<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
When EdDSA came up the last time, I remember an opinion was that it would be better to save the work to post quantum algorithms. Even though Ed25519 is a nice algorithm, I kind of agree with that. Moving to PQC will be more work that needs to be done, while
Ed25519 seems like a nice-to-have for TLS server certificates? Does eDelivery really need publicly trusted Web PKI certificates?<br>
<br>
</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Regards,</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
Tomas</div>
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature"><br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org> on behalf of Inigo Barreira via Servercert-wg <servercert-wg@cabforum.org><br>
<b>Sent:</b> Monday, June 10, 2024 4:21 PM<br>
<b>To:</b> Ben Wilson <bwilson@mozilla.com>; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org>; Q Misell <q@as207960.net><br>
<b>Subject:</b> Re: [Servercert-wg] Ed25519 certificates</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Aptos}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
span.x_EstiloCorreo18
{font-family:"Aptos",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:70.85pt 3.0cm 70.85pt 3.0cm}
div.x_WordSection1
{}
-->
</style>
<div lang="ES" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="x_WordSection1">
<p class="x_MsoNormal"><span lang="EN-US" style="font-size:11.0pt">FYI. TBD next week at the ETSI ESI meeting.</span></p>
<p class="x_MsoNormal"><span lang="EN-US" style="font-size:11.0pt"> </span></p>
<p class="x_MsoNormal"><span lang="EN-US">Title: Proposed CR#7 on TS 119 312: Introduce EdDSA incl. its variants (Ed448 and Ed25519)</span></p>
<p class="x_MsoNormal"><span lang="EN-US" style="font-size:11.0pt"> </span></p>
<p class="x_MsoNormal"><span lang="EN-US">Source: European Commission <br>
<br>
Abstract: ETSI TS 119 312 provides guidance on selection of cryptographic suites with particular emphasis on interoperability. The Edwards-Curve Digital Signature Algorithm (EdDSA) is a state-of-the-art algorithm for electronic signatures. It is recommended
by experts in cryptography and information security and adopted in many Internet security applications and specifications. Unfortunately, the currently published version of TS 119 312 does not reference EdDSA. This change request proposes to add EdDSA as a
recommended digital signature algorithm to TS 119 312. The European Commission’s eDelivery Building Block is updating its eDelivery AS4 guidelines and would like to use EdDSA as digital signature algorithm in the updated version. Addition of EdDSA to TS 119
312 would contribute to the continued broad adoption of eDelivery AS4 as an interoperable, open standards-based eDelivery solution based on state-of-the-art security.</span><span lang="EN-US" style="font-size:11.0pt"></span></p>
<p class="x_MsoNormal"><span lang="EN-US" style="font-size:11.0pt"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0cm 0cm 0cm">
<p class="x_MsoNormal"><b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif">De:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif"> Servercert-wg <servercert-wg-bounces@cabforum.org>
<b>En nombre de </b>Ben Wilson via Servercert-wg<br>
<b>Enviado el:</b> sábado, 8 de junio de 2024 19:28<br>
<b>Para:</b> Q Misell <q@as207960.net>; CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org><br>
<b>Asunto:</b> Re: [Servercert-wg] Ed25519 certificates</span></p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<div style="border:solid black 1.0pt; padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="x_MsoNormal" style="line-height:12.0pt; background:#FAFA03"><span lang="EN-US" style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:black">CAUTION: This email originated from outside of the organization. Do not click links or open attachments
unless you recognize the sender and know the content is safe.</span></p>
</div>
<p class="x_MsoNormal"><span lang="EN-US"> </span></p>
<div>
<div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">Hi Q,</span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">I'm checking with the crypto team here at Mozilla and will let you know from our perspective.</span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">Thanks,</span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">Ben</span></p>
</div>
</div>
<p class="x_MsoNormal"><span lang="EN-US"> </span></p>
<div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">On Sat, Jun 8, 2024 at 4:39</span><span lang="EN-US" style="font-family:"Arial",sans-serif"> </span><span lang="EN-US">AM Q Misell via Servercert-wg <</span><a href="mailto:servercert-wg@cabforum.org"><span lang="EN-US">servercert-wg@cabforum.org</span></a><span lang="EN-US">>
wrote:</span></p>
</div>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0cm 0cm 0cm 6.0pt; margin-left:4.8pt; margin-top:5.0pt; margin-right:0cm; margin-bottom:5.0pt">
<div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">Hi all,</span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">At the Tor meeting a few weeks ago I had some discussions with people asking why Ed25519 certificates are not allowed under the BR (§ 6.1.5). As far as I can tell there isn't much of a reason not to allow Ed25519 certs
(if a CA wishes to support them ofc) and there were a few scenarios presented to me where Ed25519 certs would be useful in the context of Tor, which already makes heavy usage of Ed25519 keys.</span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US">Would there be motivation to change the rules to allow Ed25519 certs, or is there some reason I'm missing as to why they're not allowed?</span></p>
</div>
<div>
<p class="x_MsoNormal"><span lang="EN-US"> </span></p>
</div>
<div>
<p class="x_MsoNormal">Thanks,</p>
</div>
<div>
<p class="x_MsoNormal">Q Misell</p>
<div class="x_MsoNormal" align="center" style="text-align:center">
<hr size="1" width="100%" align="center">
</div>
<p><span lang="EN-US" style="font-size:9.0pt; color:#6C757D">Any statements contained in this email are personal to the author and are not necessarily the statements of the company unless specifically stated. AS207960 Cyfyngedig, having a registered office
at 13 Pen-y-lan Terrace, Caerdydd, Cymru, CF23 9EU, trading as Glauca Digital, is a company registered in Wales under №
</span><a href="https://e.as207960.net/w4bdyj/xa9BLe6P" target="_blank"><span lang="EN-US" style="font-size:9.0pt">12417574</span></a><span lang="EN-US" style="font-size:9.0pt; color:#6C757D">, LEI 875500FXNCJPAPF3PD10.
</span><span style="font-size:9.0pt; color:#6C757D">ICO register №: </span><a href="https://e.as207960.net/w4bdyj/h2BMZREa" target="_blank"><span style="font-size:9.0pt">ZA782876</span></a><span style="font-size:9.0pt; color:#6C757D">. UK VAT №: GB378323867.
EU VAT №: EU372013983. Turkish VAT №: 0861333524. </span><span lang="EN-US" style="font-size:9.0pt; color:#6C757D">South Korean VAT №: 522-80-03080. AS207960 Ewrop OÜ, having a registered office at Lääne-Viru maakond, Tapa vald, Porkuni küla, Lossi tn 1, 46001,
trading as Glauca Digital, is a company registered in Estonia under № 16755226. Estonian VAT №: EE102625532. Glauca Digital and the Glauca logo are registered trademarks in the UK, under № UK00003718474 and № UK00003718468, respectively.
</span></p>
</div>
</div>
<p style="margin:0cm; line-height:0%"><img border="0" width="1" height="1" id="x__x0000_i1026" style="width:.0138in; height:.0138in" src="https://e.as207960.net/img/w4bdyj/kulEk2VowWMS"></p>
<p class="x_MsoNormal"><span lang="EN-US">_______________________________________________<br>
Servercert-wg mailing list<br>
</span><a href="mailto:Servercert-wg@cabforum.org" target="_blank"><span lang="EN-US">Servercert-wg@cabforum.org</span></a><span lang="EN-US"><br>
</span><a href="https://lists.cabforum.org/mailman/listinfo/servercert-wg" target="_blank"><span lang="EN-US">https://lists.cabforum.org/mailman/listinfo/servercert-wg</span></a><span lang="EN-US"></span></p>
</blockquote>
</div>
</div>
</div>
</div>
</body>
</html>