Skip to content

Commit

Permalink
Fixed whitespace errors
Browse files Browse the repository at this point in the history
  • Loading branch information
adam-r-ncsc committed Nov 21, 2024
1 parent 33814a7 commit 78bbd1b
Showing 1 changed file with 4 additions and 5 deletions.
9 changes: 4 additions & 5 deletions draft-ietf-lamps-cms-ml-dsa.md
Original file line number Diff line number Diff line change
Expand Up @@ -80,9 +80,9 @@ informative:
author:
-
ins: R. Wang
-
-
ins: K. Ngo
-
-
ins: J. Gärtner
-
ins: E. Dubrova
Expand Down Expand Up @@ -312,9 +312,8 @@ Implementers SHOULD consider implementing such protection measures if it would b
To avoid algorithm substitution attacks, the CMSAlgorithmProtection attribute defined in {{!RFC6211}} SHOULD be included in signed attributes.

# Operational Considerations
If ML-DSA signing is implemented in a hardware device such as hardware security module (HSM) or portable cryptographic token, implementers might want to avoid sending the full content to the device for performance reasons.
By including signed attributes, which necessarily include the message-digest attribute and the content-type attribute as described in
Section 5.3 of {{RFC5652}}, the much smaller set of signed attributes are sent to the device for signing.
If ML-DSA signing is implemented in a hardware device such as hardware security module (HSM) or portable cryptographic token, implementers might want to avoid sending the full content to the device for performance reasons.
By including signed attributes, which necessarily include the message-digest attribute and the content-type attribute as described in Section 5.3 of {{RFC5652}}, the much smaller set of signed attributes are sent to the device for signing.

This approach addresses the use case for HashML-DSA, and is one reason why HashML-DSA is not specified for use with CMS in this document.
Additionally, the pure variant of ML-DSA does support a form of pre-hash via the *mu* "message representative" value described in Section 6.2 of {{FIPS204}}.
Expand Down

0 comments on commit 78bbd1b

Please sign in to comment.