Re: [openpgp] lack of agenda items...

Hi all,

In v5 we added a 16-byte random salt prefixing the data when hashing for signature, great idea because if it's unpredictable it can prevent collision attacks.

In SPHINCS+ this is also similarly done in the construction, but it has a variable size depending on the hash output size.

To make randomized hashing coherent with PQC signature schemes I'd like to ask if

(1) it is possible to extend the field to 32 bytes to match other constructions,

or

(2) it is possible to bind the salt size to the hash function.

This would allow preserving all security features of SPHINCS+ in a future construction.

Cheers,
Aron

--
Aron Wussler
Sent with ProtonMail, OpenPGP key 0x7E6761563EFE3930

------- Original Message -------
On Wednesday, November 2nd, 2022 at 13:54, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:

> Hiya,
>
> So far we've had only one WGLC comment about draft-07.
> I'm seriously wondering if we need a f2f meeting next
> week if that remains the case. I realise it's v. late
> in the day to cancel, but f2f sessions should really
> only be used when needed and likely to be productive.
>
> Please let us know if you plan to post a review of the
> draft in the next week. If we have some of those we
> can I think have a useful meeting. If not, I think we
> ought to cancel. (Please feel free to disagree with
> that last assertion too though.)
>
> If we do cancel next week's slot, we'll extend the
> WGLC and organise a virtual interim meeting.
>
> Thanks,
> S.
>
> PS: The lack of agenda items is the reason for the
> lack of a posted agenda:-)
> _______________________________________________
> openpgp mailing list
> openpgp@ietf.org
> https://www.ietf.org/mailman/listinfo/openpgp

Re: [openpgp] lack of agenda items...

Attachment: signature.asc