[lamps] Christopher Inacio's No Objection on draft-ietf-lamps-pq-composite-sigs-15: (with COMMENT)

Christopher Inacio via Datatracker <noreply@ietf.org> Thu, 02 April 2026 03:29 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Christopher Inacio via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <177510056669.706.10257277031286313149@dt-datatracker-9dc8fdd9f-qcdj9>
Date: Wed, 01 Apr 2026 20:29:26 -0700
Message-ID-Hash: 3XZTQTN5RYUFZ77MJNEEUXOPK4XX5RWM
CC: draft-ietf-lamps-pq-composite-sigs@ietf.org, housley@vigilsec.com, lamps-chairs@ietf.org, spasm@ietf.org
Reply-To: Christopher Inacio <stndrds-inacio@andrew.cmu.edu>
Subject: [lamps] Christopher Inacio's No Objection on draft-ietf-lamps-pq-composite-sigs-15: (with COMMENT)
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/q8yT_8_lVA_Q0E1cB1fNpaxJZEA>

Christopher Inacio has entered the following ballot position for
draft-ietf-lamps-pq-composite-sigs-15: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks to Russ for the comprehensive shepherding, including the DOWNREF. 
Thanks to Tim and Donald for the GENART and SEC review respectively.

thanks for the VERY complete draft; with very thorough citations.  In most of
my reviews I try to check many (most?) of those citations, this broke me on
doing that.

* I think it is in Med's comments, but I also noticed the broken reference:
>421       Given this design of Composite ML-DSA, it is possible to split the
>422       pre-hashing step out from the signature generation process -- see
>423       {#impl-cons-external-ph} for further discussion and sample
>424       algorithms.

* As mentioned in some other AD comments, the "stronger strong" is very hard to
read, capitalization "stronger Strong Existential" is advised: >201      
Composite ML-DSA is applicable in PKIX-related applications that >202      
would otherwise use ML-DSA and where existential unforgeability (EUF- >203     
 CMA) security is acceptable, instead of the stronger strong >204      
existential unforgeability (SUF-CMA) which Composite ML-DSA does not >205      
offer.

[lamps] Christopher Inacio's No Objection on draf… Christopher Inacio via Datatracker