IEEE P1363 Working Group for Public-Key Cryptography Standards

Friday, August 25, 2000
Flying A Studio meeting room, University Center, UCSB, Santa Barbara, CA/

SUMMARY

* Singer will be actively pursuing patent reassurances for P1363a, and will
  clarify whether or not we can ballot on a technique without patent
  assurance if we know that a patent exists.

* The 1363 standard was published TODAY!

* The working group agreed to be the working group for the 1363.1 document
  and the 1363.2 document.

* Reviewed the P1363a draft.
  - In the main body, there have been several changes related to EPOC and
    ESIGN, and some issues remain outstanding with both of these algorithms.
    The section on PV signatures has been progressed; the use of the
symmetric
    combination function needs further discussion. We need to clarify output
    formats for techniques that output more than one thing, and add to the
    rationale.
  - In the section on arbitrary finite fields, we have improved coverage of
    GF (p^m) for p odd, m > 1. We need to further consider subgroup attacks
    in this field, reductions between XTR and certain elliptic curves,
    and the Weil Descent attack of Hess, Gaudry and Smart.

* Discussed submission on DLKD-KK for Discrete Log Key Distribution; no
  decision taken.

* Discussed 1363b, to contain KCDSA, Public Key Validation, XTR, Beni
Arazi's
  inversionless scheme. Singer will mail the mailing list to try and get
  volunteers to seek out and compare techniques which aren't currently
  contained in the standard.