I think draft-reddy-ipsecme-ikev2-pqc-auth is ready for WG adoption. Cheers, John
From: tirumal reddy <kond...@gmail.com> Date: Monday, 28 October 2024 at 06:47 To: ipsec@ietf.org <ipsec@ietf.org> Subject: [IPsec] Fwd: New Version Notification for draft-reddy-ipsecme-ikev2-pqc-auth-02.txt Hi all, The draft https://datatracker.ietf.org/doc/draft-reddy-ipsecme-ikev2-pqc-auth/ outlines how PQC digital signatures, ML-DSA and SLH-DSA, can be employed as authentication methods within the IKEv2 protocol. It has been updated to align with the final FIPS 204 and FIPS 205. Comments and suggestions are welcome. Cheers, -Tiru ---------- Forwarded message --------- From: <internet-dra...@ietf.org<mailto:internet-dra...@ietf.org>> Date: Mon, 21 Oct 2024 at 15:35 Subject: New Version Notification for draft-reddy-ipsecme-ikev2-pqc-auth-02.txt To: Tirumaleswar Reddy.K <kond...@gmail.com<mailto:kond...@gmail.com>>, Scott Fluhrer <sfluh...@cisco.com<mailto:sfluh...@cisco.com>>, Valery Smyslov <s...@elvis.ru<mailto:s...@elvis.ru>> A new version of Internet-Draft draft-reddy-ipsecme-ikev2-pqc-auth-02.txt has been successfully submitted by Tirumaleswar Reddy and posted to the IETF repository. Name: draft-reddy-ipsecme-ikev2-pqc-auth Revision: 02 Title: Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) using PQC Date: 2024-10-21 Group: Individual Submission Pages: 9 URL: https://www.ietf.org/archive/id/draft-reddy-ipsecme-ikev2-pqc-auth-02.txt Status: https://datatracker.ietf.org/doc/draft-reddy-ipsecme-ikev2-pqc-auth/ HTML: https://www.ietf.org/archive/id/draft-reddy-ipsecme-ikev2-pqc-auth-02.html HTMLized: https://datatracker.ietf.org/doc/html/draft-reddy-ipsecme-ikev2-pqc-auth Diff: https://author-tools.ietf.org/iddiff?url2=draft-reddy-ipsecme-ikev2-pqc-auth-02 Abstract: Signature-based authentication methods are utilized in IKEv2 [RFC7296]. The current version of the Internet Key Exchange Version 2 (IKEv2) protocol supports traditional digital signatures. This document outlines how post-quantum digital signatures, specifically Module-Lattice-Based Digital Signatures (ML-DSA) and Stateless Hash-Based Digital Signatures (SLH-DSA), can be employed as authentication methods within the IKEv2 protocol. It introduces ML- DSA and SLH-DSA capability to IKEv2 without necessitating any alterations to existing IKE operations. The IETF Secretariat
_______________________________________________ IPsec mailing list -- ipsec@ietf.org To unsubscribe send an email to ipsec-le...@ietf.org
