Skip to content

Add initial version of composite signatures#68

Closed
johngray-dev wants to merge 9 commits intooasis-tcs:masterfrom
johngray-dev:master
Closed

Add initial version of composite signatures#68
johngray-dev wants to merge 9 commits intooasis-tcs:masterfrom
johngray-dev:master

Conversation

@johngray-dev
Copy link
Copy Markdown

Initial version of composite signatures for PKCS#11

  • Used design suggested by the TC working group
  • Also some internal review at Entrust
  • Added reference in reference.md and added comp_sig.md to the spec_files.txt file

@Hamish77 Hamish77 linked an issue Feb 11, 2026 that may be closed by this pull request
…ML-DSA, SLH-DSA and other places. The composite and ML-DSA IETF drafts don't specify if it must be done one way or the other so allow both.

-Addressed the composite label so it isn't confused with the PKCS11 LABEL.
@simo5
Copy link
Copy Markdown
Contributor

simo5 commented Feb 25, 2026

We'll need a section that defines Composite Keys private and public attributes, see the ML-DSA mechanism as an example

@simo5
Copy link
Copy Markdown
Contributor

simo5 commented Feb 25, 2026

We'll need a section that defines Composite Keys private and public attributes, see the ML-DSA mechanism as an example

Nevermind, I misread some titles :-)

…n the ML-DSA section. Also added the new CKM_COMP_SIG_EXTERNAL_HASH Mechanism and describes its working with an example.
@johngray-dev
Copy link
Copy Markdown
Author

I resolved all the comments and added the new CKM_COMP_SIG_EXTERNAL_HASH mechanism.

@simo5
Copy link
Copy Markdown
Contributor

simo5 commented Mar 25, 2026

@johngray-dev the top commit here comp_sig will fix the build.
However I would suggest using this squashed top commit with everything in a single commit,

@simo5
Copy link
Copy Markdown
Contributor

simo5 commented Mar 25, 2026

@johngray-dev the top commit here comp_sig will fix the build. However I would suggest using this squashed top commit with everything in a single commit,

Btw, the main issue was the first table was malformed, alignment with =+= tables is make or break :)

Add workflow_dispatch to allow manual triggering with branch input.
This was referenced Mar 26, 2026
@johngray-dev
Copy link
Copy Markdown
Author

Closing since the improved pull request in under #94

@github-project-automation github-project-automation bot moved this from In Review to Done in PKCS#11 Project Board Mar 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

Add support for Composite Signatures in PKCS11v3.3

4 participants