[openpgp] Re: PQC: ML-DSA only (non-composite) signatu re

Thanks for your feedback as well Daniel!

On 2025-06-19 12:06 AM, Daniel Kahn Gillmor wrote:
> The objective of using experimental codepoints while drafting is to give
> people a chance to write test code to confirm shared understanding and
> trial interoperability between draft/prerelease versions of code; not
> to release code directly.
> 
> This is how the OpenPGP PQC draft was developed.  We only settled on
> non-experimental codepoints once we had demonstrated prerelease
> interoperability, to avoid injecting potentially ill-formed artifacts
> into the wild.
> 
> If someone wants to advance a "pure ML-DSA-87" signing mode draft, i'd
> hope they would follow a similar process.

I agree that using experimental codepoints in shipping code is not the 
way to go. It's just that the need for "pure ML-DSA" signing mode 
probably exists today and we are trying to find a way forward :) Thanks 
for your advice on this.

Regards,
Roberto.

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]