Informal Minutes of the IEEE P1363 Teleconference.
25 April 1997, 10 am PDT.

In attendance: Lily Chen, David Jablon, Burt Kaliski, Alfred Menezes,
Leo Reyzin, Jerry Solinas, Michael Wiener, Yiqun Lisa Yin.

Issues discussed:

1. June meeting.  Leo said that Mike Markowitz had asked him to try
to finalize the dates for the June meeting in Chicago.  Michael
Wiener and David both said that they would not be able to attend
on June 11-13, but that it would be hard for them to attend any time
in June, anyway.  Lisa was not going to attend the meeting.  Everyone
else said they could attend.  The meeting dates were set for June
11-13.  Leo said he and Mike Markowitz will put together an
announcement soon.

2.  Leo reported that IEEE Microprocessor Standards Committee had
approved our Project Authorization Request for the addendum, and was
going to present it before the IEEE standards board.  He also
reported that he had sent a patent solicitation letter to Dave Maher
at AT&T but had gotten no response so far.

3. Burt outlined the objectives for the next meeting, which were
mainly to present the standard to the Eurocrypt audience and to
solicit more input.  We discussed logistical details of
transportation and accommodations during the meeting; everyone who
had tried to make arrangements had been able to do so.

4.  We discussed a new version of the DL section which Leo had
distributed to the teleconference participants earlier.  David
suggested putting in a table for the unified model Diffie-Hellman
that would better explain the properties of the derived key as a
function of the properties of the input keys.  He also suggested
putting in a note on the importance of preventing small subgroup
confinement of the resulting key with a pointer to some "security
considerations" section.  We discussed the new notation used in the
section; Michael pointed out that it was inconsistent with the more
traditional notation.  Jerry agreed, but added that this seemed to be
the best way to unify the notion for DL over prime-order fields,
fields of characteristic two, and elliptic curve groups.  After
some consideration, the participants seemed to agree with the new
notation.

5. We agreed to hold the next teleconference on Friday, May 23, at
10 am PDT.  Burt will report on the May meeting for those who will
not have been there.

We adjourned at about 10:30 am PDT.