lamps-wg / draft-composite-sigs

IETF Internet-Draft about X.509 certificates with composite keys and signatures.
Other
3 stars 1 forks source link

Remove HashComposite-ML-DSA in place of external mu+tradhash #90

Open johngray-dev opened 14 hours ago

johngray-dev commented 14 hours ago

Much discussion has happened at IETF around making use of the external mu in ML-DSA (Algorithm 7, line 6 of FIPS 204). This allows the hash of the message to be calculated externally while producing the same output as in Algorithm 4 of FIPS 204. This means we no longer have a need to support the Hash ML-DSA... This will reduce the number of OIDS by half which is good.

Question is do we actually need to do anything other than remove Hash Composite ML-DSA? Probably a paragraph explaining that it can be used could be added.