Informal Minutes of the IEEE P1363 Teleconference.
7 March 1997, 10 am PST.

In attendance: Lily Chen, David Jablon, Don Johnson, Burt Kaliski,
Mike Markowitz, Alfred Menezes, Leo Reyzin, Roger Schlafly, Jerry
Solinas, Yiqun Lisa Yin.

Issues discussed:

1. MQV key agreement protocol.  Roger expressed concern that the
protocol had been changing so much.  Alfred and Jerry pointed out
that the changes were just "implementation tweaks" and basic protocol
remained the same.  Alfred said that technical details took time to
iron out, and he expected that similar changes may well occur in
other schemes before the standard is published.  He argued that
non-constructive criticisms of minor points in a draft version of a
protocol would discourage constructive discussion.

2.  Alfred reported that we had agreed on point representation for
elliptic curve points, as discussed at the previous teleconference.

3.  Burt brought up the agenda for the March meeting.  He suggested
that the bulk of the time be spent reviewing and ratifying the
technical details of each primitive and scheme, pointing out that the
document itself was not ready for a line-by-line review.  Don pointed
out that it would be helpful to do a line-by-line review of at least
each primitive scheme while they were fresh in our minds.  The
participants seemed to agree with that.

4.  Burt suggested that in addition to reviewing the primitives and
schemes, we spend some time at the meeting reviewing the names of
techniques to make sure we properly handle the tricky issue of
attribution.  We should also spend time reviewing the structure of
the document and deciding how it should split into sections, where
notes go, etc.  He also wanted to devote some time to preparing the
project authorization request for the addendum to the standard.

5.  Roger brought up the STS key agreement protocol.  Alfred pointed
out that the protocol had been well-known since 1991 and had gone
through extensive peer review.  Many people seemed to think that STS
was a higher-level protocol, not appropriate for P1363 scheme; they
felt that including information on key confirmation into application
notes was an appropriate way to handle this.  Roger asked if we
should put STS into the addendum.  There was no clear opinion on
that, and we deferred it to the scope of the addendum to be
determined at the March meeting.

6.  David asked for the reasons behind the unified model of Diffie-
Hellman key agreement schemes, which Don explained.  David pointed
out that the "classic" Diffie-Hellman protocol was not very
prominent in the unified model and the reader would have a hard time
figuring out what such a complex scheme achieved in a particular
case.  Leo, David and Don agreed that this requires additional
editorial work to make sure the scheme is clearly defined and
understandable and decided to handle the issue off-line.

We adjourned at about 10:40 am PST.