Hi, Sorry for being late to the party as the last call just went out - but I have a question and comment on the how the ctx parameter is handled in draft-ietf-cose-dilithium-08 <https://www.ietf.org/archive/id/draft-ietf-cose-dilithium-08.html#name-ml-dsa-algorithms> :
The ctx parameter MUST be the empty string for ML-DSA-44, ML-DSA-65 and > ML-DSA-87. Honestly I have no idea how common it will be for applications to use ctx or for what purpose, but this seems quite restrictive to me. Would it not be useful to, for example, define a header parameter that can convey the ctx value (if not empty and not agreed out of band)? I found some rationale for the design (linked from) here: https://mailarchive.ietf.org/arch/msg/cose/Pyja-pj1RYmkdMI2IrUHVRXSmi0/ , but Mike Jones urged me to still post the question to the WG as a discussion worth having. So, what do you think? Cheers, Emil Lundberg Staff Engineer | Yubico <http://www.yubico.com/>
_______________________________________________ COSE mailing list -- [email protected] To unsubscribe send an email to [email protected]
