search

tireddy2 / ikev2-pqc-auth

0 stars 0 forks source link

Another mechanism for signaling support - the TLS approach #3

Closed sfluhrer closed 6 months ago

sfluhrer commented 6 months ago

TLS does this by including in the client hello a list that specifies what signature algorithms it understands (and TLS 1.3 includes which signature algorithms it can handle within the certificate) - see section 4.2.3 of RFC 8446.

One alternative would be to include a notify that specifies analogous information in the IKE_INIT messages...

tireddy2 commented 6 months ago

https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-auth-announce/ defines a mechanism to indicate the list of supported authentication methods (SUPPORTED_AUTH_METHODS notification in the IKE_SA_INIT), its usage to include PQC digital signature schemes is discussed in our draft https://github.com/tireddy2/ikev2-pqc-auth/blob/main/draft-reddy-ipsecme-ikev2-pqc-auth.md#mechanisms-for-signaling-supported-key-pair-types