[{"author": "Benson Muite", "text": "

Happy to help

", "time": "2026-07-21T12:01:49.000Z"}, {"author": "Michael P", "text": "

Thanks Benson

", "time": "2026-07-21T12:02:27.000Z"}, {"author": "Sophie Schmieg", "text": "

But that will spell doom for https://www.howmanydayssinceajwtalgnonevuln.com/

", "time": "2026-07-21T12:09:01.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

@sophie, not necessarily, implementations will still do stupid long after we tell then not to.

", "time": "2026-07-21T12:16:11.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

Strictly speaking, if we adopt the draft, whether it is sensible or not is irrelevant because the group fixes it. All that matters is this an interesting question and do we have a realistic chance of solving it.

", "time": "2026-07-21T12:20:44.000Z"}, {"author": "Orie Steele", "text": "

TIL: Lazer - https://eprint.iacr.org/2024/1846

", "time": "2026-07-21T12:21:52.000Z"}, {"author": "Bas Westerbaan", "text": "

For short statements, VOLEitH combined with multivariate signatures seem like the most promising path for PQ ZKPs. Something similar to eg. https://eprint.iacr.org/2026/109 but that can actually be improved quite a bit

", "time": "2026-07-21T12:23:43.000Z"}, {"author": "David Waite", "text": "

its all lasers, voles, and mayo trapdoors to me

", "time": "2026-07-21T12:25:01.000Z"}, {"author": "Orie Steele", "text": "

I like the idea of some agility on zkp attribute commitment

", "time": "2026-07-21T12:25:03.000Z"}, {"author": "Bas Westerbaan", "text": "

:heart: fewer options

", "time": "2026-07-21T12:26:32.000Z"}, {"author": "Orie Steele", "text": "

^ indeed

", "time": "2026-07-21T12:26:38.000Z"}, {"author": "Brent Zundel", "text": "

Yes please

", "time": "2026-07-21T12:26:51.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

I can't see anyone who is so concerned about security that they do ML-KEM accepting the 512...

", "time": "2026-07-21T12:37:15.000Z"}, {"author": "Ivaylo Petrov", "text": "

To clarify, COSE meeting in on Thursday.

", "time": "2026-07-21T12:40:39.000Z"}, {"author": "Bas Westerbaan", "text": "

Summarized: if you use a bad RNG you're in trouble.

", "time": "2026-07-21T12:42:49.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

@Bas, it is more extreeme though, if you decide to ignore large chunks of the spec and do it your own way, you can be in trouble.

", "time": "2026-07-21T12:44:47.000Z"}, {"author": "Sophie Schmieg", "text": "

(also to be clear, I'm not against that wording. I think it's silly, but if it makes people happy I value people's happiness over not being silly)

", "time": "2026-07-21T12:47:23.000Z"}, {"author": "Bas Westerbaan", "text": "

(Not disagreeing with Deb, but if I'd have to choose between RSA+AES-256 or ML-KEM+3DES, I'm choosing the latter.)

", "time": "2026-07-21T12:48:21.000Z"}, {"author": "Quynh Dang", "text": "

AES was designed between 1995 and 1998 by Belgian cryptographers Joan Daemen and Vincent Rijmen.

", "time": "2026-07-21T12:48:40.000Z"}, {"author": "Sophie Schmieg", "text": "

Bas Westerbaan said:

\n
\n

(Not disagreeing with Deb, but if I'd have to choose between RSA+AES-256 or ML-KEM+3DES, I'm choosing the latter.)

\n
\n

highly cursed idea, but I agree

", "time": "2026-07-21T12:49:46.000Z"}, {"author": "Bas Westerbaan", "text": "

SLH-DSA-MD5 over RSA-4096

", "time": "2026-07-21T12:50:54.000Z"}, {"author": "Orie Steele", "text": "

^ if you like combos like that, as sad as our current hpke suites are.. that is exactly why we tried to get alignment on suites.

", "time": "2026-07-21T12:51:00.000Z"}, {"author": "Sophie Schmieg", "text": "

Bas Westerbaan said:

\n
\n

SLH-DSA-MD5 over RSA-4096

\n
\n

I think SLH-DSA-md4 is also technically secure

", "time": "2026-07-21T12:51:33.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

@Sophie, arguably, the meet in the middle attack on DES is less of a threat these days as the AI folk have bought up every stick of DRAM, SSD and hard drive in existence.

\n

Unless of course, they are the folk making the attack.

", "time": "2026-07-21T12:52:22.000Z"}, {"author": "Orie Steele", "text": "

@PHB so you are saying that excessive token consumption is keeping us safe from attacks on DES? I'm doing my part.

", "time": "2026-07-21T12:53:06.000Z"}, {"author": "Bas Westerbaan", "text": "

Orie Steele said:

\n
\n

@PHB so you are saying that excessive token consumption is keeping us safe from attacks on DES? I'm doing my part.

\n
\n

You're absolutely right\u2014great catch!

", "time": "2026-07-21T12:53:46.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

@Orie, that or the whole AI thing is just a ruse, ChatGPT really runs on a RaPi somewhere while the monster computer they have built with all the hardware sits waiting to unwind the BitCoin Blockchain... Muahhaahhhaaaa

", "time": "2026-07-21T12:54:40.000Z"}, {"author": "Bas Westerbaan", "text": "

:plus: If you use it, keep it as-is.

", "time": "2026-07-21T12:58:07.000Z"}, {"author": "Sophie Schmieg", "text": "

+1

", "time": "2026-07-21T12:58:09.000Z"}, {"author": "Jan Klau\u00dfner", "text": "

agree with andrei, its meant as single block

", "time": "2026-07-21T12:58:49.000Z"}, {"author": "Orie Steele", "text": "

I'll just say it here: if we add ASN.1 here, lets make it really really clear, that you should not pull in a full parser / serializer to do it.

", "time": "2026-07-21T12:59:10.000Z"}, {"author": "Orie Steele", "text": "

and to be clear, I think we should strive to keep ASN1 out of JOSE in the year of 2026

", "time": "2026-07-21T13:00:00.000Z"}, {"author": "Bas Westerbaan", "text": "

image.png

\n
", "time": "2026-07-21T13:00:26.000Z"}, {"author": "Sophie Schmieg", "text": "

I think not seeing signatures/keys as opqaue blobs is one of the design mistakes that have been plaguing JWK/JWT

", "time": "2026-07-21T13:01:03.000Z"}, {"author": "Sophie Schmieg", "text": "

don't think of it as ASN.1, think of it as the LAMPS thing that has no known structure

", "time": "2026-07-21T13:01:31.000Z"}, {"author": "Jan Klau\u00dfner", "text": "

+1

", "time": "2026-07-21T13:02:09.000Z"}, {"author": "Orie Steele", "text": "

+1 sophie

", "time": "2026-07-21T13:03:54.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

+1 Sophie

", "time": "2026-07-21T13:04:54.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

For private keys, 128/192/256 bit key and deterministic generation scheme (+ hints if needed)

", "time": "2026-07-21T13:05:40.000Z"}, {"author": "Jan Klau\u00dfner", "text": "

The ASN.1 is also ONLY for the EC part, ML-DSA is kept as byte string as defined by NIST and not additionally wrapped

", "time": "2026-07-21T13:05:43.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

If you are doing it yourself, it is because you are writing a crypto library in which case you probably have to support ASN.1 anyway so TLS etc. can use it

", "time": "2026-07-21T13:07:40.000Z"}, {"author": "Hannes Tschofenig", "text": "

Since Claude will write the code, the decision does not really matter much...

", "time": "2026-07-21T13:10:00.000Z"}, {"author": "Phillip Hallam-Baker", "text": "

@Hannes, unless all the Claude tokens are being used to break the blockchain...

", "time": "2026-07-21T13:10:48.000Z"}, {"author": "Orie Steele", "text": "

+1 Hannes... lets help CFRG finish BBS, what can we do to help.

", "time": "2026-07-21T13:20:53.000Z"}, {"author": "Karen O'Donoghue", "text": "

+1 Orie

", "time": "2026-07-21T13:22:26.000Z"}, {"author": "Emil Lundberg", "text": "

Re: JWP claims mapping - I think Christian's approach in BBS-MOD is quite elegant, and we should consider adopting that for JWP

", "time": "2026-07-21T13:24:06.000Z"}, {"author": "Emil Lundberg", "text": "

with the caveat that in practice there'll probably need to be quite strict control on what headers issuers are allowed to issue, to prevent de-anonymization through small variations in the header encoding

", "time": "2026-07-21T13:25:16.000Z"}, {"author": "Brent Zundel", "text": "

Looking at the authors of BBS, are any of them still active?

", "time": "2026-07-21T13:25:47.000Z"}, {"author": "Orie Steele", "text": "

perhaps we can get some additional authors added to BBS in CFRG to pull / push it over the line.

", "time": "2026-07-21T13:25:52.000Z"}, {"author": "Brent Zundel", "text": "

I'm willing to work on it

", "time": "2026-07-21T13:26:44.000Z"}, {"author": "Emil Lundberg", "text": "

I've been contributing to Blind BBS recently, but not yet BBS core

", "time": "2026-07-21T13:27:24.000Z"}, {"author": "Tadahiko Ito", "text": "

feature 1 (archiving document) is achieved by counter signature.

", "time": "2026-07-21T13:29:05.000Z"}, {"author": "Tadahiko Ito", "text": "

JAdES is European, very rich mechanism, and this one is relatively \"lightweight\"

", "time": "2026-07-21T13:29:38.000Z"}, {"author": "Orie Steele", "text": "

There is also: https://datatracker.ietf.org/doc/rfc9921/

", "time": "2026-07-21T13:34:01.000Z"}]