[openpgp] Re: I-D Action: draft-ietf-openpgp-pqc-14.txt

"Elliott, Robert \(Servers\)" <[email protected]> Fri, 14 Nov 2025 14:33:42 +0000

Newsgroups	gmane.ietf.openpgp
Message-ID	<IA4PR84MB40119CCD1BA4AE5FC6F09AFEABCAA@IA4PR84MB4011.NAMPRD84.PROD.OUTLOOK.COM>

> 9.3.  ML-DSA and SLH-DSA Hedged Variants
> 
>   This specification makes use of the default "hedged" variants of ML-
>   DSA and SLH-DSA, which mix fresh randomness into the respective
>   signature-generation algorithm's internal hashing step.  This has the
>   advantage of an enhanced side-channel resistance of the signature
>   operations according to [FIPS-204] and [FIPS-205].

When used for code signing (e.g., RPM package signatures), deterministic mode
might be preferable to facilitate reproducible builds.


_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]