IETF Logo Mail Archive

[SCITT] Re: SCITT Working Group adoption call for MMR Receipt Profile

Cliff Singletary <csingletary@gmail.com> Wed, 07 October 2026 11:48 UTC

Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [IPv6:2607:f8b0:4864:20::f2e]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id C752A30 for <scitt@ietf.org>; Wed, 07 Oct 2026 11:48:18 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=gmail.com header.s=20251104 header.b=gTwNZYI0; spf=pass (mx.ietf.org: domain of csingletary@gmail.com designates 2607:f8b0:4864:20::f2e as permitted sender) smtp.mailfrom=csingletary@gmail.com; dmarc=pass (policy=none) header.from=gmail.com
Received: by mail-qv1-xf2e.google.com with SMTP id 6a1803df08f44-91957ec41e1so24785906d6.0 for <scitt@ietf.org>; Wed, 07 Oct 2026 04:48:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1791373698; x=1791978498; darn=ietf.org; h=mime-version:content-type:content-language:accept-language :message-id:date:thread-index:thread-topic:subject:to:from:from:to :cc:subject:date:message-id:reply-to:content-type; bh=FnT824P7Qyp14dioF+jZT+AaTe76H8YQCFKlPDaZ/TQ=; b=gTwNZYI0PluOSYisIEVPd57Ce2tp37nGlYpC/RHF7KVAWpVbI8sDxHOubAcOBF+vTN IO2t9paYMfOabm7e0EJac5w11jhevHf4pwCOq3sJaOdJwOIkvdTtPWPKwEFVECr8gwkN AKHpv2hJ7VCIyq+dath6Qhd8D/5N4bjDSDxSL1+GJAPfp/xjlG8kLN64ssmW/FG9sEUq lBPH8Ft5pKfVQzzuwPGZ/q5rgzJFBBY/BD8vwcmdaAGa3xP0oUECW6vVmw73BtbGoVRR pYljmJZxtmdtSCI81evRP6D7GHJCVJ8gKw94zU0rWejChkNl0aDgF6cArguF1fcdcT/r T82A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791373698; x=1791978498; h=mime-version:content-type:content-language:accept-language :message-id:date:thread-index:thread-topic:subject:to:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=FnT824P7Qyp14dioF+jZT+AaTe76H8YQCFKlPDaZ/TQ=; b=T6PPkYkRdBtZiZGTcYfIE772IH6tkdaUM+XvmpvaieEDoD9lUiKO6fmKGkjEFsYj66 DSzEp/UJPtyRBFufqBbSaKhAWWMrIo5f7OprOjok11sjPJnnF4xBOvCjna8/sHKU6muU nAPIS1hwbGGAKHHTXh6JZJeVuIjMs8dZHoKIAS3gbLX8tWLBTMdKQz7RrzkQQH2sm95Y DwOL2GrVSVLQ9cKYbDGhPpoABvmG3NTbLpAGGXQf2VixekqwaghJcjh1cKk/PWl8NlkW yNumnVTe+NZMnNTlWiYiak74XHP6a+BvwsLin9r0lS3mZ9UTJ8J8IRKXKwaTuWBA9PLi DaJQ==
X-Gm-Message-State: AFuF++mg9YN4ZYCxguCEWOzyQpk4Ve6gkPbvExzVxGXAMT+LuhfdNUEv qy8R6qnmM+fyMVU4dU3LDTcYHfZbpsgxq78XOvp6BojwxitJXbRrx+UnWQl7VQ==
X-Gm-Gg: AYBFou1+bH8Kl4IdP10+LGcMEbNFiaS25z+pKQqqcji2258Tx9R9JLlS9igLjL0kG0z +57D4ZoZPVAPJ0lX2sBt0azghtVQ09DqD2/wntaNVEXRyuSCbbfNk4atzOPOurBLMODCplBXFUq V/CJyuKU3AI1uLco9SRMlnXwJ/G5fnltA7OC/q68PUApz+cc7qteK1BZGW3TpGRmEJpr/mZXgEv K35gLib2enHZFjdDgHFlArB8lrRatss8AmbeyqQNSKuk+zQYdov4+6RbtDIBnWPxs4+imhxJpnq 69bP8fZMc2FG27JU9+DoFOdISQl3yCq+66E0MoVRYRUerGXIdt/5hcpynV8p3LvbSVgopfvkaSM Z/vM2syyD8dOKCRDAFsgFJteCQxfJp9GK9RrZKGY/wumUeSs42iltRGqrBoij2agmfWIXLK+09z QEnPoMXsf98WPPyGzN2nIfVVzPGx2dCS29jBHYvRzWr53fHzun2je1vlqUBZ9uSJiRsceAveMR7 6sr0HuxqUNhi6TpbZZGRkOi
X-Received: by 2002:a05:6214:5681:b0:914:521e:7db2 with SMTP id 6a1803df08f44-919976b44f3mr41190866d6.8.1791373697976; Wed, 07 Oct 2026 04:48:17 -0700 (PDT)
Received: from LV4PPFFD516772A.prod.exchangelabs.com ([2603:1036:903:29::11]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-91996d3011bsm18402366d6.31.2026.10.07.04.48.17 for <scitt@ietf.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Oct 2026 04:48:17 -0700 (PDT)
From: Cliff Singletary <csingletary@gmail.com>
To: "scitt@ietf.org" <scitt@ietf.org>
Thread-Topic: [SCITT] SCITT Working Group adoption call for MMR Receipt Profile
Thread-Index: AQHdVlG1EUSTnoRIQEm44/yxMS712Q==
X-MS-Exchange-MessageSentRepresentingType: 1
Date: Wed, 07 Oct 2026 11:48:17 +0000
Message-ID: <LV4PPFFD516772ACB810776EC4478A465EEF8942@LV4PPFFD516772A.prod.exchangelabs.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator:
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-ms-reactions: allow
Content-Type: multipart/alternative; boundary="_000_LV4PPFFD516772ACB810776EC4478A465EEF8942LV4PPFFD516772A_"
MIME-Version: 1.0
X-Spamd-Bar: --------
X-MailFrom: csingletary@gmail.com
X-Mailman-Rule-Hits: header-match-scitt.ietf.org-3
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-scitt.ietf.org-0; header-match-scitt.ietf.org-1; header-match-scitt.ietf.org-2
Message-ID-Hash: WMLZZOKWCCHSD7NIL7VVNVS44C5KCUHU
X-Message-ID-Hash: WMLZZOKWCCHSD7NIL7VVNVS44C5KCUHU
X-Mailman-Approved-At: Thu, 08 Oct 2026 06:51:38 +0000
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [SCITT] Re: SCITT Working Group adoption call for MMR Receipt Profile
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/Ferh8zNPj0Ar-m302-AX9LIeq7I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>

Nicole —
I support adoption of draft-bryce-cose-receipts-mmr-profile. A receipt profile for post-order traversal trees covers ledgers the CCF profile does not, and it is in scope.
-03 handles tree sizes the opposite way from the CCF profile. Section 6 makes tree-size-1 and tree-size-2 required members of consistency-proof, and Sections 5.1 and 7.1 say the implementation "SHOULD check the lengths of the proof paths are appropriate for the provided tree sizes." That bears on the question I raised on the CCF Section 4 last call, whether a verifier needs m and n and how it gets them bound to the roots. Having both profiles in the WG lets that be settled once.
I am willing to review.
Cliff

v2.46.0 | Report a Bug | By Email | System Status