On Thu, 2025-03-27 at 15:26 -0500, Orie wrote:
> Just so I understand, your proposal is that kty should be used to express
> ML-DSA-44, ML-DSA-65 ... ML-KEM-768 ... X-WING and that alg should remain
> optional.
> 
> We should then register these key types and any desired algorithms that are
> supported for each key type.
> alg would still be used to restrict algorithms within a given key type, but
> the fingerprint for a key would not commit to the algorithm.
> So an ML-DSA-65 and HASH-ML-DSA-65 public key would have the same
> fingerprint.
> 
> This is similar to proposals that Ilari and others discussed at the
> beginning of the work.

Correct.

-- 
Simo Sorce
Distinguished Engineer
RHEL Crypto Team
Red Hat, Inc

_______________________________________________
jose mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to