[TLS] Re: Composite ML-DSA

[Hal Murray <[e-mail]>]

Peter Gutmann said:
> Calling Apples and Oranges one thing just because you add the word
> "composite" in front and define an OID for it doesn't make them so,
> they're still two completely different things with separate keys,
> separate algorithms, separate implementations of the algorithms. 

Right.  But if you put the apple and orange in a box, then you only need 
one shipping label.

Using a composite with a single OID means that the top level code doesn't 
need to change.  Things like here is the filename for the key(s) still 
work.  Yes, the implementation has to open the box.  40 lines of code to 
split the key into 2 parts and call the 2 implementations doesn't seem 
unreasonable.


-- 
These are my opinions.  I hate spam.