胡水松 wrote in <CAABEyP8JB3tAmPZD2sObod=qrghx1qp3f94_msgsqp42t_j...@mail.gmail.com>: |We have prepared an individual Internet-Draft, "DomainKeys Identified Mail |(DKIM) Signatures with SM2 and SM3 Cryptographic Algorithms" ( |draft-xie-dkim-sm2-sm3-00 |<https://datatracker.ietf.org/doc/draft-xie-dkim-sm2-sm3/>). | |The draft proposes adding SM2-SM3 as an optional DKIM signing algorithm, |including the associated signature and public key encodings, and updates |RFC 6376. ... |We would appreciate any feedback on the draft, or suggestions for a more
As an outsider... I am neither a mathematician nor a cryptographer. I know the algorithm(s) entered OpenSSL. I myself am fine with having more non-PQ DKIM algorithms, the US government which i as a german blindly trust gives 2035-12-31 as a "hard post-quantum deadline for all remaining systems", and 2031-12-31 as "digital signature cutoff for high-impact federal systems". Personally i found it incredibly hard to read. It was a bit like me (not a christian) reading book Jesaja of the Bible; well i am not alone, Jesus Christus himself said something like ~~"why did you struggle reading Jesaja", but not in this ~"i am a master and to me it just came" tone, but rather saying ~"i know where you come from and feel with you", hmhm, more or less. Well i once said if it were me i would compress Jesaja to a few sentences, one of the most important ones would most likely be ~"god is someone who comes from very far". In the German language one (can) read(s) Jesaja as Je-sa-ja, and if we go Je-sah-ja (sounds the same) we can translate this as ~"did he ever saw yes", or even ~"will 'Yes' ever be seen". So it is. It also reminded me of the official technical specs of some electronic German passport access, which starts (iirc) for pages and pages with very complicated maths, .. until i realized that i *thought* what they describe is the Diffie-Hellman key exchange. You know. I would write "it starts with the diffie-hellman key exchange" instead of writing many pages of very complicated technical specs. I know you can, yet i cannot. The thing i would be afraid of is something like the German Enigma problem in WWII, where at least certain (most) used it insufficiently. Yet it was expected to be so complicated that noone could penetrate it. I liked the OpenSSL command line utility (!!) based example. --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
