--- title: "New Standards" date: 2021-05-06T00:11:20+02:00 draft: false type: docs weight: 6 --- - NIST Report on Round 3 Finalists: - [Status report on the second round of the NIST post-quantum cryptography standardization process](https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST.IR.8309.pdf): Third round finalists for public-key encryption / key-establishment algorithms and digital signatures [[MAA+20]](../../refs#maa20) - Review of NIST Candidates: - [Standardisierung von post-quanten-kryptografie und empfehlungen des bsi](https://www.bsi.bund.de/DE/Service-Navi/Veranstaltungen/Deutscher-IT-Sicherheitskongress-30-Jahre-BSI/deutscher-it-sicherheitskongress-30-jahre-bsi_node.html): Overview of the current state of standardization of post Quantum cryptography with respect to the BSI recommendations. [[HKW21]](../../refs#hkw21) - Open Quantum Project: - [Post-quantum Key Exchange for the Internet and the Open Quantum Safe Project](https://eprint.iacr.org/2016/1017.pdf): Open Quantum Project, libqos library: exemplary cryptographic applications like OpenSSL. Comparing NIST Round 2 PQC candidate implementations using OpenSSL [[SM16]](../../refs#sm16) - TLS PQC Drafts: - [Hybrid key exchange in TLS 1.3](https://datatracker.ietf.org/doc/html/draft-ietf-tls-hybrid-design): Construction for hybrid key exchange in TLS protocol version 1.3 [[SFG20]](../../refs#sfg20) - [Quantum-Safe Hybrid (QSH) Key Exchange for Transport Layer Security (TLS) version 1.3](https://datatracker.ietf.org/doc/html/draft-whyte-qsh-tls13-06): Mechanism for providing modular design for quantum-safe cryptography in the handshake for TLS protocol version 1.3 [[Wh+17]](../../refs#wh17) - [Hybrid key exchange in TLS 1.2](https://datatracker.ietf.org/doc/html/draft-campagna-tls-bike-sike-hybrid-06): Hybrid key exchange schemes for TLS protocol version 1.2 [[CaCr21]](../../refs#cacr21) - [Quantum-Safe Hybrid (QSH) Ciphersuite for Transport Layer Security (TLS) version 1.2](https://datatracker.ietf.org/doc/html/draft-whyte-qsh-tls12-02): New cipher suite providing modular design for quantum-safe cryptography in the handshake for TLS protocol version 1.2 [[SWZ16]](../../refs#swz16) - [Hybrid ECDHE-SIDH Key Exchange for TLS](https://datatracker.ietf.org/doc/html/draft-kiefer-tls-ecdhe-sidh-00): TLS key exchange combining Supersingular elliptic curve isogenie diffie-hellman (SIDH), with elliptic curve Diffie-Hellman (ECDHE) key exchange [[KiKw18]](../../refs#kikw18) - [A Transport Layer Security (TLS) Extension for Establishing an Additional Shared Secret](https://datatracker.ietf.org/doc/html/draft-schanck-tls-additional-keyshare-00): TLS extension to establish an additional shared secret using a second key exchange algorithm [[ScSt17]](../../refs#scst17) - SSH PQC Drafts: - [Post-quantum public key algorithms for the Secure Shell (SSH) protocol](https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-pq-ssh-00) Hybrid key exchange in the SSH Transport Layer Protocol using ECDH and PQC signature schemes [[Kam+20]](../../refs#kam20) - IKEv2 PQC Drafts: - [Mixing Preshared Keys in IKEv2 for Post-quantum Security](https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-qr-ikev2-11): Extension of IKEv2 to allow it to be resistant to a quantum computer by using pre-shared keys [[FMK19]](../../refs#fmk19) - DNSSEC PQC Drafts: - [Retrofitting post-quantum cryptography in internet protocols: a case study of DNSSEC](https://dl.acm.org/doi/10.1145/3431832.3431838): Evaluate three PQC-Algorithms that are suitable for DNSSEC within certain constraints [[MdJvH+20]](../../refs#mdjvh20) - Decentralized Cert. Management: - [Next-generation web public-key infrastructure technologies](https://eprints.qut.edu.au/128643): New decentralized approach to certificate management based on generic blockchains (DPKIT), compatible with existing PKIs. [[HM19]](../../refs#hm19) - Draft for Composite Keys and Signatures: - [Composite Keys and Signatures For Use In Internet PKI](https://tools.ietf.org/id/draft-ounsworth-pq-composite-sigs-01.html) This document defines the structures CompositePublicKey, CompositeSignatureValue, and CompositeParams, which are sequences of the respective structure for each component algorithm. [[OP20]](../../refs#op20)