Return-Path: X-Original-To: spasm@mail2.ietf.org Delivered-To: spasm@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8DE1ED909F70 for ; Thu, 9 Apr 2026 13:57:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1775768274; bh=/X8nDVU8yCmVEBmEK3zSD4T0MCtDWkH5y6k8zIp0QX4=; h=References:In-Reply-To:From:Date:Subject:To; b=w7uzCGcIpTpnorUpmY1FoKaHSjthtvHSQ4PHL4XfDzQVtWw2PBsgocTmctwx1toWJ d6pzwWZAc85vrGaYP3HfolxmR1I0kWYaFV4NjqJK+8NNIx2yhuOvLbPtxaUOS/7VIv rLIwcFdUofAy9PI8rxPWqD7S7djL6LnlpM6oQ5Co= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -1.098 X-Spam-Level: X-Spam-Status: No, score=-1.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TCTqOjH8p5VK for ; Thu, 9 Apr 2026 13:57:54 -0700 (PDT) Received: from mail-ot1-x32c.google.com (mail-ot1-x32c.google.com [IPv6:2607:f8b0:4864:20::32c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A7E9FD909F6B for ; Thu, 9 Apr 2026 13:57:53 -0700 (PDT) Received: by mail-ot1-x32c.google.com with SMTP id 46e09a7af769-7d86eb7c854so709560a34.3 for ; Thu, 09 Apr 2026 13:57:53 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1775768273; cv=none; d=google.com; s=arc-20240605; b=OlBydq0LsonNN9ohssdq6PtRhnCcn04ulvd5BxK+vuDVReoxD1p6uwYDxrbi4C9hP7 196LwWONzJ8MqdBDvin0QG+hDwQ10kZlw45u6Wxoj3mj3EcKpledm2NkcG2MOY5Qc+dX WTPLxFzN2wMRsf72cxGR0pJmXKYWc37QvZAIKq76iHMfzbzutaUA7Nk51VChZf8CUErf 7EjLAkJHIqNcJKj9iJmok2EXjb7b1cAQ7+AM3uwEVcFxqvgnDEd1EOAcUqq2aVf6BR6s 3KCADjR8/hNiFdjfSUudKoNs5QzrdywmdaoRAFisg0Vfxvu5g1Fk/Zc8Uy7QKUaZDT/V XRbA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=ngEt8ldH8fWQLV/HvGvJEMiY/m3WcisViTl05aydExw=; fh=XqGPNstDiOrC6t4Y5ZIMtiv55+AoUK7UCbRh8qf9xTo=; b=cTgdHPVaMm5RbNQhgNXf1NYbOLQ5qDzzmaqf0UAufbWHjo0WGc9fOd81TvoqP+T5br w8T+INEXCfH0oPBiUlj0nDWnSCjei3uZ4C9HP1EJT8N/+DuE3LifdJ4Npy+YqE0CpULx 4++K+AZmGVsrzWAfO8sIhqx4amhpSDsGnR1zpYxXMRF1TjY2js+DZ3c+db+an5ifKUK2 aOGWYuDFcmgT04jjQ6RCbTbJzDjVi0TFqL9cnTxm+To3vVUeRNBx4v+PvaGIR8/U/1RN Pe6ZO7dPMxOfV3DhBE4YGNTI5ft3gOLz5slnRFedBZWypz0WKMqIQBZG5XkzcSl5xDhM wsqg==; darn=ietf.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1775768273; x=1776373073; darn=ietf.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=ngEt8ldH8fWQLV/HvGvJEMiY/m3WcisViTl05aydExw=; b=WPnwwH0tixt90Gi1E3Gpi+nMeAjpQdOdgk0cVO5n7oNCD7wXxlQTSwITcA24iXqLRR dFXNvNI20ENjWIBIa8Xui5vUU0s8S9FWk/rjSXNqGgkvnVvFt9a9Yc4JE6P42Y5P2Xao Id58rfy8XXudp76LyiiYTaiYIT/fiO1ralYvXh0JqCaazeaZ7iPpgdETnHepKIrEwKxP SGTySSoQcFMbvygJTxykiLMnfMrsNodQqMgAunLuffnBf5vFsdB5yDTtPZeAH3bOsDJy iu4xF7BQ7Yv5MkV+8rXcj1bPaq+dspJmP3YiIgN3Gxk+OmgFveLrryW3hpOihhT7Z5JD 0lyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775768273; x=1776373073; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=ngEt8ldH8fWQLV/HvGvJEMiY/m3WcisViTl05aydExw=; b=F1GcNnVE1kZLgBPpjr2KbRstLl1moOTdYdoNP539zvWqRRd/aHONovSMqjTBp93dxM LF1jOaov4TuXaiUoeaWxm206kCbvXFfPIe4JI513oaSIs6n3q8Wo/8hhqFjBOEHZ9pSy F6+bTuuxiPkaS7oWLpt8E8j8KuVIJkFnpHfJWcdWAXfwHf7J3wduXEDtJfZdPlisj6zm 6mIlNCNTKgWfJsGpPxK8YTwOcR8gdUp9At6KwSHUmj0ARTvAvW0yosr/eyimHAkecSpQ xwh2bFmALqIpy/0HEnqrew2KeVEgIZMUYW0wvHvX0zjbQP5+No2F1+GchizrvM1rSPfC TZ6g== X-Forwarded-Encrypted: i=1; AJvYcCXiztR7Af6tHkblFkFwKBekYER6H8mSHCcMCC5Aj1YbwXrWevdRia9gOppMoEhH/qOnmVtAPg==@ietf.org X-Gm-Message-State: AOJu0Ywpx/1WN3JaPpbrg6bSTHVUVY50RBCJ5NaG0jsVncFL47VhOJsS zXPnUUi5yRBSDMAei2CKBge3+8Z+vNGobd/yEPASA55lKymQgue5etTtMyaPyFhAiRe1ms1bsEN C8fzOi4LvozLTYhEBRJ0g5McXTurtkcngtQ== X-Gm-Gg: AeBDiev1cmaM0t6OQOX8DbOMGZWbE1oJy8ZlYX8Ww1fliijgmZeLCgPxDhuGxPUm+0X r1x9WLX7mZgp5+mFxTBQOehDTzBcggbD/ah++RVVL5/JYSJ6wPkcpsWutsRZvm98TwspUPkQlEq nv8VcWrtf4zh5d1xLQ+gfdXQ3RfwEcC3Tbf8XqRxW3RfTQZtlC8Hngb8OyWXl6bR64Y8TATSYBt eszrFGjm+/WYiifemLPUZcT9n+qCFvo4JICO6704C7U6K7lZg0ARaSBnjNxzaDe+E4Hg48vJMFK xWb5TN4x6A== X-Received: by 2002:a05:6820:4b15:b0:679:97ac:2cc3 with SMTP id 006d021491bc7-68be643039dmr398008eaf.22.1775768272757; Thu, 09 Apr 2026 13:57:52 -0700 (PDT) MIME-Version: 1.0 References: <177574826968.1556959.5541368370658720308@dt-datatracker-9dc8fdd9f-qcdj9> In-Reply-To: From: Mike Ounsworth Date: Thu, 9 Apr 2026 15:57:40 -0500 X-Gm-Features: AQROBzDuSE1DYkmuk408aPhTToTNN9-lpx2UOh3p_V8Out5yBL0kkD71CHSh0PQ Message-ID: To: "Samuel Lee (ENS/Crypto)" , LAMPS WG Content-Type: multipart/alternative; boundary="00000000000019e67d064f0d45b0" Message-ID-Hash: SV6BMYXMNMSQG62PGKDYJ2OJMZG5I2N3 X-Message-ID-Hash: SV6BMYXMNMSQG62PGKDYJ2OJMZG5I2N3 X-MailFrom: ounsworth@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5Blamps=5D_Re=3A_=5BEXTERNAL=5D_Re=3A_I-D_Action=3A_draft-ietf-la?= =?utf-8?q?mps-pq-composite-sigs-17=2Etxt?= List-Id: This is the mail list for the LAMPS Working Group Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --00000000000019e67d064f0d45b0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Adding the public mailing list. Hi Samuel, I did not see the comment on the closed issue. Thanks for pointing me to it. Yup. I was editing too quickly and changed the wrong section. Thanks. I'll bundle this up with the latest suggestions from Mike Bishop and publish a new version shortly. Thanks! On Thu, 9 Apr 2026 at 15:30, Samuel Lee (ENS/Crypto) < Samuel.Lee@microsoft.com> wrote: > Hey Mike, > > I don't want to hold up composite-signature publication or make your life > hard, but wanted to highlight the nitpick Timing-invariant Signature > Failure Check and Issues With SHAKE256/64 =C2=B7 Issue #340 =C2=B7 > lamps-wg/draft-composite-sigs > is still > unaddressed. > > Is it worth me putting a quick note on the LAMPS mailing list to raise > this point and ensure that LAMPS folks have eyes on it? > I can also post an errata down the line, I do not consider the SHOULD tex= t > to be blocking for implementation; just would prefer not to have to argue > about it later if we're not following the SHOULD. > > Apologies for not catching this earlier - we're actually in the weeds of > implementation on our side (initial composite-ml-kem is published on > SymCrypt already! > https://github.com/microsoft/SymCrypt/blob/2864ff0da96642049a66808d86a8ba= d2736b85e8/inc/symcrypt.h#L10178), > which is why we started thinking about these details a bit more closely. > > Best, > Sam > ------------------------------ > *From:* Mike Ounsworth > *Sent:* 09 April 2026 08:26 > *To:* spasm@ietf.org > *Cc:* i-d-announce@ietf.org > *Subject:* [EXTERNAL] [lamps] Re: I-D Action: > draft-ietf-lamps-pq-composite-sigs-17.txt > > Sorry, I had missed Ketan's COMMENTs: > https://mailarchive.ietf.org/arch/msg/spasm/9WiKvYZFmxFui2izAfsMCmQo8bw/ > > This version addresses those. > > > On Thu, 9 Apr 2026 at 10:24, wrote: > > Internet-Draft draft-ietf-lamps-pq-composite-sigs-17.txt is now available= . > It > is a work item of the Limited Additional Mechanisms for PKIX and SMIME > (LAMPS) > WG of the IETF. > > Title: Composite Module-Lattice-Based Digital Signature Algorithm > (ML-DSA) for use in X.509 Public Key Infrastructure > Authors: Mike Ounsworth > John Gray > Massimiliano Pala > Jan Klaussner > Scott Fluhrer > Name: draft-ietf-lamps-pq-composite-sigs-17.txt > Pages: 234 > Dates: 2026-04-09 > > Abstract: > > This document defines combinations of US NIST Module-Lattice-Based > Digital Signature Algorithm (ML-DSA) in hybrid with traditional > algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and Ed448. > These combinations are tailored to meet regulatory guidelines in > certain regions. Composite ML-DSA is applicable in applications that > use X.509 or PKIX data structures that accept ML-DSA, but where the > operator wants extra protection against breaks or catastrophic bugs > in ML-DSA, and where existential unforgeability (EUF-CMA) level > security is acceptable. > > The IETF datatracker status page for this Internet-Draft is: > https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/ > > There is also an HTML version available at: > https://www.ietf.org/archive/id/draft-ietf-lamps-pq-composite-sigs-17.htm= l > > A diff from the previous version is available at: > > https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-lamps-pq-composite= -sigs-17 > > Internet-Drafts are also available by rsync at: > rsync.ietf.org::internet-drafts > > > _______________________________________________ > Spasm mailing list -- spasm@ietf.org > To unsubscribe send an email to spasm-leave@ietf.org > > --00000000000019e67d064f0d45b0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Adding the public mailing list.

<= div>Hi Samuel,

I did not see the comment on the cl= osed issue. Thanks for pointing me to it. Yup. I was editing too quickly an= d changed the wrong section. Thanks.

I'll bund= le this up with the latest suggestions from Mike Bishop and publish a new v= ersion shortly. Thanks!

On Thu, 9 Apr 2026 at 15= :30, Samuel Lee (ENS/Crypto) <Samuel.Lee@microsoft.com> wrote:
Hey Mike,

I don't want to hold up composite-signature publication or make your li= fe hard, but wanted to highlight the nitpick Timing-invariant Signature Failure Check and Issues With SHAKE256/64 =C2=B7= Issue #340 =C2=B7 lamps-wg/draft-composite-sigs=C2=A0is still unaddres= sed.

Is it worth me putting a quick note on the LAMPS mailing list to raise this= point and ensure that LAMPS folks have eyes on it?
I can also post an errata down the line, I do not consider the SHOULD text = to be blocking for implementation; just would prefer not to have to argue a= bout it later if we're not following the SHOULD.

Apologies for not catching this earlier - we're actually in the weeds o= f implementation on our side (initial composite-ml-kem is published on SymC= rypt already! https://github.com/microsoft/SymCrypt/blob/2864ff0da96642049a66808d86a8bad2= 736b85e8/inc/symcrypt.h#L10178), which is why we started thinking about= these details a bit more closely.

Best,
Sam
From: = Mike Ounsworth <ounsworth+ietf@gmail.com>
Sent: 09 April 2026 08:26
To: spasm@ietf.o= rg <spasm@ietf.o= rg>
Cc: i-d-a= nnounce@ietf.org <i-d-announce@ietf.org>
Subject: [EXTERNAL] [lamps] Re: I-D Action: draft-ietf-lamps-pq-comp= osite-sigs-17.txt
=C2=A0
Sorry, I had missed Ketan's COMMENTs:

This version addresses those.


On Thu, 9 Apr 2026 at 10:24, <internet-drafts@ietf.org> wrote= :
Internet-Draft draft-ietf-lamps-pq-composite-sigs-17.txt is now available. = It
is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAM= PS)
WG of the IETF.

=C2=A0 =C2=A0Title:=C2=A0 =C2=A0Composite Module-Lattice-Based Digital Sign= ature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure
=C2=A0 =C2=A0Authors: Mike Ounsworth
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 John Gray
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Massimiliano Pala
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Jan Klaussner
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Scott Fluhrer
=C2=A0 =C2=A0Name:=C2=A0 =C2=A0 draft-ietf-lamps-pq-composite-sigs-17.txt =C2=A0 =C2=A0Pages:=C2=A0 =C2=A0234
=C2=A0 =C2=A0Dates:=C2=A0 =C2=A02026-04-09

Abstract:

=C2=A0 =C2=A0This document defines combinations of US NIST Module-Lattice-B= ased
=C2=A0 =C2=A0Digital Signature Algorithm (ML-DSA) in hybrid with traditiona= l
=C2=A0 =C2=A0algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and = Ed448.
=C2=A0 =C2=A0These combinations are tailored to meet regulatory guidelines = in
=C2=A0 =C2=A0certain regions.=C2=A0 Composite ML-DSA is applicable in appli= cations that
=C2=A0 =C2=A0use X.509 or PKIX data structures that accept ML-DSA, but wher= e the
=C2=A0 =C2=A0operator wants extra protection against breaks or catastrophic= bugs
=C2=A0 =C2=A0in ML-DSA, and where existential unforgeability (EUF-CMA) leve= l
=C2=A0 =C2=A0security is acceptable.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc= /draft-ietf-lamps-pq-composite-sigs/

There is also an HTML version available at:
https://www.ietf.org/archi= ve/id/draft-ietf-lamps-pq-composite-sigs-17.html

A diff from the previous version is available at:
https://author-tool= s.ietf.org/iddiff?url2=3Ddraft-ietf-lamps-pq-composite-sigs-17

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
Spasm mailing list -- s= pasm@ietf.org
To unsubscribe send an email to spasm-leave@ietf.org
--00000000000019e67d064f0d45b0--