IETF Logo Mail Archive

[lamps] Re: Publication has been requested for draft-ietf-lamps-cms-ml-dsa-03

"Kampanakis, Panos" <kpanos@amazon.com> Tue, 29 April 2025 02:16 UTC

Return-Path: <prvs=207f42d9f=kpanos@amazon.com>
X-Original-To: spasm@mail2.ietf.org
Delivered-To: spasm@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 095D722568B0; Mon, 28 Apr 2025 19:16:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.394
X-Spam-Level:
X-Spam-Status: No, score=-4.394 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=amazon.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UIJSpsrJdj1Q; Mon, 28 Apr 2025 19:16:48 -0700 (PDT)
Received: from smtp-fw-52004.amazon.com (smtp-fw-52004.amazon.com [52.119.213.154]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 4845822568A9; Mon, 28 Apr 2025 19:16:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1745893009; x=1777429009; h=from:to:cc:date:message-id:references:in-reply-to: mime-version:subject; bh=2dEw2B+SN5i9m9mf15weCXg+elbygRWJJcRNkA9DQ1c=; b=hXxIrwCzgREvZGhA69QEkvgc7Qr/uK8QpaGwjxDpdCi+Dk+2I1r3of5v H4dA7FjZeUErjcx+xvqMoNjz5vVHAdHqsDHjVkzO4Eehh4yIuIp50LsAV Sf58XrZ4WGfZzNesvJ4Wzyivw0veJJKuTLeS+gfgvP7Ev9OR1Z/V7rrYn w=;
X-IronPort-AV: E=Sophos;i="6.15,247,1739836800"; d="scan'208,217";a="292513805"
Thread-Topic: [lamps] Re: Publication has been requested for draft-ietf-lamps-cms-ml-dsa-03
Received: from iad12-co-svc-p1-lb1-vlan2.amazon.com (HELO smtpout.prod.us-west-2.prod.farcaster.email.amazon.dev) ([10.43.8.2]) by smtp-border-fw-52004.iad7.amazon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 29 Apr 2025 02:16:46 +0000
Received: from EX19MTAUWC001.ant.amazon.com [10.0.7.35:22311] by smtpin.naws.us-west-2.prod.farcaster.email.amazon.dev [10.0.33.6:2525] with esmtp (Farcaster) id f58e730b-758f-4259-9c0a-63eec023039f; Tue, 29 Apr 2025 02:16:45 +0000 (UTC)
X-Farcaster-Flow-ID: f58e730b-758f-4259-9c0a-63eec023039f
Received: from EX19D002AND001.ant.amazon.com (10.37.240.250) by EX19MTAUWC001.ant.amazon.com (10.250.64.174) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.1544.14; Tue, 29 Apr 2025 02:16:44 +0000
Received: from EX19D002AND002.ant.amazon.com (10.37.240.241) by EX19D002AND001.ant.amazon.com (10.37.240.250) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.1544.14; Tue, 29 Apr 2025 02:16:42 +0000
Received: from EX19D002AND002.ant.amazon.com ([fe80::b4ce:3b74:ef43:1a1c]) by EX19D002AND002.ant.amazon.com ([fe80::b4ce:3b74:ef43:1a1c%8]) with mapi id 15.02.1544.014; Tue, 29 Apr 2025 02:16:42 +0000
From: "Kampanakis, Panos" <kpanos@amazon.com>
To: Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org>, Russ Housley via Datatracker <noreply@ietf.org>
Thread-Index: AQHbuImoZS3dFJqiokOtyqNCNTOkcrO55h2w
Date: Tue, 29 Apr 2025 02:16:42 +0000
Message-ID: <9dc490ceaaae4b73a30c458c9937b7c2@amazon.com>
References: <174585880838.437838.5868592153869448464@dt-datatracker-7bd7b9d5d5-79vfh> <CAEEbLAa7=j5ba2_8KXfkHuN1nhQjDjAMcrB2MOGJviDy1LaKtw@mail.gmail.com>
In-Reply-To: <CAEEbLAa7=j5ba2_8KXfkHuN1nhQjDjAMcrB2MOGJviDy1LaKtw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.37.240.172]
Content-Type: multipart/alternative; boundary="_000_9dc490ceaaae4b73a30c458c9937b7c2amazoncom_"
MIME-Version: 1.0
Message-ID-Hash: UK7GFWPTSVA6HNUOQE5THNESWSTE3NV2
X-Message-ID-Hash: UK7GFWPTSVA6HNUOQE5THNESWSTE3NV2
X-MailFrom: prvs=207f42d9f=kpanos@amazon.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "debcooley1@gmail.com" <debcooley1@gmail.com>, "housley@vigilsec.com" <housley@vigilsec.com>, "spasm@ietf.org" <spasm@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [lamps] Re: Publication has been requested for draft-ietf-lamps-cms-ml-dsa-03
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/eQy0oPD8GZlCZAK2bl49YHlfngU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>

Hi Sophie,
CMS is different than X.509 because it already supports using a “hash digest” of the content, and then signing just that. That is the message digest choice the document is referring to. It is a simple digest, not ExtMu or HashML-DSA. So, to keep CMS working without drastic redesigns, someone could sign the whole thing or a digest of the whole thing, but always with PureML-DSA. Sure, we could use ExtMu here, but that means we would need new OIDs to be able to signify this new “digest algorithm” and carry it separately and then a new signing algorithm OID ExtMuML-DSA.Sign etc. These are more drastic changes for CMS without significant benefit.

From: Sophie Schmieg <sschmieg=40google.com@dmarc.ietf.org>
Sent: Monday, April 28, 2025 6:04 PM
To: Russ Housley via Datatracker <noreply@ietf.org>
Cc: debcooley1@gmail.com; housley@vigilsec.com; spasm@ietf.org
Subject: [EXTERNAL] [lamps] Re: Publication has been requested for draft-ietf-lamps-cms-ml-dsa-03


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.


Isn't there still an inconsistency in this document, talking about using pure mode explicitly covering the entirety of the document (using external-µ in case of prehashing, I presume), but then talking about the choice of message digest in section 3.3, which as 3.2 describes, does not exist in this case.

On Mon, Apr 28, 2025 at 9:47 AM Russ Housley via Datatracker <noreply@ietf.org<mailto:noreply@ietf.org>> wrote:
Russ Housley has requested publication of draft-ietf-lamps-cms-ml-dsa-03 as Proposed Standard on behalf of the LAMPS working group.

Please verify the document's state at https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-ml-dsa/


_______________________________________________
Spasm mailing list -- spasm@ietf.org<mailto:spasm@ietf.org>
To unsubscribe send an email to spasm-leave@ietf.org<mailto:spasm-leave@ietf.org>


--

Sophie Schmieg | Information Security Engineer | ISE Crypto | sschmieg@google.com<mailto:sschmieg@google.com>

v2.46.0 | Report a Bug | By Email | System Status