%% You should probably cite draft-ietf-lamps-pq-composite-sigs-03 instead of this revision. @techreport{ietf-lamps-pq-composite-sigs-02, number = {draft-ietf-lamps-pq-composite-sigs-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/02/}, author = {Mike Ounsworth and John Gray and Massimiliano Pala and Jan Klaußner and Scott Fluhrer}, title = {{Composite ML-DSA for use in Internet PKI}}, pagetotal = 51, year = , month = , day = , abstract = {This document introduces a set of signature schemes that use pairs of cryptographic elements such as public keys and signatures to combine their security properties. These schemes effectively mitigate risks associated with the adoption of post-quantum cryptography and are fully compatible with existing X.509, PKIX, and CMS data structures and protocols. This document defines thirteen specific pairwise combinations, namely ML-DSA Composite Schemes, that blend ML-DSA with traditional algorithms such as RSA, ECDSA, Ed25519, and Ed448. These combinations are tailored to meet security best practices and regulatory requirements.}, }