Leighton-Micali Hash-Based Signatures
draft-mcgrew-hash-sigs-15

(Via drafts-eval@iana.org): IESG/Authors/WG Chairs:

The IANA Functions Operator has completed its review of draft-mcgrew-hash-sigs-13. If any part of this review is inaccurate, please let us know.

We identified a possible issue with the document's description of the new registries' registration procedure.

The document states, "IANA SHOULD verify that all applications for additions to these registries have first been reviewed by the IRTF Crypto Forum Research Group (CFRG)."

We believe that if IANA is meant to perform this function, "SHOULD" should be changed to "must"/"MUST", as IANA can't choose whether to perform this verification. However, it may be appropriate to incorporate this into the designated experts' review, as IANA can't evaluate whether there were any issues with the mailing list review (if this is relevant). (If the Specification Required procedure is going to be used, one or more experts will need to be designated to review the specification. We do have confirmation that the IESG can designate experts for this document.)

We understand that IANA will create the following registries at https://www.iana.org/assignments/xmss-extended-hash-based-signatures:

Registry Name: LM-OTS Signatures
Reference: This document
Registration Procedure: Specification Required

Numeric Identifier    Name    Reference
0x00000000  Reserved  [This document]
0x00000001  LMOTS_SHA256_N32_W1  [This document, Section 4]
0x00000002  LMOTS_SHA256_N32_W2  [This document, Section 4]
0x00000003  LMOTS_SHA256_N32_W4  [This document, Section 4]
0x00000004  LMOTS_SHA256_N32_W8  [This document, Section 4]
0x00000005-0xDDDDDDDC  Unassigned
0xDDDDDDDD-0xFFFFFFFF  Reserved for Private Use  [This document]

Registry Name: Leighton-Micali Signatures
Reference: This document
Registration Procedure: Specification Required

Numeric Identifier    Name    Reference
0x00000000-0x00000004  Reserved  [This document]
0x00000005  LMS_SHA256_M32_H5  [This document, Section 5]
0x00000006  LMS_SHA256_M32_H10  [This document, Section 5]
0x00000007  LMS_SHA256_M32_H15  [This document, Section 5]
0x00000008  LMS_SHA256_M32_H20  [This document, Section 5]
0x00000009  LMS_SHA256_M32_H25  [This document, Section 5]
0x0000000A-0xDDDDDDDC  Unassigned
0xDDDDDDDD-0xFFFFFFFF  Reserved for Private Use  [This document]

Note:  The actions requested in this document will not be completed until the document has been sent to us and the RFC Editor for processing. This message is meant only to confirm the list of actions that will be performed.

Thank you,

Amanda Baber
Lead IANA Services Specialist

Deadline is Nov 21: 

Allison Mankin

Attachments04:32 (1 minute ago)

to Internet, Stephen, cfrg-chairs
Hi, IRSG, this is just to make sure we do the poll step for the revised draft-mcgrew-hash-sigs-13, but I'm making it very short.

Stephen, please send in your official Yes (which I guess is fine given the review).  Thanks for the very thorough review and closure with the authors on their revision.

If anyone else wants to give a position reply here on or before the 21st.  I will request the conflict review at 5pm UTC.

Allison

P.S. I had (as you probably now all know) some health and family illness issues in the interim.  But the machinery is back up and running now for those who inquired. I was sorry to miss seeing (nearly) everyone in Bangkok, and will be in touch on our various pending items, and will be there in Prague.