Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding reference to the section with the rationale why not HashML-DSA #69

Merged

Conversation

csosto-pk
Copy link
Contributor

No description provided.

@seanturner seanturner merged commit c6023ac into lamps-wg:seanturner-external_mu-shuffle Jan 8, 2025
1 check passed
seanturner added a commit that referenced this pull request Jan 14, 2025
* ExternalMu Shuffle

Moved " Pre-hash Mode" section to an Appendix.

There are editorial tweaks, but more importantly 2119 language is removed from the Appendix.  I want to call attention to the four (4) 2119 language changes:
* reworked some of this into Security Considerations: This specification uses exclusively ExternalMu-ML-DSA for pre-hashed use cases, and thus HashML-DSA as defined in [FIPS204] and identified by `id-hash-ml-dsa-44-with-sha512`, `id-hash-ml-dsa-65-with-sha512`, and `id-hash-ml-dsa-87-with-sha512` MUST NOT be used in X.509 and related PKIX protocols.
* Implementions are RECOMMENDED -> whole paragraph re-written.
* An ML-DSA key and certificate [MAY->can] be used with either ML-DSA
or ExternalMu-ML-DSA interchangeably.
* Implementors [SHOULD->should] to pay careful attention to how the public key or its hash is delivered to the `ExternalMu-ML-DSA.Prehash()` routine, and from where they are sourcing this data.

* fixing ref anchor

* fixing ref anchor

* unlikely discovery

* simple->direct

* fix typo

Co-authored-by: Mike Ounsworth <mike@ounsworth.ca>

* streamline

* remove repeated HashML-DSA considerations

* remove second

* Adding reference to the section with the rationale why not HashML-DSA (#69)

* Apply suggestions from code review

* Swapping order security<->implementation reasons

---------

Co-authored-by: Mike Ounsworth <mike@ounsworth.ca>
Co-authored-by: Panos K. <pankab@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants