Skip to content

Commit 0061240

Browse files
author
ID Bot
committed
Script updating gh-pages from 342fa1f. [ci skip]
1 parent 34a42de commit 0061240

File tree

3 files changed

+134
-68
lines changed

3 files changed

+134
-68
lines changed

‎draft-ietf-tls-mldsa.html‎

Lines changed: 92 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@
2424
intervaltree 3.1.0
2525
Jinja2 3.1.6
2626
lxml 5.3.0
27-
platformdirs 4.3.7
27+
platformdirs 4.3.8
2828
pycountry 24.6.1
2929
PyYAML 6.0.2
3030
requests 2.32.3
@@ -1052,7 +1052,7 @@
10521052
</tr></thead>
10531053
<tfoot><tr>
10541054
<td class="left">Hollebeek, et al.</td>
1055-
<td class="center">Expires 17 November 2025</td>
1055+
<td class="center">Expires 19 November 2025</td>
10561056
<td class="right">[Page]</td>
10571057
</tr></tfoot>
10581058
</table>
@@ -1065,12 +1065,12 @@
10651065
<dd class="internet-draft">draft-ietf-tls-mldsa-latest</dd>
10661066
<dt class="label-published">Published:</dt>
10671067
<dd class="published">
1068-
<time datetime="2025-05-16" class="published">16 May 2025</time>
1068+
<time datetime="2025-05-18" class="published">18 May 2025</time>
10691069
</dd>
10701070
<dt class="label-intended-status">Intended Status:</dt>
10711071
<dd class="intended-status">Informational</dd>
10721072
<dt class="label-expires">Expires:</dt>
1073-
<dd class="expires"><time datetime="2025-11-17">17 November 2025</time></dd>
1073+
<dd class="expires"><time datetime="2025-11-19">19 November 2025</time></dd>
10741074
<dt class="label-authors">Authors:</dt>
10751075
<dd class="authors">
10761076
<div class="author">
@@ -1129,7 +1129,7 @@ <h2 id="name-status-of-this-memo">
11291129
time. It is inappropriate to use Internet-Drafts as reference
11301130
material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow"></a></p>
11311131
<p id="section-boilerplate.1-4">
1132-
This Internet-Draft will expire on 17 November 2025.<a href="#section-boilerplate.1-4" class="pilcrow"></a></p>
1132+
This Internet-Draft will expire on 19 November 2025.<a href="#section-boilerplate.1-4" class="pilcrow"></a></p>
11331133
</section>
11341134
</div>
11351135
<div id="copyright">
@@ -1165,7 +1165,18 @@ <h2 id="name-copyright-notice">
11651165
<p id="section-toc.1-1.2.1" class="keepWithNext"><a href="#section-2" class="auto internal xref">2</a>.  <a href="#name-conventions-and-definitions" class="internal xref">Conventions and Definitions</a></p>
11661166
</li>
11671167
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3">
1168-
<p id="section-toc.1-1.3.1" class="keepWithNext"><a href="#section-3" class="auto internal xref">3</a>.  <a href="#name-ml-dsa-signatureschemes-typ" class="internal xref">ML-DSA SignatureSchemes Types</a></p>
1168+
<p id="section-toc.1-1.3.1"><a href="#section-3" class="auto internal xref">3</a>.  <a href="#name-ml-dsa-signaturescheme-valu" class="internal xref">ML-DSA SignatureScheme values</a></p>
1169+
<ul class="compact toc ulBare ulEmpty">
1170+
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.1">
1171+
<p id="section-toc.1-1.3.2.1.1" class="keepWithNext"><a href="#section-3.1" class="auto internal xref">3.1</a>.  <a href="#name-certificate-chain" class="internal xref">Certificate chain</a></p>
1172+
</li>
1173+
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.2">
1174+
<p id="section-toc.1-1.3.2.2.1"><a href="#section-3.2" class="auto internal xref">3.2</a>.  <a href="#name-handshake-signature" class="internal xref">Handshake signature</a></p>
1175+
</li>
1176+
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.3.2.3">
1177+
<p id="section-toc.1-1.3.2.3.1"><a href="#section-3.3" class="auto internal xref">3.3</a>.  <a href="#name-tls-12" class="internal xref">TLS 1.2</a></p>
1178+
</li>
1179+
</ul>
11691180
</li>
11701181
<li class="compact toc ulBare ulEmpty" id="section-toc.1-1.4">
11711182
<p id="section-toc.1-1.4.1"><a href="#section-4" class="auto internal xref">4</a>.  <a href="#name-security-considerations" class="internal xref">Security Considerations</a></p>
@@ -1202,7 +1213,7 @@ <h2 id="name-introduction">
12021213
<p id="section-1-1">ML-DSA is a post-quantum module-lattice based digital signature algorothm
12031214
standardised by NIST in <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span>.<a href="#section-1-1" class="pilcrow"></a></p>
12041215
<p id="section-1-2">This memo specifies how ML-DSA can be negotiated for authentication in TLS 1.3
1205-
via the "signature_algorithms" and "signature_algorithms_cert" extensions.<a href="#section-1-2" class="pilcrow"></a></p>
1216+
via the <code>signature_algorithms</code> and <code>signature_algorithms_cert</code> extensions.<a href="#section-1-2" class="pilcrow"></a></p>
12061217
</section>
12071218
</div>
12081219
<div id="conventions-and-definitions">
@@ -1216,43 +1227,85 @@ <h2 id="name-conventions-and-definitions">
12161227
appear in all capitals, as shown here.<a href="#section-2-1" class="pilcrow"></a></p>
12171228
</section>
12181229
</div>
1219-
<div id="ml-dsa-signatureschemes-types">
1230+
<div id="ml-dsa-signaturescheme-values">
12201231
<section id="section-3">
1221-
<h2 id="name-ml-dsa-signatureschemes-typ">
1222-
<a href="#section-3" class="section-number selfRef">3. </a><a href="#name-ml-dsa-signatureschemes-typ" class="section-name selfRef">ML-DSA SignatureSchemes Types</a>
1232+
<h2 id="name-ml-dsa-signaturescheme-valu">
1233+
<a href="#section-3" class="section-number selfRef">3. </a><a href="#name-ml-dsa-signaturescheme-valu" class="section-name selfRef">ML-DSA SignatureScheme values</a>
12231234
</h2>
12241235
<p id="section-3-1">As defined in <span>[<a href="#RFC8446" class="cite xref">RFC8446</a>]</span>, the SignatureScheme namespace is used for
12251236
the negotiation of signature scheme for authentication via the
1226-
"signature_algorithms" and "signature_algorithms_cert" extensions.
1227-
This document adds three new SignatureSchemes
1228-
types for the three ML-DSA parameter sets as follows.<a href="#section-3-1" class="pilcrow"></a></p>
1229-
<div class="alignLeft art-text artwork" id="section-3-2">
1230-
<pre>
1231-
enum {
1232-
mldsa44(0x0904),
1233-
mldsa65(0x0905),
1234-
mldsa87(0x0906)
1235-
} SignatureScheme;
1236-
</pre><a href="#section-3-2" class="pilcrow"></a>
1237+
<code>signature_algorithms</code> and <code>signature_algorithms_cert</code> extensions.
1238+
This document adds three new SignatureScheme values for the three
1239+
ML-DSA parameter sets from <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span> as follows.<a href="#section-3-1" class="pilcrow"></a></p>
1240+
<span id="name-signatureschemes-for-ml-dsa"></span><div id="schemes">
1241+
<table class="center" id="table-1">
1242+
<caption>
1243+
<a href="#table-1" class="selfRef">Table 1</a>:
1244+
<a href="#name-signatureschemes-for-ml-dsa" class="selfRef">SignatureSchemes for ML-DSA</a>
1245+
</caption>
1246+
<thead>
1247+
<tr>
1248+
<th class="text-left" rowspan="1" colspan="1">SignatureScheme</th>
1249+
<th class="text-left" rowspan="1" colspan="1">FIPS 204</th>
1250+
<th class="text-left" rowspan="1" colspan="1">Certificate AlgorithmIdentifier</th>
1251+
</tr>
1252+
</thead>
1253+
<tbody>
1254+
<tr>
1255+
<td class="text-left" rowspan="1" colspan="1">mldsa44(0x0904)</td>
1256+
<td class="text-left" rowspan="1" colspan="1">ML-DSA-44</td>
1257+
<td class="text-left" rowspan="1" colspan="1">id-ML-DSA-44</td>
1258+
</tr>
1259+
<tr>
1260+
<td class="text-left" rowspan="1" colspan="1">mldsa65(0x0905)</td>
1261+
<td class="text-left" rowspan="1" colspan="1">ML-DSA-65</td>
1262+
<td class="text-left" rowspan="1" colspan="1">id-ML-DSA-64</td>
1263+
</tr>
1264+
<tr>
1265+
<td class="text-left" rowspan="1" colspan="1">mldsa87(0x0906)</td>
1266+
<td class="text-left" rowspan="1" colspan="1">ML-DSA-87</td>
1267+
<td class="text-left" rowspan="1" colspan="1">id-ML-DSA-87</td>
1268+
</tr>
1269+
</tbody>
1270+
</table>
1271+
</div>
1272+
<p id="section-3-3">Note that these are different from the HashML-DSA pre-hashed
1273+
variants defined in Section 5.4 of <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span>.<a href="#section-3-3" class="pilcrow"></a></p>
1274+
<div id="certificate-chain">
1275+
<section id="section-3.1">
1276+
<h3 id="name-certificate-chain">
1277+
<a href="#section-3.1" class="section-number selfRef">3.1. </a><a href="#name-certificate-chain" class="section-name selfRef">Certificate chain</a>
1278+
</h3>
1279+
<p id="section-3.1-1">For the purpose of signalling support for signatures on certificates
1280+
as per <span><a href="https://rfc-editor.org/rfc/rfc8446#section-4.2.4" class="relref">Section 4.2.4</a> of [<a href="#RFC8446" class="cite xref">RFC8446</a>]</span>, these values indicate support
1281+
for signing using the given AlgorithmIdentifier shown in <a href="#schemes" class="auto internal xref">Table 1</a>
1282+
as defined in <span>[<a href="#MLDSACERTS" class="cite xref">MLDSACERTS</a>]</span>.<a href="#section-3.1-1" class="pilcrow"></a></p>
1283+
</section>
12371284
</div>
1238-
<p id="section-3-3">These correspond to ML-DSA-44, ML-DSA-65, and ML-DSA-87 defined
1239-
in <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span> respectively. Note that these are different
1240-
from the HashML-DSA pre-hashed variants defined in Section 5.4 of <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span>.<a href="#section-3-3" class="pilcrow"></a></p>
1241-
<p id="section-3-4">If one of those SignatureSchemes values is used in a CertificateVerify message,
1285+
<div id="handshake-signature">
1286+
<section id="section-3.2">
1287+
<h3 id="name-handshake-signature">
1288+
<a href="#section-3.2" class="section-number selfRef">3.2. </a><a href="#name-handshake-signature" class="section-name selfRef">Handshake signature</a>
1289+
</h3>
1290+
<p id="section-3.2-1">When one of those SignatureScheme values is used in a CertificateVerify message,
12421291
then the signature <span class="bcp14">MUST</span> be computed and verified as specified in
1243-
<span><a href="https://rfc-editor.org/rfc/rfc8446#section-4.4.3" class="relref">Section 4.4.3</a> of [<a href="#RFC8446" class="cite xref">RFC8446</a>]</span>, and the corresponding end-entity certificate <span class="bcp14">MUST</span>
1244-
use id-ML-DSA-44, id-ML-DSA-65, id-ML-DSA-87 respectively as
1245-
defined in <span>[<a href="#I-D.ietf-lamps-dilithium-certificates" class="cite xref">I-D.ietf-lamps-dilithium-certificates</a>]</span>.<a href="#section-3-4" class="pilcrow"></a></p>
1246-
<p id="section-3-5">The context parameter defined in <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span> Algorithm 2 and 3
1247-
<span class="bcp14">MUST</span> be the empty string.<a href="#section-3-5" class="pilcrow"></a></p>
1248-
<p id="section-3-6">Presence of those schemes in "signature_algorithms_cert" or
1249-
"signature_algorithms" (when the former is not sent) indicates support
1250-
for certificates signed by those algorithms in the Certificate message,
1251-
as specified in <span><a href="https://rfc-editor.org/rfc/rfc8446#section-4.2.4" class="relref">Section 4.2.4</a> of [<a href="#RFC8446" class="cite xref">RFC8446</a>]</span>.<a href="#section-3-6" class="pilcrow"></a></p>
1252-
<p id="section-3-7">The schemes defined in this document <span class="bcp14">MUST NOT</span> be used in TLS 1.2 <span>[<a href="#RFC5246" class="cite xref">RFC5246</a>]</span>.
1292+
<span><a href="https://rfc-editor.org/rfc/rfc8446#section-4.4.3" class="relref">Section 4.4.3</a> of [<a href="#RFC8446" class="cite xref">RFC8446</a>]</span>, and the corresponding end-entity
1293+
certificate <span class="bcp14">MUST</span> use the corresponding AlgorithmIdentifier from <a href="#schemes" class="auto internal xref">Table 1</a>.<a href="#section-3.2-1" class="pilcrow"></a></p>
1294+
<p id="section-3.2-2">The context parameter defined in <span>[<a href="#FIPS204" class="cite xref">FIPS204</a>]</span> Algorithm 2 and 3
1295+
<span class="bcp14">MUST</span> be the empty string.<a href="#section-3.2-2" class="pilcrow"></a></p>
1296+
</section>
1297+
</div>
1298+
<div id="tls-12">
1299+
<section id="section-3.3">
1300+
<h3 id="name-tls-12">
1301+
<a href="#section-3.3" class="section-number selfRef">3.3. </a><a href="#name-tls-12" class="section-name selfRef">TLS 1.2</a>
1302+
</h3>
1303+
<p id="section-3.3-1">The schemes defined in this document <span class="bcp14">MUST NOT</span> be used in TLS 1.2 <span>[<a href="#RFC5246" class="cite xref">RFC5246</a>]</span>.
12531304
A peer that receives ServerKeyExchange or CertificateVerify message in a TLS
12541305
1.2 connection with schemes defined in this document <span class="bcp14">MUST</span> abort the connection
1255-
with an illegal_parameter alert.<a href="#section-3-7" class="pilcrow"></a></p>
1306+
with an illegal_parameter alert.<a href="#section-3.3-1" class="pilcrow"></a></p>
1307+
</section>
1308+
</div>
12561309
</section>
12571310
</div>
12581311
<div id="security-considerations">
@@ -1270,8 +1323,8 @@ <h2 id="name-iana-considerations">
12701323
</h2>
12711324
<p id="section-5-1">This document requests new entries to the TLS SignatureScheme registry,
12721325
according to the procedures in <span><a href="https://datatracker.ietf.org/doc/html/draft-ietf-tls-rfc8447bis-12#section-6" class="relref">Section 6</a> of [<a href="#TLSIANA" class="cite xref">TLSIANA</a>]</span>.<a href="#section-5-1" class="pilcrow"></a></p>
1273-
<table class="center" id="table-1">
1274-
<caption><a href="#table-1" class="selfRef">Table 1</a></caption>
1326+
<table class="center" id="table-2">
1327+
<caption><a href="#table-2" class="selfRef">Table 2</a></caption>
12751328
<thead>
12761329
<tr>
12771330
<th class="text-left" rowspan="1" colspan="1">Value</th>
@@ -1335,7 +1388,7 @@ <h3 id="name-informative-references">
13351388
<a href="#section-6.2" class="section-number selfRef">6.2. </a><a href="#name-informative-references" class="section-name selfRef">Informative References</a>
13361389
</h3>
13371390
<dl class="references">
1338-
<dt id="I-D.ietf-lamps-dilithium-certificates">[I-D.ietf-lamps-dilithium-certificates]</dt>
1391+
<dt id="MLDSACERTS">[MLDSACERTS]</dt>
13391392
<dd>
13401393
<span class="refAuthor">Massimo, J.</span>, <span class="refAuthor">Kampanakis, P.</span>, <span class="refAuthor">Turner, S.</span>, and <span class="refAuthor">B. Westerbaan</span>, <span class="refTitle">"Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)"</span>, <span class="refContent">Work in Progress</span>, <span class="seriesInfo">Internet-Draft, draft-ietf-lamps-dilithium-certificates-09</span>, <time datetime="2025-05-07" class="refDate">7 May 2025</time>, <span>&lt;<a href="https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates-09">https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates-09</a>&gt;</span>. </dd>
13411394
<dd class="break"></dd>

‎draft-ietf-tls-mldsa.txt‎

Lines changed: 41 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,10 @@
55
Transport Layer Security§ T. Hollebeek
66
Internet-Draft DigiCert
77
Intended status: Informational S. Schmieg
8-
Expires: 17 November 2025 Google
8+
Expires: 19 November 2025 Google
99
B. Westerbaan
1010
Cloudflare
11-
16 May 2025
11+
18 May 2025
1212

1313

1414
Use of ML-DSA in TLS 1.3
@@ -51,7 +51,7 @@ Status of This Memo
5151
time. It is inappropriate to use Internet-Drafts as reference
5252
material or to cite them other than as "work in progress."
5353

54-
This Internet-Draft will expire on 17 November 2025.
54+
This Internet-Draft will expire on 19 November 2025.
5555

5656
Copyright Notice
5757

@@ -71,7 +71,10 @@ Table of Contents
7171

7272
1. Introduction
7373
2. Conventions and Definitions
74-
3. ML-DSA SignatureSchemes Types
74+
3. ML-DSA SignatureScheme values
75+
3.1. Certificate chain
76+
3.2. Handshake signature
77+
3.3. TLS 1.2
7578
4. Security Considerations
7679
5. IANA Considerations
7780
6. References
@@ -86,8 +89,8 @@ Table of Contents
8689
algorothm standardised by NIST in [FIPS204].
8790

8891
This memo specifies how ML-DSA can be negotiated for authentication
89-
in TLS 1.3 via the "signature_algorithms" and
90-
"signature_algorithms_cert" extensions.
92+
in TLS 1.3 via the signature_algorithms and signature_algorithms_cert
93+
extensions.
9194

9295
2. Conventions and Definitions
9396

@@ -97,38 +100,48 @@ Table of Contents
97100
BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all
98101
capitals, as shown here.
99102

100-
3. ML-DSA SignatureSchemes Types
103+
3. ML-DSA SignatureScheme values
101104

102105
As defined in [RFC8446], the SignatureScheme namespace is used for
103106
the negotiation of signature scheme for authentication via the
104-
"signature_algorithms" and "signature_algorithms_cert" extensions.
105-
This document adds three new SignatureSchemes types for the three ML-
106-
DSA parameter sets as follows.
107+
signature_algorithms and signature_algorithms_cert extensions. This
108+
document adds three new SignatureScheme values for the three ML-DSA
109+
parameter sets from [FIPS204] as follows.
107110

108-
enum {
109-
mldsa44(0x0904),
110-
mldsa65(0x0905),
111-
mldsa87(0x0906)
112-
} SignatureScheme;
111+
+=================+===========+=================================+
112+
| SignatureScheme | FIPS 204 | Certificate AlgorithmIdentifier |
113+
+=================+===========+=================================+
114+
| mldsa44(0x0904) | ML-DSA-44 | id-ML-DSA-44 |
115+
+-----------------+-----------+---------------------------------+
116+
| mldsa65(0x0905) | ML-DSA-65 | id-ML-DSA-64 |
117+
+-----------------+-----------+---------------------------------+
118+
| mldsa87(0x0906) | ML-DSA-87 | id-ML-DSA-87 |
119+
+-----------------+-----------+---------------------------------+
113120

114-
These correspond to ML-DSA-44, ML-DSA-65, and ML-DSA-87 defined in
115-
[FIPS204] respectively. Note that these are different from the
116-
HashML-DSA pre-hashed variants defined in Section 5.4 of [FIPS204].
121+
Table 1: SignatureSchemes for ML-DSA
117122

118-
If one of those SignatureSchemes values is used in a
123+
Note that these are different from the HashML-DSA pre-hashed variants
124+
defined in Section 5.4 of [FIPS204].
125+
126+
3.1. Certificate chain
127+
128+
For the purpose of signalling support for signatures on certificates
129+
as per Section 4.2.4 of [RFC8446], these values indicate support for
130+
signing using the given AlgorithmIdentifier shown in Table 1 as
131+
defined in [MLDSACERTS].
132+
133+
3.2. Handshake signature
134+
135+
When one of those SignatureScheme values is used in a
119136
CertificateVerify message, then the signature MUST be computed and
120137
verified as specified in Section 4.4.3 of [RFC8446], and the
121-
corresponding end-entity certificate MUST use id-ML-DSA-44, id-ML-
122-
DSA-65, id-ML-DSA-87 respectively as defined in
123-
[I-D.ietf-lamps-dilithium-certificates].
138+
corresponding end-entity certificate MUST use the corresponding
139+
AlgorithmIdentifier from Table 1.
124140

125141
The context parameter defined in [FIPS204] Algorithm 2 and 3 MUST be
126142
the empty string.
127143

128-
Presence of those schemes in "signature_algorithms_cert" or
129-
"signature_algorithms" (when the former is not sent) indicates
130-
support for certificates signed by those algorithms in the
131-
Certificate message, as specified in Section 4.2.4 of [RFC8446].
144+
3.3. TLS 1.2
132145

133146
The schemes defined in this document MUST NOT be used in TLS 1.2
134147
[RFC5246]. A peer that receives ServerKeyExchange or
@@ -155,7 +168,7 @@ Table of Contents
155168
| 0x0906 (please) | mldsa87 | N | This document. |
156169
+-----------------+-------------+-------------+----------------+
157170

158-
Table 1
171+
Table 2
159172

160173
6. References
161174

@@ -177,7 +190,7 @@ Table of Contents
177190

178191
6.2. Informative References
179192

180-
[I-D.ietf-lamps-dilithium-certificates]
193+
[MLDSACERTS]
181194
Massimo, J., Kampanakis, P., Turner, S., and B.
182195
Westerbaan, "Internet X.509 Public Key Infrastructure -
183196
Algorithm Identifiers for the Module-Lattice-Based Digital

0 commit comments

Comments
 (0)