[openpgp] Re: Fwd: [pqc-forum] Question regarding pure vs. pre-hash ML-DSA
Simo Sorce <simo@redhat.com> Tue, 03 September 2024 16:08 UTC
Return-Path: <simo@redhat.com>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B147C1840FF for <openpgp@ietfa.amsl.com>; Tue, 3 Sep 2024 09:08:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.253
X-Spam-Level:
X-Spam-Status: No, score=-2.253 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhat.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YkiMOSX_WSdp for <openpgp@ietfa.amsl.com>; Tue, 3 Sep 2024 09:08:20 -0700 (PDT)
Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D82D5C1840D3 for <openpgp@ietf.org>; Tue, 3 Sep 2024 09:08:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1725379698; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=C7Fs6lKsyuM/X8zi0lvs7Bwz08UtssD0dkEnSMCY52A=; b=Wko0+Wh/fFPFBaErXE32nAcwVqQwqPVuLP92684qk3UaeiQHSxXCGk0XCBAm/C97J3B0qy 29Zunn13+T/V0ZFSK3ddfdz+FvDLs6ErE21kOnyq3c2+x0SB2AfszDaOdcYJ3X8Smm75RQ pHsUBAQwJK0ffK0qNWRnJtkQudII/1s=
Received: from mail-qv1-f70.google.com (mail-qv1-f70.google.com [209.85.219.70]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-41-8NXu0mYTNDWAb8sNFFC4dA-1; Tue, 03 Sep 2024 12:08:17 -0400
X-MC-Unique: 8NXu0mYTNDWAb8sNFFC4dA-1
Received: by mail-qv1-f70.google.com with SMTP id 6a1803df08f44-6bf6bcee8ccso67634346d6.0 for <openpgp@ietf.org>; Tue, 03 Sep 2024 09:08:17 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1725379697; x=1725984497; h=mime-version:user-agent:content-transfer-encoding:organization :references:in-reply-to:date:cc:to:from:subject:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=C7Fs6lKsyuM/X8zi0lvs7Bwz08UtssD0dkEnSMCY52A=; b=EYapLUN7eNpO3Hl5/5HldJjlrsCFk0SnSqzvzm3zfqJOtL61XDkf5V7zDbh/rL+aCM pyq8IPas966Dd+K9YedIOOiOGvexqTTim2L7/54Usl1AAMd01nrXnpNumRAJggxqy97V RMbMWqTe89vz/ZuUQm/yoIsC/ogPFf5gTDoY/jLjbc/AqdIrHhCMQZAv/kzVk/Rr5TI6 wtlYmxFjr0peDKxJ9eI7bxPPzyrvgLTBqpjuO+6a9OP9/rBn9KCBrfjCE0YWAtst1Djk jSG3DQEa4t6RMQMx/CdkuMkOlS/50oQMS1aFVTFGz6py5cPKFI9r9wdWxXoW2jepSl9m cagw==
X-Forwarded-Encrypted: i=1; AJvYcCWuF2BJqf3Yhs9/0ohqg0fHG3JrvXzL52Bc223zcPl6FQf2Lb0NRldGx8ZHoZzwty7xy2kphww6@ietf.org
X-Gm-Message-State: AOJu0YyViO5DROv7N5mc7bchlhQ8gN0tpcmcAQWnak3l2oFKH3ubHD2g gMrINir2qpYDyWdhb4wB2Ed0PSv50bNvLrcLT15w+yQhqpy3YX74Ooo8/UJGwUHm1KA+kuv2vur zVF5qQIMu5/VEbxWhSGmnxxtpXLZ4CN7fAXOkD/TDVrslRA==
X-Received: by 2002:a05:6214:440b:b0:6c5:168a:8492 with SMTP id 6a1803df08f44-6c5168a8496mr2894526d6.51.1725379696780; Tue, 03 Sep 2024 09:08:16 -0700 (PDT)
X-Google-Smtp-Source: AGHT+IFJpRFnq6thKB4F2y7UmZMBUTo/ehVSCNWZxAXvoagC3PB2hnRlegQHjDibfIEPxRncRWWvIQ==
X-Received: by 2002:a05:6214:440b:b0:6c5:168a:8492 with SMTP id 6a1803df08f44-6c5168a8496mr2894136d6.51.1725379696368; Tue, 03 Sep 2024 09:08:16 -0700 (PDT)
Received: from m8.users.ipa.redhat.com ([2603:7000:9400:fe80::318]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-6c36eed68d3sm15582406d6.48.2024.09.03.09.08.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 03 Sep 2024 09:08:16 -0700 (PDT)
Message-ID: <2a725c920ccc6b046cec18437e341caa89be4cb6.camel@redhat.com>
From: Simo Sorce <simo@redhat.com>
To: "David A. Cooper" <david.cooper@nist.gov>
Date: Tue, 03 Sep 2024 12:08:15 -0400
In-Reply-To: <6e9937c3-bed1-4153-b639-c00d6f577c74@nist.gov>
References: <0555d567-e161-488f-a4eb-30a015f8c0d0@mtg.de> <9f26a754-0268-4fc7-abcc-7eeebe38eb88@mtg.de> <d9b5779c-d5f4-4d42-b102-85b81704c130@nist.gov> <e5eccd432d55049302f646c8d9687487c02d5a53.camel@redhat.com> <6e9937c3-bed1-4153-b639-c00d6f577c74@nist.gov>
Organization: Red Hat
User-Agent: Evolution 3.52.4 (3.52.4-1.fc40)
MIME-Version: 1.0
X-Mimecast-Spam-Score: 0
X-Mimecast-Originator: redhat.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: SQ3GLM7IEUEPPWGAH7ETJORBGQJ7KKSD
X-Message-ID-Hash: SQ3GLM7IEUEPPWGAH7ETJORBGQJ7KKSD
X-MailFrom: simo@redhat.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-openpgp.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: pqc-forum <pqc-forum@list.nist.gov>, "openpgp@ietf.org" <openpgp@ietf.org>, Falko Strenzke <falko.strenzke@mtg.de>
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [openpgp] Re: Fwd: [pqc-forum] Question regarding pure vs. pre-hash ML-DSA
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/openpgp/-TZaOqAW71zsg-oGNUreLzPemvk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Owner: <mailto:openpgp-owner@ietf.org>
List-Post: <mailto:openpgp@ietf.org>
List-Subscribe: <mailto:openpgp-join@ietf.org>
List-Unsubscribe: <mailto:openpgp-leave@ietf.org>
On Fri, 2024-08-30 at 14:08 -0700, David A. Cooper wrote: > So, when the FIPS says that the pure variant is preferred, it just means > that to compute a signature on M, it is preferred to use ML-DSA.Sign > over HashML-DSA.Sign. It doesn't mean that it is preferred to compute a > pure signature of Hash(M) rather than computing a pre-hash signature of M. Thanks, this is all I really wanted to understand. Simo. -- Simo Sorce Distinguished Engineer RHEL Crypto Team Red Hat, Inc
- [openpgp] Fwd: [pqc-forum] Question regarding pur… Falko Strenzke
- [openpgp] Re: Fwd: [pqc-forum] Question regarding… David A. Cooper
- [openpgp] Re: Fwd: [pqc-forum] Question regarding… Falko Strenzke
- [openpgp] Re: Fwd: [pqc-forum] Question regarding… Simo Sorce
- [openpgp] Re: Fwd: [pqc-forum] Question regarding… David A. Cooper
- [openpgp] Re: Fwd: [pqc-forum] Question regarding… Daniel Huigens
- [openpgp] Re: Fwd: [pqc-forum] Question regarding… Simo Sorce