Re: [lamps] I-D Action: draft-ietf-lamps-cms-hash-sig-01.txt

Daniel Van Geest <> Mon, 24 September 2018 20:41 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 916E2130F8E for <>; Mon, 24 Sep 2018 13:41:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id M5kkIdbor7wq for <>; Mon, 24 Sep 2018 13:41:38 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 32FA0130E60 for <>; Mon, 24 Sep 2018 13:41:37 -0700 (PDT)
Received: from unknown (HELO ([]) by with ESMTP; 24 Sep 2018 20:41:37 +0000
Received: from ( by ( with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1466.3; Mon, 24 Sep 2018 16:41:36 -0400
Received: from ([fe80::d802:5aec:db34:beba]) by ([fe80::d802:5aec:db34:beba%7]) with mapi id 15.01.1466.003; Mon, 24 Sep 2018 16:41:36 -0400
From: Daniel Van Geest <>
To: Russ Housley <>, SPASM <>
Thread-Topic: [lamps] I-D Action: draft-ietf-lamps-cms-hash-sig-01.txt
Thread-Index: AQHUU4TYSmMGfk6iMkO5uooRYUz8SKT+psmAgAGkvQA=
Date: Mon, 24 Sep 2018 20:41:36 +0000
Message-ID: <>
References: <> <>
In-Reply-To: <>
Accept-Language: en-CA, en-US
Content-Language: en-US
x-originating-ip: []
Content-Type: text/plain; charset="utf-8"
Content-ID: <>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <>
Subject: Re: [lamps] I-D Action: draft-ietf-lamps-cms-hash-sig-01.txt
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 24 Sep 2018 20:41:41 -0000

Hi Russ,

Comments on your recent changes:

	   The public key value is an OCTET STRING.  Like the signature format,	
 	   it is designed for easy parsing.  The value is a length, L, followed	
 	   by the public key itself.

L is the number of levels (in the private key & thus the signature), not a length.

The signature format is still off:

	   The elements of the HSS signature value for a tree with Nspk levels
	   can be summarized as:

In [HASHSIG], L is the number of levels.  Nspk is L - 1.  If you keep the updated indexing of the signed_public_key array in the signature, then the above sentence should be:

	   The elements of the HSS signature value for a tree with Nspk + 1 levels
	   can be summarized as:


On 2018-09-23, 11:35 PM, "Spasm on behalf of Russ Housley" < on behalf of> wrote:

    This update does not address the first comment in Daniel's message, but it does address the rest of them.  You can see his comments here:

    I would like to hear from others on this list before I address his first comment.
    > On Sep 23, 2018, at 5:31 PM, wrote:
    > A New Internet-Draft is available from the on-line Internet-Drafts directories.
    > This draft is a work item of the Limited Additional Mechanisms for PKIX and SMIME WG of the IETF.
    >        Title           : Use of the HSS/LMS Hash-based Signature Algorithm in the Cryptographic Message Syntax (CMS)
    >        Author          : Russ Housley
    > 	Filename        : draft-ietf-lamps-cms-hash-sig-01.txt
    > 	Pages           : 14
    > 	Date            : 2018-09-23
    > Abstract:
    >   This document specifies the conventions for using the the HSS/LMS
    >   hash-based signature algorithm with the Cryptographic Message Syntax
    >   (CMS).  The HSS/LMS algorithm is one form of hash-based digital
    >   signature; it is described in [HASHSIG].
    > The IETF datatracker status page for this draft is:
    > There are also htmlized versions available at:
    > A diff from the previous version is available at:
    > Please note that it may take a couple of minutes from the time of submission
    > until the htmlized version and diff are available at
    Spasm mailing list