[openpgp] Re: I-D Action: draft-ietf-openpgp-pqc-14.txt

Aron Wussler <[email protected]> Sat, 15 Nov 2025 15:53:27 +0000

Newsgroups	gmane.ietf.openpgp
Message-ID	<5EXr_BQfMdpgrjfPYLMqHVHQ1EFpJ8GRzW75RJf3a_hh1NbEPenyOb73aYq_RcSGCneUTTeo42baZx-EP93tqziwSbISYRAOUeVkfSIyL5c=@wussler.it>

Hi Robert,

OpenPGP v6 signatures include a prepended random salt on the protocol level, deterministic signatures are therefore unattainable.

Cheers,
Aron



--
Aron Wussler
Sent with ProtonMail, OpenPGP key 0x7E6761563EFE3930



On Friday, 14 November 2025 at 15:34, Elliott, Robert \(Servers\) <[email protected]> wrote:

> > 9.3. ML-DSA and SLH-DSA Hedged Variants
> > 

> > This specification makes use of the default "hedged" variants of ML-
> > DSA and SLH-DSA, which mix fresh randomness into the respective
> > signature-generation algorithm's internal hashing step. This has the
> > advantage of an enhanced side-channel resistance of the signature
> > operations according to [FIPS-204] and [FIPS-205].
> 

> 

> When used for code signing (e.g., RPM package signatures), deterministic mode
> might be preferable to facilitate reproducible builds.
> 

> 

> _______________________________________________
> openpgp mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]

signature.asc (application/pgp-signature, 343 B)