Why is this called a "hack"?
20170331
file 20221107/PQC Seminar 3-31-17.pdf:
- FOIA delivery date: 20221107
- FOIA file date: 20220930 16:25:00 UTC
- PDF date: 20220823 13:25:17 UTC
- PDF creation date: 20220823 13:25:17 UTC
- Date: 20170331
- Author: "Carl Miller"
- Title: "An Old Hack of Multivariate Cryptography (The Matsumoto-Imai Scheme)"
- Pages: 20
- Bytes: 2064046
Notes from djb, last edited 20221110 07:13:09 UTC:
Frivolously repeated copy of previously delivered document.
20170403 01:22:11
file 20230925/Re_ API_2_Redacted_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230920 12:36:50 UTC
- PDF date: 20230920 14:36:49 -0400
- PDF creation date: 20230920 14:36:15 -0400
- Email date: 20170403 01:22:11
- Email from: "Bassham. Lawrence E (Fed)"
- Email to: "Moody. Dustin {Fed)"
- Email subject: "Re: API"
- Pages: 4
- Bytes: 211004
Notes from djb, last edited 20231001 22:32:48 UTC:
Quoted message:
"I believe internally we've at least implicitly determined that we will be fine with non-NIST approved
DRBG' s, as long as they are in fact sufficient for the randomness needs of the algorithm in question.
This is why we're requiring a separate explanation of why a non-NIST DRBG will be used (whereas for
a NIST-approved DRBG, we don't need a separate explanation because we've already authorized it
essentially universally for DRBG needs)."
What ended up in the call for proposals was different:
"If the
scheme uses a cryptographic primitive that has not been approved by NIST, the submitter
shall provide an explanation for why a NIST-approved primitive would not be suitable."
Asking for an explanation of why NIST primitives are not suitable
is much more restrictive than asking for an explanation
of why a non-NIST primitive is sufficient.
#inconsistency
20170403 01:22:11
file 20240726/Re_ API_Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:36:08 UTC
- Email date: 20170403 01:22:11
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: API"
- Pages: 4
- Bytes: 181683
Notes from djb, last edited 20240801 23:15:11 UTC:
Something redacted; in context, probably just logistics.
Down thread:
"I believe internally we’ve at least implicitly determined that we will be fine with non-NIST approved
DRBG’s, as long as they are in fact sufficient for the randomness needs of the algorithm in question.
This is why we’re requiring a separate explanation of why a non-NIST DRBG will be used (whereas for
a NIST-approved DRBG, we don’t need a separate explanation because we’ve already authorized it
essentially universally for DRBG needs)."
20170403 02:02:41
file 20230925/FW_ API_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:27:48 UTC
- PDF date: 20230919 11:27:46 -0400
- PDF creation date: 20230215 14:58:50 -0500
- Email date: 20170403 02:02:41
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "FW: API"
- Pages: 3
- Bytes: 161731
Notes from djb, last edited 20231001 22:32:48 UTC:
Secret discussion of randomness-generation issues.
Was this ever made public?
#weveshownallourwork
20170403 02:02:41
file 20240726/FW_ API.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240715 13:20:38 UTC
- PDF date: 20240715 15:20:36 -0400
- PDF creation date: 20230215 14:58:50 -0500
- Email date: 20170403 02:02:41
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "FW: API"
- Pages: 3
- Bytes: 161732
Notes from djb, last edited 20240801 23:15:11 UTC:
Discussing random-number generation:
e.g.,
people "must define the properties that randomness needs in their algorithm";
"some algorithms indicated that there may be drastically different requirements on the “randomness” ".
#weveshownallourwork
Also, down thread:
"doing what Dan says will mask the true cost of calling a DRBG"
#error
20170403 08:50:37
file 20230925/RE_ PQC seminar - talk about quantum cryptanaly..._3.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:36:22 UTC
- PDF date: 20230919 12:36:20 -0400
- PDF creation date: 20230215 15:51:54 -0500
- Email date: 20170403 08:50:37
- Email from: "Moody, Dustin (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: PQC seminar - talk about quantum cryptanalysis of block ciphers?"
- Pages: 1
- Bytes: 106244
Notes from djb, last edited 20231001 22:32:48 UTC:
Talk logistics,
scheduling 12 May 2017 talk by Yi-Kai Liu on quantum cryptanalysis of block ciphers.
20170403 08:52:02
file 20230925/FW_ new paper.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:34:28 UTC
- PDF date: 20230919 12:34:27 -0400
- PDF creation date: 20230215 15:29:01 -0500
- Email date: 20170403 08:52:02
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene C. (Fed)"
- Email subject: "FW: new paper"
- Pages: 1
- Bytes: 116221
Notes from djb, last edited 20231001 22:32:48 UTC:
Snap evaluation of Picnic vs. SPHINCS+.
Was this ever made public?
#weveshownallourwork
20170405 04:33:00
file 20231110/RE_ Selection Memo for the proposal of Universi...._1pdf.pdf:
- FOIA delivery date: 20231110
- FOIA file date: 20231016 07:49:54 UTC
- PDF date: 20231016 10:49:52 -0400
- PDF creation date: 20230215 16:07:10 -0500
- Email date: 20170405 04:33:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Clark, Carol A (Fed)"
- Email subject: "RE: Selection Memo for the proposal of University of South Florida"
- Pages: 4
- Bytes: 142223
Notes from djb, last edited 20231110 16:46:46 UTC:
Bureaucracy for a grant proposal from the University of South Florida.
20170406 08:45:11
file 20230925/pseudorandom generators with exponential security.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:40:32 UTC
- PDF date: 20230919 12:40:30 -0400
- PDF creation date: 20230215 15:57:11 -0500
- Email date: 20170406 08:45:11
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "pseudorandom generators with exponential security"
- Pages: 1
- Bytes: 103990
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussing slow conversions of one-way functions to ciphers.
20170406 08:45:11
file 20240405/pseudorandom generators with exponential security_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 09:12:14 UTC
- PDF date: 20240404 11:12:13 -0400
- PDF creation date: 20230215 15:57:11 -0500
- Email date: 20170406 08:45:11
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Jordan, Stephen P (Fed)"
- Email subject: "pseudorandom generators with exponential security"
- Pages: 1
- Bytes: 103992
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussion of theoretical PRG construction.
20170407 02:55:00
file 20231013/RE_ Draft Fun Fact Friday for next week.pdf:
- FOIA delivery date: 20231013
- FOIA file date: 20231011 11:49:40 UTC
- PDF date: 20231011 13:49:38 -0400
- PDF creation date: 20230215 15:10:31 -0500
- Email date: 20170407 02:55:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Stein, Ben (Fed); Boisvert, Ronald F (Fed); Scholl, Matthew (Fed)"
- Email cc: "Esser, Mark (Fed)"
- Email subject: "RE: Draft Fun Fact Friday for next week"
- Pages: 2
- Bytes: 138117
Notes from djb, last edited 20231110 16:46:46 UTC:
Proposing wording for a "Fun Fact Friday"
hyping the cost of breaking RSA-2048:
"A desktop computer would take a quadrillion (10^15) years–more than the age of the universe–to
factor a 2048-bit integer (used) as RSA public-key used for Internet security."
Special-purpose attack hardware is much more effective per dollar
than a desktop computer.
Large-scale attackers have billions of dollars to spend on hardware every year.
The computation required for breaking one RSA-2048 key
is similar to the computation that Bitcoin carried out in 2022.
Breaking many RSA-2048 keys isn't much more expensive than breaking just one.
One would think that an agency
running a competition to protect against future quantum computers
would understand enough about attack costs in 2017 to say
"Wait a minute,
RSA-2048 is very close to breakable already even without quantum computers,
and this 'fact' is misleading our readers".
#scramble
20170407 11:43:35
file 20240412/Re_ Someone Is Testing Our DRBG requirements(1)_2.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:30:18 UTC
- PDF date: 20240410 11:30:17 -0400
- PDF creation date: 20230215 16:09:10 -0500
- Email date: 20170407 11:43:35
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed); Alperin-Sheriff, Jacob (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Someone Is Testing Our DRBG requirements"
- Pages: 2
- Bytes: 165191
Notes from djb, last edited 20240420 20:41:56 UTC:
"Just let me know – or Dustin."
20170410 02:19:01
file 20240412/Re_ Someone Is Testing Our DRBG requirements_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:29:58 UTC
- PDF date: 20240410 11:29:55 -0400
- PDF creation date: 20230215 16:09:07 -0500
- Email date: 20170410 02:19:01
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Perlner, Ray A. (Fed); Moody, Dustin (Fed)"
- Email subject: "Re: Someone Is Testing Our DRBG requirements"
- Pages: 5
- Bytes: 205081
Notes from djb, last edited 20240420 20:41:56 UTC:
"We are allowing a non-NIST-approved DRBG if they give a rationale for it. In that case, we need the
max value we specify to get some sort of timing data for whatever they use. Let’s talk briefly
tomorrow."
In fact, NIST punished submissions that used non-NIST symmetric crypto,
even when rationales were given.
#inconsistency
20170411 10:13:08
file 20230925/FAQ Q15 -- RE_ update PQC_3.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:22:18 UTC
- PDF date: 20230919 10:22:17 -0400
- PDF creation date: 20230215 15:16:21 -0500
- Email date: 20170411 10:13:08
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "FAQ Q15 -- RE: update PQC"
- Pages: 2
- Bytes: 120751
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussing web-page update regarding randombytes().
20170411 10:13:08
file 20240405/FAQ Q15 -- RE_ update PQC_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:10:02 UTC
- PDF date: 20240404 10:10:00 -0400
- PDF creation date: 20230215 15:16:21 -0500
- Email date: 20170411 10:13:08
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "FAQ Q15 -- RE: update PQC"
- Pages: 2
- Bytes: 120751
Notes from djb, last edited 20240417 22:58:35 UTC:
"Yes. Only the first paragraph was modified."
20170411 10:38:44
file 20230925/RE_ update PQC.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:40:34 UTC
- PDF date: 20230919 10:40:32 -0400
- PDF creation date: 20230215 16:20:15 -0500
- Email date: 20170411 10:38:44
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: update PQC"
- Pages: 2
- Bytes: 122370
Notes from djb, last edited 20231001 22:32:48 UTC:
Logistics of FAQ update.
20170411 10:38:44
file 20240412/RE_ update PQC_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 08:43:28 UTC
- PDF date: 20240410 10:43:26 -0400
- PDF creation date: 20230215 16:20:15 -0500
- Email date: 20170411 10:38:44
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: update PQC"
- Pages: 2
- Bytes: 122372
Notes from djb, last edited 20240420 20:41:56 UTC:
Discussing web-page updates.
20170411 10:51:00
file 20230925/RE_ [Pqc] no PQC seminar this Friday_4.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 13:01:48 UTC
- PDF date: 20230914 15:01:46 -0400
- PDF creation date: 20230215 14:42:38 -0500
- Email date: 20170411 10:51:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: [Pqc] no PQC seminar this Friday"
- Pages: 1
- Bytes: 134693
Notes from djb, last edited 20231001 22:32:48 UTC:
Talk logistics,
mentioning 31 March 2017 talk by Carl Miller on multivariate crypto.
20170411 10:51:00
file 20240405/RE_ [Pqc] no PQC seminar this Friday_4.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 11:39:42 UTC
- PDF date: 20240403 13:39:41 -0400
- PDF creation date: 20230215 14:42:38 -0500
- Email date: 20170411 10:51:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "RE: [Pqc] no PQC seminar this Friday"
- Pages: 1
- Bytes: 134693
Notes from djb, last edited 20240417 22:58:35 UTC:
"Are you good to speak this Friday? Let me know the topic, so I can send out an announcement."
20170412 02:45:59
file 20230925/[Pqc] PQC seminar this Friday__3.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 13:01:28 UTC
- PDF date: 20230914 15:01:26 -0400
- PDF creation date: 20230215 14:42:43 -0500
- Email date: 20170412 02:45:59
- PDF attachments: "ATT00001.txt"
- Email from: "pqc-bounces@nist.gov on behalf of Moody, Dustin (Fed)"
- Email to: "pqc"
- Email subject: "[Pqc] PQC seminar this Friday?"
- Pages: 1
- Bytes: 108926
Notes from djb, last edited 20231001 22:32:48 UTC:
Internal talk logistics.
20170412 02:45:59
file 20240405/[Pqc] PQC seminar this Friday_3.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 11:39:22 UTC
- PDF date: 20240403 13:39:20 -0400
- PDF creation date: 20230215 14:42:43 -0500
- Email date: 20170412 02:45:59
- PDF attachments: "ATT00001.txt"
- Email from: "pqc-bounces@nist.gov on behalf of Moody, Dustin (Fed)"
- Email to: "pqc"
- Email subject: "[Pqc] PQC seminar this Friday?"
- Pages: 1
- Bytes: 108929
Notes from djb, last edited 20240417 22:58:35 UTC:
"The plan was to have a PQC seminar this Friday, at 10am. I have yet to confirm with the
speaker, so this might end up being cancelled. I will provide an update once I know more."
20170412 03:05:00
file 20230925/RE_ PQC seminar this Friday__2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:36:00 UTC
- PDF date: 20230919 12:35:59 -0400
- PDF creation date: 20230215 15:51:58 -0500
- Email date: 20170412 03:05:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Peralta, Rene (Fed)"
- Email subject: "RE: PQC seminar this Friday?"
- Pages: 1
- Bytes: 132089
Notes from djb, last edited 20231001 22:32:48 UTC:
Scheduling meeting to discuss randombytes().
Was this ever made public?
#weveshownallourwork
20170412 05:19:29
file 20240405/Re_ Getting into more detail_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 11:04:42 UTC
- PDF date: 20240404 13:04:41 -0400
- PDF creation date: 20230215 15:20:41 -0500
- Email date: 20170412 05:19:29
- Email from: "Andrew Dienstfrey"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: Getting into more detail"
- Pages: 5
- Bytes: 166782
Notes from djb, last edited 20240417 22:58:35 UTC:
Neural-network discussion.
20170412 12:11:49
file 20231013/Re_ DRBG-AES based implementation.pdf:
- FOIA delivery date: 20231013
- FOIA file date: 20231011 11:51:50 UTC
- PDF date: 20231011 13:51:49 -0400
- PDF creation date: 20230215 15:11:51 -0500
- Email date: 20170412 12:11:49
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: DRBG-AES based implementation"
- Pages: 2
- Bytes: 156952
Notes from djb, last edited 20231110 16:46:46 UTC:
Describes eprint 2017/298 as showing
"AES CTR DRBG is faster than Cha-Cha",
and describes this as "interesting".
The cited paper is not, in fact,
a study of AES performance or ChaCha performance.
It's a paper on
"An Investigation of Sources of Randomness Within Discrete Gaussian Sampling",
briefly surveying 12 different software options.
One option was AES-256 CTR-DRBG
running at 383.69 megabytes/sec on a 3.4GHz Intel Core i7-6700 (Skylake),
almost 9 cycles per byte.
Another option was a very slow C implementation of ChaCha20
running at 106.07 megabytes/sec, i.e., 32 cycles per byte.
Readily available
benchmarks
show publicly available ChaCha20 software running at 1.17 cycles/byte on Skylake
(and ChaCha8 software running at 0.53 cycles/byte).
#scramble
#weveshownallourwork
20170412 15:33:21
file 20230925/RE_ Document_2_Redacted_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230920 12:38:32 UTC
- PDF date: 20230920 14:38:30 -0400
- PDF creation date: 20230920 14:38:30 -0400
- Date: 20170412 15:33:21
- Pages: 1
- Bytes: 95697
Notes from djb, last edited 20231001 22:32:48 UTC:
Partially redacted discussion of an attack paper.
#needmorerecords
20170412 15:33:21
file 20240827/RE_ flu_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:00:24 UTC
- Date: 20170412 15:33:21
- Pages: 1
- Bytes: 92157
Notes from djb, last edited 20241002 20:43:30 UTC:
Email from Moody to Perlner and, apparently, Smith-Tone.
Excessive redactions of message down-thread;
don't need to hear about Smith-Tone's flu,
but there also seems to have been technical content to the message.
#needmorerecords
20170413 03:16:00
file 20230925/revising our PQC paper_4.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:45:26 UTC
- PDF date: 20230919 10:45:23 -0400
- PDF creation date: 20230215 16:04:41 -0500
- Email date: 20170413 03:16:00
- PDF attachments: "KRACABCSMMES-v2.pdf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel Smith-Tone"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "revising our PQC paper"
- Pages: 2
- Bytes: 395805
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussion of an attack paper.
20170413 03:16:00
file 20240827/revising our PQC paper.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240808 11:41:04 UTC
- PDF date: 20240808 13:41:02 -0400
- PDF creation date: 20230215 16:04:41 -0500
- Email date: 20170413 03:16:00
- PDF attachments: "KRACABCSMMES-v2.pdf"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel Smith-Tone"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "revising our PQC paper"
- Pages: 2
- Bytes: 395809
Notes from djb, last edited 20241002 20:43:30 UTC:
Paper editing.
20170413 12:25:52
file 20230925/[Pqc] PQC seminar postponed til next Friday_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 13:01:04 UTC
- PDF date: 20230914 15:01:02 -0400
- PDF creation date: 20230215 14:42:40 -0500
- Email date: 20170413 12:25:52
- PDF attachments: "ATT00001.txt"
- Email from: "pqc-bounces@nist.gov on behalf of Moody, Dustin (Fed)"
- Email to: "pqc"
- Email subject: "[Pqc] PQC seminar postponed til next Friday"
- Pages: 1
- Bytes: 109663
20170413 12:25:52
file 20240405/[Pqc] PQC seminar postponed til next Friday_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 11:39:06 UTC
- PDF date: 20240403 13:39:04 -0400
- PDF creation date: 20230215 14:42:40 -0500
- Email date: 20170413 12:25:52
- PDF attachments: "ATT00001.txt"
- Email from: "pqc-bounces@nist.gov on behalf of Moody, Dustin (Fed)"
- Email to: "pqc"
- Email subject: "[Pqc] PQC seminar postponed til next Friday"
- Pages: 1
- Bytes: 109665
Notes from djb, last edited 20240417 22:58:35 UTC:
"We will postpone our PQC seminar until next Friday, April 21st. Jacob will speak on “Discrete
Gaussian Sampling-Techniques and Dangers”."
20170414
file 20230925/Re_ revising our PQC paper(1)_2.pdf-attachment-References.bib:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 12:56:12 UTC
- Date: 20170414?
- Bytes: 54615
20170414
file 20230925/Re_ revising our PQC paper(2)_3.pdf-attachment-References.bib:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:44:30 UTC
- Date: 20170414?
- Bytes: 54615
20170414 08:04:45
file 20240405/Re_ meeting recap_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 11:44:58 UTC
- PDF date: 20240404 13:44:56 -0400
- PDF creation date: 20230215 15:24:48 -0500
- Email date: 20170414 08:04:45
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: meeting recap"
- Pages: 2
- Bytes: 168324
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing random-number generation for post-quantum systems.
#weveshownallourwork
20170414 08:16:00
file 20230925/FW_ PQC seminar postponed til next Friday_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:35:36 UTC
- PDF date: 20230919 12:35:33 -0400
- PDF creation date: 20230215 15:51:57 -0500
- Email date: 20170414 08:16:00
- PDF attachments: "ATT00001.txt"
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "FW: PQC seminar postponed til next Friday"
- Pages: 1
- Bytes: 115404
Notes from djb, last edited 20231001 22:32:48 UTC:
Logistics regarding Alperin-Sheriff talk "Discrete Gaussian sampling—techniques and dangers".
Was this talk made public?
#weveshownallourwork
20170414 08:20:42 -0400
file 20230925/Re_ revising our PQC paper(2)_3.pdf-attachment-IAC2PCABCSMMES5.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:44:30 UTC
- PDF date: 20170414 08:20:42 -0400
- PDF creation date: 20170414 08:20:42 -0400
- Pages: 13
- Bytes: 281979
Notes from djb, last edited 20231001 22:32:48 UTC:
Draft paper "Improved Attacks for Characteristic-2 Parameters of the Cubic ABC Simple Matrix Encryption Scheme".
20170414 08:28:06
file 20230925/Re_ revising our PQC paper(2)_3.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:44:30 UTC
- PDF date: 20230919 10:44:28 -0400
- PDF creation date: 20230215 16:04:40 -0500
- Email date: 20170414 08:28:06
- PDF attachments: "IAC2PCABCSMMES5.pdf"; "IAC2PCABCSMMES5.tex"; "References.bib"
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel Smith"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Re: revising our PQC paper"
- Pages: 2
- Bytes: 494678
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussing an attack paper.
20170414 11:34:17
file 20230925/Re_ Trustworty Quantum Information conference.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:37:02 UTC
- PDF date: 20230919 10:37:01 -0400
- PDF creation date: 20230215 16:18:14 -0500
- Email date: 20170414 11:34:17
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Bierhorst, Peter L. (Assoc)"
- Email cc: "Knill, Emanuel H. (Fed); Glancy, Scott C. (Fed)"
- Email subject: "Re: Trustworty Quantum Information conference"
- Pages: 1
- Bytes: 143106
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussing a quantum-information conference.
20170414 11:34:17
file 20240412/Re_ Trustworty Quantum Information conference_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 08:36:16 UTC
- PDF date: 20240410 10:36:13 -0400
- PDF creation date: 20230215 16:18:14 -0500
- Email date: 20170414 11:34:17
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Bierhorst, Peter L. (Assoc)"
- Email cc: "Knill, Emanuel H. (Fed); Glancy, Scott C. (Fed)"
- Email subject: "Re: Trustworty Quantum Information conference"
- Pages: 1
- Bytes: 143107
Notes from djb, last edited 20240420 20:41:56 UTC:
"I think that arXiv:1702.05178 would be excellent material for the audience at TYQI. I also don’t know
if there’s a mechanism for contributed talks (in the past, it’s been most or all invited speakers). You
could contact the organizers and see if they’re interested. I won’t get directly involved (to avoid any
appearance of conflict of interest) but I’d be very interested to know the outcome. [smiley]"
20170417
file 20230925/Re_ revising our PQC paper(1)_2.pdf-attachment-IAC2PCABCSMMES5.tex:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 12:56:12 UTC
- Date: 20170417?
- Bytes: 82256
20170417
file 20230925/Re_ revising our PQC paper(2)_3.pdf-attachment-IAC2PCABCSMMES5.tex:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:44:30 UTC
- Date: 20170417?
- Bytes: 78871
20170417 01:34:46
file 20230925/Re_ CTR_DRBG for PQC.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:42:42 UTC
- PDF date: 20230919 12:42:41 -0400
- PDF creation date: 20230215 15:08:15 -0500
- Email date: 20170417 01:34:46
- Email from: "Kelsey, John M. (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "Re: CTR_DRBG for PQC"
- Pages: 2
- Bytes: 203835
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussion of how to fit randombytes() into NIST's more complicated RNG interfaces.
"Do you know if all that PQC algorithms at least know how many RNG calls they’re going to need? If
so, it would be really simple to just request enough bytes to meet them all (perhaps with two or
three Generate requests)."
20170417 01:34:46
file 20240405/Re_ CTR_DRBG for PQC_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 10:59:58 UTC
- PDF date: 20240404 12:59:56 -0400
- PDF creation date: 20230215 15:08:15 -0500
- Email date: 20170417 01:34:46
- Email from: "Kelsey, John M. (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "Re: CTR_DRBG for PQC"
- Pages: 2
- Bytes: 203838
Notes from djb, last edited 20240417 22:58:35 UTC:
"If we implement the Instantiate function, then we need to provide Update with some provided_data
from randombytes(). The other place we use Update is within the Generate function. Since we’re
not going to accept any additional input, we would in principle call it only once, at the end of a
Generate request. There, the provided_data is set to a block of zero bits."
"The Generate function is only allowed to generate up to 4096 bytes per call. So if you’re
implementing a smart buffered form of Generate, you need to take this into account."
"Do you know if all that PQC algorithms at least know how many RNG calls they’re going to need? If
so, it would be really simple to just request enough bytes to meet them all (perhaps with two or
three Generate requests)."
20170417 03:40:00
file 20230925/RE_ revising our PQC paper_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:41:40 UTC
- PDF date: 20230919 10:41:38 -0400
- PDF creation date: 20230215 16:04:36 -0500
- Email date: 20170417 03:40:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Daniel Smith"
- Email cc: "Perlner, Ray (Fed)"
- Email subject: "RE: revising our PQC paper"
- Pages: 4
- Bytes: 191464
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussing paper-submission logistics.
20170417 03:40:00
file 20240827/RE_ revising our PQC paper_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 12:36:12 UTC
- Email date: 20170417 03:40:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "(b) (6)"
- Email cc: "Perlner, Ray (Fed)"
- Email subject: "RE: revising our PQC paper"
- Pages: 4
- Bytes: 190938
Notes from djb, last edited 20241002 20:43:30 UTC:
Paper editing.
20170417 10:14:42
file 20230925/Re_ Open Quantum Safe(1)_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:51:08 UTC
- PDF date: 20230919 11:51:06 -0400
- PDF creation date: 20230215 15:43:15 -0500
- Email date: 20170417 10:14:42
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Open Quantum Safe"
- Pages: 1
- Bytes: 126529
Notes from djb, last edited 20231001 22:32:48 UTC:
"I'll look into it."
Quoted message:
"I hope what we do is still compatible with the Open Quantum Safe project as well
(https://openquantumsafe.org/). It says they use liboqs, which also includes common routines
available to all liboqs modules, including a common random number generator and various
symmetric primitives such as AES and SHA-3. Do they already have a NIST DRBG can you tell? From
my un-expert eyes, it seems they might be using AES Ctr DRBG? See https://github.com/open-
quantum-safe/liboqs"
20170417 10:14:42
file 20240405/Re_ Open Quantum Safe(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:54:06 UTC
- PDF date: 20240404 10:54:04 -0400
- PDF creation date: 20230215 15:43:15 -0500
- Email date: 20170417 10:14:42
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Open Quantum Safe"
- Pages: 1
- Bytes: 126529
Notes from djb, last edited 20240417 22:58:35 UTC:
"I'll look into it."
Context: OQS RNG.
20170417 10:44:38
file 20230925/Re_ Open Quantum Safe_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:50:36 UTC
- PDF date: 20230919 11:50:35 -0400
- PDF creation date: 20230215 15:43:15 -0500
- Email date: 20170417 10:44:38
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Open Quantum Safe"
- Pages: 1
- Bytes: 135280
Notes from djb, last edited 20231001 22:32:48 UTC:
"Given your last email about Open Quantum Safe I won’t spend too much time looking at what they
have now. We can discuss internally the _KAT to _deterministic change."
20170417 10:44:38
file 20240405/Re_ Open Quantum Safe_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:53:48 UTC
- PDF date: 20240404 10:53:47 -0400
- PDF creation date: 20230215 15:43:15 -0500
- Email date: 20170417 10:44:38
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: Open Quantum Safe"
- Pages: 1
- Bytes: 135281
Notes from djb, last edited 20240417 22:58:35 UTC:
"Given your last email about Open Quantum Safe I won’t spend too much time looking at what they
have now. We can discuss internally the _KAT to _deterministic change."
20170417 11:58:32 -0400
file 20230925/Re_ revising our PQC paper(1)_2.pdf-attachment-IAC2PCABCSMMES5.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 12:56:12 UTC
- PDF date: 20170417 11:58:32 -0400
- PDF creation date: 20170417 11:58:32 -0400
- Pages: 14
- Bytes: 324749
Notes from djb, last edited 20231001 22:32:48 UTC:
Draft paper: "Improved Attacks for Characteristic-2 Parameters of the Cubic ABC Simple Matrix Encryption Scheme"
20170417 11:59:53
file 20230925/Re_ revising our PQC paper(1)_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 12:56:12 UTC
- PDF date: 20230919 14:56:11 -0400
- PDF creation date: 20230215 16:04:38 -0500
- Email date: 20170417 11:59:53
- PDF attachments: "IAC2PCABCSMMES5.pdf"; "IAC2PCABCSMMES5.tex"; "References.bib"
- Email from: "Daniel Smith"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Perlner, Ray A. (Fed)"
- Email subject: "Re: revising our PQC paper"
- Pages: 39
- Bytes: 794004
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussing an attack paper.
20170418 03:18:42
file 20230925/Re_ MIT Club_3.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:47:16 UTC
- PDF date: 20230919 11:47:14 -0400
- PDF creation date: 20230215 15:26:12 -0500
- Email date: 20170418 03:18:42
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: MIT Club"
- Pages: 4
- Bytes: 168995
Notes from djb, last edited 20231001 22:32:48 UTC:
External talk logistics.
20170418 03:18:42
file 20240405/Re_ MIT Club_3.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:26:30 UTC
- PDF date: 20240404 10:26:28 -0400
- PDF creation date: 20230215 15:26:12 -0500
- Email date: 20170418 03:18:42
- Email from: "Moody, Dustin (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: MIT Club"
- Pages: 4
- Bytes: 168996
Notes from djb, last edited 20240417 22:58:35 UTC:
Talk logistics.
20170418 03:34:45
file 20230925/RE_ MIT Club and Blockchain_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:46:30 UTC
- PDF date: 20230919 11:46:28 -0400
- PDF creation date: 20230215 15:26:13 -0500
- Email date: 20170418 03:34:45
- Email from: "Yaga, Dylan (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "RE: MIT Club and Blockchain"
- Pages: 2
- Bytes: 222470
Notes from djb, last edited 20231001 22:32:48 UTC:
External talk logistics.
20170418 03:34:45
file 20240405/RE_ MIT Club and Blockchain_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:26:16 UTC
- PDF date: 20240404 10:26:14 -0400
- PDF creation date: 20230215 15:26:13 -0500
- Email date: 20170418 03:34:45
- Email from: "Yaga, Dylan (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "RE: MIT Club and Blockchain"
- Pages: 2
- Bytes: 222471
Notes from djb, last edited 20240417 22:58:35 UTC:
Talk logistics.
20170418 07:35:49
file 20240827/Re_ Postquantum crypto project_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:57:40 UTC
- Email date: 20170418 07:35:49
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Chen, Lily (Fed); (b) (6) ; Moody, Dustin (Fed)"
- Email cc: "Liu, Yi-Kai (Fed)"
- Email subject: "Re: Postquantum crypto project"
- Pages: 3
- Bytes: 200635
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing advertising.
20170418 10:36:49
file 20230925/[Pqc] PQC seminar this Friday_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230914 13:00:34 UTC
- PDF date: 20230914 15:00:32 -0400
- PDF creation date: 20230215 14:42:41 -0500
- Email date: 20170418 10:36:49
- PDF attachments: "ATT00001.txt"
- Email from: "pqc-bounces@nist.gov on behalf of Moody, Dustin (Fed)"
- Email to: "pqc"
- Email subject: "[Pqc] PQC seminar this Friday"
- Pages: 1
- Bytes: 110603
20170418 10:36:49
file 20240405/[Pqc] PQC seminar this Friday_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240403 11:38:50 UTC
- PDF date: 20240403 13:38:49 -0400
- PDF creation date: 20230215 14:42:41 -0500
- Email date: 20170418 10:36:49
- PDF attachments: "ATT00001.txt"
- Email from: "pqc-bounces@nist.gov on behalf of Moody, Dustin (Fed)"
- Email to: "pqc"
- Email subject: "[Pqc] PQC seminar this Friday"
- Pages: 1
- Bytes: 110603
Notes from djb, last edited 20240417 22:58:35 UTC:
"We have a PQC seminar this Friday, April 21st. Jacob Alperin-Sheriff will speak on “Discrete
Gaussian Sampling-Techniques and Dangers”."
20170418 12:23:28
file 20230925/Re_ annual report welcome letter.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:09:14 UTC
- PDF date: 20230919 12:09:13 -0400
- PDF creation date: 20230215 14:57:42 -0500
- Email date: 20170418 12:23:28
- Email from: "Scholl, Matthew (Fed)"
- Email to: "Mat Heyman; Dodson, Donna F (Fed)"
- Email cc: "Heyman, Matthew (Assoc); Stine, Kevin M. (Fed)"
- Email subject: "Re: annual report welcome letter"
- Pages: 1
- Bytes: 158854
Notes from djb, last edited 20231001 22:32:48 UTC:
"I think this is good. I would not be too concerned about including everything here but, if IDM and
automation are future items, then perhaps a nod to what we are looking forward to along with PQC."
20170418 12:23:28
file 20240827/Re_ annual report welcome letter_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 08:58:18 UTC
- Email date: 20170418 12:23:28
- Email from: "Scholl, Matthew (Fed)"
- Email to: "(b) (6) Dodson, Donna F (Fed)"
- Email cc: "Heyman, Matthew (Assoc); Stine, Kevin M. (Fed)"
- Email subject: "Re: annual report welcome letter"
- Pages: 1
- Bytes: 154985
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing reporting.
20170419 10:05:43
file 20230925/Update PQC forum.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:24:08 UTC
- PDF date: 20230919 11:24:07 -0400
- PDF creation date: 20230215 16:20:39 -0500
- Email date: 20170419 10:05:43
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kelsey, John M. (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Alperin-Sheriff, Jacob (Fed); Bassham, LawrenceE. (Fed)"
- Email cc: "Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Update PQC forum"
- Pages: 1
- Bytes: 121397
Notes from djb, last edited 20231001 22:32:48 UTC:
"Now that we’ve heard back from Dan, it would be good to provide an update on the pqc-forum
about the randomness issues (unless there is still something that needs to get ironed out with Dan)."
20170419 10:05:43
file 20240412/Update PQC forum_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:38:30 UTC
- PDF date: 20240410 11:38:29 -0400
- PDF creation date: 20230215 16:20:39 -0500
- Email date: 20170419 10:05:43
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kelsey, John M. (Fed); Perlner, Ray A. (Fed); Liu, Yi-Kai (Fed); Alperin-Sheriff, Jacob (Fed); Bassham, LawrenceE. (Fed)"
- Email cc: "Chen, Lily (Fed); Liu, Yi-Kai (Fed)"
- Email subject: "Update PQC forum"
- Pages: 1
- Bytes: 121397
Notes from djb, last edited 20240420 20:41:56 UTC:
"Now that we’ve heard back from Dan, it would be good to provide an update on the pqc-forum
about the randomness issues (unless there is still something that needs to get ironed out with Dan).
The last we said on the forum is shown below:"
"Do you think you could write something we could post to let people know what we’re planning on?"
20170420 03:23:29
file 20230925/Re_ Slides for Talk(2)_3.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:23:34 UTC
- PDF date: 20230919 11:23:31 -0400
- PDF creation date: 20230215 16:07:42 -0500
- Email date: 20170420 03:23:29
- PDF attachments: "sample_slides.pdf"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Slides for Talk"
- Pages: 2
- Bytes: 831923
Notes from djb, last edited 20231001 22:32:48 UTC:
Slides for internal talk.
20170420 03:23:29
file 20240412/Re_ Slides for Talk(2)_2.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:10:24 UTC
- PDF date: 20240410 11:10:23 -0400
- PDF creation date: 20230215 16:07:42 -0500
- Email date: 20170420 03:23:29
- PDF attachments: "sample_slides.pdf"
- Email from: "Alperin-Sheriff, Jacob (Fed)"
- Email to: "Moody, Dustin (Fed); Liu, Yi-Kai (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Slides for Talk"
- Pages: 2
- Bytes: 831927
Notes from djb, last edited 20240420 20:41:56 UTC:
Sending seminar slides.
20170420 03:57:43
file 20230925/Re_ Slides for Talk(1)_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:22:58 UTC
- PDF date: 20230919 11:22:57 -0400
- PDF creation date: 20230215 16:07:41 -0500
- Email date: 20170420 03:57:43
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Re: Slides for Talk"
- Pages: 2
- Bytes: 166878
Notes from djb, last edited 20231001 22:32:48 UTC:
Talk logistics.
20170420 05:49:53
file 20230925/Re_ Slides for Talk_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:22:08 UTC
- PDF date: 20230919 11:22:07 -0400
- PDF creation date: 20230215 16:07:40 -0500
- Email date: 20170420 05:49:53
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Slides for Talk"
- Pages: 2
- Bytes: 110030
Notes from djb, last edited 20231001 22:32:48 UTC:
Talk logistics.
20170420 05:49:53
file 20240412/Re_ Slides for Talk_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:10:00 UTC
- PDF date: 20240410 11:09:59 -0400
- PDF creation date: 20230215 16:07:40 -0500
- Email date: 20170420 05:49:53
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Slides for Talk"
- Pages: 2
- Bytes: 110031
Notes from djb, last edited 20240420 20:41:56 UTC:
Seminar logistics.
20170420 09:12:16
file 20231013/Re_ Conference Registration_1.pdf:
- FOIA delivery date: 20231013
- FOIA file date: 20231011 11:44:08 UTC
- PDF date: 20231011 13:44:06 -0400
- PDF creation date: 20230215 15:06:33 -0500
- Email date: 20170420 09:12:16
- Email from: "Moody, Dustin (Fed)"
- Email to: "Mukes, Vickie J. (Fed)"
- Email cc: "Chen, Lily (Fed)"
- Email subject: "Re: Conference Registration"
- Pages: 7
- Bytes: 327977
Notes from djb, last edited 20231110 16:46:46 UTC:
Discussing a conference.
20170420 15:19:36 -0400
file 20240412/Re_ Slides for Talk(2)_2.pdf-attachment-sample_slides.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 09:10:24 UTC
- PDF date: 20170420 15:19:36 -0400
- PDF creation date: 20170420 15:19:36 -0400
- PDF subject: "Theoretical Computer Science"
- Pages: 78
- Bytes: 682445
Notes from djb, last edited 20240420 20:41:56 UTC:
"By Jacob Alperin-Sheriff"
"Discrete Gaussian Sampling-Techniques and Dangers"
Reviewing issues in miscellaneous samplers to use in signature systems.
20170421
file 20230925/Re_ Slides for Talk(2)_3.pdf-attachment-sample_slides.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:23:34 UTC
- PDF date: 20170420 15:19:36 -0400
- PDF creation date: 20170420 15:19:36 -0400
- Date: 20170421
- PDF subject: "Theoretical Computer Science"
- Pages: 78
- Bytes: 682445
Notes from djb, last edited 20231001 22:32:48 UTC:
Slides "Discrete Gaussian sampling—techniques and dangers".
Discussing sampling algorithms.
20170421 01:30:14
file 20230925/BERB review_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:41:36 UTC
- PDF date: 20230919 11:41:34 -0400
- PDF creation date: 20230215 15:03:34 -0500
- Email date: 20170421 01:30:14
- PDF attachments: "3764_001.pdf"
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Knill, Emanuel H. (Fed)"
- Email subject: "BERB review"
- Pages: 1
- Bytes: 212456
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussion of a QCRYPT paper.
20170421 01:30:14
file 20240405/BERB review_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:07:04 UTC
- PDF date: 20240404 10:07:03 -0400
- PDF creation date: 20230215 15:03:34 -0500
- Email date: 20170421 01:30:14
- PDF attachments: "3764_001.pdf"
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Knill, Emanuel H. (Fed)"
- Email subject: "BERB review"
- Pages: 1
- Bytes: 212457
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing QCRYPT submission.
20170421 02:51:26
file 20230925/Re_ BERB review_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:41:04 UTC
- PDF date: 20230919 11:41:02 -0400
- PDF creation date: 20230215 15:03:33 -0500
- Email date: 20170421 02:51:26
- Email from: "Emanuel Knill"
- Email to: "Miller, Carl A. (Fed)"
- Email subject: "Re: BERB review"
- Pages: 2
- Bytes: 120442
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussion of quantum randomness.
20170421 02:51:26
file 20240405/Re_ BERB review_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:05:54 UTC
- PDF date: 20240404 10:05:53 -0400
- PDF creation date: 20230215 15:03:33 -0500
- Email date: 20170421 02:51:26
- Email from: "Emanuel Knill"
- Email to: "Miller, Carl A. (Fed)"
- Email subject: "Re: BERB review"
- Pages: 2
- Bytes: 120443
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing QCRYPT submission.
20170421 12:09:22 -0500
file 20230925/BERB review_2.pdf-attachment-3764_001.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:41:36 UTC
- PDF date: 20170421 12:09:22 -0500
- PDF creation date: 20170421 12:09:22 -0500
- Pages: 2
- Bytes: 111317
Notes from djb, last edited 20231001 22:32:48 UTC:
Internal review of a paper on quantum randomness aimed at QCRYPT.
20170421 12:09:22 -0500
file 20240405/BERB review_2.pdf-attachment-3764_001.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:07:04 UTC
- PDF date: 20170421 12:09:22 -0500
- PDF creation date: 20170421 12:09:22 -0500
- Pages: 2
- Bytes: 111317
Notes from djb, last edited 20240417 22:58:35 UTC:
Scanned review form for QCRYPT submission.
20170424 03:53:34
file 20230925/Presentation_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 09:45:46 UTC
- PDF date: 20230919 11:45:44 -0400
- PDF creation date: 20230215 15:55:52 -0500
- Email date: 20170424 03:53:34
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Scholl, Matthew A. (Fed); Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Presentation"
- Pages: 1
- Bytes: 100235
Notes from djb, last edited 20231001 22:32:48 UTC:
"Thanks so much for once again presenting NIST's work in quantum resistant crypto to the
MIT alumni club. They thoroughly enjoyed the briefing. I appreciate your time to do this.
Your expertise and leadership in this space come out every time you talk with a group."
20170424 03:53:34
file 20240405/Presentation_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:26:00 UTC
- PDF date: 20240404 10:25:58 -0400
- PDF creation date: 20230215 15:55:52 -0500
- Email date: 20170424 03:53:34
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email cc: "Scholl, Matthew A. (Fed); Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Presentation"
- Pages: 1
- Bytes: 100235
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thanks so much for once again presenting NIST's work in quantum resistant crypto to the
MIT alumni club. They thoroughly enjoyed the briefing. I appreciate your time to do this.
Your expertise and leadership in this space come out every time you talk with a group."
20170424 11:54:49
file 20230925/RE_ Conference on IAC Calendar.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:37:28 UTC
- PDF date: 20230919 12:37:25 -0400
- PDF creation date: 20230215 15:05:49 -0500
- Email date: 20170424 11:54:49
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: Conference on IAC Calendar"
- Pages: 1
- Bytes: 118688
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussion of naming and advertisement of the ""1st NIST PQC Standardization Conference”".
20170424 11:54:49
file 20240405/RE_ Conference on IAC Calendar_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 10:54:18 UTC
- PDF date: 20240404 12:54:16 -0400
- PDF creation date: 20230215 15:05:49 -0500
- Email date: 20170424 11:54:49
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: Conference on IAC Calendar"
- Pages: 1
- Bytes: 118688
Notes from djb, last edited 20240417 22:58:35 UTC:
"Thank you. I can’t really think of other crypto sites."
20170425 03:20:00
file 20231110/University_of_South_Florida_Project_Description_1.pdf:
- FOIA delivery date: 20231110
- FOIA file date: 20231025 07:48:42 UTC
- PDF date: 20231025 10:48:40 -0400
- PDF creation date: 20230215 16:19:46 -0500
- Email date: 20170425 03:20:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Clark, Carol A (Fed)"
- Email subject: "RE: University of South Florida - Project description - Tools for the Standardization of Post-QuantumCryptography"
- Pages: 2
- Bytes: 156340
Notes from djb, last edited 20231110 16:46:46 UTC:
Bureaucracy for a grant proposal from the University of South Florida.
20170425 11:06:17
file 20230925/RE_ [nist-ai] Wiki address.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:42:10 UTC
- PDF date: 20230919 12:42:07 -0400
- PDF creation date: 20230215 14:40:25 -0500
- Email date: 20170425 11:06:17
- Email from: "Garris, Michael D. (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: [nist-ai] Wiki address"
- Pages: 3
- Bytes: 115895
Notes from djb, last edited 20231001 22:32:48 UTC:
NIST AI discussion.
20170425 11:06:17
file 20240405/RE_ [nist-ai] Wiki address_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 09:17:16 UTC
- PDF date: 20240404 11:17:15 -0400
- PDF creation date: 20230215 14:40:25 -0500
- Email date: 20170425 11:06:17
- Email from: "Garris, Michael D. (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "RE: [nist-ai] Wiki address"
- Pages: 3
- Bytes: 115896
Notes from djb, last edited 20240417 22:58:35 UTC:
AI discussion.
20170426 03:10:00
file 20230925/RE_ FAQ small revision(1)_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:21:16 UTC
- PDF date: 20230919 10:21:15 -0400
- PDF creation date: 20230215 15:16:22 -0500
- Email date: 20170426 03:10:00
- PDF attachments: "FAQs-Historical. v3.docx"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: FAQ small revision"
- Pages: 2
- Bytes: 176577
Notes from djb, last edited 20231001 22:32:48 UTC:
Discussion of removing the following sentence from NIST's FAQ:
"Randombytes should only be used to seed a NIST-approved DRBG."
20170426 03:15:00
file 20230925/RE_ FAQ small revision_1.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:20:58 UTC
- PDF date: 20230919 10:20:56 -0400
- PDF creation date: 20230215 15:16:22 -0500
- Email date: 20170426 03:15:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: FAQ small revision"
- Pages: 2
- Bytes: 154388
20170426 03:15:00
file 20240405/RE_ FAQ small revision_1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:09:44 UTC
- PDF date: 20240404 10:09:43 -0400
- PDF creation date: 20230215 15:16:22 -0500
- Email date: 20170426 03:15:00
- Email from: "Moody, Dustin (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "RE: FAQ small revision"
- Pages: 2
- Bytes: 154388
Notes from djb, last edited 20240417 22:58:35 UTC:
Discussing web-page updates.
20170426 19:09:00 UTC
file 20230925/RE_ FAQ small revision(1)_2.pdf-attachment-FAQs-Historical. v3.docx:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 08:21:16 UTC
- XML date: 20170426 19:09:00 UTC
- XML creation date: 20170426 18:51:00 UTC
- XML creator: "Kerman, Sara J. (Fed)"
- XML last-modified-by: "Kerman, Sara J. (Fed)"
- Pages: 3
- Bytes: 24631
20170428 02:02:02
file 20230925/Re_ People's Thoughts on Doing a Reddit AMA on ...(1)_2.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:07:46 UTC
- PDF date: 20230919 12:07:45 -0400
- PDF creation date: 20230215 15:46:00 -0500
- Email date: 20170428 02:02:02
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed);Bassham, Lawrence E. (Fed)"
- Email subject: "Re: People"s Thoughts on Doing a Reddit AMA on PQC Project?"
- Pages: 1
- Bytes: 109545
Notes from djb, last edited 20231001 22:32:48 UTC:
"Hey, that's an interesting suggestion. I'd be a bit concerned about doing this as an official outreach activity by NIST,
because these long online conversations can generate a lot of vaguely-worded text that can later be taken out of
context and misinterpreted by other people."
"However, I wonder if you can do this as a voluntary effort by a private citizen, not connected with NIST?"
20170428 02:02:02
file 20240405/Re_ People's Thoughts on Doing a Reddit AMA on ...(1)_2.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:56:40 UTC
- PDF date: 20240404 10:56:38 -0400
- PDF creation date: 20230215 15:46:00 -0500
- Email date: 20170428 02:02:02
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed); Chen, Lily (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed);Bassham, Lawrence E. (Fed)"
- Email subject: "Re: People"s Thoughts on Doing a Reddit AMA on PQC Project?"
- Pages: 1
- Bytes: 109545
Notes from djb, last edited 20240417 22:58:35 UTC:
Discouraging transparency:
"these long online conversations can generate a lot of vaguely-worded text that can later be taken out of
context and misinterpreted by other people"
#weveshownallourwork
20170428 02:11:10
file 20230925/Re_ People's Thoughts on Doing a Reddit AMA on ...._1pdf.pdf:
- FOIA delivery date: 20230925
- FOIA file date: 20230919 10:07:18 UTC
- PDF date: 20230919 12:07:17 -0400
- PDF creation date: 20230215 15:45:59 -0500
- Email date: 20170428 02:11:10
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Liu, Yi-Kai(Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: People"s Thoughts on Doing a Reddit AMA on PQC Project?"
- Pages: 2
- Bytes: 162572
Notes from djb, last edited 20231001 22:32:48 UTC:
"I looked at the site you pointed. It is a good site for people to learn
something casually. However, I do not feel it is necessary to put our
PQC procedure there because maintaining could be resource
consuming. It is also challenging to manage answering all the questions
without risking certain bias or accidently misleading at this stage of our
procedure."
"I feel that we have obtained sufficient publicity through research
community, industry groups, as well as government agencies. If
someone hasn’t heard us and our effort before, it is unlikely that they
have been engaged in the mainstream research and practice in this area."
"On the other hand, it is worth to observe the discussions there since
some opinions may be valuable and we haven’t had thought about."
20170428 02:11:10
file 20240405/Re_ People's Thoughts on Doing a Reddit AMA on ..._1.pdf:
- FOIA delivery date: 20240405
- FOIA file date: 20240404 08:56:22 UTC
- PDF date: 20240404 10:56:20 -0400
- PDF creation date: 20230215 15:45:59 -0500
- Email date: 20170428 02:11:10
- Email from: "Chen, Lily (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed); Moody, Dustin (Fed); Perlner, Ray A. (Fed); Peralta, Rene C. (Fed); Liu, Yi-Kai(Fed); Bassham, Lawrence E. (Fed)"
- Email subject: "Re: People"s Thoughts on Doing a Reddit AMA on PQC Project?"
- Pages: 2
- Bytes: 162573
Notes from djb, last edited 20240417 22:58:35 UTC:
Discouraging transparency:
"maintaining could be resource
consuming. It is also challenging to manage answering all the questions
without risking certain bias or accidently misleading at this stage of our
procedure"
#weveshownallourwork
20170428 11:31:28 -0400
file 20240617/Carl Miller's WERB Paper_2.pdf-attachment-MILLER_Graphical Methods Quantum Crypto.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:52:28 UTC
- PDF date: 20170428 11:31:28 -0400
- PDF creation date: 20170428 11:31:28 -0400
- Pages: 15
- Bytes: 482698
20170502 02:04:27
file 20240617/PQC Reference Platform_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 09:17:10 UTC
- PDF date: 20240611 11:17:08 -0400
- PDF creation date: 20230228 14:33:13 -0500
- Email date: 20170502 02:04:27
- Email from: "Bassham, Lawrence E (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "PQC Reference Platform"
- Pages: 1
- Bytes: 105296
Notes from djb, last edited 20240624 05:27:25 UTC:
" “The above tests will initially be performed by NIST on the NIST PQC Reference Platform, an Intel x64
running Windows or Linux and supporting the GCC compiler.” "
20170503 05:44:58
file 20240621/What we decided today_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 08:36:26 UTC
- PDF date: 20240618 10:36:24 -0400
- PDF creation date: 20230302 10:41:50 -0500
- Email date: 20170503 05:44:58
- Email from: "Kelsey, John M. (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed); Perlner, Ray A. (Fed); Chen, Lily (Fed); Bassham, Lawrence E. (Fed);Smith,Daniel C; Moody, Dustin (Fed); Petzoldt, Albrecht R. (IntlAssoc)"
- Email subject: "What we decided today"
- Pages: 2
- Bytes: 95711
Notes from djb, last edited 20240628 14:24:55 UTC:
"This is what I think we agreed on today:"
"a. For random number generation, we want the performance tests to use AES CTR DRBG exactly as it
appears in 90A—each request for random bytes leads to a Generate() call, and thus costs three extra
AES encryptions and one AES key scheduling."
"b. We will explicitly allow the submitters to use a “seed expanding” algorithm to expand the RNG
output to a larger number of bytes in some more convenient way."
"c. We will define a seed-expanding algorithm based on AES CTR mode, and one based on KMAC. We
could also provide one based on SHA2."
"d. We will encourage submitters to allow flexibility in their seed-expanding algorithm, so that
changes are possible."
"e. We will provide some reference code for these things, and also will provide some code to Dan and
the open quantum safe people as needed. We’ll also ask Dan and the OQS people to make sure
submissions have access to fast implementations of AES, SHA2, or SHA3 as needed."
Also a proposed API for seed expansion.
20170504 02:32:49
file 20240617/FW_ PQC forum archive link_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 13:31:56 UTC
- PDF date: 20240610 15:31:54 -0400
- PDF creation date: 20230228 14:31:54 -0500
- Email date: 20170504 02:32:49
- PDF attachments: "final CFP v4.4.docx"
- Email from: "Perlner, Ray (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "FW: PQC forum archive link"
- Pages: 1
- Bytes: 190300
Notes from djb, last edited 20240624 05:27:25 UTC:
Forwarding attachment.
20170504 08:30:42
file 20240621/SUPERCOP architecture_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 08:32:08 UTC
- PDF date: 20240618 10:32:07 -0400
- PDF creation date: 20230302 10:34:40 -0500
- Email date: 20170504 08:30:42
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "SUPERCOP architecture"
- Pages: 1
- Bytes: 139359
Notes from djb, last edited 20240628 14:24:55 UTC:
"I spent a couple hours looking at the SUPERCOP source code, but for the life of me I can’t figure out
what’s going on with even simple things. I’m hoping you can help figure out the basic stuff."
#scramble
20170505 12:44:39
file 20240617/Re_ Attention Authors (WERB)_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 07:55:36 UTC
- PDF date: 20240612 09:55:35 -0400
- PDF creation date: 20230228 14:05:46 -0500
- Email date: 20170505 12:44:39
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: Attention Authors (WERB)"
- Pages: 5
- Bytes: 174136
Notes from djb, last edited 20240624 05:27:25 UTC:
Discussing internal paper reviewing.
Inside quoted thread:
"I’m not sure about Dustin, but my impression is that the majority of people involved in the
postquantum crypto project specialize in classical cryptography, and that a minority (including
Stephen & Yi-Kai) supply the quantum expertise. I could be wrong though. (I asked Jacob Alperin-
Sheriff to do a WERB of a previous quantum paper, and he said he was a “novice when it comes to
quantum” but was happy to write a review anyway.)"
20170505 12:57:12
file 20240617/Carl Miller's WERB Paper_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:52:28 UTC
- PDF date: 20240610 14:52:27 -0400
- PDF creation date: 20230228 14:06:06 -0500
- Email date: 20170505 12:57:12
- PDF attachments: "MILLER_Graphical Methods Quantum Crypto.pdf"
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "Carl Miller"s WERB Paper"
- Pages: 1
- Bytes: 561101
Notes from djb, last edited 20240624 05:27:25 UTC:
Reviewing internal quantum-cryptography paper.
20170508 03:26:13
file 20240716/Re_ PQC Forum content_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:57:24 UTC
- Email date: 20170508 03:26:13
- Email from: "Peralta, Rene (Fed)"
- Email to: "Alperin-Sheriff, Jacob (Fed)"
- Email subject: "Re: PQC Forum content"
- Pages: 3
- Bytes: 161384
Notes from djb, last edited 20240726 21:43:58 UTC:
Discussing announcement regarding software rules.
20170508 09:56:56
file 20240621/Re_ stock slides(1)_2.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 07:40:14 UTC
- PDF date: 20240618 09:40:13 -0400
- PDF creation date: 20230302 10:34:27 -0500
- Email date: 20170508 09:56:56
- PDF attachments: "PQC-NAF-02062017-with notes.pptx"; "Asia-PQC-3rd-03222017-p.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Dodson, Donna F (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: stock slides"
- Pages: 1
- Bytes: 1233582
Notes from djb, last edited 20240628 14:24:55 UTC:
"Presentation at National Academy of Science – This is a more general report (i.e. for audience
who may not have followed NIST process)."
"Presentation at the 3rd PQC Forum – This is for audience who have followed NIST process."
Thread mentions a "BSI event in Germany".
#needmorerecords
20170508 12:57:00
file 20240621/RE_ Seed expanding and random number generation(1)_2.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:17:48 UTC
- PDF date: 20240617 15:17:47 -0400
- PDF creation date: 20230302 10:32:38 -0500
- Email date: 20170508 12:57:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Kelsey, John M. (Fed)"
- Email subject: "RE: Seed expanding and random number generation"
- Pages: 3
- Bytes: 118442
Notes from djb, last edited 20240628 14:24:55 UTC:
Discussing PRNGs.
20170508 12:59:00
file 20240621/RE_ Seed expanding and random number generation_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240617 13:17:34 UTC
- PDF date: 20240617 15:17:33 -0400
- PDF creation date: 20230302 10:32:38 -0500
- Email date: 20170508 12:59:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "Regenscheid, Andrew (Fed); Perlner, Ray (Fed); Chen, Lily (Fed); Bassham, Lawrence E (Fed); Smith,Daniel C;Moody, Dustin (Fed); Petzoldt, Albrecht R. (IntlAssoc)"
- Email subject: "RE: Seed expanding and random number generation"
- Pages: 3
- Bytes: 122243
Notes from djb, last edited 20240628 14:24:55 UTC:
"Whoops, meant to reply all"
20170509 01:46:22 UTC
file 20240621/Re_ stock slides(1)_2.pdf-attachment-Asia-PQC-3rd-03222017-p.pptx:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 07:40:14 UTC
- XML date: 20170509 01:46:22 UTC
- XML creation date: 20160929 15:49:39 UTC
- XML creator: "Chen, Lily (Fed)"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 18
- Bytes: 633323
Notes from djb, last edited 20240628 14:24:55 UTC:
"NIST PQC Standardization
⎼ Process, Issues and Strategies"
"Lily Chen"
"Properly handling security implementation issues are critical to make an algorithm a strong candidate for standardization, e.g."
"Details determine success or failure – General strategy to win"
#inconsistency
20170509 01:48:18 UTC
file 20240621/Re_ stock slides(1)_2.pdf-attachment-PQC-NAF-02062017-with notes.pptx:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 07:40:14 UTC
- XML date: 20170509 01:48:18 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 19
- Bytes: 592270
Notes from djb, last edited 20240628 14:24:55 UTC:
"Post-Quantum Cryptography and NIST Standardization"
"NIST PQC team – The most significant in the first mile"
"Consists of 10 NIST researchers in cryptography, quantum information, quantum algorithms"
"Hold bi-weekly seminars (internal and invited speakers)"
"NIST sees its role as managing a process of achieving community consensus in a transparent and timely manner"
20170509 09:14:16
file 20240621/Re_ stock slides_1.pdf:
- FOIA delivery date: 20240621
- FOIA file date: 20240618 07:40:02 UTC
- PDF date: 20240618 09:40:00 -0400
- PDF creation date: 20230302 10:34:26 -0500
- Email date: 20170509 09:14:16
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "Moody, Dustin (Fed)"
- Email subject: "Re: stock slides"
- Pages: 2
- Bytes: 159564
Notes from djb, last edited 20240628 14:24:55 UTC:
"These are perfect. I think the wording of these are much better than the ones I tried this weekend."
20170511 12:39:54
file 20240617/Re_ Quantum conference(1)_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 09:27:28 UTC
- PDF date: 20240611 11:27:27 -0400
- PDF creation date: 20230302 10:27:54 -0500
- Email date: 20170511 12:39:54
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Chen, Lily (Fed); Dodson, Donna F (Fed)"
- Email subject: "Re: Quantum conference"
- Pages: 1
- Bytes: 151425
Notes from djb, last edited 20240624 05:27:25 UTC:
Conference planning.
20170511 12:42:03
file 20240617/Re_ Quantum conference_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 09:27:14 UTC
- PDF date: 20240611 11:27:13 -0400
- PDF creation date: 20230302 10:27:52 -0500
- Email date: 20170511 12:42:03
- Email from: "Dodson, Donna F (Fed)"
- Email to: "Chen, Lily (Fed); Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Quantum conference"
- Pages: 1
- Bytes: 155006
Notes from djb, last edited 20240624 05:27:25 UTC:
Conference planning.
20170517 16:32:02 UTC
file 20240617/ICMC-PQC_1.pdf-attachment-PQC-ICMC-05172017.pptx:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:49:36 UTC
- XML date: 20170517 16:32:02 UTC
- XML creation date: 20161108 17:19:05 UTC
- Pages: 21
- Bytes: 1344315
20170518 04:41:41
file 20240617/Re_ annual report welcome letter(1)_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:41:44 UTC
- PDF date: 20240610 14:41:43 -0400
- PDF creation date: 20230228 14:04:53 -0500
- Email date: 20170518 04:41:41
- PDF attachments: "PQC-inAnnual.docx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Dodson, Donna F (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "Scholl, Matthew A. (Fed)"
- Email subject: "Re: annual report welcome letter"
- Pages: 1
- Bytes: 197202
Notes from djb, last edited 20240624 05:27:25 UTC:
"This looks good. I have two comments and one suggestion as attached."
20170518 11:41:10
file 20240617/ICMC-PQC_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:49:36 UTC
- PDF date: 20240611 10:49:35 -0400
- PDF creation date: 20230228 14:18:44 -0500
- Email date: 20170518 11:41:10
- PDF attachments: "PQC-ICMC-05172017.pptx"
- Email from: "Chen, Lily (Fed)"
- Email to: "Chen, Lily (Fed)"
- Email subject: "ICMC-PQC"
- Pages: 1
- Bytes: 1089704
Notes from djb, last edited 20240624 05:27:25 UTC:
No text, just attachment.
20170518 12:34:18
file 20240617/Re_ Carl Miller's WERB Paper_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:52:12 UTC
- PDF date: 20240610 14:52:10 -0400
- PDF creation date: 20230228 14:06:05 -0500
- Email date: 20170518 12:34:18
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: Carl Miller"s WERB Paper"
- Pages: 1
- Bytes: 107170
Notes from djb, last edited 20240624 05:27:25 UTC:
Discussing internal paper reviewing.
20170518 18:58:00 UTC
file 20240617/Re_ annual report welcome letter(1)_2.pdf-attachment-PQC-inAnnual.docx:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:41:44 UTC
- XML date: 20170518 18:58:00 UTC
- XML creation date: 20170518 18:41:00 UTC
- XML creator: "Chen, Lily (Fed)"
- XML last-modified-by: "Chen, Lily (Fed)"
- Pages: 1
- Bytes: 56294
Notes from djb, last edited 20240624 05:27:25 UTC:
"Looking ahead is vital in the realm of cybersecurity. Knowing that if large-scale quantum computers are ever built they will be able to break many of the
public-key cryptosystems currently in use and compromise the confidentiality and integrity of digital communication on the Internet and elsewhere, NIST is working
closely with the academic community and industry to develop protective cryptographic standards that we all rely upon. Building on its successful tradition of
worldwide, open competitions, in 2016 NIST called for submissions for quantum-resistant public-key cryptographic algorithms for standards. These algorithms must be
secure against both quantum and classical computers, and should interoperate with existing communications protocols and networks. NIST plans to select a winning
entry after all entries are received late in 2017 and thoroughly analyzed."
Comment from Chen on "competitions":
"We have tried very hard to avoid using “competition” for the PQC standardization. I hope this will not be understood that way but referring to AES and SHA3
competition."
Comment from Chen on "a winning entry":
"This will not be one winning entry but multiple entries. We will select entries for signatures, for encryptions and key agreements."
Comment from Chen:
"How about “After submissions are received late in 2017, NIST plans to spend 3-5 years to work with research community and industry to analyze the candidates before
selecting algorithms for standardization. “ "
20170519 06:58:57
file 20240716/RE_ FW_ MinRank Paper_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:54:50 UTC
- Email date: 20170519 06:58:57
- Email from: "(b) (6)"
- Email to: "Smith-Tone, Daniel C. (Fed)"
- Email subject: "RE: FW: MinRank Paper"
- Pages: 2
- Bytes: 127657
Notes from djb, last edited 20240726 21:43:58 UTC:
Unclear what the redacted address is here.
#needmorerecords
20170520 02:28:02
file 20240716/MinRank_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:38:00 UTC
- Email date: 20170520 02:28:02
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "MinRank"
- Pages: 1
- Bytes: 93969
Notes from djb, last edited 20240726 21:43:58 UTC:
Apparently sent by Daniel Smith-Tone.
20170520 03:18:50
file 20240716/experiments_1_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 11:30:38 UTC
- Email date: 20170520 03:18:50
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed)"
- Email subject: "experiments"
- Pages: 1
- Bytes: 95065
Notes from djb, last edited 20240726 21:43:58 UTC:
Comments on cost of MinRank attacks.
Looks like this was from Daniel Smith-Tone.
20170522 09:40:47
file 20240716/Re_ Reserve conference room, next week (May 22 ..._Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 12:59:10 UTC
- Email date: 20170522 09:40:47
- Email from: "Chen, Lily (Fed)"
- Email to: "Mowatt, Deborah A. (Fed); Souppaya, Murugiah P. (Fed)"
- Email cc: "(b) (6) McBride, Tim (Fed)"
- Email subject: "Re: Reserve conference room, next week (May 22 to 26)"
- Pages: 1
- Bytes: 103939
Notes from djb, last edited 20240726 21:43:58 UTC:
Discussion of a NIST meeting with Jintai Ding.
#weveshownallourwork
20170523 06:14:35
file 20240716/Re_ New Version of Paper(1)_2.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240711 09:20:40 UTC
- PDF date: 20240711 11:20:39 -0400
- PDF creation date: 20230228 14:26:07 -0500
- Email date: 20170523 06:14:35
- PDF attachments: "graphicalcrypto3.pdf"
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: New Version of Paper"
- Pages: 1
- Bytes: 752612
Notes from djb, last edited 20240726 21:43:58 UTC:
Quantum cryptography.
20170523 11:37:50 -0400
file 20240716/Re_ New Version of Paper(1)_2.pdf-attachment-graphicalcrypto3.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240711 09:20:40 UTC
- PDF date: 20170523 11:37:50 -0400
- PDF creation date: 20170523 11:37:50 -0400
- Pages: 15
- Bytes: 663268
Notes from djb, last edited 20240726 21:43:58 UTC:
Quantum cryptography.
20170523 11:42:06
file 20240617/RE_ annual report welcome letter_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:41:16 UTC
- PDF date: 20240610 14:41:14 -0400
- PDF creation date: 20230228 14:04:52 -0500
- Email date: 20170523 11:42:06
- Email from: "Chen, Lily (Fed)"
- Email to: "Dodson, Donna F (Fed); Regenscheid, Andrew R. (Fed)"
- Email cc: "Scholl, Matthew A. (Fed)"
- Email subject: "RE: annual report welcome letter"
- Pages: 2
- Bytes: 157547
Notes from djb, last edited 20240624 05:27:25 UTC:
"It reads good."
20170524 10:36:46
file 20240617/Re_ Reminder_ Crypto Reading Club - May 24 - @N..._1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240612 12:57:52 UTC
- PDF date: 20240612 14:57:50 -0400
- PDF creation date: 20230302 10:30:41 -0500
- Email date: 20170524 10:36:46
- Email from: "Chen, Lily (Fed)"
- Email to: "Mehta, Ketan L. (Fed); Sonmez Turan, Meltem (Fed)"
- Email subject: "Re: Reminder: Crypto Reading Club - May 24 - @NCCoE"
- Pages: 1
- Bytes: 150365
Notes from djb, last edited 20240624 05:27:25 UTC:
Logistics regarding talk by Jintai Ding.
20170525 09:40:41
file 20240617/Re_ New Version of Paper_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 09:01:52 UTC
- PDF date: 20240611 11:01:50 -0400
- PDF creation date: 20230228 14:26:07 -0500
- Email date: 20170525 09:40:41
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: New Version of Paper"
- Pages: 2
- Bytes: 138042
Notes from djb, last edited 20240624 05:27:25 UTC:
Discussing internal paper reviewing.
20170530 03:27:54
file 20240617/Re_ Let us meet(1)_2.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:52:30 UTC
- PDF date: 20240611 10:52:28 -0400
- PDF creation date: 20230228 14:24:15 -0500
- Email date: 20170530 03:27:54
- PDF attachments: "Bell.pdf"
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Peralta, Rene C. (Fed); beacon"
- Email cc: "Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Let us meet"
- Pages: 3
- Bytes: 216372
Notes from djb, last edited 20240624 05:27:25 UTC:
"Here’s a short description of the work that we’re thinking of doing for the randomness beacon. (See
attachment.) Basically, Paulina and I are considering doing some local quantum crypto experiments,
and a nice byproduct might be an initial quantum source to plug into the randomness beacon."
"This is just preliminary – we haven’t had the chance yet to talk to the other quantum randomness
folks in Gaithersburg, like Josh and Michael. In any case, comments are welcome."
20170530 05:20:36
file 20240617/Re_ Let us meet_1.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:52:16 UTC
- PDF date: 20240611 10:52:15 -0400
- PDF creation date: 20230228 14:24:14 -0500
- Email date: 20170530 05:20:36
- Email from: "Peralta, Rene (Fed)"
- Email to: "Miller, Carl A. (Fed); beacon"
- Email cc: "Regenscheid, Andrew R. (Fed)"
- Email subject: "Re: Let us meet"
- Pages: 3
- Bytes: 137849
Notes from djb, last edited 20240624 05:27:25 UTC:
"Looks like really good stuff to me."
20170530 15:26:46 -0400
file 20240617/Re_ Let us meet(1)_2.pdf-attachment-Bell.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240611 08:52:30 UTC
- PDF date: 20170530 15:26:46 -0400
- PDF creation date: 20170530 15:26:46 -0400
- Pages: 2
- Bytes: 62098
20170531 08:37:47
file 20240716/Hash-based Signatures_Redacted.pdf:
- FOIA delivery date: 20240716
- FOIA file date: 20240715 11:45:32 UTC
- Email date: 20170531 08:37:47
- Email from: "Regenscheid, Andrew (Fed)"
- Email to: "Davidson, Michael S. (Fed); (b) (6)"
- Email subject: "Hash-based Signatures"
- Pages: 1
- Bytes: 80210
Notes from djb, last edited 20240726 21:43:58 UTC:
Sending a few links regarding hash-based signatures.
#scramble
Who else was this sent to?
#needmorerecords
20170605 10:12:21
file 20240412/FAQ Update - FW_ [Pqc-forum] Clarifications Reg..._1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240410 11:47:18 UTC
- PDF date: 20240410 13:47:17 -0400
- PDF creation date: 20230302 14:58:50 -0500
- Email date: 20170605 10:12:21
- Email from: "Kerman, Sara J. (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "FAQ Update - FW: [Pqc-forum] Clarifications Regarding the Use of Third-Party Open Source Libraries"
- Pages: 2
- Bytes: 121788
Notes from djb, last edited 20240420 20:41:56 UTC:
Discussing web-page updates.
20170606 02:22:50
file 20240827/Post Quantum blockchain.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240724 09:08:20 UTC
- PDF date: 20240724 11:08:19 -0400
- PDF creation date: 20230302 15:23:42 -0500
- Email date: 20170606 02:22:50
- PDF attachments: "Quantum Resistant Blockchain.docx"
- Email from: "Davidson, Michael S. (Fed)"
- Email to: "Regenscheid, Andrew R. (Fed)"
- Email subject: "Post Quantum blockchain"
- Pages: 1
- Bytes: 100838
Notes from djb, last edited 20241002 20:43:30 UTC:
"Here are my notes on quantum resistant cryptocurrency tech."
20170606 18:21:00 UTC
file 20240827/Post Quantum blockchain.pdf-attachment-Quantum Resistant Blockchain.docx:
- FOIA delivery date: 20240827
- FOIA file date: 20240724 09:08:20 UTC
- XML date: 20170606 18:21:00 UTC
- XML creation date: 20170602 18:27:00 UTC
- XML creator: "Davidson, Michael S. (Fed)"
- XML last-modified-by: "Davidson, Michael S. (Fed)"
- Pages: 3
- Bytes: 15563
Notes from djb, last edited 20241002 20:43:30 UTC:
"Quantum Resistant Blockchain"
20170607 03:52:39
file 20240516/RE_ CSRC - PQC FAQs_1.pdf:
- FOIA delivery date: 20240516
- FOIA file date: 20240516 08:04:50 UTC
- PDF date: 20240516 10:04:47 -0400
- PDF creation date: 20230302 14:54:25 -0500
- Email date: 20170607 03:52:39
- Email from: "Foti, James (Fed)"
- Email to: "Kerman, Sara J. (Fed); Nickel, Christian G. (Fed)"
- Email subject: "RE: CSRC - PQC FAQs"
- Pages: 3
- Bytes: 165177
Notes from djb, last edited 20240520 20:11:25 UTC:
Discussing editing procedures for web pages.
20170608 11:36:39
file 20240507/Re_ Published paper(1)_2.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240506 09:57:16 UTC
- PDF date: 20240506 11:57:15 -0400
- PDF creation date: 20230302 15:27:31 -0500
- Email date: 20170608 11:36:39
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: Published paper"
- Pages: 2
- Bytes: 136565
Notes from djb, last edited 20240511 21:52:47 UTC:
Discussing forms for publication of a paper.
20170608 11:38:04
file 20240507/Re_ Published paper_1.pdf:
- FOIA delivery date: 20240507
- FOIA file date: 20240506 09:57:02 UTC
- PDF date: 20240506 11:57:01 -0400
- PDF creation date: 20230302 15:27:31 -0500
- Email date: 20170608 11:38:04
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Kerman, Sara J. (Fed)"
- Email subject: "Re: Published paper"
- Pages: 2
- Bytes: 137076
Notes from djb, last edited 20240511 21:52:47 UTC:
Discussing forms for publication of a paper.
20170609 04:14:00
file 20240726/I found a case where, minrank is cheaper than d..._Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:34:10 UTC
- Email date: 20170609 04:14:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "(b) (6)"
- Email subject: "I found a case where, minrank is cheaper than direct attack, but the system is not superdetermined"
- Pages: 1
- Bytes: 75919
Notes from djb, last edited 20240801 23:15:11 UTC:
Forwarding a few numbers to somebody.
20170612 08:40:50
file 20240516/Re_ pqc surveys_1.pdf:
- FOIA delivery date: 20240516
- FOIA file date: 20240516 09:50:06 UTC
- PDF date: 20240516 11:50:05 -0400
- PDF creation date: 20230302 15:25:35 -0500
- Email date: 20170612 08:40:50
- Email from: "Dang, Quynh (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "Re: pqc surveys"
- Pages: 1
- Bytes: 132056
Notes from djb, last edited 20240520 20:11:25 UTC:
"Thank you!"
#scramble
20170612 09:48:00
file 20240726/RE_ I found a case where, minrank is cheaper th..._Redacted.pdf:
- FOIA delivery date: 20240726
- FOIA file date: 20240723 12:47:58 UTC
- Email date: 20170612 09:48:00
- Email from: "Perlner, Ray (Fed)"
- Email to: "(b) (6)"
- Email subject: "RE: I found a case where, minrank is cheaper than direct attack, but the system is not superdetermined"
- Pages: 1
- Bytes: 158420
Notes from djb, last edited 20240801 23:15:11 UTC:
"Actually, I’m a moron. The example I gave doesn’t work, since I grossly overestimated the complexity
of direct attack in the case I gave. I forgot you could guess values for the variables until the system
for direct solving is fully determined. I think I can now write up a justification of why direct attack is
pretty much always cheaper than minrank for overdetermined, but not superdetermined systems."
20170614 02:32:00
file 20240827/RE_ NRC Postdoc Program Instructions..pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240724 08:39:26 UTC
- PDF date: 20240724 10:39:24 -0400
- PDF creation date: 20230302 15:21:33 -0500
- Email date: 20170614 02:32:00
- Email from: "Chen, Lily (Fed)"
- Email to: "Moody, Dustin (Fed)"
- Email subject: "RE: NRC Postdoc Program Instructions."
- Pages: 4
- Bytes: 202136
Notes from djb, last edited 20241002 20:43:30 UTC:
"I think it doesn’t matter whether your research is on ECC or PQC, you can write research opportunities on
either or both of them. You can have more than one research opportunities."
Down-thread from Moody:
"I can apply to be an advisor – though in reading through all the requirements it seems to me that I
should be advising somebody in ECC, not PQC. They mention having published for 5 years in your field in
peer reviewed journals, which I have done for ECC, but I don’t quite feel I have done that in PQC. I feel
confident that I would be able to help mentor somebody in PQC, just that I don’t know that I have the
qualifications they discuss. Anyway, I thought I’d mention that to you."
20170614 11:54:03 -0400
file 20240617/WERB review(1)_4.pdf-attachment-Bell.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:21:18 UTC
- PDF date: 20170614 11:54:03 -0400
- PDF creation date: 20170614 11:54:03 -0400
- Pages: 6
- Bytes: 336844
20170614 11:54:03 -0400
file 20240617/WERB review_3.pdf-attachment-Bell.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:21:04 UTC
- PDF date: 20170614 11:54:03 -0400
- PDF creation date: 20170614 11:54:03 -0400
- Pages: 6
- Bytes: 336844
20170614 12:44:14
file 20240827/Re_ Idea for speeding up direct attack and HFEv..._Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:02:52 UTC
- Email date: 20170614 12:44:14
- Email from: "(b) (6)"
- Email to: "Perlner, Ray A. (Fed); Petzoldt, Albrecht R. (IntlAssoc)"
- Email subject: "Re: Idea for speeding up direct attack and HFEv- attack."
- Pages: 2
- Bytes: 104038
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing MQ attacks.
20170615 10:41:02
file 20240617/WERB review(1)_4.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:21:18 UTC
- PDF date: 20240610 14:21:17 -0400
- PDF creation date: 20230302 15:46:31 -0500
- Email date: 20170615 10:41:02
- PDF attachments: "Bell.pdf"
- Email from: "Miller, Carl A. (Fed)"
- Email to: "Liu, Yi-Kai (Fed)"
- Email subject: "WERB review"
- Pages: 1
- Bytes: 443083
Notes from djb, last edited 20240624 05:27:25 UTC:
Discussing internal paper reviewing.
20170616 03:03:48
file 20240412/checking in_1.pdf:
- FOIA delivery date: 20240412
- FOIA file date: 20240411 08:43:28 UTC
- PDF date: 20240411 10:43:27 -0400
- PDF creation date: 20230302 14:53:44 -0500
- Email date: 20170616 03:03:48
- Email from: "Moody, Dustin (Fed)"
- Email to: "Bassham, Lawrence E. (Fed)"
- Email subject: "checking in"
- Pages: 1
- Bytes: 83963
Notes from djb, last edited 20240420 20:41:56 UTC:
"Did John send you what you needed to send to Dan?"
20170616 05:00:36
file 20240827/Re_ NRC postdoc_Redacted.pdf:
- FOIA delivery date: 20240827
- FOIA file date: 20240815 10:49:32 UTC
- Email date: 20170616 05:00:36
- Email from: "Liu, Yi-Kai (Fed)"
- Email to: "(b) (6)"
- Email subject: "Re: NRC postdoc"
- Pages: 2
- Bytes: 107557
Notes from djb, last edited 20241002 20:43:30 UTC:
Discussing jobs available at NIST.
20170616 10:41:46
file 20240617/WERB review_3.pdf:
- FOIA delivery date: 20240617
- FOIA file date: 20240610 12:21:04 UTC
- PDF date: 20240610 14:21:02 -0400
- PDF creation date: 20230302 15:46:30 -0500
<