I-D Action: draft-burls-mtac-00.txt

Internet-Draft draft-burls-mtac-00.txt is now available.

   Title:   Merkle Tree Agent Certificates (MTAC): Batch-Issued Post-Quantum Identity Credentials for AI Agents
   Author:  Reuben Burls
   Name:    draft-burls-mtac-00.txt
   Pages:   29
   Dates:   2026-07-21

Abstract:

   This document specifies Merkle Tree Agent Certificates (MTAC), a
   credential format and issuance profile in which a certificate
   authority commits a batch of AI agent identity credentials to a
   Merkle tree, signs only the tree head with the post-quantum signature
   algorithm ML-DSA-65, and distributes a per-credential inclusion
   proof.  A relying party verifies a credential offline against the
   signed tree head without contacting the issuer.  Each batch root is
   additionally co-signed by an independently keyed witness, providing
   per-batch integrity and continuity attestation, and its root can be
   corroborated against an independent public record.

   MTAC defines the leaf structure, its deterministic encoding, the leaf
   hash preimage, the signed tree head wire format, the witness co-
   signature, and an optional challenge-response proof of possession
   that binds a credential to a holder key.  Test vectors are provided.
   This document specifies a credential issuance and verification
   mechanism.  Declared scopes carried in a credential are self-reported
   parameters recorded at issuance; this document does not specify a
   runtime authorization mechanism.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-burls-mtac/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-burls-mtac-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]