[CFRG] Re: [irsg] Re: Stephen Farrell's Not Ready on draft-irtf-cfrg-rsa-guidance-08: (with COMMENT)

[Alvaro Retana <[e-mail]>]

 Hi!

FWIW, these changes work for me too.

I’m clearing my Not Ready position.

Thanks!

Alvaro.

On June 26, 2026 at 10:55:04 AM, Stephen ([e-mail])
wrote:


Hiya,

On 26/06/2026 15:32, Alicja Kario wrote:
> Sorry, sent too quickly...
>
> On Friday, 26 June 2026 16:29:50 CEST, Alicja Kario wrote:
>> On Tuesday, 16 June 2026 00:36:40 CEST, Stephen Farrell via
>> Datatracker wrote:
>>> Stephen Farrell has entered the following ballot position for
>>> draft-irtf-cfrg-rsa-guidance-08: Not Ready
>>>
>>> When responding, please keep the subject line intact and reply to all
>>> email addresses included in the To and CC lines. (Feel free to cut this
>>> introductory paragraph, however.) ...
>>
>> Agreed, I have prepared a PR that softens the language and removes
formal
>> "updates": https://github.com/tomato42/marvin-ietf/pull/10

LGTM.

Cheers,
S.

>>
>>> The comments below can be taken or ignored, unlike the above, they're
>>> totally
>>> non-blocking:
>>>
>>> - I wondered if any RSA code implementer had reviewed the text -
>>> could be good
>>> to see what such a person (who is the prime target audience here)
>>> thought. -
>>> Sections 6.4 and 6.5 seem a bit unclear to me - I've not re-read
>>> [kocker96] so
>>> forget if it explains exactly this method of blinding, if not, then
>>> maybe more
>>> refs are needed?
>>
>> Yes, [kocher96] does that in Section 10. But doesn't go into
>> significantly
>> more detail.
>>
>> I had few colleagues look at the document and they did say it's
>> understandable
>
> for example, the NSS implementation of the implicit rejection was
> developed completely independently, with just access to the earlier
> description
> of the algorithm and access to the test vectors.
>
>>> - I'd keep the reference to the TLS fuzzer github repo (unless
>>> it's known that that will change soon).
>>
>> The link to the specific line will definitely change in the future,
>> I've changed it to point to
>
> a specific commit.
>