Hi!
On 9/12/26 17:08, Wei Chuang wrote:
It sounds like the algorithm advice is to use ML-DSA-44/65. At this
point, should someone just create an Internet-Draft to specify the PQC
algorithm for use with DKIM and DKIM2 and post it to the list?
-Wei
I'd be strongly for standardizing only a hybrid, not a "pure" pqc
signature algorithm.
The current draft allows a verifier to result in PASS with _one_ valid
signature. So a mail signed with ed25519 (or RSA) and pqc (e.g. ML-DSA)
in separate slots in s= would possibly PASS even if the former fails.
Or a sender could decide to sign with pqc only.
Then the security would depend on an algorithm that hasn't been analysed
for "conventional" attacks as well as RSA or ECC.
By specifying a hybrid we'd make sure that, even if the specific pqc
algorithm turned out to be weak eventually, that each signature entry is
still _at least_ as secure as the "conventional" part of the hybrid.
The alternative would be specifying a "pure" pqc algorithm as you seem
to suggest, but to make complicated rules on verifiers which combination
of passing signatures is required for an overall PASS result.
[...]
Hannah.
--
Hannah Stern
Software Developer
Mail Transfer Development
1&1 Mail & Media Development & Technology GmbH | | |
Phone: +49 721 91374-4519
E-Mail:[email protected] | Web:www.mail-and-media.com www.gmx.net www.web.de www.mail.com www.united-internet-media.de
Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 5452
Geschäftsführer: Alexander Charles, Dr. Michael Hagenau, Thomas Ludwig, Dr.
Verena Patzelt
Member of United Internet
Diese E-Mail kann vertrauliche und/oder gesetzlich geschützte Informationen
enthalten. Wenn Sie nicht der bestimmungsgemäße Adressat sind oder diese E-Mail
irrtümlich erhalten haben, unterrichten Sie bitte den Absender und vernichten
Sie diese E-Mail. Anderen als dem bestimmungsgemäßen Adressaten ist untersagt,
diese E-Mail zu speichern, weiterzuleiten oder ihren Inhalt auf welche Weise
auch immer zu verwenden.
This e-mail may contain confidential and/or privileged information. If you are
not the intended recipient of this e-mail, you are hereby notified that saving,
distribution or use of the content of this e-mail in any way is prohibited. If
you have received this e-mail in error, please notify the sender and delete the
e-mail.
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
