Return-Path: X-Original-To: spasm@mail2.ietf.org Delivered-To: spasm@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 5A8B7D90AB83 for ; Thu, 9 Apr 2026 14:09:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775768984; bh=e6BDvsIE/1vdtlNPhZTMZW/7RZRLwa5Uf4Crqj1uELY=; h=From:To:Subject:Date:References:In-Reply-To; b=SAej05xfupIKJfNQDoKWbXaF0rRxprp3Yx5uQ7PwGgTnoEhRBVkEAVI9rztP0lJhI p0/UVlDL0qYJ0eNUYr0rBvX1KI5l1e1CaL+WaI65k9YPD04ozwXABF/cqm7KJ59CeO KEHiHanKCvhJOqardq9G+uxnU1ZUTQt/mkZpiRqM= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -2.096 X-Spam-Level: X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fsc8S1SrtZ6a for ; Thu, 9 Apr 2026 14:09:43 -0700 (PDT) Received: from CY7PR03CU001.outbound.protection.outlook.com (mail-westcentralusazon11020107.outbound.protection.outlook.com [40.93.198.107]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 90F8ED90AB56 for ; Thu, 9 Apr 2026 14:09:43 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=PJWgIkmaoAYt2ccibYpXv+enojE7wR69jdAHhh26RmReSb2TdZStDTztLQw2kqrnhcU/l3hLjjZRfLmduSgo5cko8HCtpO3cEh7CahtNmYUk12wcwnCyEMmbicKFxAUCaSIUEhi8oqqjIqUU2M3ZS8UQUCM1GX2p1wiotdNRRzmSYdzgGXLph2gV+rHfAZ2QJAZowBnJ37Ah5GX37oHpBt3UwaiL0lo4cvWy0TF0YocatZ/ISnShS0XB9nAB0GKWC84Bk/XxxmWOXkEF8cpDxJhNw1R2x9cH+dsRAfWp/96v8xvxurGUyxbbDboYMwkOWpKlp998TSIxev2sCmhddA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=kTDxrAWCbp3BEd28FqHOIYUA4+GSeGn7KhDR9ElVzoI=; b=j0h3modxEGWkuyqZ/uUrT4bFE+J2rzf377NcT7c65tbWTvDTeoCp3YlJJwriuCGKynCCIdAX3sgpfGIE4e1sduy9bViZ7OEvP/fEHafpgP8vP5gXhgRzI/RU+UK8lqoSUDOi0ZlOu9V9c11+0A1X0fp3Uf+YLGsThs5NdIYxVtG6Vcq6J/cGF9dSqET6gEb1RnVpCUC23UZXj89UZo77p5QeOHtPc0J2LzqL96TDNBbVsAoIDxy6voYSa2ezbopKi3ELG2dy6G2Butd77+l0aYSesoBOHGQ0ZPM8n5xHHQKjsKP5S5+b0Fgd2yH9oSL9AiArj24KOWaQeOeTkSs/tA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kTDxrAWCbp3BEd28FqHOIYUA4+GSeGn7KhDR9ElVzoI=; b=A/hsXexYce/O9wxPQYm+KQschfHWV9FOHXnEIPp9Cx+Hs0fIICnXaB2i3kBIe9/3o9sKkWobazq0lvTQmkEOBR1vrHNG/nd+OkvWVCinNQ98UFyQ7qZ9S9iM0azW/Lyim6Olj2FISOjfkkhuU0GLqNrYkIvA9yfPPTD9LlPp+zc= Received: from MWHPR21MB4405.namprd21.prod.outlook.com (2603:10b6:303:27a::16) by MW4PR21MB2002.namprd21.prod.outlook.com (2603:10b6:303:68::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.17; Thu, 9 Apr 2026 21:09:34 +0000 Received: from MWHPR21MB4405.namprd21.prod.outlook.com ([fe80::d833:51af:3b0c:28b5]) by MWHPR21MB4405.namprd21.prod.outlook.com ([fe80::d833:51af:3b0c:28b5%5]) with mapi id 15.20.9818.006; Thu, 9 Apr 2026 21:09:34 +0000 From: "Samuel Lee (ENS/Crypto)" To: Mike Ounsworth , LAMPS WG Thread-Topic: [EXTERNAL] [lamps] Re: I-D Action: draft-ietf-lamps-pq-composite-sigs-17.txt Thread-Index: AQHcyDU9WJhKzM8UU0yLXbEFrtXjO7XXLEsbgAAKSwCAAAJELQ== Date: Thu, 9 Apr 2026 21:09:34 +0000 Message-ID: References: <177574826968.1556959.5541368370658720308@dt-datatracker-9dc8fdd9f-qcdj9> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2026-04-09T21:09:33.458Z;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=1;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MWHPR21MB4405:EE_|MW4PR21MB2002:EE_ x-ms-office365-filtering-correlation-id: b081ed82-7a90-4f1a-8873-08de967c4cb9 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|10070799003|376014|1800799024|366016|4022899009|38070700021|13003099007|7053199004|22082099003|18002099003|56012099003|8096899003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MWHPR21MB4405.namprd21.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(10070799003)(376014)(1800799024)(366016)(4022899009)(38070700021)(13003099007)(7053199004)(22082099003)(18002099003)(56012099003)(8096899003);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?r06Q36zmrVMXfiPxdIR6wPVqIXSXXE0SJWGh95JdHR+7GGOPjudheN8GqT?= =?iso-8859-1?Q?SDoqw31ISBmgSsmILtHrLrDsqBSGJtXbTvXz0xRiPI2/V8+hv9MgTmoi9/?= =?iso-8859-1?Q?X+WWfaorTFNERQxW9xTFj/iBhpsRQ2BBwEIVqEA7IpI0R7Pzc6U/K4g/kT?= =?iso-8859-1?Q?WxKlyWgagmOExaiX+IDL/8Z99iGYe212sHdnvEhIrsefz7Dl4TBzhhveYV?= =?iso-8859-1?Q?m0Nybnnh3huiVNbvn9pC+jiQf3a62uMesGmHqlBqKI7NDFv1+61CuBpIa6?= =?iso-8859-1?Q?xG/D9ERVHkTiDAlPza4FOTGSwj6jUERlCxBewlrQQlGPqIzCv4IP6Kryt+?= =?iso-8859-1?Q?8EpeyVTEy4yK2/f1nRkT9J6sTHjS3Mhh0u1KfO0iDncMCjQeHeQ8XmKxB5?= =?iso-8859-1?Q?hp0vNEricCFnpA61lAb8OS0DjvBkNNBH3I4Xc4EKXw0hHOEwoT2PD5PDEr?= =?iso-8859-1?Q?RTJvLUn82LhZym2nCRq6qwsMiDgXdyOyEVWHSpeoSU2j51mszR893Cw3XQ?= =?iso-8859-1?Q?GM+vXRWyIGTq/JmgEBTHclAKUujxq8ujW3uZNGWK3pp34XpWSLGWXfo97Y?= =?iso-8859-1?Q?cE/kG6EURFltlxWZEJddX+Qa3Ui9uiGNXdRjanDoXse7LV5gzQs4WFq5TG?= =?iso-8859-1?Q?JHNmNaHAehW7k76GCmt1GfsW9Wi7Ow843YRGDAo5A0rK2KVaWDxDLnBegF?= =?iso-8859-1?Q?DnanUKrU1zk2dHW8TIq1VAnfb6jxb+psg8cXB/5LIX3gcTiUCB3J61KT29?= =?iso-8859-1?Q?T8V29t8pqQMFXkvP/kQB/2zWxy91PUfe8eABtcYoQozUXlpGc6c7QPVQi8?= =?iso-8859-1?Q?PvgW0SR/4LFcIVrO4jVmzP1BoZI4dEjji+cSxxv9kNDYX70hXKHqkrHVSi?= =?iso-8859-1?Q?qWQz51VvwWJIL/A5mmSsHkAUrB1RxxcKgcE+YgVQXldwB8t3qEcD3yYLEw?= =?iso-8859-1?Q?/Dle7bc5sSg8GUu4P7OLfbRUgPDQ32d4c8zVKAtBUGYwq6BDNOyJl3qz7O?= =?iso-8859-1?Q?o1D7SzAo82DLIAEwObBnnQ8aY7jWe0cm43igwsjNCskE7lfDrAVWJSaMcm?= =?iso-8859-1?Q?GrGsJ4Qr31IMHB//OuGbgq6HLi3fa4tO/NxrZmbqmpE0jeSypNAYJwib8Z?= =?iso-8859-1?Q?q1fjgcVIqwRlZGJimjSsJYXf/S3K9FOPdvs3hrokk72eTtAsfhkYSnsaVQ?= =?iso-8859-1?Q?0F8KzOEn9+oY89Tvu9N19pnOx7VCxWlLEX1KeuBcMqIYfw/GVASkJ/0GQI?= =?iso-8859-1?Q?74tM3cWLS/0j9sK9SV5OKABkzerfWWy0EhUFWpOttmmBaHZxblugvtu1S/?= =?iso-8859-1?Q?7O77biH5039+mLbHdIpkXNlVk+no4Pr0dLdCFi8uhlbOX6qKvT6+w5P2hV?= =?iso-8859-1?Q?xme0C+UfstkBpl3/qbFvpfJtbWFBUUoOUn3TIvfj1hfiGjwOfLJVlGvb+x?= =?iso-8859-1?Q?BTPtxArLK2UQbq8+oEKGy/p86o7Ss/sLkMnxasnQJFrn+LCDXQ+HcQNvGV?= =?iso-8859-1?Q?IR3nLoUKwmmgDlOlN5IeC1cu7oja+lEjGoZEcOq6OoNnEvuFXl4PZXEitE?= =?iso-8859-1?Q?NKYPYWO3Fykpf4RcXSJXvKOPQnqG4uTDQniEHOPS29zgYxtgy2Iyo0uDhM?= =?iso-8859-1?Q?NapoMsGJVsZgJUsj+Oe3/EN3ukTGwKp4uSPQo6sIfzIJdezElB8BCar+h6?= =?iso-8859-1?Q?0z2GcKjfIGtoVUf1UC/vqbVMPMhSJuCujsC9TK8CAjBmKCDdepPAgIbLNG?= =?iso-8859-1?Q?UjhZnW8fOeWVkfU1FfK3WjV9wuSXoPRJUSyJ1eTaEOs9fIYBjkQP+rNzqe?= =?iso-8859-1?Q?Pe0Gx//tZgsdYI01FZ2umdNiNkKkZu209PY4ILnNQlfA/bJCk593?= Content-Type: multipart/alternative; boundary="_000_MWHPR21MB4405956A0609E1A9780609E580582MWHPR21MB4405namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR21MB4405.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: b081ed82-7a90-4f1a-8873-08de967c4cb9 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Apr 2026 21:09:34.0181 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: lk68ILlqXnxJesa+qeiax7IWju7H/NfTaHHKpid4NGxK6hZBqfa+x1qUbr0WkwpUi/XIlChXKiEGbXgcjAQ2Rw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR21MB2002 Message-ID-Hash: 6I7BUVKW2O6XB7KJEN3JUPB5JQATLON6 X-Message-ID-Hash: 6I7BUVKW2O6XB7KJEN3JUPB5JQATLON6 X-MailFrom: Samuel.Lee@microsoft.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5Blamps=5D_Re=3A_=5BEXTERNAL=5D_Re=3A_I-D_Action=3A_draft-ietf-la?= =?utf-8?q?mps-pq-composite-sigs-17=2Etxt?= List-Id: This is the mail list for the LAMPS Working Group Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --_000_MWHPR21MB4405956A0609E1A9780609E580582MWHPR21MB4405namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Awesome, thanks Mike - excited for Composite specs to be published! ________________________________ From: Mike Ounsworth Sent: 09 April 2026 13:57 To: Samuel Lee (ENS/Crypto) ; LAMPS WG Subject: Re: [EXTERNAL] [lamps] Re: I-D Action: draft-ietf-lamps-pq-composi= te-sigs-17.txt Adding the public mailing list. Hi Samuel, I did not see the comment on the closed issue. Thanks for pointing me to it= . Yup. I was editing too quickly and changed the wrong section. Thanks. I'll bundle this up with the latest suggestions from Mike Bishop and publis= h a new version shortly. Thanks! On Thu, 9 Apr 2026 at 15:30, Samuel Lee (ENS/Crypto) > wrote: Hey Mike, I don't want to hold up composite-signature publication or make your life h= ard, but wanted to highlight the nitpick Timing-invariant Signature Failure= Check and Issues With SHAKE256/64 =B7 Issue #340 =B7 lamps-wg/draft-compos= ite-sigs is st= ill unaddressed. Is it worth me putting a quick note on the LAMPS mailing list to raise this= point and ensure that LAMPS folks have eyes on it? I can also post an errata down the line, I do not consider the SHOULD text = to be blocking for implementation; just would prefer not to have to argue a= bout it later if we're not following the SHOULD. Apologies for not catching this earlier - we're actually in the weeds of im= plementation on our side (initial composite-ml-kem is published on SymCrypt= already! https://github.com/microsoft/SymCrypt/blob/2864ff0da96642049a6680= 8d86a8bad2736b85e8/inc/symcrypt.h#L10178), which is why we started thinking= about these details a bit more closely. Best, Sam ________________________________ From: Mike Ounsworth > Sent: 09 April 2026 08:26 To: spasm@ietf.org > Cc: i-d-announce@ietf.org > Subject: [EXTERNAL] [lamps] Re: I-D Action: draft-ietf-lamps-pq-composite-s= igs-17.txt Sorry, I had missed Ketan's COMMENTs: https://mailarchive.ietf.org/arch/msg/spasm/9WiKvYZFmxFui2izAfsMCmQo8bw/ This version addresses those. On Thu, 9 Apr 2026 at 10:24, > wrote: Internet-Draft draft-ietf-lamps-pq-composite-sigs-17.txt is now available. = It is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAM= PS) WG of the IETF. Title: Composite Module-Lattice-Based Digital Signature Algorithm (ML-= DSA) for use in X.509 Public Key Infrastructure Authors: Mike Ounsworth John Gray Massimiliano Pala Jan Klaussner Scott Fluhrer Name: draft-ietf-lamps-pq-composite-sigs-17.txt Pages: 234 Dates: 2026-04-09 Abstract: This document defines combinations of US NIST Module-Lattice-Based Digital Signature Algorithm (ML-DSA) in hybrid with traditional algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and Ed448. These combinations are tailored to meet regulatory guidelines in certain regions. Composite ML-DSA is applicable in applications that use X.509 or PKIX data structures that accept ML-DSA, but where the operator wants extra protection against breaks or catastrophic bugs in ML-DSA, and where existential unforgeability (EUF-CMA) level security is acceptable. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-lamps-pq-composite-sigs-17.html A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-lamps-pq-composite-s= igs-17 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ Spasm mailing list -- spasm@ietf.org To unsubscribe send an email to spasm-leave@ietf.org --_000_MWHPR21MB4405956A0609E1A9780609E580582MWHPR21MB4405namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Awesome, thanks Mike - excited for Composite specs to be published!
From: Mike Ounsworth <ou= nsworth+ietf@gmail.com>
Sent: 09 April 2026 13:57
To: Samuel Lee (ENS/Crypto) <Samuel.Lee@microsoft.com>; LAMPS = WG <spasm@ietf.org>
Subject: Re: [EXTERNAL] [lamps] Re: I-D Action: draft-ietf-lamps-pq-= composite-sigs-17.txt
 
Adding the public mailing list.

Hi Samuel,

I did not see the comment on the closed issue. Thanks for pointing me = to it. Yup. I was editing too quickly and changed the wrong section. Thanks= .

I'll bundle this up with the latest suggestions from Mike Bishop and p= ublish a new version shortly. Thanks!

On Thu, 9 Apr 2026 at 15:30, Samuel= Lee (ENS/Crypto) <Samuel.Le= e@microsoft.com> wrote:
Hey Mike,

I don't want to hold up composite-signature publication or make your life h= ard, but wanted to highlight the nitpick Timing-invariant Signature Failure Check and Issues With SHAKE256/64 =B7 Is= sue #340 =B7 lamps-wg/draft-composite-sigs is still unaddressed.

Is it worth me putting a quick note on the LAMPS mailing list to raise this= point and ensure that LAMPS folks have eyes on it?
I can also post an errata down the line, I do not consider the SHOULD text = to be blocking for implementation; just would prefer not to have to argue a= bout it later if we're not following the SHOULD.

Apologies for not catching this earlier - we're actually in the weeds of im= plementation on our side (initial composite-ml-kem is published on SymCrypt= already! https://github.com/microsoft/SymCrypt/blob/2864ff0da96642049a66808d86a8bad2= 736b85e8/inc/symcrypt.h#L10178), which is why we started thinking about= these details a bit more closely.

Best,
Sam
From: Mike Ounsworth <ounsworth+ietf@gmail.com>
Sent: 09 April 2026 08:26
To: spasm@ietf.o= rg <spasm@ietf.o= rg>
Cc: i-d-a= nnounce@ietf.org <i-d-announce@ietf.org>
Subject: [EXTERNAL] [lamps] Re: I-D Action: draft-ietf-lamps-pq-comp= osite-sigs-17.txt
 
Sorry, I had missed Ketan's COMMENTs:

This version addresses those.


On Thu, 9 Apr 2026 at 10:24, <internet-drafts@ietf.org> wrote= :
Internet-Draft draft-ietf-lamps-pq-composite-sigs-17.txt is now available. = It
is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAM= PS)
WG of the IETF.

   Title:   Composite Module-Lattice-Based Digital Sign= ature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure
   Authors: Mike Ounsworth
            John Gray
            Massimiliano Pala
            Jan Klaussner
            Scott Fluhrer
   Name:    draft-ietf-lamps-pq-composite-sigs-17.txt    Pages:   234
   Dates:   2026-04-09

Abstract:

   This document defines combinations of US NIST Module-Lattice-B= ased
   Digital Signature Algorithm (ML-DSA) in hybrid with traditiona= l
   algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and = Ed448.
   These combinations are tailored to meet regulatory guidelines = in
   certain regions.  Composite ML-DSA is applicable in appli= cations that
   use X.509 or PKIX data structures that accept ML-DSA, but wher= e the
   operator wants extra protection against breaks or catastrophic= bugs
   in ML-DSA, and where existential unforgeability (EUF-CMA) leve= l
   security is acceptable.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ie= tf.org/doc/draft-ietf-lamps-pq-composite-sigs/

There is also an HTML version available at:
https://ww= w.ietf.org/archive/id/draft-ietf-lamps-pq-composite-sigs-17.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-lamps-pq-composi= te-sigs-17

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
Spasm mailing list -- s= pasm@ietf.org
To unsubscribe send an email to spasm-leave@ietf.org
--_000_MWHPR21MB4405956A0609E1A9780609E580582MWHPR21MB4405namp_--