%% You should probably cite draft-ietf-lamps-pq-composite-sigs-19 instead of this revision. @techreport{ietf-lamps-pq-composite-sigs-08, number = {draft-ietf-lamps-pq-composite-sigs-08}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/08/}, author = {Mike Ounsworth and John Gray and Massimiliano Pala and Jan Klaußner and Scott Fluhrer}, title = {{Composite ML-DSA for use in X.509 Public Key Infrastructure}}, pagetotal = 199, year = 2025, month = sep, day = 21, abstract = {This document defines combinations of ML-DSA {[}FIPS.204{]} in hybrid with traditional algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and Ed448. These combinations are tailored to meet security best practices and regulatory guidelines. Composite ML-DSA is applicable in any application that uses X.509 or PKIX data structures that accept ML-DSA, but where the operator wants extra protection against breaks or catastrophic bugs in ML-DSA.}, }