[lamps] Re: WG Last Call: draft-ietf-lamps-pq-composite-sigs-08 (Ends 2025-10-06)

[Mike Ounsworth <[e-mail]>]

I updated the OIDs in the draft. This is fiddly copy&paste work, so I would
like at least one other pair of eyes to double-check that I didn't make a
typo before I push to datatracker.

Pull Request:
https://github.com/lamps-wg/draft-composite-sigs/pull/308/files

Rendered HTML page:
https://lamps-wg.github.io/draft-composite-sigs/draft-ietf-lamps-pq-composite-sigs.html


On Mon, 20 Oct 2025 at 17:26, Russ Housley <[e-mail]> wrote:

> Here is the corrected list:
>
> 37 id-MLDSA44-RSA2048-PSS-SHA256 [draft-ietf-lamps-pq-composite-sigs-12]
> 38 id-MLDSA44-RSA2048-PKCS15-SHA256
> [draft-ietf-lamps-pq-composite-sigs-12]
> 39 id-MLDSA44-Ed25519-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 40 id-MLDSA44-ECDSA-P256-SHA256 [draft-ietf-lamps-pq-composite-sigs-12]
> 41 id-MLDSA65-RSA3072-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 42 id-MLDSA65-RSA3072-PKCS15-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 43 id-MLDSA65-RSA4096-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 44 id-MLDSA65-RSA4096-PKCS15-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 45 id-MLDSA65-ECDSA-P256-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 46 id-MLDSA65-ECDSA-P384-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 47 id-MLDSA65-ECDSA-brainpoolP256r1-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 48 id-MLDSA65-Ed25519-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 49 id-MLDSA87-ECDSA-P384-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 50 id-MLDSA87-ECDSA-brainpoolP384r1-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 51 id-MLDSA87-Ed448-SHAKE256 [draft-ietf-lamps-pq-composite-sigs-12]
> 52 id-MLDSA87-RSA3072-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 53 id-MLDSA87-RSA4096-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 54 id-MLDSA87-ECDSA-P521-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
>
> (No numbers skipped)
>
> Russ
>
>
> On Oct 20, 2025, at 3:47 PM, Russ Housley <[e-mail]> wrote:
>
> I hav arranged for early assignments in this registry:
> https://www.iana.org/assignments/smi-numbers/
>
> 37 id-MLDSA44-RSA2048-PSS-SHA256 [draft-ietf-lamps-pq-composite-sigs-12]
> 38 id-MLDSA44-RSA2048-PKCS15-SHA256
> [draft-ietf-lamps-pq-composite-sigs-12]
> 39 id-MLDSA44-Ed25519-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 40 id-MLDSA44-ECDSA-P256-SHA256 [draft-ietf-lamps-pq-composite-sigs-12]
> 41 id-MLDSA65-RSA3072-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 42 id-MLDSA65-RSA3072-PKCS15-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 43 id-MLDSA65-RSA4096-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 44 id-MLDSA65-RSA4096-PKCS15-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 45 id-MLDSA65-ECDSA-P256-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 46 id-MLDSA65-ECDSA-P384-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 47 id-MLDSA65-ECDSA-brainpoolP256r1-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 48 id-MLDSA65-Ed25519-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 49 id-MLDSA87-ECDSA-P384-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 50 id-MLDSA87-ECDSA-brainpoolP384r1-SHA512
> [draft-ietf-lamps-pq-composite-sigs-12]
> 51 id-MLDSA87-Ed448-SHAKE256 [draft-ietf-lamps-pq-composite-sigs-12]
> 52 id-MLDSA87-RSA3072-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 52 id-MLDSA87-RSA4096-PSS-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
> 54 id-MLDSA87-ECDSA-P521-SHA512 [draft-ietf-lamps-pq-composite-sigs-12]
>
> Note that I somehow skipped 53 in my request to IANA.
>
> Russ
>
> On Oct 19, 2025, at 3:05 AM, David Hook <[e-mail]> wrote:
>
>
> I'd just like to congratulate the authors of composite sigs on lasting the
> distance. This one has been quite a long haul!
>
> Speaking as someone who has found themselves with a number of users who
> are extremely keen to start deploying solutions based on this, I note the
> draft is still using the test OIDs, is anyone able to tell me when we'll
> see the IANA OIDs get allocated?
>
> Thanks,
>
> David
>
> On 18/10/25 06:26, Russ Housley wrote:
>
> It looks to me like we have reached consensus.  I will start the write-up
> to request publication.  Authors, each of you will need to reply to confirm
> that parts of the write-up are correct.
>
> For the LAMPS WG chairs,
> Russ
>
>
> On Oct 14, 2025, at 2:46 PM, Russ Housley <[e-mail]> wrote:
>
> No one raised any new issues.  With the posting of -12, the authors
> believe that the two open issues have been resolved.
>
> If you do not agree that the two open issues have been resolved, please
> speak now.
>
> Russ
>
> On Oct 8, 2025, at 4:41 PM, Russ Housley <[e-mail]> wrote:
>
> I have read the many messaged on this WG Last Call.  I believe that all of
> the issues that have been raise have reached rough consensus, except two.
>
> First, the discussion of EUF-CMA vs SUF-CMA has not yet reached closure.
>
> Second, there are disagreements about the proposed wording for the
> RECOMMENDED private key format.
>
> In the Datatracker, I have set the state to:
> State: In WG Last Call
> Tag: Revised I-D Needed - Issue raised by WGLC
>
> The intent is to allow time for the unresolved topics to continue being
> discussed.
>
> I know that we do not have 100% agreement on every detail.  However, If
> you see other items that need further discussion, please speak now.
>
> For the LAMPS WG chairs,
> Russ
>
>
> On Sep 22, 2025, at 11:50 AM, Russ Housley via Datatracker <
> [e-mail]> wrote:
>
>
> Subject: WG Last Call: draft-ietf-lamps-pq-composite-sigs-08 (Ends
> 2025-10-06)
>
> This message starts a 2-week WG Last Call for this document.
>
> Abstract:
> This document defines combinations of ML-DSA [FIPS.204] in hybrid
> with traditional algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA,
> Ed25519, and Ed448.  These combinations are tailored to meet security
> best practices and regulatory guidelines.  Composite ML-DSA is
> applicable in any application that uses X.509 or PKIX data structures
> that accept ML-DSA, but where the operator wants extra protection
> against breaks or catastrophic bugs in ML-DSA.
>
> File can be retrieved from:
> https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/
>
> Please review and indicate your support or objection to proceed with the
> publication of this document by replying to this email keeping
> [e-mail]
> in copy. Objections should be motivated and suggestions to resolve them are
> highly appreciated.
>
> Authors, and WG participants in general, are reminded again of the
> Intellectual Property Rights (IPR) disclosure obligations described in BCP
> 79
> [1]. Appropriate IPR disclosures required for full conformance with the
> provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of
> any. Sanctions available for application to violators of IETF IPR Policy
> can
> be found at [3].
>
> Thank you.
>
> [1] https://datatracker.ietf.org/doc/bcp78/
> [2] https://datatracker.ietf.org/doc/bcp79/
> [3] https://datatracker.ietf.org/doc/rfc6701/
>
>
>
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>
>
>
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>
>
>
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>