Skip to content

draft-ietf-lamps-pq-composite-sigs-03

Latest
Compare
Choose a tag to compare
@johngray-dev johngray-dev released this 21 Oct 20:40
· 41 commits to main since this release
5475fda

Interop-affecting changes:

  • Compacted CompositeSignaturePrivateKey to SEQUENCE SIZE (2) OF OCTET STRING instead of OneAsymmetricKey to remove redundancy
  • Added support for the ML-DSA context String, and use the Composite Domain as the context for the underlying ML-DSA component algorithm.
  • Added Pre-Hash and Pure modes and changed the Message format to align with FIPS-204. This breaks backwards compatibility with all previous versions.
  • Updated the OID table for new Pre-Hash OIDs and added them to the IANA section.
  • Updated Use in CMS section to reflect content is hashed and pure Composite ML-DSA should be used.

Editorial changes:

  • Added the ASN.1 encodings for the component public keys and signature algorithm identifiers
  • ASN.1 Module changes:
    • Renamed the module from Composite-Signatures-2023 -> Composite-MLDSA-2024
    • Simplified the ASN.1 module to make it more compiler-friendly (thanks Carl!) -- should not affect wire encodings.
  • Updated Security Considerations about Non-separability, EUF-CMA and key reuse.