Return-Path: <orie@or13.io>
X-Original-To: cose@mail2.ietf.org
Delivered-To: cose@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1])
	by mail2.ietf.org (Postfix) with ESMTP id 727DE716E279
	for <cose@mail2.ietf.org>; Sat, 11 Oct 2025 06:44:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level: 
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5
	tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
	DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001,
	RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001]
	autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key)
	header.d=or13.io
Received: from mail2.ietf.org ([166.84.6.31])
	by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id HjCnQRiJ756x for <cose@mail2.ietf.org>;
	Sat, 11 Oct 2025 06:44:08 -0700 (PDT)
Received: from mail-vk1-xa2e.google.com (mail-vk1-xa2e.google.com
 [IPv6:2607:f8b0:4864:20::a2e])
	(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
	 key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256)
	(No client certificate requested)
	by mail2.ietf.org (Postfix) with ESMTPS id B8804716E180
	for <cose@ietf.org>; Sat, 11 Oct 2025 06:43:41 -0700 (PDT)
Received: by mail-vk1-xa2e.google.com with SMTP id
 71dfb90a1353d-54bbe260539so1108354e0c.0
        for <cose@ietf.org>; Sat, 11 Oct 2025 06:43:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=or13.io; s=google; t=1760190215; x=1760795015; darn=ietf.org;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=rvCtU4V9FR/LnS8jd6xnoO3NVDEVwTNiOPZyEW4CYis=;
        b=U5TfN/a7uvYrDJ+K2oecmB9quRC3PAfMrorWIK/41dKXnKopQ5NvNDW/LwoatuL2/J
         ytA4sXcjnf9bkyCO5MUMADo+J488KF/MWygcJjXqXh7z/GfOy2wUFx8ZwkmhDOyHLQEq
         ye+NQC2YJmPvxkd3wWSt2izhTKjKJbYNrgx+gZbgMAWKgsiscBamwdp9+BcwNV0AmkGY
         9qi6Sk66OTuxSpSm1GZlBIKN7AvPeJRwECeDEnNYuNlmIixVqpTXhfcU5GFQlgsDElsw
         vUTPVJynWp9o5UewCG54Lv4J0s2VBKVNwJ3TPi43gdYlKa1C8s54XazPM/9q+lsOVJWB
         vpbg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1760190215; x=1760795015;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
         :reply-to;
        bh=rvCtU4V9FR/LnS8jd6xnoO3NVDEVwTNiOPZyEW4CYis=;
        b=IyiWIXmGD06wM4AU2YNtRgOp89drs7edy7Qvuv238lNQOB0Wf+KfZjWQm6JO9m3xHV
         FGKQYY+iy9Kv/+Vr4HL/8UcWbtS+5IpScR+eI3E7G6B6UojHmbuM6n/qIjQIJQ4tQBC2
         fU2Yo1WnwZi9XZWzHwtrgTV18eGVGI94VXe2hPFjGqdqaFvgkowV9r2Js7Hmr/aF6Xlj
         AgVV4V/VXkWv9soPvg3ksIWPwHJRvZcFs1COAlIdzolvFT1BpFrjhYD0/mg6wy5Ybn79
         Dh4oMmrA7S5lnaYZ2RQLvgfWjWgVtnToCJ36D9QoH7fKL7CqCUfZg0g1Id8oKbxPwBdR
         VjLg==
X-Forwarded-Encrypted: i=1;
 AJvYcCXKg21o4gJHGQHOiItBQwGQmiipx3cvFCGUSqGuxfa8bwvFT7iZk6SpD1nOnu/pVUEfgWm4@ietf.org
X-Gm-Message-State: AOJu0YzPDrB26fBKa94ZPWnJj9xQkzr9vpX7STltpw2RklMJ8vm8y8V0
	xtxzy4dNwCpdg80F0wVC1kdKESXuJPUlPOhs3gvsaTQ/ehsbWnwWVkVxdTFec7QMpStoPZJGGPV
	uftAOGfD7qtgqI4Xry6kJoJFXKAA/D6dZR4dL7sJmsQ==
X-Gm-Gg: ASbGncvrCH2JpUBVR8oMkAbgIejPZ+9NbtWSIAA0brJf9z19kC94JcKqWwmPKjc9wYE
	2ylqEaauTNY6eXUPPNlP4s1yeRX4eVJ6xAEyN/3HDh+5UEBD93IofZPIHU7Ra8Ao/DfjIlZS8mb
	FRbJ5BbCIRb2Mfq4J56crMncMsJeHy1Md6YoWEY7LgOTxdzE6G+LL2eHb6pvjclj16ThDOVs6OV
	z6SoUi9SToDkaI8J7U4Ze/at8gEnPTxRjptX1KM5EuGeq91NBYna3kNhsv7sM7YoNAkg0P8KDij
	2qp5M3bAX5KCBSXV
X-Google-Smtp-Source: 
 AGHT+IF0Ya9zDvZ0nUGo/t3c+t4HfSBHvghoFabI0eUP92bostDxuY3JLqvi/M99M2yObrTwAzrk/iEfZaE7cjEiwwU=
X-Received: by 2002:a05:6122:65a0:b0:54b:cab1:d8b0 with SMTP id
 71dfb90a1353d-554b8aa8bd4mr5333949e0c.2.1760190214690; Sat, 11 Oct 2025
 06:43:34 -0700 (PDT)
MIME-Version: 1.0
References: 
 <175985791148.4101714.17514903715253024141@dt-datatracker-6c6cdf7f94-h6rnn>
In-Reply-To: 
 <175985791148.4101714.17514903715253024141@dt-datatracker-6c6cdf7f94-h6rnn>
From: Orie <orie@or13.io>
Date: Sat, 11 Oct 2025 08:43:23 -0500
X-Gm-Features: AS18NWCcwb-tH0X-eeZTycFEJMaH2DxObZy0DN23DLTdL69AmL8OkCK8RGiMz9k
Message-ID: 
 <CAMzqgow-Lk_oNvgXOjJvBhj2CBEWMfdwMPrDG58t95irorFHQA@mail.gmail.com>
To: Roman Danyliw <rdd@cert.org>
Content-Type: multipart/alternative; boundary="0000000000007be8b90640e2380e"
Message-ID-Hash: MS5NXFI66LAZUP3S3CC2PZYU55X474XP
X-Message-ID-Hash: MS5NXFI66LAZUP3S3CC2PZYU55X474XP
X-MailFrom: orie@or13.io
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-cose.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
CC: The IESG <iesg@ietf.org>, draft-ietf-cose-dilithium@ietf.org,
 cose-chairs@ietf.org, cose@ietf.org, lucas.prabel@huawei.com
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BCOSE=5D_Re=3A_Roman_Danyliw=27s_No_Objection_on_draft-ietf-cose?=
 =?utf-8?q?-dilithium-09=3A_=28with_COMMENT=29?=
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/cose/oU2f2LEpdzGHSunUPIuDfK-815w>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Owner: <mailto:cose-owner@ietf.org>
List-Post: <mailto:cose@ietf.org>
List-Subscribe: <mailto:cose-join@ietf.org>
List-Unsubscribe: <mailto:cose-leave@ietf.org>

--0000000000007be8b90640e2380e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Roman,

I've addressed your feedback along with other IESG comments here:

https://github.com/cose-wg/draft-ietf-cose-dilithium/pull/26

Please let me know if I missed anything.

Inline for the rest.


On Tue, Oct 7, 2025 at 12:25=E2=80=AFPM Roman Danyliw via Datatracker <
noreply@ietf.org> wrote:

> Roman Danyliw has entered the following ballot position for
> draft-ietf-cose-dilithium-09: No Objection
>
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
>
>
> Please refer to
> https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positio=
ns/
> for more information about how to handle DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-cose-dilithium/
>
>
>
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
> Thank you to Russ Housley for the GENART review.
>
> ** Editorial.  A number of references in the document are not formal
> references.  For example:
>
> -- Section 4, =E2=80=9CFIPS 204=E2=80=9D vs. =E2=80=9C[FIPS 204]=E2=80=9D=
 (multiple instances)
>

I think I fixed all these.


>
> -- Section 8.1.1, =E2=80=9CRFC 9053 and RFC 9054=E2=80=9D vs. =E2=80=9C[R=
FC9053] and [RFC9054]=E2=80=9D
> (multiple instances)
>

I addressed this.


>
> ** Section 8.1.1.* -- Why is the change control entity specific named
> here, but
> it is in the JOSE registrations?
>

Good catch, probably a copy paste error on my side.


>
> ** Section 8.1.4.4.*  -- These registration have a row with =E2=80=9CValu=
e
> registry:
> [IANA.jose] Algorithms=E2=80=9D.  That is not in the RFC7518 template or =
in the
> production
>
> https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption=
-algorithms
> registry
>

Another good catch, I have corrected this.

--0000000000007be8b90640e2380e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">Hi Roman,<br><br>I&#39;ve addressed your =
feedback=C2=A0along with other IESG comments here:<br><br><a href=3D"https:=
//github.com/cose-wg/draft-ietf-cose-dilithium/pull/26">https://github.com/=
cose-wg/draft-ietf-cose-dilithium/pull/26</a><br><br>Please let me know if =
I missed=C2=A0anything.<br><br>Inline for the rest.<br><br></div><br><div c=
lass=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_=
attr">On Tue, Oct 7, 2025 at 12:25=E2=80=AFPM Roman Danyliw via Datatracker=
 &lt;<a href=3D"mailto:noreply@ietf.org">noreply@ietf.org</a>&gt; wrote:<br=
></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;=
border-left:1px solid rgb(204,204,204);padding-left:1ex">Roman Danyliw has =
entered the following ballot position for<br>
draft-ietf-cose-dilithium-09: No Objection<br>
<br>
When responding, please keep the subject line intact and reply to all<br>
email addresses included in the To and CC lines. (Feel free to cut this<br>
introductory paragraph, however.)<br>
<br>
<br>
Please refer to <a href=3D"https://www.ietf.org/about/groups/iesg/statement=
s/handling-ballot-positions/" rel=3D"noreferrer" target=3D"_blank">https://=
www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/</a> <b=
r>
for more information about how to handle DISCUSS and COMMENT positions.<br>
<br>
<br>
The document, along with other ballot positions, can be found here:<br>
<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-cose-dilithium/" rel=
=3D"noreferrer" target=3D"_blank">https://datatracker.ietf.org/doc/draft-ie=
tf-cose-dilithium/</a><br>
<br>
<br>
<br>
----------------------------------------------------------------------<br>
COMMENT:<br>
----------------------------------------------------------------------<br>
<br>
Thank you to Russ Housley for the GENART review.<br>
<br>
** Editorial.=C2=A0 A number of references in the document are not formal<b=
r>
references.=C2=A0 For example:<br>
<br>
-- Section 4, =E2=80=9CFIPS 204=E2=80=9D vs. =E2=80=9C[FIPS 204]=E2=80=9D (=
multiple instances)<br></blockquote><div><br></div><div>I think I fixed all=
 these.<br>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0p=
x 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
-- Section 8.1.1, =E2=80=9CRFC 9053 and RFC 9054=E2=80=9D vs. =E2=80=9C[RFC=
9053] and [RFC9054]=E2=80=9D<br>
(multiple instances)<br></blockquote><div><br></div><div>I addressed this.<=
/div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0px=
 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
** Section 8.1.1.* -- Why is the change control entity specific named here,=
 but<br>
it is in the JOSE registrations?<br></blockquote><div><br>Good catch, proba=
bly a copy paste error on my side.<br>=C2=A0</div><blockquote class=3D"gmai=
l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=
4,204);padding-left:1ex">
<br>
** Section 8.1.4.4.*=C2=A0 -- These registration have a row with =E2=80=9CV=
alue registry:<br>
[IANA.jose] Algorithms=E2=80=9D.=C2=A0 That is not in the RFC7518 template =
or in the<br>
production<br>
<a href=3D"https://www.iana.org/assignments/jose/jose.xhtml#web-signature-e=
ncryption-algorithms" rel=3D"noreferrer" target=3D"_blank">https://www.iana=
.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms</a><br=
>
registry<br></blockquote><div><br>Another good catch, I have corrected this=
.=C2=A0</div></div></div>

--0000000000007be8b90640e2380e--

