Hi all, I've just bumped mail-auth (https://github.com/stalwartlabs/mail-auth) from dkim2-spec-07 to -08. You're probably already aware of this, but in case it slipped through, the DNS draft still describes the composite algorithm that spec-08 dropped.
Section 3.4 of spec-08 uses pure ML-DSA-44, named "mldsa44" in s=, while dns-02 still has the composite. Table 1 in Section 3.3 lists it as "mldsa44-ed25519", and the k= text and ABNF in Section 3.4.1 say: key-k-tag-type = "rsa" / "ed25519" / "mldsa44-ed25519-sha512" / x-key-k-tag-type I implemented -08 assuming the next revision will change this to: key-k-tag-type = "rsa" / "ed25519" / "mldsa44" / x-key-k-tag-type with p= holding the raw 1312 octet ML-DSA-44 public key in base64, not a SubjectPublicKeyInfo, and the composite text and table row removed. Also, dns-02 Section 3.3 adds rsa-sha512 and ed25519-sha512, but the sig-name ABNF in spec-08 only has rsa-sha256, ed25519-sha256 and mldsa44. Thanks, Mauro _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
