[Sls-sea-dls] FYI - Documents of interest and upcoming Spring meetings

Fri Mar 27 13:28:47 EDT 2026

Thank you Howie for sharing them.

BTW, Two PQC updates from Google:
   - Android 17 introduces two major post-quantum cryptographic (PQC) upgrades: upgrade Android Verified Boot (AVB) and migration of Remote Attestation https://security.googleblog.com/2026/03/post-quantum-cryptography-in-android.html

  *
plan to complete Post-Quantum Cryptography migration by 2029: https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/

Well, if mobile phones can do it, we (space) can also do it, right?

On same topic (but different perspective), the quantum computing debate keeps going...

An Oxford physicist  published a paper in PNAS claiming quantum computers face a hard ceiling at ~1,000 qubits - and that RSA-2048 is therefore permanently safe. And this seemed to spread quite fast . But then we have the counter arguments, that challenge this work. For details, if interested, here:  https://postquantum.com/quantum-research/the-1000-qubit-ceiling/

I won't be unfortunately at Puerto Rico (apologies, but I had already made other arrangements when dates were published). Hope to see you all in the next one (fall meeting)

Have all a great weekend

Antonios Atlasis
Head of Systems Security Section (TEC-SES)
End-to-End Systems Division
Systems Department
Directorate of Technology, Engineering and Quality
European Space Agency / European Space Research and Technology Centre (ESTEC)

________________________________
From: SEA-SEC <sea-sec-bounces at mailman.ccsds.org> on behalf of Howard.Weiss--- via SEA-SEC <sea-sec at mailman.ccsds.org>
Sent: Friday, March 27, 2026 6:06 PM
To: sea-sec at mailman.ccsds.org <sea-sec at mailman.ccsds.org>; Moury Gilles via SLS-SEA-DLS <sls-sea-dls at mailman.ccsds.org>
Subject: [Sea-sec] FYI - Documents of interest and upcoming Spring meetings

I came across a couple of interesting documents that I though I would share with all of you.

The first one is an Internet-Draft called “Adapting Constrained Devices for Post-Quantum Cryptography” (https://datatracker.ietf.org/doc/draft-ietf-pquip-pqc-hsm-constrained/) is a nice analysis of the use of PQC on constrained devices.  For them, constrained are small devices such as IoT, etc.  However, for us, a spacecraft fits into the ‘constrained device’ genre.  This document describes tradeoffs between storage and computation in constrained devices – e.g., save memory by storing only key seeds but then having to spend computational power to derive keys from the seeds effecting performance. I believe that some of the information contained in the Internet Draft would be useful to capture in the revised CCSDS Algorithms Green Book and the SDLS Green Book.

The second document (attached) was produced by the Australian Signals Directorate Cyber Security Centre (ASD ACSC) in collaboration with the Australian Space Agency, the Canadian Centre for Cyber Security, New Zealand National Cyber Centre, and the US National Security Agency, called “Securing Space: Cyber security for low earth orbit satellite communications.”  The document provides information on cybersecurity risks for low-earth orbit constellations. Nothing that we haven’t seen before, but its interesting reading and useful as a reference for our cybersecurity threat work.

As a note, the Spring CCSDS meetings will be held in about 2 months.  You should have received an email with the link to register.  Please register regardless of whether you will be attending in-person or if you are attending virtually. Also, please send along agenda items you would like to be discussed.

I hope to see you in Mayaguez Puerto Rico in May. Note: Puerto Rico is a US territory.

Regards

howie

----------

HOWARD WEISS, CISSP
howard.weiss at parsons.us<mailto:howard.weiss at parsons.com> (NOTE: new ‘.us’ email address)
443-494-9087

[cid:image001.png at 01DCBDEA.3A40BB70]

"NOTICE: This email message and all attachments transmitted with it may contain confidential information, including information that is privileged or protected by, and proprietary to, Parsons Corporation, and is intended solely for the use of the addressee for the specific purpose set forth in this communication. If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited, and you should delete this message and all copies and backups thereof. The recipient may not further distribute or use any of the information contained herein without the express written authorization of the sender. If you have received this message in error, or if you have any questions regarding the use of the proprietary information contained therein, please contact the sender of this message immediately, and the sender will provide you with further instructions."
This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised disclosure, use, retention or dissemination is prohibited. If you have received this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo at esa.int).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.ccsds.org/pipermail/sls-sea-dls/attachments/20260327/681296a5/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 9996 bytes
Desc: image001.png
URL: <http://mailman.ccsds.org/pipermail/sls-sea-dls/attachments/20260327/681296a5/attachment-0001.png>