[lamps] Re: I-D Action: draft-ietf-lamps-pq-composite-sigs-17.txt

[Mike Ounsworth <[e-mail]>]

Sorry, I had missed Ketan's COMMENTs:
https://mailarchive.ietf.org/arch/msg/spasm/9WiKvYZFmxFui2izAfsMCmQo8bw/

This version addresses those.


On Thu, 9 Apr 2026 at 10:24, <[e-mail]> wrote:

> Internet-Draft draft-ietf-lamps-pq-composite-sigs-17.txt is now available.
> It
> is a work item of the Limited Additional Mechanisms for PKIX and SMIME
> (LAMPS)
> WG of the IETF.
>
>    Title:   Composite Module-Lattice-Based Digital Signature Algorithm
> (ML-DSA) for use in X.509 Public Key Infrastructure
>    Authors: Mike Ounsworth
>             John Gray
>             Massimiliano Pala
>             Jan Klaussner
>             Scott Fluhrer
>    Name:    draft-ietf-lamps-pq-composite-sigs-17.txt
>    Pages:   234
>    Dates:   2026-04-09
>
> Abstract:
>
>    This document defines combinations of US NIST Module-Lattice-Based
>    Digital Signature Algorithm (ML-DSA) in hybrid with traditional
>    algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and Ed448.
>    These combinations are tailored to meet regulatory guidelines in
>    certain regions.  Composite ML-DSA is applicable in applications that
>    use X.509 or PKIX data structures that accept ML-DSA, but where the
>    operator wants extra protection against breaks or catastrophic bugs
>    in ML-DSA, and where existential unforgeability (EUF-CMA) level
>    security is acceptable.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-lamps-pq-composite-sigs-17.html
>
> A diff from the previous version is available at:
>
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-pq-composite-sigs-17
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>