lamps-wg / draft-composite-sigs

IETF Internet-Draft about X.509 certificates with composite keys and signatures.
Other
1 stars 1 forks source link

Match "Algorithm selection criteria" to actual selections #22

Open ounsworth opened 2 months ago

ounsworth commented 2 months ago

Currently, the Security Consideration section "Public Key Algorithm Selection Criteria" says:

A single RSA combination is provided at a key size of 3072 bits, matched with NIST PQC Level 3 algorithms.

But that's not true because we actually have 4 RSA combinations at both Level 2 and Level 3.

id-MLDSA44-RSA2048-PSS-SHA256
id-MLDSA44-RSA2048-PKCS15-SHA256
id-MLDSA65-RSA3072-PSS-SHA512
id-MLDSA65-RSA3072-PKCS15-SHA512