[Ssh] Re: PQ signatures - where do we want to end up?

["Appel, Ryan" <[e-mail]>]

I too would like a pure implementation of ML-DSA. I also would like a pure implementation of SLH-DSA as the adoption of the algorithm into the protocol will make them available for adoption in implementations which will help drive “crypto agility” where if we find an issue with an algorithm, we can switch. The fact that RSA and ECC are both based on the DLP has made it clear that having one mathematical hardness that if broken (once an exploit can be had) renders all of them insecure makes me weary of only adding one more “type” of scheme for any single component (I.e. only Lattices or only Code-based cryptography). To be clear because of the combined size of public-key + signature, I see ML-DSA having more widespread adoption (like RSA over ECC), but I also think having options is extremely important.


Thank you,



Ryan Appel, MS, BCS


Vice President; Security Architect

GIS – Cyber Security Technology Architecture

Bank of America


[Image]


Cryptography turns a security problem into a key management problem.




TX8-041-02-02, 16001 N DALLAS PKWY, ADDISON, TX, 75001
T 469 201 6609           M 214 250 4830
[e-mail]<mailto:[e-mail]>

[e-mail]<mailto:[e-mail]>


[signatureImage]
________________________________
From: Salz, Rich <rsalz=[e-mail]>
Sent: Tuesday, April 28, 2026 8:02:16 AM
To: Stephen Farrell <[e-mail]>; [e-mail] <[e-mail]>
Subject: [Ssh] Re: PQ signatures - where do we want to end up?

I also want a pure ML-DSA signature, for the reasons Watson talked about.

I believe that entering the warren of composites will get us tied up because we’re using the  LAMPS composite draft, not using the LAMPS draft, only supporting some of the algorithms, or supporting too many of them.

----------------------------------------------------------------------
This message, and any attachment(s), is for the intended recipient(s) only, may contain information that is privileged, confidential and/or proprietary and subject to important terms and conditions available at http://www.bankofamerica.com/electronic-disclaimer. If you are not the intended recipient, please delete this message. For more information about how Bank of America protects your privacy, including specific rights that may apply, please visit the following pages: https://business.bofa.com/en-us/content/global-privacy-notices.html (which includes global privacy notices) and https://www.bankofamerica.com/security-center/privacy-overview/ (which includes US State specific privacy notices such as the http://www.bankofamerica.com/ccpa-notice)