Re: [lamps] [EXTERNAL] Re: Call for Adoption of draft-gazdag-x509-slhdsa and draft-gazdag-x509-shbs

[Daniel Van Geest <[e-mail]>]

I can’t speak to the current state of things, but my very first email
regarding draft-vangeest-x509-hash-sigs in 2018 said:

 

id-alg-hss-lms-hashsig is repeated from ietf-lamps-cms-hash-sig.  All other
OIDs are assigned from ISARA’s arc.  If instead there is a preferred arc to
request OIDs from we can look into that.

 

And at the time when I said “look into that”  I meant “just do it”.

 

One problem with a single OID for XMSS (and the same applies to HSS) is that
there are a whole bunch of parameters registered (and possibly more to
come).  Do we really want a single OID registered for all the parameters?
What if someone only wants to implement a subset of them?  If a new set of
parameters are added do we assign a new OID?  Do we want to add Object
Identifier parameters to the XMSS OID?  That ship has sailed already for
HSS…

 

Daniel

 

 

 

From: Spasm <[e-mail]> On Behalf Of Mike Ounsworth
Sent: Thursday, March 21, 2024 12:03 PM
To: Rohan Mahy <[e-mail]>; [e-mail]
Subject: Re: [lamps] [EXTERNAL] Re: Call for Adoption of
draft-gazdag-x509-slhdsa and draft-gazdag-x509-shbs

 

I support adoption of both since any FIPS-approved algorithm should be
usable in X.509.

 

My only question is whether there a strong reason for using proprietary
(ISARA) OIDs for XMSS and XMSS^MT in the RFC rather than getting new ones
from IANA? Is there a significant install base that is already deployed on
this OID?

 

- Mike Ounsworth

  _____  

From: Spasm <[e-mail] <mailto:[e-mail]> > on
behalf of Rohan Mahy <[e-mail] <mailto:[e-mail]> >
Sent: Thursday, March 21, 2024 9:47:15 PM
To: [e-mail] <mailto:[e-mail]>  <[e-mail]
<mailto:[e-mail]> >
Subject: [EXTERNAL] Re: [lamps] Call for Adoption of
draft-gazdag-x509-slhdsa and draft-gazdag-x509-shbs 

 

I support adoption of draft-gazdag-x509-slhdsa. I have no objection to
adoption of draft-gazdag-x509-shbs. Thanks, -rohan  ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍
‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍
‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍
‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ ‍ 

I support adoption of draft-gazdag-x509-slhdsa. 

 

I have no objection to adoption of draft-gazdag-x509-shbs.

 

Thanks,

-rohan 

Any email and files/attachments transmitted with it are intended solely for
the use of the individual or entity to whom they are addressed. If this
message has been sent to you in error, you must not copy, distribute or
disclose of the information it contains. Please notify Entrust immediately
and delete the message from your system.