Skip to content

Commit

Permalink
Removing redundancy about absent parameters (#68)
Browse files Browse the repository at this point in the history
No need to say it twice.
  • Loading branch information
csosto-pk authored Jan 8, 2025
1 parent 44543cd commit 6447ff9
Showing 1 changed file with 2 additions and 7 deletions.
9 changes: 2 additions & 7 deletions draft-ietf-lamps-dilithium-certificates.md
Original file line number Diff line number Diff line change
Expand Up @@ -273,7 +273,8 @@ AlgorithmIdentifier in the signatureAlgorithm field in the sequence
Certificate/CertificateList and the signature field in the sequence
TBSCertificate/TBSCertList in certificates and CRLs, respectively,
{{RFC5280}}. The parameters of these signature algorithms MUST be
absent, as explained in {{oids}}.
absent, as explained in {{oids}}. That is, the AlgorithmIdentifier
SHALL be a SEQUENCE of one component, the OID id-ml-dsa-*.

The signatureValue field contains the corresponding ML-DSA signature
computed upon the ASN.1 DER encoded tbsCertificate/tbsCertList
Expand All @@ -286,12 +287,6 @@ implementations that process certificates and CRLs using ML-DSA MUST
recognize the corresponding OIDs. Encoding rules for ML-DSA signature
values are specified {{oids}}.

When an id-ml-dsa-* identifier appears in the algorithm field as an
AlgorithmIdentifier, the encoding MUST omit the parameters field. That
is, the AlgorithmIdentifier SHALL be a SEQUENCE of one component, the
OID id-ml-dsa-*.


# ML-DSA Public Keys in PKIX {#ML-DSA-PubblicKey}

In the X.509 certificate, the subjectPublicKeyInfo field has the
Expand Down

0 comments on commit 6447ff9

Please sign in to comment.