1. The Pairing Based Cryptography and IBE Standards Effort

2. 2 Agenda for Today 9:00Introduction 9:15IEEE Standards Process (William Whyte, IEEE 1363) 10:00Pairing Based Cryptography (Hovav Shacham, Stanford University) 10:40IBE Algorithms (Michael Scott, Dublin City University) 11:20PAR Proposal and Discussion 12:00Other 1363 Working Group Proposals 12:30Lunch

3. 3 Why do we want an PBC/IBE Standard? Prevent incompatible implementations Don’t want to repeat S/MIME vs. PGP vs. other To get the design right and prevent mistakes Peer review on algorithms, implementations, parameter selection Establish credibility for PBC/IBE Everyone in this room knows that it is real, many people outside this room don’t

4. 4 Standards Philosophy Model after past IEEE cryptographic standards Standardize algorithms, but not protocols e.g. formats for IBE encrypted email would be part of a different standard Don’t block future standards based on PBC Allow for amendments that build on parts of this standard Separate IBE and PBC layers Limit scope to keep the task manageable Goal is to have a standard relatively soon Focus on one set of algorithms, split off other types of algorithms into separate standards

5. 5 Proposed Structure of an PBC/IBE Standard Pairing Based Crypto Layer and Algorithm Layers Identity-Based Encryption Definitions of algorithms Pairing Based Cryptography e.g. pairing, algorithms to compute pairings, curve types, curve parameters IBE based Protocols e.g. IBE email, key request etc. Future PBC based Algorithm II Future PBC based Algorithm I References back to PBC description

6. 6 Agenda for Today 9:00Introduction 9:15IEEE Standards Process (William Whyte, IEEE 1363) 10:00Pairing Based Cryptography (Hovav Shacham, Stanford University) 10:40IBE Algorithms (Michael Scott, Dublin City University) 11:20PAR Proposal and Discussion 12:00Other 1363 Working Group Proposals 12:30Lunch