[lamps] WGLC comments draft-ietf-lamps-cms-shakes-01

[Jim Schaad <[e-mail]>]

Draft not ready to proceed

* See all comments about PKIX shake as many of them are relevant here.

* Reading these documents one after the other makes me somewhat sad about
the amount of duplicated text.

* Identifiers - The values of d need to be discussed as part of the OID
definition.

* Is there an issue with SHAKE128 of generating two different lengths from
the same computing instance?  Should be discussed some place.  Note that
putting this in Security Considerations paragraph 2 would be a reasonable
answer in you can tell people WHY they should not expect unrelated outputs.

* Message Digests - are the limits on the size only for CMS or do they apply
everywhere that the algorithm is used.  If it is everywhere how do we
reconcile with the usage in RSA-PSS? 

* Message Authentication Codes - Do we need to address a potential request
from some of the IOT worlds such as SUIT where they want to use KMAC, but
would be happy with a smaller authentication value?

Jim