[openpgp] Re: I-D Action: draft-ietf-openpgp-pqc-14.txt

Hi Robert,

nevertheless it would be possible to deliberately violate the standard 
by using repeated salt values and the deterministic variant of ML-DSA 
and thus obtain deterministic signatures. Not that I recommend it. But 
the signatures would verify like the standard-compliant ones.

Best regards,
Falko

Am 15.11.25 um 16:53 schrieb Aron Wussler:
> Hi Robert,
>
> OpenPGP v6 signatures include a prepended random salt on the protocol level, deterministic signatures are therefore unattainable.
>
> Cheers,
> Aron
>
>
>
> --
> Aron Wussler
> Sent with ProtonMail, OpenPGP key 0x7E6761563EFE3930
>
>
>
> On Friday, 14 November 2025 at 15:34, Elliott, Robert \(Servers\)<[email protected]> wrote:
>
>>> 9.3. ML-DSA and SLH-DSA Hedged Variants
>>>
>>> This specification makes use of the default "hedged" variants of ML-
>>> DSA and SLH-DSA, which mix fresh randomness into the respective
>>> signature-generation algorithm's internal hashing step. This has the
>>> advantage of an enhanced side-channel resistance of the signature
>>> operations according to [FIPS-204] and [FIPS-205].
>> When used for code signing (e.g., RPM package signatures), deterministic mode
>> might be preferable to facilitate reproducible builds.
>>
>> _______________________________________________
>> openpgp mailing list [email protected]
>> To unsubscribe send an email [email protected]
>>
>> _______________________________________________
>> openpgp mailing list [email protected]
>> To unsubscribe send an email [email protected]
-- 

*MTG AG*
Dr. Falko Strenzke

Phone: +49 6151 8000 24
E-Mail: [email protected]
Web: mtg.de <https://www.mtg.de>

------------------------------------------------------------------------

MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
Commercial register: HRB 8901
Register Court: Amtsgericht Darmstadt
Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
Chairman of the Supervisory Board: Dr. Thomas Milde

This email may contain confidential and/or privileged information. If 
you are not the correct recipient or have received this email in error,
please inform the sender immediately and delete this email.Unauthorised 
copying or distribution of this email is not permitted.

Data protection information: Privacy policy 
<https://www.mtg.de/en/privacy-policy>

_______________________________________________
openpgp mailing list -- [email protected]
To unsubscribe send an email to [email protected]