[CFRG] I-D Action: draft-irtf-cfrg-det-sigs-with-noise-03.txt

[[e-mail]]

Internet-Draft draft-irtf-cfrg-det-sigs-with-noise-03.txt is now available. It
is a work item of the Crypto Forum (CFRG) RG of the IRTF.

   Title:   Hedged ECDSA and EdDSA Signatures
   Authors: John Preuß Mattsson
            Erik Thormarker
            Sini Ruohomaa
   Name:    draft-irtf-cfrg-det-sigs-with-noise-03.txt
   Pages:   17
   Dates:   2024-03-16

Abstract:

   Deterministic elliptic-curve signatures such as deterministic ECDSA
   and EdDSA have gained popularity over randomized ECDSA as their
   security does not depend on a source of high-quality randomness.
   Recent research, however, has found that implementations of these
   signature algorithms may be vulnerable to certain side-channel and
   fault injection attacks due to their deterministic nature.  One
   countermeasure to such attacks is hedged signatures where the
   calculation of the per-message secret number includes both fresh
   randomness and the message.  This document updates RFC 6979 and RFC
   8032 to recommend hedged constructions in deployments where side-
   channel attacks and fault injection attacks are a concern.  The
   updates are invisible to the validator of the signature and
   compatible with existing ECDSA and EdDSA validators.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-irtf-cfrg-det-sigs-with-noise/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-irtf-cfrg-det-sigs-with-noise-03.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-irtf-cfrg-det-sigs-with-noise-03

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts