IETF Last Call Review of draft-ietf-lamps-x509-slhdsa-07
review-ietf-lamps-x509-slhdsa-07-secdir-lc-kelly-2025-05-16-00

Request Review of draft-ietf-lamps-x509-slhdsa
Requested revision No specific revision (document currently at 08)
Type IETF Last Call Review
Team Security Area Directorate (secdir)
Deadline 2025-05-22
Requested 2025-05-08
Authors Kaveh Bashiri , Scott Fluhrer , Stefan-Lukas Gazdag , Daniel Van Geest , Stavros Kousidis
I-D last updated 2025-06-23 (Latest revision 2025-05-30)
Completed reviews Secdir IETF Last Call review of -07 by Scott G. Kelly (diff)
Genart IETF Last Call review of -07 by Dale R. Worley (diff)
Opsdir IETF Last Call review of -08 by Linda Dunbar
Assignment Reviewer Scott G. Kelly
State Completed
Request IETF Last Call review on draft-ietf-lamps-x509-slhdsa by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/ltP5fYiri_LJli7icY1QKJs2cE0
Reviewed revision 07 (document currently at 08)
Result Ready
Completed 2025-05-16
review-ietf-lamps-x509-slhdsa-07-secdir-lc-kelly-2025-05-16-00
I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG. These comments
were written primarily for the benefit of the security area directors. Document
editors and WG chairs should treat these comments just like any other last call
comments.

The summary of the review is ready.

From the abstract, this document describes the conventions for using the
Stateless Hash-Based Digital Signature Algorithm (SLH-DSA) in X.509 Public Key
Infrastructure.

I've followed the development of the various PQ crypto algorithms, and I am
familiar with SLH-DSA at a high level, but my expertise is significantly less
than that of some (or maybe all) of this document's editors and working group
chairs. With that in mind, I see no security issues with this document.