Telechat Review of draft-ietf-lamps-pq-composite-sigs-15
review-ietf-lamps-pq-composite-sigs-15-secdir-telechat-eastlake-2026-03-26-00

# Telechat SECDIR Review of draft-ietf-lamps-pq-composite-sigs-15

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG. These comments were written primarily for the benefit of the
security area directors. Document editors and WG chairs should treat
these comments just like any other last call comments.

The summary of the review is Ready.

This is a re-review of my previous review of -14 which is here:
https://datatracker.ietf.org/doc/review-ietf-lamps-pq-composite-sigs-14-secdir-lc-eastlake-2026-02-04/

This draft specifies how to do hybrid signatures with ML-DSA as the
post-quantum algorithm and various traditional algorithms.

## Security Considerations

This draft does a good job of covering all the bases. It explains the
hybrid signature concept and motivation well. The Security
Considerations Section appears to be thorough and comprehensive.

## Major/Minor Issues

None.

## Nits

All of the nits mentioned in my previous review have been corrected
and, as far as I can see, no new ones added.


I did not review Sections 7 and 8 or Appendices A through F.

Thanks,
Donald
=============================
 Donald E. Eastlake 3rd   +1-508-333-2270 (cell)
 2386 Panoramic Circle, Apopka, FL 32703 USA
 d3e3e3@gmail.com