Re: [Secdispatch] [EXTERNAL]Re: Can Composite sigs move back to LAMPS?

[Benjamin Kaduk <[e-mail]>]

On Mon, Jan 20, 2020 at 02:40:15PM +0000, Markku-Juhani O. Saarinen wrote:
> 
> A couple of additional technical points:
> - The reason why I mentioned SHA3/SHAKE for RSA and ECC is that this would
> seem to allow message hashing to be performed only once, rather than twice
> (at least for Dilithium and Falcon).
>  - We don't see this as being as widely used for TLS server authentication
> as for smart cards, secure elements and similar applications that can't
> just switch or negotiate certificate chains on the fly. I work on the
> hardware side myself and especially there we have additional considerations
> such as hardcoded cert chains and FIPS certification, which is currently
> only available for the hybrid case. I wouldn't want to leave the issuance
> of OIDs for this purpose at the mercy of TLS folks, which is just one of
> many applications of this format.

Isn't that the point of OIDs, though, that no one is at the mercy of anyone
else, and can just mint their own OIDs as needed?

-Ben