[CFRG] Re: I-D Action: draft-irtf-cfrg-det-sigs-with-noise-04.txt

[Niu Danny <[e-mail]>]

So the draft had been revisited, what next Mattsson? I'm unfamiliar with the whole process.

- I think we need to gather consensus on whether to change the hedged hashing for EdDSA to that recommended by DJB back earlier this year;

- 3rd-party verification of the initial test vectors are also needed.

What else do we have on our agenda?

> 2024年11月6日 16:06，[e-mail] 写道：
>
> Internet-Draft draft-irtf-cfrg-det-sigs-with-noise-04.txt is now available. It
> is a work item of the Crypto Forum (CFRG) RG of the IRTF.
>
>   Title:   Hedged ECDSA and EdDSA Signatures
>   Authors: John Preuß Mattsson
>            Erik Thormarker
>            Sini Ruohomaa
>   Name:    draft-irtf-cfrg-det-sigs-with-noise-04.txt
>   Pages:   17
>   Dates:   2024-11-06
>
> Abstract:
>
>   Deterministic elliptic-curve signatures such as deterministic ECDSA
>   and EdDSA have gained popularity over randomized ECDSA as their
>   security does not depend on a source of high-quality randomness.
>   Recent research, however, has found that implementations of these
>   signature algorithms may be vulnerable to certain side-channel and
>   fault injection attacks due to their deterministic nature.  One
>   countermeasure to such attacks is hedged signatures where the
>   calculation of the per-message secret number includes both fresh
>   randomness and the message.  This document updates RFC 6979 and RFC
>   8032 to recommend hedged constructions in deployments where side-
>   channel attacks and fault injection attacks are a concern.  The
>   updates are invisible to the validator of the signature and
>   compatible with existing ECDSA and EdDSA validators.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-irtf-cfrg-det-sigs-with-noise/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-irtf-cfrg-det-sigs-with-noise-04.html
>
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-irtf-cfrg-det-sigs-with-noise-04
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> CFRG mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]