search

IETF-Hackathon / pqc-certificates

Post-quantum cryptography certificates
Other
44 stars 27 forks source link

IPD or R3 conformance #92

Open securitykernel opened 10 months ago

securitykernel commented 10 months ago

This is probably a newbie question, but I couldn't find any information by browsing the repo and meeting protocols. You switched the OID mappings to using the NIST IPDs and deprecated the single-algorithm OIDs in 2023. Does this mean conformance with the IPDs is required? Botan currently implements R3 versions and there are no immediate plans to update to IPDs.

securitykernel commented 10 months ago

I was about to get https://github.com/randombit/botan/pull/3589 from June '23 merged, and this one would introduce the old single algorithm OIDs, that's where the question came up.

danvangeest commented 9 months ago

There are implementations which support R3 and IPD in parallel. I see no reason to exclude any implementations which aren't implementing IPD right now, just don't expect all other implementations to continue to support R3. The goal of this work is improving implementations by testing interoperability. If testing R3 helps you I say go for it.