[Cfrg] My thoughts on randomized signature generation

[Watson Ladd <[e-mail]>]

Dear participants,

I apologize for the long delay between the virtual meeting and this
email. I'm writing to expand upon my opposition at the mike to
distinguishing between interoperable signatures based on the method of
generation.

My opposition is rooted in the following facts: the signature
generation method doesn't introduce any incompatibility with existing
verfiers, and the existing installed verifiers expect the already
allocated codepoints. A new system using randomized generation that
doesn't use the existing codepoints will thus be incompatible. It
would of course be possible to avoid this, and the right way is simply
to use the existing codepoints rather then implement the less secure
generation method.

Sincerely,
Watson Ladd