IETF Logo Mail Archive

[CFRG] Mothma: Generic Instantiated PQ/T Hybrid Signatures

Simon Josefsson <simon@josefsson.org> Mon, 20 October 2025 17:03 UTC

Return-Path: <simon@josefsson.org>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 49701785A2AE for <cfrg@mail2.ietf.org>; Mon, 20 Oct 2025 10:03:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.401
X-Spam-Level:
X-Spam-Status: No, score=-4.401 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=josefsson.org header.b="CVmo+gfB"; dkim=pass (2736-bit key) header.d=josefsson.org header.b="lDdgO+Xh"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A5b7c3qGcZfY for <cfrg@mail2.ietf.org>; Mon, 20 Oct 2025 10:03:26 -0700 (PDT)
Received: from uggla.sjd.se (uggla.sjd.se [IPv6:2001:9b1:8633::107]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 57815785954F for <cfrg@ietf.org>; Mon, 20 Oct 2025 10:01:27 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:To:From:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=hStIZpNuRat2ibz1RmJZG3Frva/JOndGEWhRv54Zq88=; t=1760979679; x=1762189279; b=CVmo+gfBci0MRcTdg8Dc6kwm7Yi1zXaywvuOe2+wM8nGQaatuJzh1JyqnFLqi7bCe/LrUhoPQYT glbLDru9sBQ==;
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:To:From:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=hStIZpNuRat2ibz1RmJZG3Frva/JOndGEWhRv54Zq88=; t=1760979679; x=1762189279; b=lDdgO+Xh5PBC7t1fOjgUA2yfiwnuu04j1Rm2vgwjOdBUFXIlDyUAU1tupsVHvhFXXkzeyx/RahW 0WbQnTb+d55BRhbbKkYdbzSpsAc7+H+DaQaI+LTWG+QbSizBcVU8oL09R2qmYgs99SI5nHNyNJE/m HSXC8tQ5asN5uP63Q9Odm9G0W8XZTguic5IZVBy7KgEJk7c1Ek0tQaMNVnGGQCjmjGzlrPqAvIAD1 t3cuhAewXVJ7LYuLBQDuZMssREkce7FHZM2DSXqNO80ARVz+M+FZgkOnty6BZIQ0QedLag7VYCkcZ FDQN/ojwAokFGMCYIjSI3fZHd0gURGNgZK7X8hXNByfhueOVIAXwpBqguKuczXDvjJgt2fAU2vcY+ 2dSvcoiGFbWR8pdcC0bNukdFCXFP18kGoUdsVes6TtiTUHSkjSU/TPi8tArsjN6AKexzrRBRP;
Received: from [2001:9b1:41ac:ff00:2766:347f:b6a9:a22a] (port=57908 helo=kaka) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from <simon@josefsson.org>) id 1vAtG2-003lXu-63 for cfrg@ietf.org; Mon, 20 Oct 2025 17:01:18 +0000
From: Simon Josefsson <simon@josefsson.org>
To: cfrg@ietf.org
In-Reply-To: <176097932602.2136378.3971650701669185173@dt-datatracker-84f8f646b-tg6mn> (internet-drafts@ietf.org's message of "Mon, 20 Oct 2025 09:55:26 -0700")
References: <176097932602.2136378.3971650701669185173@dt-datatracker-84f8f646b-tg6mn>
OpenPGP: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt
X-Hashcash: 1:23:251020:internet-drafts@ietf.org::ik4KR9I3jTliHALL:Kz1S
X-Hashcash: 1:23:251020:cfrg@ietf.org::XKe5u+3lpSXqWLSB:Nqdx
Date: Mon, 20 Oct 2025 19:00:34 +0200
Message-ID: <87jz0pbj9p.fsf@josefsson.org>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Message-ID-Hash: 7VXTWZZEQMQLC6BVWOX5VJMFFSU6CXP5
X-Message-ID-Hash: 7VXTWZZEQMQLC6BVWOX5VJMFFSU6CXP5
X-MailFrom: simon@josefsson.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] Mothma: Generic Instantiated PQ/T Hybrid Signatures
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/Yw1ucjxqD4QNZ8nqWKf8ZqxdAp4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

Dear CFRG,

Please consider the following framework for doing hybrid signatures
between some common traditional and post-quantum signature systems.

https://datatracker.ietf.org/doc/draft-josefsson-cfrg-mothma/

Chairs, is there a time slot to talk about hybrid signatures?

Abstract:

This document specify Mothma as a generic family of instantiated
Post-Quantum/Traditional (PQ/T) Hybrid Digital Signatures. The goal is
to provide a generic hybrid signature pattern that can be analysed
separately for security assurance, and to offer concrete instantiated
algorithms for integration into protocol and implementations. Identified
instances are provided based on combinations of the traditional EdDSA,
ECDSA and RSA methods with the post-quantum methods of ML-DSA, SLH-DSA,
XMSS and LMS.

/Simon

PS. Several details are missing, but the I-D draft cut-off is tonight so
I'm sending an early version of this work.

v2.46.0 | Report a Bug | By Email | System Status