[lamps] Re: WGLC for draft-ietf-lamps-cms-sphincs-plus

[Carl Wallace <[e-mail]>]

Those changes look good to me. Thanks, Russ.

 

From: Russ Housley <[e-mail]>
Date: Monday, September 30, 2024 at 5:12 PM
To: Carl Wallace <[e-mail]>
Cc: SPASM <[e-mail]>
Subject: Re: [lamps] WGLC for draft-ietf-lamps-cms-sphincs-plus

 

Thanks for the review, Carl.



In the introduction, change predigest to pre-hash to match FIPS 205
 

Done.  I caught this mistake when handling the last comment from Daniel's review.

 

 
Add some words re: decision to support on pure mode. Section 6 is likely where this would fit.
 

Section 6 now reads:

 

   If slh_sign is implemented in a hardware device such as hardware

   security module (HSM) or portable cryptographic token,

   implementations might want to avoid is sending the full content to

   the device.  By including signed attributes, which necessarily

   include the message-digest attribute and the content-type attribute

   as described in Section 5.3 of [RFC5652], the much smaller set of

   signed attributes are sent to the device for signing.

 

   Following the approach in the previous paragraph is essentially the

   same as using SLH-DSA in pre-hash mode, which means that a hash of

   the content is passed to the SLH-DSA signature operation instead of

   the full message content.  For this reason, this document only

   specifies the use od SLH-DSA pure mode.

 

 
Add “algorithms” to the end of the second sentence in section 1.2
 

Done.  In the following paragraph, I also changed "large-scale quantum computers" to "cryptographically relevant quantum computers (CRQC)" to align with the terms in PQUIP.

 

Russ