COSE M. Prorock Internet-Draft mesur.io Intended status: Standards Track O. Steele Expires: 10 January 2024 Transmute R. Misoczki Google M. Osborne IBM C. Cloostermans NXP 9 July 2023 JOSE and COSE Encoding for Dilithium draft-ietf-cose-dilithium-01 Abstract This document describes JSON and CBOR serializations for CRYSTALS Dilithium, a Post-Quantum Cryptography (PQC) based suite. This document does not define any new cryptography, only seralizations of existing cryptographic systems. This document registers key types for JOSE and COSE, specifically MLWE. Key types in this document are specified by the cryptographic algorithm family in use by a particular algorithm as discussed in RFC7517. This document registers signature algorithms types for JOSE and COSE, specifically CRYDI3 and others as required for use of various parameterizations of the post-quantum signature scheme CRYSTALS Dilithium. Note to RFC Editor: CRYSTALS Dilithium is described and noted as a part of the 2022 PQC Selected Digital Signature Algorithims (https://csrc.nist.gov/Projects/post-quantum-cryptography/selected- algorithms-2022) As a result, this document should not be proceed to AUTH48 until NIST completes paramter tuning and selection as a part of the PQC (https://csrc.nist.gov/projects/post-quantum-cryptography) standardization process. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Prorock, et al. Expires 10 January 2024 [Page 1] Internet-Draft jose-cose-dilithium July 2023 Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 10 January 2024. Copyright Notice Copyright (c) 2023 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Notational Conventions . . . . . . . . . . . . . . . . . . . 3 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 3 3. CRYSTALS-Dilithium . . . . . . . . . . . . . . . . . . . . . 3 3.1. Overview . . . . . . . . . . . . . . . . . . . . . . . . 3 3.2. Parameters . . . . . . . . . . . . . . . . . . . . . . . 5 3.2.1. Parameter sets . . . . . . . . . . . . . . . . . . . 5 3.3. Core Operations . . . . . . . . . . . . . . . . . . . . . 5 3.4. Using CRYDI with JOSE . . . . . . . . . . . . . . . . . . 5 3.4.1. CRYDI Key Representations . . . . . . . . . . . . . . 6 3.4.2. CRYDI Algorithms . . . . . . . . . . . . . . . . . . 7 3.4.3. CRYDI Signature Representation . . . . . . . . . . . 16 3.5. Using CRYDI with COSE . . . . . . . . . . . . . . . . . . 20 4. Security Considerations . . . . . . . . . . . . . . . . . . . 20 4.1. Validating public keys . . . . . . . . . . . . . . . . . 20 4.2. Side channel attacks . . . . . . . . . . . . . . . . . . 21 4.3. Randomness considerations . . . . . . . . . . . . . . . . 21 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 21 6. Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . 23 6.1. General References . . . . . . . . . . . . . . . . . . . 23 6.2. Appendix A. Acknowledgements . . . . . . . . . . . . . . 23 Prorock, et al. Expires 10 January 2024 [Page 2] Internet-Draft jose-cose-dilithium July 2023 6.3. Appendix B. Document History . . . . . . . . . . . . . . 23 6.4. Appendix C. Test Vectors . . . . . . . . . . . . . . . . 24 6.4.1. MLWE CRYDI5 . . . . . . . . . . . . . . . . . . . . . 24 7. Normative References . . . . . . . . . . . . . . . . . . . . 33 8. Informative References . . . . . . . . . . . . . . . . . . . 34 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 34 1. Notational Conventions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. 2. Terminology The following terminology is used throughout this document: PK : The public key for the signature scheme. SK : The secret key for the signature scheme. signature : The digital signature output. message : The input to be signed by the signature scheme. sha256 : The SHA-256 hash function defined in [RFC6234]. shake256 : The SHAKE256 hash function defined in [RFC8702]. 3. CRYSTALS-Dilithium 3.1. Overview This section of the document describes the lattice signature scheme CRYSTALS-Dilithium (CRYDI). The scheme is based on "Fiat-Shamir with Aborts"[Lyu09, Lyu12] utlizing a matrix of polynomials for key material, and a vector of polynomials for signatures. The parameter set is strategically chosen such that the signing algorithm is large enough to maintain zero-knowledge properties but small enough to prevent forgery of signatures. An example implementation and test vectors are provided. CRYSTALS-Dilithium is a post-quantum approach to digital signatures that is an algorithmic apprach that seeks to ensure key pair and signing properties that is a strong implementation meeting Existential Unforgeability under Chosen Message Attack (EUF-CMA) properties, while ensuring that the security levels reached meet security needs for resistance to both classical and quantum attacks. Prorock, et al. Expires 10 January 2024 [Page 3] Internet-Draft jose-cose-dilithium July 2023 The algoritm itself is based on hard problems over module lattices, specifically Ring Learning with Errors (Ring-LWE). For all security levels the only operations required are variants of Keccak and number theoretic transforms (NTT) for the ring Zq[X]/(X256+1). This ensures that to increase or decrease the security level involves only the change of parameters rather than re-implementation of a related algorithm. While based on Ring-LWE, CRYSTALS-Dilithium has less algebraic structure than direct Ring-LWE implementations and more closely resembles the unstructured lattices used in Learning with Errors (LWE). This brings a theorectical protection against future algebraic attacks on Ring-LWE that may be developed. Given the use of module lattices, this family of approaches is often referred to as MLWE. CRYSTALS-Dilithium, brings several advantages over other approaches to signature suites: * Post-quantum in nature - use of lattices and other approaches that should remain hard problems even when under attack utilizing quantum approaches * Simple implementation while maintaining security - a danger in many possible approaches to cryptography is that it may be possible inadvertently introduce errors in code that lead to weakness or decreases in security level * Signature and public key size - compared to other post-quantum approaches a reasonable key size has been achieved that also preserves desired security properties * Conservative parameter space - parameterization is utilized for the purposes of defining the sizes of matrices in use, and thereby the number of polynomials described by the key material. * Parameter set adjustment for greater security - increasing this matrix size increases the number of polynomials, and thereby the security level * Performance and optimization - the approach makes use of well known transforms that can be highly optimized, especially with use of hardware optimizations without being so large that it cannot be deployed in embedded or IoT environments without some degree of optimization. The primary known disadvantage to CRYSTALS-Dilithium is the size of keys and signatures, especially as compared to classical approaches for digital signing. Prorock, et al. Expires 10 January 2024 [Page 4] Internet-Draft jose-cose-dilithium July 2023 3.2. Parameters Unlike certain other approaches such as Ed25519 that have a large set of parameters, CRYSTALS-Dilithium uses distinct numbers of paramters to increase or decrease the security level according to the required level for a particular scenario. Under CRYSTALS-Dilithium, the key parameter specification determines the size of the matrix and thereby the number of polynomials that describe the lattice. For use according to this specification we do not recommend a parameter set of less than 3, which should be sufficient to maintain 128 bits of security for all known classical and quantum attacks. Under a parameter set at NIST level 3, a 6x5 matrix is utilized that thereby consists of 30 polynomials. 3.2.1. Parameter sets Parameter sets are identified by the corresponding NIST level per the table below +============+=============+================+ | NIST Level | Matrix Size | memory in bits | +============+=============+================+ | 2 | 4x4 | 97.8 | +------------+-------------+----------------+ | 3 | 6x5 | 138.7 | +------------+-------------+----------------+ | 5 | 8x7 | 187.4 | +------------+-------------+----------------+ Table 1 3.3. Core Operations Core operations used by the signature scheme should be implemented according to the details in [CRYSTALS-Dilithium]. Core operations include key generation, sign, and verify. 3.4. Using CRYDI with JOSE This sections is based on CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) (https://datatracker.ietf.org/doc/html/rfc8812#section-3) Prorock, et al. Expires 10 January 2024 [Page 5] Internet-Draft jose-cose-dilithium July 2023 3.4.1. CRYDI Key Representations A new key type (kty) value "MLWE" is defined for public key algorithms that use base 64 encoded strings of the underlying binary material as private and public keys and that support cryptographic sponge functions. "MLWE" refers to for keys related to the family of algorithms that utilize Learning With Errors approaches to Post- quantum lattice module based cryptography It has the following parameters: * The parameter "kty" MUST be "MLWE". * The parameter "alg" MUST be specified, and its value MUST be one of the values specified in the table below +========+===================================+ | alg | Description | +========+===================================+ | CRYDI5 | CRYSTALS-Dilithium paramter set 5 | +--------+-----------------------------------+ | CRYDI3 | CRYSTALS-Dilithium paramter set 3 | +--------+-----------------------------------+ | CRYDI2 | CRYSTALS-Dilithium paramter set 2 | +--------+-----------------------------------+ Table 2 * The parameter "pset" MAY be specfied to indicate the not only paramter set in use for the algorithm, but SHOULD also reflect the targeted NIST level for the algorithm in combination with the specified paramter set. For "alg" "CRYDI" one of the described parameter sets "2", "3", or "5" MUST be specified. Parameter set "3" or above SHOULD be used with "CRYDI" for any situation requiring at least 128bits of security against both quantum and classical attacks * The parameter "x" MUST be present and contain the public key encoded using the base64url [RFC4648] encoding. * The parameter "d" MUST be present for private keys and contain the private key encoded using the base64url encoding. This parameter MUST NOT be present for public keys. Sizes of various key and signature material is as follows (for "pset" value "2") Prorock, et al. Expires 10 January 2024 [Page 6] Internet-Draft jose-cose-dilithium July 2023 +===========+===============+==============+======+==============+ | Variable | Paramter Name | Paramter Set | Size | base64url | | | | | | encoded size | +===========+===============+==============+======+==============+ | Signature | sig | 2 | 3293 | 4393 | +-----------+---------------+--------------+------+--------------+ | Public | x | 2 | 1952 | 2605 | | Key | | | | | +-----------+---------------+--------------+------+--------------+ | Private | d | 2 | 4000 | 5337 | | Key | | | | | +-----------+---------------+--------------+------+--------------+ Table 3 When calculating JWK Thumbprints [RFC7638], the four public key fields are included in the hash input in lexicographic order: "kty", "alg", and "x". 3.4.2. CRYDI Algorithms In order to reduce the complexity of the key representation and signature representations we register a unique algorithm name per pset. This allows us to omit registering the pset term, and reduced the likelyhood that it will be misused. These alg values are used in both key representations and signatures. +======+========+==============+ | kty | alg | Paramter Set | +======+========+==============+ | MLWE | CRYDI5 | 5 | +------+--------+--------------+ | MLWE | CRYDI3 | 3 | +------+--------+--------------+ | MLWE | CRYDI2 | 2 | +------+--------+--------------+ Table 4 3.4.2.1. Public Key Per section 5.1 of [CRYSTALS-Dilithium]: | The public key, containing p and t1, is stored as the | concatenation of the bit-packed representations of p and t1 in | this order. Therefore, it has a size of 32 + 288 kbytes. Prorock, et al. Expires 10 January 2024 [Page 7] Internet-Draft jose-cose-dilithium July 2023 The public key is represented as x and encoded using base64url encoding as described in [RFC7517]. Example public key using only required fields: Prorock, et al. Expires 10 January 2024 [Page 8] Internet-Draft jose-cose-dilithium July 2023 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "kty": "MLWE", "alg": "CRYDI3", "x": "z7u7GwhsjjnfHH3Nkrs2xvvw020Rcw5ymdlTnhRenjDdrOO+nfXRVUZVy9q1\ 5zDn77zTgrIskM3WX8bqslc+B1fq12iA/wxD2jc1d6j+YjKCtkGH26OR7vc0YC2ZiMzW\ zGl7yebt7JkmjRbN1N+u/2fAKFLuziMcLNP6WLoWbMqxoC2XOOVNAWX3QjXrCcGU23Nr\ imtdmWz5NrP43E592Sctt5M+SVlfgQeYv8pHmtkQknE8/jr7TrgNpuiV7nXmhWHTMJ4I\ zoGXgq43odFFthboEdKNT/enyu+VvUGoIJ6cN8C/1B6o1WlYHEaL0BEIFFbAiAhZ/vnf\ cUYMaVPqsDJuETsjetcE32kGCD7Jkume2tO68DlIhB/2Z2JX8mkcbxFI6KrmXiRxXQj9\ 9LVn1fEzdf3Vfpcs/C3omsFGqmTpLDK+AvW/SWVkDi2NKq7hL/AyxlW2u2cqVErQZUTS\ Z+ic6V8kZfxr3gRMnH0KuF5BtjleZ/yVvqqPjwPOZegCKEl2Gd8duhcUde7CR55pil1o\ UXy5AwgCcZTdEcJn1OPObGoots9T19gw1x4vnZCQUKVDPZuZ1gIkGqDUYXS0lcNTjCMs\ miFEmnOZvB88jxULpb1vl9HoQ3ocM2oZu4AZRt9G/L07Mwcui0uFCWtAIau+2gqNAn/Z\ AS10l0j2N0LLtAaOxoF+Ctzscrt0ZMyGHmoQ9daHkpUvEq0cO8hDtLplnq3lQIIIfROQ\ jcNs9vNKBu87COBjukZD+L8vV4zy8FNO59MCSb9UCLwz2xvfdI1js9/J7hTGaVec8VPx\ md42yPFrGw5Na1oefm8vW49EDmevc8AjAtwDirRBDFv9pX3+5S+M6jhteSLYvpKJXQT1\ zs1379KvIHwkn9VHpA+PiUUw9TgF6xF8xWEGSNlOo1Vn1xtM3givehjYxJ5p5/kBEFZI\ DCyFzstAirJ2GadNhae+P1JFZzJWnX5jaLwzldquZwF3yTzNho4sgBA+fKqiXcgn2nw1\ vz0Dkbxr6cMaUool0eFScU1nAz1Z39W64LtT2nEuYsORx/ht2RzJxxFc21X3nLeEDFCe\ NkNDxQFBSfpZjKKgJtXEx23mp+CbBVMrbagsLnzsAGLYbnroVmATU5Iqr6LgYBpuFs+N\ Rkq7ZXh6CZPukMGQbcOGuNwO6NBuuMNhir5ayGk1ZBiW82C7Nu0hs2pLcgNqWMtt1+LW\ 8R96KyoSc784ZYAZ40QqvoySwmxQPBRTRJ+wB0sVpGBLTxdY9Gw3pXeXN5nao340d2ZA\ 7YEMlqcTHCAv3F8B9ewl7OfQlmg6bvdMuoVdVE+p0er7IAmWMRgviIzYv9sKEEQrCmua\ 2qL5xPSbD05KRf8ZAZ2B8lSCDR1nzXrQXZbXBKJivsCVQDuzxrwGE0gqRMpbk4f5GYCG\ 4i/O8Knoru+jjf6wVQDYKfyz1QUGRlXHkGUGlXfv03r7UbJugycjVO5kbGxhoZkqOq8z\ ZEpkefvrrNoxeotw/z4QpjI8JlY97GDb0mGVHbmdHugjMtVTGhVJFBbPIinmR+emt7O+\ 4qOr7ywRxCvt2lziWtpPBwaf/1XDnN5Gesex1gR1YrcTRNmB808b01sxLQmxcTt4eQ0/\ LUkas7qTJ3AQThOfDdtIpkqsthsBFy+WjSQuoXCYMRcPi6MlpxJndDF32lCnL1ranV6e\ F2ST0SYT+NwNDesMzTRmNbHUW5KAhu0k9WABTvcM5ba0Uq6iOa1NsFrcLag+KhxN6HPn\ oobwJ/EsDi5S7TAl8WrjqIhZ8x6h9eRRXerpaOw/FYk+2MpWByp/98VE12/EwOqAIiPp\ elAvUeMOlRkpG64bJsmyYtHuNWgcv5Qiy7/eGw9ZpvB3J3G3jxvbynExqdFyDc067EKi\ 5WxDFPuZUjkfKpekNvzQuIrqs49BzcRyMt5ndEVE21TPPfZ/R8B7Rxnb2LiK+hQc+cc9\ pEEaWgwAOiMILcp/1CyY6ImdO6RHsxwflMH7gej+hN41kaoEghIOl9kMGTLZbq5Pc8Pz\ 6F2LKTBMJWg9o/0blvilMH9EPblcLeF/bR1AZTUD6ZFdi2TxN6Epn3QVqeG/qPm1EBTF\ Gw1V92m6/08Dd6zI1HPqwKbkHx4F567owofKHaM2imin0yVUpwxoRJrulRHMCB3tn8C4\ ZpFl+sGV3Gip3tKlS7PKQkTqI6DMwxEbdrvtdY1sHZagpclLDisA/yFT4RR2m3VNJR9P\ 6Nx3teqN1eg6RXmD/MlKCdWrlcjZ/6yeIQYwbr9CjItY/tLQX2gtAR1SXOh99UUBVv+Z\ E03VOZ+Ecsc78lSB9G/6n6CFzlbk/HgAF+cu0yMbGnEM8W3mTUspS4JBACwk5w0XWNNQ\ DWVEdgzuLGhPq+hYExDjVZrLELhkH8YgZA+7RXXUZHM/joNOGHUhpUG/bFo3ktnaILCu\ xsOXMUbDC3VcitFFHsGK1svtcERDFxk1HA8pGa59jT0do6n3wEbnBDU1soKNFtpmcVkE\ Ul3XpvuoW3BgCwJzBUCWvPs47DJRgGxO11bSaEYYlhTVaaShcvzgz46AkqO+Q7TjckDP\ /8uzsSQk0AbuhxWFQpSiBP8OZ/U=" } Example public key including optional fields: Prorock, et al. Expires 10 January 2024 [Page 9] Internet-Draft jose-cose-dilithium July 2023 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "kid": "key-0", "kty": "MLWE", "alg": "CRYDI3", "key_ops": ["verify"], "x": "z7u7GwhsjjnfHH3Nkrs2xvvw020Rcw5ymdlTnhRenjDdrOO+nfXRVUZVy9q1\ 5zDn77zTgrIskM3WX8bqslc+B1fq12iA/wxD2jc1d6j+YjKCtkGH26OR7vc0YC2ZiMzW\ zGl7yebt7JkmjRbN1N+u/2fAKFLuziMcLNP6WLoWbMqxoC2XOOVNAWX3QjXrCcGU23Nr\ imtdmWz5NrP43E592Sctt5M+SVlfgQeYv8pHmtkQknE8/jr7TrgNpuiV7nXmhWHTMJ4I\ zoGXgq43odFFthboEdKNT/enyu+VvUGoIJ6cN8C/1B6o1WlYHEaL0BEIFFbAiAhZ/vnf\ cUYMaVPqsDJuETsjetcE32kGCD7Jkume2tO68DlIhB/2Z2JX8mkcbxFI6KrmXiRxXQj9\ 9LVn1fEzdf3Vfpcs/C3omsFGqmTpLDK+AvW/SWVkDi2NKq7hL/AyxlW2u2cqVErQZUTS\ Z+ic6V8kZfxr3gRMnH0KuF5BtjleZ/yVvqqPjwPOZegCKEl2Gd8duhcUde7CR55pil1o\ UXy5AwgCcZTdEcJn1OPObGoots9T19gw1x4vnZCQUKVDPZuZ1gIkGqDUYXS0lcNTjCMs\ miFEmnOZvB88jxULpb1vl9HoQ3ocM2oZu4AZRt9G/L07Mwcui0uFCWtAIau+2gqNAn/Z\ AS10l0j2N0LLtAaOxoF+Ctzscrt0ZMyGHmoQ9daHkpUvEq0cO8hDtLplnq3lQIIIfROQ\ jcNs9vNKBu87COBjukZD+L8vV4zy8FNO59MCSb9UCLwz2xvfdI1js9/J7hTGaVec8VPx\ md42yPFrGw5Na1oefm8vW49EDmevc8AjAtwDirRBDFv9pX3+5S+M6jhteSLYvpKJXQT1\ zs1379KvIHwkn9VHpA+PiUUw9TgF6xF8xWEGSNlOo1Vn1xtM3givehjYxJ5p5/kBEFZI\ DCyFzstAirJ2GadNhae+P1JFZzJWnX5jaLwzldquZwF3yTzNho4sgBA+fKqiXcgn2nw1\ vz0Dkbxr6cMaUool0eFScU1nAz1Z39W64LtT2nEuYsORx/ht2RzJxxFc21X3nLeEDFCe\ NkNDxQFBSfpZjKKgJtXEx23mp+CbBVMrbagsLnzsAGLYbnroVmATU5Iqr6LgYBpuFs+N\ Rkq7ZXh6CZPukMGQbcOGuNwO6NBuuMNhir5ayGk1ZBiW82C7Nu0hs2pLcgNqWMtt1+LW\ 8R96KyoSc784ZYAZ40QqvoySwmxQPBRTRJ+wB0sVpGBLTxdY9Gw3pXeXN5nao340d2ZA\ 7YEMlqcTHCAv3F8B9ewl7OfQlmg6bvdMuoVdVE+p0er7IAmWMRgviIzYv9sKEEQrCmua\ 2qL5xPSbD05KRf8ZAZ2B8lSCDR1nzXrQXZbXBKJivsCVQDuzxrwGE0gqRMpbk4f5GYCG\ 4i/O8Knoru+jjf6wVQDYKfyz1QUGRlXHkGUGlXfv03r7UbJugycjVO5kbGxhoZkqOq8z\ ZEpkefvrrNoxeotw/z4QpjI8JlY97GDb0mGVHbmdHugjMtVTGhVJFBbPIinmR+emt7O+\ 4qOr7ywRxCvt2lziWtpPBwaf/1XDnN5Gesex1gR1YrcTRNmB808b01sxLQmxcTt4eQ0/\ LUkas7qTJ3AQThOfDdtIpkqsthsBFy+WjSQuoXCYMRcPi6MlpxJndDF32lCnL1ranV6e\ F2ST0SYT+NwNDesMzTRmNbHUW5KAhu0k9WABTvcM5ba0Uq6iOa1NsFrcLag+KhxN6HPn\ oobwJ/EsDi5S7TAl8WrjqIhZ8x6h9eRRXerpaOw/FYk+2MpWByp/98VE12/EwOqAIiPp\ elAvUeMOlRkpG64bJsmyYtHuNWgcv5Qiy7/eGw9ZpvB3J3G3jxvbynExqdFyDc067EKi\ 5WxDFPuZUjkfKpekNvzQuIrqs49BzcRyMt5ndEVE21TPPfZ/R8B7Rxnb2LiK+hQc+cc9\ pEEaWgwAOiMILcp/1CyY6ImdO6RHsxwflMH7gej+hN41kaoEghIOl9kMGTLZbq5Pc8Pz\ 6F2LKTBMJWg9o/0blvilMH9EPblcLeF/bR1AZTUD6ZFdi2TxN6Epn3QVqeG/qPm1EBTF\ Gw1V92m6/08Dd6zI1HPqwKbkHx4F567owofKHaM2imin0yVUpwxoRJrulRHMCB3tn8C4\ ZpFl+sGV3Gip3tKlS7PKQkTqI6DMwxEbdrvtdY1sHZagpclLDisA/yFT4RR2m3VNJR9P\ 6Nx3teqN1eg6RXmD/MlKCdWrlcjZ/6yeIQYwbr9CjItY/tLQX2gtAR1SXOh99UUBVv+Z\ E03VOZ+Ecsc78lSB9G/6n6CFzlbk/HgAF+cu0yMbGnEM8W3mTUspS4JBACwk5w0XWNNQ\ DWVEdgzuLGhPq+hYExDjVZrLELhkH8YgZA+7RXXUZHM/joNOGHUhpUG/bFo3ktnaILCu\ xsOXMUbDC3VcitFFHsGK1svtcERDFxk1HA8pGa59jT0do6n3wEbnBDU1soKNFtpmcVkE\ Ul3XpvuoW3BgCwJzBUCWvPs47DJRgGxO11bSaEYYlhTVaaShcvzgz46AkqO+Q7TjckDP\ /8uzsSQk0AbuhxWFQpSiBP8OZ/U=" } Prorock, et al. Expires 10 January 2024 [Page 10] Internet-Draft jose-cose-dilithium July 2023 3.4.2.2. Private Key Per section 5.1 of [CRYSTALS-Dilithium]: | The secret key contains p,K,tr,s1,s2 and t0 and is also stored as | a bit-packed representation of these quantities in the given | order. Consequently, a secret key requires 64 + 48 + 32((k+l) * | dlog (2n+ 1)e + 14k) bytes. For the weak, medium and high | security level this is equal to 112 + 576k+ 128l bytes. With the | very high security parameters one needs 112 + 544k + 96l = 3856 | bytes. The private key is represented as d and encoded using base64url encoding as described in [RFC7517]. Example private key using only required fields: =============== NOTE: '\' line wrapping per RFC 8792 ================ { "kty": "MLWE", "alg": "CRYDI3", "x": "z7u7GwhsjjnfHH3Nkrs2xvvw020Rcw5ymdlTnhRenjDdrOO+nfXRVUZVy9q1\ 5zDn77zTgrIskM3WX8bqslc+B1fq12iA/wxD2jc1d6j+YjKCtkGH26OR7vc0YC2ZiMzW\ zGl7yebt7JkmjRbN1N+u/2fAKFLuziMcLNP6WLoWbMqxoC2XOOVNAWX3QjXrCcGU23Nr\ imtdmWz5NrP43E592Sctt5M+SVlfgQeYv8pHmtkQknE8/jr7TrgNpuiV7nXmhWHTMJ4I\ zoGXgq43odFFthboEdKNT/enyu+VvUGoIJ6cN8C/1B6o1WlYHEaL0BEIFFbAiAhZ/vnf\ cUYMaVPqsDJuETsjetcE32kGCD7Jkume2tO68DlIhB/2Z2JX8mkcbxFI6KrmXiRxXQj9\ 9LVn1fEzdf3Vfpcs/C3omsFGqmTpLDK+AvW/SWVkDi2NKq7hL/AyxlW2u2cqVErQZUTS\ Z+ic6V8kZfxr3gRMnH0KuF5BtjleZ/yVvqqPjwPOZegCKEl2Gd8duhcUde7CR55pil1o\ UXy5AwgCcZTdEcJn1OPObGoots9T19gw1x4vnZCQUKVDPZuZ1gIkGqDUYXS0lcNTjCMs\ miFEmnOZvB88jxULpb1vl9HoQ3ocM2oZu4AZRt9G/L07Mwcui0uFCWtAIau+2gqNAn/Z\ AS10l0j2N0LLtAaOxoF+Ctzscrt0ZMyGHmoQ9daHkpUvEq0cO8hDtLplnq3lQIIIfROQ\ jcNs9vNKBu87COBjukZD+L8vV4zy8FNO59MCSb9UCLwz2xvfdI1js9/J7hTGaVec8VPx\ md42yPFrGw5Na1oefm8vW49EDmevc8AjAtwDirRBDFv9pX3+5S+M6jhteSLYvpKJXQT1\ zs1379KvIHwkn9VHpA+PiUUw9TgF6xF8xWEGSNlOo1Vn1xtM3givehjYxJ5p5/kBEFZI\ DCyFzstAirJ2GadNhae+P1JFZzJWnX5jaLwzldquZwF3yTzNho4sgBA+fKqiXcgn2nw1\ vz0Dkbxr6cMaUool0eFScU1nAz1Z39W64LtT2nEuYsORx/ht2RzJxxFc21X3nLeEDFCe\ NkNDxQFBSfpZjKKgJtXEx23mp+CbBVMrbagsLnzsAGLYbnroVmATU5Iqr6LgYBpuFs+N\ Rkq7ZXh6CZPukMGQbcOGuNwO6NBuuMNhir5ayGk1ZBiW82C7Nu0hs2pLcgNqWMtt1+LW\ 8R96KyoSc784ZYAZ40QqvoySwmxQPBRTRJ+wB0sVpGBLTxdY9Gw3pXeXN5nao340d2ZA\ 7YEMlqcTHCAv3F8B9ewl7OfQlmg6bvdMuoVdVE+p0er7IAmWMRgviIzYv9sKEEQrCmua\ 2qL5xPSbD05KRf8ZAZ2B8lSCDR1nzXrQXZbXBKJivsCVQDuzxrwGE0gqRMpbk4f5GYCG\ 4i/O8Knoru+jjf6wVQDYKfyz1QUGRlXHkGUGlXfv03r7UbJugycjVO5kbGxhoZkqOq8z\ ZEpkefvrrNoxeotw/z4QpjI8JlY97GDb0mGVHbmdHugjMtVTGhVJFBbPIinmR+emt7O+\ 4qOr7ywRxCvt2lziWtpPBwaf/1XDnN5Gesex1gR1YrcTRNmB808b01sxLQmxcTt4eQ0/\ LUkas7qTJ3AQThOfDdtIpkqsthsBFy+WjSQuoXCYMRcPi6MlpxJndDF32lCnL1ranV6e\ F2ST0SYT+NwNDesMzTRmNbHUW5KAhu0k9WABTvcM5ba0Uq6iOa1NsFrcLag+KhxN6HPn\ Prorock, et al. Expires 10 January 2024 [Page 11] Internet-Draft jose-cose-dilithium July 2023 oobwJ/EsDi5S7TAl8WrjqIhZ8x6h9eRRXerpaOw/FYk+2MpWByp/98VE12/EwOqAIiPp\ elAvUeMOlRkpG64bJsmyYtHuNWgcv5Qiy7/eGw9ZpvB3J3G3jxvbynExqdFyDc067EKi\ 5WxDFPuZUjkfKpekNvzQuIrqs49BzcRyMt5ndEVE21TPPfZ/R8B7Rxnb2LiK+hQc+cc9\ pEEaWgwAOiMILcp/1CyY6ImdO6RHsxwflMH7gej+hN41kaoEghIOl9kMGTLZbq5Pc8Pz\ 6F2LKTBMJWg9o/0blvilMH9EPblcLeF/bR1AZTUD6ZFdi2TxN6Epn3QVqeG/qPm1EBTF\ Gw1V92m6/08Dd6zI1HPqwKbkHx4F567owofKHaM2imin0yVUpwxoRJrulRHMCB3tn8C4\ ZpFl+sGV3Gip3tKlS7PKQkTqI6DMwxEbdrvtdY1sHZagpclLDisA/yFT4RR2m3VNJR9P\ 6Nx3teqN1eg6RXmD/MlKCdWrlcjZ/6yeIQYwbr9CjItY/tLQX2gtAR1SXOh99UUBVv+Z\ E03VOZ+Ecsc78lSB9G/6n6CFzlbk/HgAF+cu0yMbGnEM8W3mTUspS4JBACwk5w0XWNNQ\ DWVEdgzuLGhPq+hYExDjVZrLELhkH8YgZA+7RXXUZHM/joNOGHUhpUG/bFo3ktnaILCu\ xsOXMUbDC3VcitFFHsGK1svtcERDFxk1HA8pGa59jT0do6n3wEbnBDU1soKNFtpmcVkE\ Ul3XpvuoW3BgCwJzBUCWvPs47DJRgGxO11bSaEYYlhTVaaShcvzgz46AkqO+Q7TjckDP\ /8uzsSQk0AbuhxWFQpSiBP8OZ/U=", "d": "z7u7GwhsjjnfHH3Nkrs2xvvw020Rcw5ymdlTnhRenjDUBgL6FklHURz5btM5\ yrI5FQdWk+U2srVuSmfDV7EYG897mUFY35Z0WQ0mZ9XvIOKCh+GFFOk56b5FOFq6xnV8\ UDQnFyY2JREUOHdiUjcUNxA1YxR3QiQ0BkE1AUBmFEOAUHZGBzQAU2dxVIgTQRV3U3g4\ GGiISEYQhHRSWDIBQ2Z3UIIWdSV1EWhwBTYiWGI3VmJVI1UIU2REdUhHBoJ2gRhFUThy\ BSQnhBIGI1AoMVB2MCNhUXQiNUGCKHgzUmQxU3dEgBhmQyIQgmFjdxY1dCJgGBSEB4Ij\ CEJ0MBGIQWRRN3QjRmRSQWQIJgNjcjdnMlJhJIU1MlJRd1NmF4dwhHIIdEYYcAhEclBQ\ JjESAiBwBQYzYlAIIocBcoZFcGVkA2SDMCVTBjgzCAAzNnQGYHI1VwJzYxQRckBIZBV4\ VxZmZiVlYXgHFRNjdEFIYVOFIVdhcnIINEhhIURjg0cxJ0SCIWYUUVcHJzdDUTASciAW\ UiJAglIoQkIwNjMlcwACZxcHZVJAh4EnNnWAZVVoBjNnNEcicTdyEEUHBVFjETETNjd0\ YUFmFDVXNUcHFVJoE2AlVwFhMzc0dQckMYJUaBJ0JkUBdyd1AnZiJ3hYYkWAgyR1VziD\ BERVh1NQAFIGWIhUZXCEQxIThyR1FIGGNTKAcwdRNBGDYEd2RVEwUDMzWAAhNQEEMYAS\ hUSCgTJ3VIdXUlFBFxFkhVCCZEABJjQCAxFGNkhHQzM1YSSHNlEBEmJkgWZCVwZHRSVD\ GDZzRCQiNhE3IghDhSFoBYCHNFVHMxZAZTSGAVMUQkhBKIFRQEVBB0cHNGEiJVVScQQh\ hzQiBzKBYRY4Q0R2MVUldwVCIkQYEEgFYEREY2NERyFVdHJzdAZHBmhmdSCFIgh1IwGB\ AxNzFjEoUWFCF4AhZRJSEROEEThxAGYBJTgUcUdFJBOFRmcVYnZUUFCAY1AnZEZBVThS\ ECBQYBNGeAdzQ3KGhIE3ZiFxQoVCgQBjEFdFcIV0IAaFcgI0iAgAUVQAhEInQWECY1I4\ E2U0MkAXQSZkdSRRc2I4BjEiSGd4hgQEEDcTRmhFd3MBMmY2gERxNwiISAVkFVETGCcI\ gYhzRXByGBgzKGVXJUhoGEY1hgFmZWgmEWYWVoISd4Vlhid4VUMHgSZXhXUSaCgmJ3Eg\ MQIzIDIThwRSARQhBFB2QQBjEgIoEHN1BhMCiIIBUlZWCHdBMyZFQoQ2UUJXJCFnZyFD\ RTFUUTQoQmUjB0aHJXJHeDZlJGBCExATEUEDg3BTAChWImN0AWcFB3IUgBEARxVUREdX\ QzhVBEBBF4UgcRhCg4gUcoRkdYCAIUQBRUJUYjFjEBYUhSBjIyV2cXBYckEiMic1N4ED\ gDUGVSCHhCYURXcQB1ODg4hDJFJ3Jld2gyYnQYclRjE3VWcQNXJBYnOGhYFoU2dHATAw\ OEeBUGQjJHcDgUJTRXBXJ3IAEjEXhXeEEmghIAAGdjUVBndnI2FCAVcyV4cxIyZ2dYE1\ ZEiHcYJYaCcXQXJCaER1coIDRWJkcSNhEVF3JGOCQkYWYkcndRA1QTh0MFgzIyVocYJY\ cwIAFRNiE1VAUECBI3MzQiZkUhR1cid1NSAXFXN0gUNnRCV0ISNmYnB3NIZyMIQWEVVz\ ElEohnQyKBNoY1cCdmdjVYiGhVUlA0CHMTZIURBgR4aIJwJQJlIDMYhwNGNwiGcIBUdA\ NXMBETUgICJyMkMIN1BAIAB4gEMDUwhndFJkQDEgRRMld4EzhRM0ZhGAYHMgZ4NhEEhn\ U2I2VicBBXZUFUNoczcmBzBnUEBxUWcDg4RHUXZSOEZogABHRAISVEAzdoQhRmBgEWYE\ Z4U1dgQ2gjgQUjMScgIIFQR3YFczhTYoB1IiVCYGBAVmVAFIdhRmZ1InhwdTRjJjNhVx\ IzcWgjFlFCaChlIWUySIaDFwAWV3RAIxg2QWYgAYMUjP7wmwOwPp7Ukl3L1KalY/6dN4\ dBr1AYS8JnkVq6pPeBfO7ccX95SrVfAO7EX7RVEYyhVR9QOQyEpLBUMcfcfnHCZWKM0o\ OBF7BXiWMR9BQo4ybtpJGKQ+IZyCKUJVRhZ+uae182qYcBKFMdOOzXiO8kAa98eUy6SR\ pPfKPD6D+xXgtJ0FWtYnp1Jy2aIG3HqMiTHoSdVIvccGkf94gpVWTMeJQsQpgq7dAJiJ\ 5JOMQjk7JIHcIzxb4T8sQHzA55MFfvM7Hus/8FUX7NfIN1JRmc2zHL/7kdfCFSwG67iW\ U4ob2kTwdKzPvOL+d3e+AOE0PihJ4vVJAOjhWmO2fIFNvFhNqPh0MSiSkatPGbSVdqQ1\ Prorock, et al. Expires 10 January 2024 [Page 12] Internet-Draft jose-cose-dilithium July 2023 PsG6C+1YqMrTM7KFr4hTQM8a3+tAOsImMjXSSPDkVeuJFq1rw642SJJx8yZTXVe8g75D\ ZTYghbeX5LLzaVkt9mZS7cW16Zy+C3MwnWDrGQ6hUDxYaYJp7SOGJHepcmVV214oD6nw\ 5QprgpGIxVcdXQUO0fhKwerYDkoOIj+uqk7NYDvOt8zANphYcE3v+6yVFyYh3eg7DYRJ\ rIzIcbaG91ySv2iRRC+cWaymH6xuqaHRwZu/p962/u8/c3rITJzCoVc+ObnZ5oItZFBe\ AYFhLBx7PvPdBULXyCqmtkOtnT/jnaCUVxtGeaIeQmmeM4yPq3d5uWBfOvIyuPmfBSKd\ Y0NETGlsaoQuqFpOkCmQdMVZKh3UZ8AOjw22LlqaZlrUf0akb0fs7le2HT47KV9yOJHC\ tec9tjHUeBVmma5O4AofGcVXLbkqKv+Soax9GooHVOv+uxa8iwjAdTZKtqwKnKDx4jaR\ +zotCsYi4BuB2JbkjnHG6NL7ubN+aNKnwnzZnMKQZIh2Q7vSRYKTM8j9OGLq7IP8q2NS\ oc7iT//eAvb4oF6LaY7qebxQ6ROXCSRrrXgpo+pw3ltfuUCuGzAxD4+wMZU3dlXsivhJ\ PnTEjI/V6GmkRlfZ9XnYfj8SILETWk03dMFJh3LmUwkbRV+C3mL2GzjgQVTkvP82KDBL\ DAR9iKyPkJnMnK9Ix/StVyJbGAtGp4jHnp+PSjz9ja4qI9jVRjGgIUQhw0DnI0fnplUn\ Qhz3F9MQXMPLSPvFw8M0xkUKsAcxQvxZGb5LkYByZ0ZrO/ipphwnE6zQuOva+8uTyBX/\ B9VR24tUItvlhy7SS6JrULrvTA+D/ZCiqKRx61iF6pU3BoC8fgA9D/AifiQnPz0SI5kx\ FJfDTz1LWMjUlQKBHFvRFLE9eFD0rnwAGx7Pgpyc/KrLqVmcmj/96TYtoedp/iW4asfY\ C2vs+GVyxVoumIdFPHJpencWbE/niZnVDaJCih1iqgXzDsI8bENh2B9cutDWX+bsHZSC\ jSQb9YkGN+MoNiJlXmQHSJDyfPhzWPibdS/lpS90ppPWIY+PpLOfzDSGFFWswQ4q5Phc\ pLWHx5lw9KSye+T86p6kadnBBTLTyfn0dG7NpO9QKQObMN60MnybkVGx5nH9yLJlFlmV\ 0H+K0VZIKm4UzYV+RYfqqXYtMqTQxeQ1U7L7o0H+6viErxuKj5rS3i+r1rdfECAGgCoq\ 0mixATHISAHi2eSV5fk3r5xMkKSwwPIRuMt50+kklRPUoLohTj7G1CnL6O2xwBdQMTUx\ 4Jq5JBWnfB+U4D9n0si1DwikIhpaUyOoBeaWo4iFQiWVLwjeeQvY6zj66l7OXsPHjZXg\ uCitsWfp5MYV3cLTkb80uCM/xhp4Y0Edobt6x3k1FD8vbh8g3YAG0Xe/U+Iz3klnpCt2\ ROQ2lGQa0JMl4nbQr3tqTLoXv4szaErfP/Xw05Cnt9DsBzN5DNrmfF6EDcfVf/hn8v9a\ wrg6Rfv8Jpys1YFpwLanhb3Wz+x1yaDsa54IdlFOFnyBxv8GppbFrMpVFx/nLAXGIocc\ WjcRKs0tBJUW/IoXeKOMPUd1wHR4dqUCEXsoexHJiNe5sH+akr6UIDObF70hhupBoiY9\ AzVXi5zXf2VdafyQrkGfKz4BEUkiqcaajHr1CF9ZJ+Mjdmfr3z0xyCmCAWir5ZLOBXDj\ T7sYCV3QjCz4a2mGvee9IxC9kSLapCq90UMAxnTLjJGQM/dlpgjDsjsCZX5wKdsnMs79\ 60Z75BGDOC1dDINj4f5kHZmwwcmw/04mi/1RPBUABXse3Up3eJQOX2haZPqmY0+2PZTF\ exku9pETHtKcfSdRe1oJLmlB34JSogRmNp1eBxakcIL09huiFVtGVZng/pC/ryoJ/T9q\ 9w4aV5H+4u2dHc29Vb77SasxCdRH0sDaLaPpesRXsrdJwjbizOgzRlIx+83oO7NuhE+C\ kKfO7cZMrFm8r8g1MlzDiFrTf3RTusMtiW6CVlVuTROPZFngqaR5yeYPprpSELtQHSwz\ U5AaY5Qd8tbky5ec+2/QkXO+cdyWhQUuBRpibwpRpD3x1yTgT4E91cwTFpvSLk54ZHf+\ D3EsZf0PYMN6d4jVdh9iv+0tCebnfMqP65wY26YBopSLtCXXb1anUlRPlzPzRq99yKnt\ FM7gK1XnBAZoZBBqCyZw9OHWmttIFWcml4Wd5BxF9uZh2Y8gtcN8UKWHv43tsNBa7j/T\ ikIBSkIVI/6EQvyPW4YTdyz2V8RKHN5XcdpdWFaVhgSJMC4I6Bm0Lwenhkmal7Sd247q\ uCtEow8qh+w7Jk4SxrmvJxd5sBnvz15OKEaHPeWNNJW00bWEDT+0ZzzD8vMN1/GkbbB3\ s7UfcJXZbRu7HtQ+wHIblBKVstX3hMonra+k6wS9KPhcAaC3IjZ7ZApSedKk1sW1SuDg\ l48YW2/cyS3LvmISQn9KPWK7yEpNQnV0vurn3ZFOGO0eDjSXUjI+xIrRia5GQ1yb31ma\ nJnf2PdHcMmVr0wu4lMGno7a14nMRdnXkBU8bVOp8wF6Toz59hBJ3a/F+mP4/a19Ixra\ wiVVeEPgoi9QQ9NcLgQEFCoskA+EpcLK0FxV2rYI9JFNF/nDxP5nmGtnkmlFaLo+pleH\ CJYS0OTGKQr6X+Y65NOllx5nNwsnWkIUkCodoSt4Givdoe/S9JNIu8tW+jTBae2hNr9c\ glErCNKDYe1+T+Ldyr9rfOKm9LKNyTBsodgF4KI/hFh9Iv/i55DTWtqjpN0eQnPTB3/6\ +7KzTfSE9il5UMcP3zKKC2mAQvtyYxF3k0m24ZTwPs2LAPJkr/xtPH3BnGE/UfUDmvDS\ TBp9m049Nh9oDZvI4HKsY8auiyENk0ys67F9GTHhOYM0FgHyP5qk4/IR5YC3lnq7xx6i\ owebEJAy63htMytq+xd3cJyZR0lWBUOqvSpd/A==" } Example private key using optional fields: Prorock, et al. Expires 10 January 2024 [Page 13] Internet-Draft jose-cose-dilithium July 2023 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "kid": "key-0", "kty": "MLWE", "alg": "CRYDI3", "key_ops": ["sign"], "x": "z7u7GwhsjjnfHH3Nkrs2xvvw020Rcw5ymdlTnhRenjDdrOO+nfXRVUZVy9q1\ 5zDn77zTgrIskM3WX8bqslc+B1fq12iA/wxD2jc1d6j+YjKCtkGH26OR7vc0YC2ZiMzW\ zGl7yebt7JkmjRbN1N+u/2fAKFLuziMcLNP6WLoWbMqxoC2XOOVNAWX3QjXrCcGU23Nr\ imtdmWz5NrP43E592Sctt5M+SVlfgQeYv8pHmtkQknE8/jr7TrgNpuiV7nXmhWHTMJ4I\ zoGXgq43odFFthboEdKNT/enyu+VvUGoIJ6cN8C/1B6o1WlYHEaL0BEIFFbAiAhZ/vnf\ cUYMaVPqsDJuETsjetcE32kGCD7Jkume2tO68DlIhB/2Z2JX8mkcbxFI6KrmXiRxXQj9\ 9LVn1fEzdf3Vfpcs/C3omsFGqmTpLDK+AvW/SWVkDi2NKq7hL/AyxlW2u2cqVErQZUTS\ Z+ic6V8kZfxr3gRMnH0KuF5BtjleZ/yVvqqPjwPOZegCKEl2Gd8duhcUde7CR55pil1o\ UXy5AwgCcZTdEcJn1OPObGoots9T19gw1x4vnZCQUKVDPZuZ1gIkGqDUYXS0lcNTjCMs\ miFEmnOZvB88jxULpb1vl9HoQ3ocM2oZu4AZRt9G/L07Mwcui0uFCWtAIau+2gqNAn/Z\ AS10l0j2N0LLtAaOxoF+Ctzscrt0ZMyGHmoQ9daHkpUvEq0cO8hDtLplnq3lQIIIfROQ\ jcNs9vNKBu87COBjukZD+L8vV4zy8FNO59MCSb9UCLwz2xvfdI1js9/J7hTGaVec8VPx\ md42yPFrGw5Na1oefm8vW49EDmevc8AjAtwDirRBDFv9pX3+5S+M6jhteSLYvpKJXQT1\ zs1379KvIHwkn9VHpA+PiUUw9TgF6xF8xWEGSNlOo1Vn1xtM3givehjYxJ5p5/kBEFZI\ DCyFzstAirJ2GadNhae+P1JFZzJWnX5jaLwzldquZwF3yTzNho4sgBA+fKqiXcgn2nw1\ vz0Dkbxr6cMaUool0eFScU1nAz1Z39W64LtT2nEuYsORx/ht2RzJxxFc21X3nLeEDFCe\ NkNDxQFBSfpZjKKgJtXEx23mp+CbBVMrbagsLnzsAGLYbnroVmATU5Iqr6LgYBpuFs+N\ Rkq7ZXh6CZPukMGQbcOGuNwO6NBuuMNhir5ayGk1ZBiW82C7Nu0hs2pLcgNqWMtt1+LW\ 8R96KyoSc784ZYAZ40QqvoySwmxQPBRTRJ+wB0sVpGBLTxdY9Gw3pXeXN5nao340d2ZA\ 7YEMlqcTHCAv3F8B9ewl7OfQlmg6bvdMuoVdVE+p0er7IAmWMRgviIzYv9sKEEQrCmua\ 2qL5xPSbD05KRf8ZAZ2B8lSCDR1nzXrQXZbXBKJivsCVQDuzxrwGE0gqRMpbk4f5GYCG\ 4i/O8Knoru+jjf6wVQDYKfyz1QUGRlXHkGUGlXfv03r7UbJugycjVO5kbGxhoZkqOq8z\ ZEpkefvrrNoxeotw/z4QpjI8JlY97GDb0mGVHbmdHugjMtVTGhVJFBbPIinmR+emt7O+\ 4qOr7ywRxCvt2lziWtpPBwaf/1XDnN5Gesex1gR1YrcTRNmB808b01sxLQmxcTt4eQ0/\ LUkas7qTJ3AQThOfDdtIpkqsthsBFy+WjSQuoXCYMRcPi6MlpxJndDF32lCnL1ranV6e\ F2ST0SYT+NwNDesMzTRmNbHUW5KAhu0k9WABTvcM5ba0Uq6iOa1NsFrcLag+KhxN6HPn\ oobwJ/EsDi5S7TAl8WrjqIhZ8x6h9eRRXerpaOw/FYk+2MpWByp/98VE12/EwOqAIiPp\ elAvUeMOlRkpG64bJsmyYtHuNWgcv5Qiy7/eGw9ZpvB3J3G3jxvbynExqdFyDc067EKi\ 5WxDFPuZUjkfKpekNvzQuIrqs49BzcRyMt5ndEVE21TPPfZ/R8B7Rxnb2LiK+hQc+cc9\ pEEaWgwAOiMILcp/1CyY6ImdO6RHsxwflMH7gej+hN41kaoEghIOl9kMGTLZbq5Pc8Pz\ 6F2LKTBMJWg9o/0blvilMH9EPblcLeF/bR1AZTUD6ZFdi2TxN6Epn3QVqeG/qPm1EBTF\ Gw1V92m6/08Dd6zI1HPqwKbkHx4F567owofKHaM2imin0yVUpwxoRJrulRHMCB3tn8C4\ ZpFl+sGV3Gip3tKlS7PKQkTqI6DMwxEbdrvtdY1sHZagpclLDisA/yFT4RR2m3VNJR9P\ 6Nx3teqN1eg6RXmD/MlKCdWrlcjZ/6yeIQYwbr9CjItY/tLQX2gtAR1SXOh99UUBVv+Z\ E03VOZ+Ecsc78lSB9G/6n6CFzlbk/HgAF+cu0yMbGnEM8W3mTUspS4JBACwk5w0XWNNQ\ DWVEdgzuLGhPq+hYExDjVZrLELhkH8YgZA+7RXXUZHM/joNOGHUhpUG/bFo3ktnaILCu\ xsOXMUbDC3VcitFFHsGK1svtcERDFxk1HA8pGa59jT0do6n3wEbnBDU1soKNFtpmcVkE\ Ul3XpvuoW3BgCwJzBUCWvPs47DJRgGxO11bSaEYYlhTVaaShcvzgz46AkqO+Q7TjckDP\ /8uzsSQk0AbuhxWFQpSiBP8OZ/U=", "d": "z7u7GwhsjjnfHH3Nkrs2xvvw020Rcw5ymdlTnhRenjDUBgL6FklHURz5btM5\ yrI5FQdWk+U2srVuSmfDV7EYG897mUFY35Z0WQ0mZ9XvIOKCh+GFFOk56b5FOFq6xnV8\ Prorock, et al. Expires 10 January 2024 [Page 14] Internet-Draft jose-cose-dilithium July 2023 UDQnFyY2JREUOHdiUjcUNxA1YxR3QiQ0BkE1AUBmFEOAUHZGBzQAU2dxVIgTQRV3U3g4\ GGiISEYQhHRSWDIBQ2Z3UIIWdSV1EWhwBTYiWGI3VmJVI1UIU2REdUhHBoJ2gRhFUThy\ BSQnhBIGI1AoMVB2MCNhUXQiNUGCKHgzUmQxU3dEgBhmQyIQgmFjdxY1dCJgGBSEB4Ij\ CEJ0MBGIQWRRN3QjRmRSQWQIJgNjcjdnMlJhJIU1MlJRd1NmF4dwhHIIdEYYcAhEclBQ\ JjESAiBwBQYzYlAIIocBcoZFcGVkA2SDMCVTBjgzCAAzNnQGYHI1VwJzYxQRckBIZBV4\ VxZmZiVlYXgHFRNjdEFIYVOFIVdhcnIINEhhIURjg0cxJ0SCIWYUUVcHJzdDUTASciAW\ UiJAglIoQkIwNjMlcwACZxcHZVJAh4EnNnWAZVVoBjNnNEcicTdyEEUHBVFjETETNjd0\ YUFmFDVXNUcHFVJoE2AlVwFhMzc0dQckMYJUaBJ0JkUBdyd1AnZiJ3hYYkWAgyR1VziD\ BERVh1NQAFIGWIhUZXCEQxIThyR1FIGGNTKAcwdRNBGDYEd2RVEwUDMzWAAhNQEEMYAS\ hUSCgTJ3VIdXUlFBFxFkhVCCZEABJjQCAxFGNkhHQzM1YSSHNlEBEmJkgWZCVwZHRSVD\ GDZzRCQiNhE3IghDhSFoBYCHNFVHMxZAZTSGAVMUQkhBKIFRQEVBB0cHNGEiJVVScQQh\ hzQiBzKBYRY4Q0R2MVUldwVCIkQYEEgFYEREY2NERyFVdHJzdAZHBmhmdSCFIgh1IwGB\ AxNzFjEoUWFCF4AhZRJSEROEEThxAGYBJTgUcUdFJBOFRmcVYnZUUFCAY1AnZEZBVThS\ ECBQYBNGeAdzQ3KGhIE3ZiFxQoVCgQBjEFdFcIV0IAaFcgI0iAgAUVQAhEInQWECY1I4\ E2U0MkAXQSZkdSRRc2I4BjEiSGd4hgQEEDcTRmhFd3MBMmY2gERxNwiISAVkFVETGCcI\ gYhzRXByGBgzKGVXJUhoGEY1hgFmZWgmEWYWVoISd4Vlhid4VUMHgSZXhXUSaCgmJ3Eg\ MQIzIDIThwRSARQhBFB2QQBjEgIoEHN1BhMCiIIBUlZWCHdBMyZFQoQ2UUJXJCFnZyFD\ RTFUUTQoQmUjB0aHJXJHeDZlJGBCExATEUEDg3BTAChWImN0AWcFB3IUgBEARxVUREdX\ QzhVBEBBF4UgcRhCg4gUcoRkdYCAIUQBRUJUYjFjEBYUhSBjIyV2cXBYckEiMic1N4ED\ gDUGVSCHhCYURXcQB1ODg4hDJFJ3Jld2gyYnQYclRjE3VWcQNXJBYnOGhYFoU2dHATAw\ OEeBUGQjJHcDgUJTRXBXJ3IAEjEXhXeEEmghIAAGdjUVBndnI2FCAVcyV4cxIyZ2dYE1\ ZEiHcYJYaCcXQXJCaER1coIDRWJkcSNhEVF3JGOCQkYWYkcndRA1QTh0MFgzIyVocYJY\ cwIAFRNiE1VAUECBI3MzQiZkUhR1cid1NSAXFXN0gUNnRCV0ISNmYnB3NIZyMIQWEVVz\ ElEohnQyKBNoY1cCdmdjVYiGhVUlA0CHMTZIURBgR4aIJwJQJlIDMYhwNGNwiGcIBUdA\ NXMBETUgICJyMkMIN1BAIAB4gEMDUwhndFJkQDEgRRMld4EzhRM0ZhGAYHMgZ4NhEEhn\ U2I2VicBBXZUFUNoczcmBzBnUEBxUWcDg4RHUXZSOEZogABHRAISVEAzdoQhRmBgEWYE\ Z4U1dgQ2gjgQUjMScgIIFQR3YFczhTYoB1IiVCYGBAVmVAFIdhRmZ1InhwdTRjJjNhVx\ IzcWgjFlFCaChlIWUySIaDFwAWV3RAIxg2QWYgAYMUjP7wmwOwPp7Ukl3L1KalY/6dN4\ dBr1AYS8JnkVq6pPeBfO7ccX95SrVfAO7EX7RVEYyhVR9QOQyEpLBUMcfcfnHCZWKM0o\ OBF7BXiWMR9BQo4ybtpJGKQ+IZyCKUJVRhZ+uae182qYcBKFMdOOzXiO8kAa98eUy6SR\ pPfKPD6D+xXgtJ0FWtYnp1Jy2aIG3HqMiTHoSdVIvccGkf94gpVWTMeJQsQpgq7dAJiJ\ 5JOMQjk7JIHcIzxb4T8sQHzA55MFfvM7Hus/8FUX7NfIN1JRmc2zHL/7kdfCFSwG67iW\ U4ob2kTwdKzPvOL+d3e+AOE0PihJ4vVJAOjhWmO2fIFNvFhNqPh0MSiSkatPGbSVdqQ1\ PsG6C+1YqMrTM7KFr4hTQM8a3+tAOsImMjXSSPDkVeuJFq1rw642SJJx8yZTXVe8g75D\ ZTYghbeX5LLzaVkt9mZS7cW16Zy+C3MwnWDrGQ6hUDxYaYJp7SOGJHepcmVV214oD6nw\ 5QprgpGIxVcdXQUO0fhKwerYDkoOIj+uqk7NYDvOt8zANphYcE3v+6yVFyYh3eg7DYRJ\ rIzIcbaG91ySv2iRRC+cWaymH6xuqaHRwZu/p962/u8/c3rITJzCoVc+ObnZ5oItZFBe\ AYFhLBx7PvPdBULXyCqmtkOtnT/jnaCUVxtGeaIeQmmeM4yPq3d5uWBfOvIyuPmfBSKd\ Y0NETGlsaoQuqFpOkCmQdMVZKh3UZ8AOjw22LlqaZlrUf0akb0fs7le2HT47KV9yOJHC\ tec9tjHUeBVmma5O4AofGcVXLbkqKv+Soax9GooHVOv+uxa8iwjAdTZKtqwKnKDx4jaR\ +zotCsYi4BuB2JbkjnHG6NL7ubN+aNKnwnzZnMKQZIh2Q7vSRYKTM8j9OGLq7IP8q2NS\ oc7iT//eAvb4oF6LaY7qebxQ6ROXCSRrrXgpo+pw3ltfuUCuGzAxD4+wMZU3dlXsivhJ\ PnTEjI/V6GmkRlfZ9XnYfj8SILETWk03dMFJh3LmUwkbRV+C3mL2GzjgQVTkvP82KDBL\ DAR9iKyPkJnMnK9Ix/StVyJbGAtGp4jHnp+PSjz9ja4qI9jVRjGgIUQhw0DnI0fnplUn\ Qhz3F9MQXMPLSPvFw8M0xkUKsAcxQvxZGb5LkYByZ0ZrO/ipphwnE6zQuOva+8uTyBX/\ B9VR24tUItvlhy7SS6JrULrvTA+D/ZCiqKRx61iF6pU3BoC8fgA9D/AifiQnPz0SI5kx\ FJfDTz1LWMjUlQKBHFvRFLE9eFD0rnwAGx7Pgpyc/KrLqVmcmj/96TYtoedp/iW4asfY\ C2vs+GVyxVoumIdFPHJpencWbE/niZnVDaJCih1iqgXzDsI8bENh2B9cutDWX+bsHZSC\ Prorock, et al. Expires 10 January 2024 [Page 15] Internet-Draft jose-cose-dilithium July 2023 jSQb9YkGN+MoNiJlXmQHSJDyfPhzWPibdS/lpS90ppPWIY+PpLOfzDSGFFWswQ4q5Phc\ pLWHx5lw9KSye+T86p6kadnBBTLTyfn0dG7NpO9QKQObMN60MnybkVGx5nH9yLJlFlmV\ 0H+K0VZIKm4UzYV+RYfqqXYtMqTQxeQ1U7L7o0H+6viErxuKj5rS3i+r1rdfECAGgCoq\ 0mixATHISAHi2eSV5fk3r5xMkKSwwPIRuMt50+kklRPUoLohTj7G1CnL6O2xwBdQMTUx\ 4Jq5JBWnfB+U4D9n0si1DwikIhpaUyOoBeaWo4iFQiWVLwjeeQvY6zj66l7OXsPHjZXg\ uCitsWfp5MYV3cLTkb80uCM/xhp4Y0Edobt6x3k1FD8vbh8g3YAG0Xe/U+Iz3klnpCt2\ ROQ2lGQa0JMl4nbQr3tqTLoXv4szaErfP/Xw05Cnt9DsBzN5DNrmfF6EDcfVf/hn8v9a\ wrg6Rfv8Jpys1YFpwLanhb3Wz+x1yaDsa54IdlFOFnyBxv8GppbFrMpVFx/nLAXGIocc\ WjcRKs0tBJUW/IoXeKOMPUd1wHR4dqUCEXsoexHJiNe5sH+akr6UIDObF70hhupBoiY9\ AzVXi5zXf2VdafyQrkGfKz4BEUkiqcaajHr1CF9ZJ+Mjdmfr3z0xyCmCAWir5ZLOBXDj\ T7sYCV3QjCz4a2mGvee9IxC9kSLapCq90UMAxnTLjJGQM/dlpgjDsjsCZX5wKdsnMs79\ 60Z75BGDOC1dDINj4f5kHZmwwcmw/04mi/1RPBUABXse3Up3eJQOX2haZPqmY0+2PZTF\ exku9pETHtKcfSdRe1oJLmlB34JSogRmNp1eBxakcIL09huiFVtGVZng/pC/ryoJ/T9q\ 9w4aV5H+4u2dHc29Vb77SasxCdRH0sDaLaPpesRXsrdJwjbizOgzRlIx+83oO7NuhE+C\ kKfO7cZMrFm8r8g1MlzDiFrTf3RTusMtiW6CVlVuTROPZFngqaR5yeYPprpSELtQHSwz\ U5AaY5Qd8tbky5ec+2/QkXO+cdyWhQUuBRpibwpRpD3x1yTgT4E91cwTFpvSLk54ZHf+\ D3EsZf0PYMN6d4jVdh9iv+0tCebnfMqP65wY26YBopSLtCXXb1anUlRPlzPzRq99yKnt\ FM7gK1XnBAZoZBBqCyZw9OHWmttIFWcml4Wd5BxF9uZh2Y8gtcN8UKWHv43tsNBa7j/T\ ikIBSkIVI/6EQvyPW4YTdyz2V8RKHN5XcdpdWFaVhgSJMC4I6Bm0Lwenhkmal7Sd247q\ uCtEow8qh+w7Jk4SxrmvJxd5sBnvz15OKEaHPeWNNJW00bWEDT+0ZzzD8vMN1/GkbbB3\ s7UfcJXZbRu7HtQ+wHIblBKVstX3hMonra+k6wS9KPhcAaC3IjZ7ZApSedKk1sW1SuDg\ l48YW2/cyS3LvmISQn9KPWK7yEpNQnV0vurn3ZFOGO0eDjSXUjI+xIrRia5GQ1yb31ma\ nJnf2PdHcMmVr0wu4lMGno7a14nMRdnXkBU8bVOp8wF6Toz59hBJ3a/F+mP4/a19Ixra\ wiVVeEPgoi9QQ9NcLgQEFCoskA+EpcLK0FxV2rYI9JFNF/nDxP5nmGtnkmlFaLo+pleH\ CJYS0OTGKQr6X+Y65NOllx5nNwsnWkIUkCodoSt4Givdoe/S9JNIu8tW+jTBae2hNr9c\ glErCNKDYe1+T+Ldyr9rfOKm9LKNyTBsodgF4KI/hFh9Iv/i55DTWtqjpN0eQnPTB3/6\ +7KzTfSE9il5UMcP3zKKC2mAQvtyYxF3k0m24ZTwPs2LAPJkr/xtPH3BnGE/UfUDmvDS\ TBp9m049Nh9oDZvI4HKsY8auiyENk0ys67F9GTHhOYM0FgHyP5qk4/IR5YC3lnq7xx6i\ owebEJAy63htMytq+xd3cJyZR0lWBUOqvSpd/A==" } 3.4.3. CRYDI Signature Representation For the purpose of using the CRYSTALS-Dilithium Signature Algorithm (CRYDI) for signing data using "JSON Web Signature (JWS)" [RFC7515], algorithm "CRYDI" is defined here, to be applied as the value of the "alg" parameter. The following key subtypes are defined here for use with CRYDI: Prorock, et al. Expires 10 January 2024 [Page 16] Internet-Draft jose-cose-dilithium July 2023 +============+====================+ | "paramter" | CRYDI Paramter Set | +============+====================+ | 5 | CRYDI5 | +------------+--------------------+ | 3 | CRYDI3 | +------------+--------------------+ | 2 | CRYDI2 | +------------+--------------------+ Table 5 The key type used with these keys is "MLWE" and the algorithm used for signing is "CRYDI". These subtypes MUST NOT be used for key agreement. The CRYDI variant used is determined by the subtype of the key (CRYDI3 for "pset 3" and CRYDI2 for "pset 2"). Implementations need to check that the key type is "MLWE" for JOSE and that the pset of the key is a valid subtype when creating a signature. The CRYDI digital signature is generated as follows: 1. Generate a digital signature of the JWS Signing Input using CRYDI with the desired private key, as described in Section 3.2 (#name- sign). The signature bit string is the concatenation of a bit packed representation of z and encodings of h and c in this order. 2. The resulting octet sequence is the JWS Signature. When using a JWK for this algorithm, the following checks are made: * The "kty" field MUST be present, and it MUST be "MLWE" for JOSE. * The "alg" field MUST be present, and it MUST represent the algorith and parameter set. * If the "key_ops" field is present, it MUST include "sign" when creating an CRYDI signature. * If the "key_ops" field is present, it MUST include "verify" when verifying an CRYDI signature. * If the JWK "use" field is present, its value MUST be "sig". Prorock, et al. Expires 10 January 2024 [Page 17] Internet-Draft jose-cose-dilithium July 2023 Example signature using only required fields, represented in compact form: eyJhbGciOiJQUzM4NCIsImtpZCI6ImJpbGJvLmJhZ2dpbnNAaG9iYml0b24uZX hhbXBsZSJ9 . SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IH lvdXIgZG9vci4gWW91IHN0ZXAgb250byB0aGUgcm9hZCwgYW5kIGlmIHlvdSBk b24ndCBrZWVwIHlvdXIgZmVldCwgdGhlcmXigJlzIG5vIGtub3dpbmcgd2hlcm UgeW91IG1pZ2h0IGJlIHN3ZXB0IG9mZiB0by4 . cu22eBqkYDKgIlTpzDXGvaFfz6WGoz7fUDcfT0kkOy42miAh2qyBzk1xEsnk2I pN6-tPid6VrklHkqsGqDqHCdP6O8TTB5dDDItllVo6_1OLPpcbUrhiUSMxbbXU vdvWXzg-UD8biiReQFlfz28zGWVsdiNAUf8ZnyPEgVFn442ZdNqiVJRmBqrYRX e8P_ijQ7p8Vdz0TTrxUeT3lm8d9shnr2lfJT8ImUjvAA2Xez2Mlp8cBE5awDzT 0qI0n6uiP1aCN_2_jLAeQTlqRHtfa64QQSUmFAAjVKPbByi7xho0uTOcbH510a 6GYmJUAfmWjwZ6oD4ifKo8DYM-X72Eaw The same example decoded for readability: =============== NOTE: '\\' line wrapping per RFC 8792 =============== { "header": { "alg": "CRYDI3", "kid": "did:example:123#key-0" }, "payload": "It's a dangerous business, Frodo, going out your door.\ \ You step onto the road, and if you don't keep your feet, there's\ \ no knowing where you might be swept off to.", "signature": "2As8T1AHenWzLuTojcAYFDnT05n4bmDGIWenHqoXVizL7311HtVg\ \7PEJHYmpc1fIvFNrm0xJt0asD5bQk3ZY8WuEQDUjsn4j+zbyob8MPQI5u3p5ZkqlLhG\ \6Q8p1q0Hd5voY4a78vNxFJpYsETc0bECAft196z5hml2VjuDBqI7W4ju/iDKambJIDz\ \NLYgYinNyPcHjlfBP7aCfOqGBAOQrWuVgrAkdeM+uH6djaXW25+FeUl4Lg1uOIBPrcj\ \ZJO4MO7j7BmiuHJDB74QG/ifVqnvr4z2alMWHjjR7nPPr2CIKpuRthSpNWYVTRSN3mM\ \v0GjVLyaqhJpmUmewhjaQCi3iP7c59yKatGYjLPPEapsbN7ypIo1Bod/R2PZR0zeool\ \d9k30VmGsVLkJ4OEIFnlA8epv+bJISApZWrGuU6NBP8vr4UB2D9DRd8zwvd/vI0BWdq\ \nfglX4x18lWe8Tnd+21UC9n4zUb+KQlo9RR14VfXEOt9g5aOIzCWjAN+Oz8vqJ/ZwgH\ \zZotZNF+nZehtFPcPLM3dpoUkEI391VH3QQ6VTYfbMW9wGJ6UnylxZFEzNCnMFF9Qhs\ \7Xehy4yEDgJBFYIvbTRCfD+EbZbWQAnLKsm7UXXBR7HdUsJMhTkwdffGziWJBTf1UsG\ \tqaCF1bvXgbcCSe0XGhc0QkQKwwj3kNWY9/hnhH1bn7kyySqaI+W4Ph3pKwRb38sCS/\ \Gb3ryptI8zez0JR+lClWnu18noJjGincZq7jCGMiMCRFpzUV6rpY/FiM26IpZ8M9ShF\ \BHsTN7KGpyIqG6Yc3GzOJ/4ir7V3I3wYguK7iBUiuTM+OKwxtM75carZJPX/2lkn2Hh\ \TC+JVb2/yaHS2oDrlCwQosNhA/cB/cm+YmYgHc3KQwrZ/3Axr6weUSrWJ8qV+vJ5QKK\ \a1+CLrkVGJX6vh+ps1NB5EV9yyMhBXAbbJZ3K+dGed3G7Vj/qF2kbnIUlSIeP1f6LsH\ \XASuVLTU6qG0rTaCMYKwaAc5ROwAgyZmPXuOUwyCtNFb0+S73uX5/N2drrUPdXiURW+\ \luFKCtaNimU8myoz6YkoY234kz8pedST8eqBZAioe8HeYEKtZSAyYov4YfLgkqHqJG6\ \ycD2uA33kwnMim+jg/hIrWAIYYP9R90KECTvFR877RtfFgfn3+tZjWlmsxHZ5pNsTIA\ \dNR+VmNpoUZkQ0dgHuFLztyAnCaumL38LHYHFHj2boa0zYsMGw8WtpEQ3+BNgoanNax\ \dJ5THRRmhvMS3EDwanERimsZ6ZjdK8uchuVhytNiiKvBwEFWYIyoK9uUMBoEfDje4DX\ \wIAefXYCqPK8eXhL+9qDLxADlDQbCu+Ey3whX/r4r2Q6l+34HpRrn3g5ok+GtO/3ni9\ Prorock, et al. Expires 10 January 2024 [Page 18] Internet-Draft jose-cose-dilithium July 2023 \dYiIYpcXYfhMGDoXJLZ3IMkK7L6e5u4/Wye7lot2B5ekSGRrkLkjv+bTIkppxbTU4Pi\ \n40qbD91sRzw2/GzZmJsfcFaKbj5dhoNWyh5cZr1PqsxMI5EdXSxJ69VWf8e+h4iPoB\ \YS1JnUjhicVWslpA1rdAvTkAsVY8rC22e09Hxzbkb/E7bt3iLDpekbbQAghZ31AwDv5\ \KEG72bBbXIYHzPvhJzrlS2LR0XKTJVd8tAxOSdxQDOt8tE2eKpmWZ38MJfRIxt2Rzol\ \p+bpKrR++pMLRrpViekVpZl/tlEojImNO5rLqxZhLxvZOyDfcT37jc1oqire527/Y9L\ \3k894eHNYcXxjb0LGGPDeLuTSEX+afHZLNbd93Qa5VTmLwsPxEW/Erua6nXUrAR/87P\ \0gIyce3h3sl5jzCXsQm/iODgyn7PTEo5ksQCFRPiyXq5xgiXGKGGkqTGg28Ohdby+lN\ \DPnNHU2J0F6GLTqwK3qGbBLzDGIMR2sePGpxZ/pecoX7yn5bTOf4iY1OCyLo5nEgSeb\ \JdBJh0ZU+QodLRN0cnenLmP1oNK2yCuT9uIAlWH9C1CLhBiEOfoIs9/r1W1XHPiPsX7\ \c21w+B1IPfzUX1cVdndnNo4XdHl9CH1tYJDLr8LfeuYnz+bnaFlqEUryTc8zUl4A+qB\ \SIDDDjefCbmDsTrdqzGT2J89MKViOogy3qJzyt3jo04xq+Q3OGjbOFJikyJEqUm8BmX\ \d3ctGfzsEr+5w7fDRco40/tDQUSH0qOWOsPkhuelLqKDziJXwhPQI42miVN2A4+OAS4\ \f2uTgpDNn1gIfH2+dOCkBjlhZeA1Tgrp8FHQxcaO5kut6cTLrL7CSBqINa7Khe1zyXa\ \PZG/tXUk+iv0BYT92b7CRNmg1qhE0G8V3q3QrB6EePYa1WxRQ7ij4rRcQWcj66A1hZ5\ \KjDUVJh+02cZTFrv97wM/im3vb3dbiSxAiQExSa2KATfLI2oS+y7RlRNJ+9nF/vTaFc\ \0HOdKfmuJAUkAcyk/h0Quvdaf9jxEcstj95mva+HkIqPuFifidlvGiafKr4fHZryp1h\ \g7QUtDRU2a4BRfzcLz6PKOBFV3xVI7qoQbKEqQyldv8mZRd0LBRKprxHW7PdUqutH2V\ \GEmZ4UuCYXT11UweBx2W9lHrQX+xaKAjTu6oLYIOvmFVCUr4mCrYRcLZnzwORcsqIl4\ \G88x8r5aeilL4lsQZO3kNotR4n0qzFVRU2+EXO7QJFm+NKxB7aRZ5oH+dSy+Ye6aMeG\ \Epv491LU0LVnZNMBP2eUhoEoOgimmZGtUobjRdLuYyNiJfJzVkjwF3gYQtY59zb+46N\ \SzvWUqpFUG80Vswns8GNAQ5hfLoH8OGGohT+UvoqvpTEXhiAAFstT/EQrHLZrYpXHJI\ \YaICW+6uo9ixL0oWkfI0HlYaXyNkaFKHQ5ZbPaP45dbWq/dqXdrRe2YU8AqdjCxyyzO\ \lyZR6zH9wHj0k1AIOHvnKZ/B2v4bS8YAtNZ1zgKbOvM4qqSIFETfr8N4yIteumHEznP\ \prD7Gr6W2VCS/0FXnQt5y0QC8z4ffrnggwPjcZfsCRSknktQB1q6Cx8KUOipf+RhOvs\ \HnNN3qJZmxz6YCvo2M7fxJtyRvm34UEVaj8QKXrmzX70Y9rDl6wEhhvSThaeq4dcfAC\ \vczGXWgCLB10gl+Iz6hVDTgCx7bC2BQ2oHtzSDc+v/UuJewvVaIL9tn4CtMZU86f3Zc\ \fTN2zke5alNpoJP9A+mkbcfy0aD6yFcn3nw2ueFDsssRg1ZcS5CujNeylAwxRYaNSmU\ \zDzMygHu0CTxfGEG2c63J32HkG4Ds58KSk7HSD58jgScBv+QjBUAGSJozFG9y7yIF5R\ \kD74aSJMYmuzow2UnGayR9yM5ONbW1brD4wNyJHqDIroCUvrL8zu24ErFWDKy6VaZ0m\ \ggPvX38IoxIPnE+PmOtRGr+ua9r9zO47TtEoADjIEtwQuNem0S1fqeVx2Fd1TmKc5+v\ \cxMsmuEKQiewTbviLdIWHTz4snU/dt77cxQEFWkS3pu31kCLyLbpiCKMrn1nELafNBg\ \RbzwEqGTT0i24Kz/kvC5RYr2USuHKksZxPfgx7Y0OpY3IbemFO11EmnG9odSwnVcww+\ \9/IIevZHUw1qqTxZu1re/AMfqhKgaD8XiwuKxPZQQo7Z6jj3yOugAVWYOw/88bAXO2k\ \deVc0mG53sKH9ChLg35LdPrpLgHeFjIHJ27L9ucqUw70Pu58vRJUnYDey997y57k1vh\ \9RwPkNvIs269v6s/xfg9VM9N4aY4X25EWCxchMWlH9LMamYF6JTP0v7v00cdHycmX5D\ \EnwqspYYNomVpJlOOxgMAO9oy1E4dhg3IJo+fJgL9rgOxJ4INTJOg/9tUz21LPI3c1c\ \D5pPs/y0zy0cF9f6ahaYxMDk/nfout2FGmoesMCaTN11JngYYC5H95cDeMwErm6ppSU\ \woCqut45noJq0VS4V3PKfASIfuUwP3vgFKo+82Wy3dqEr+sBAsve44CKQ8Tq1GLYjet\ \L3xugCkl0uaGh6TFqj2X/vJlXOW0Ouyvzt62fxeQ4esOrs4LdRxkJbKT2I2p6rQAlBi\ \GaZLvOuccQh7NSt7BEJBy8QUrPV10vPmCNGQrKS6alC/JNFLaxmsP4CPQqwRQ3fg2ia\ \qQRol0htD+UFjWUBXrQdrs48b9TdLHmbPHPbG6+ZeuCi87kJ/zJyjHA0SYUP6awkfga\ \ckiLUppo0oNIc9/qsVr2lFIWIO9+UWnIFR9nNFPzgbqw/cMOC/uWAOOsGS8ADQ/rePO\ \fTXx0mfkvI2YeTdiIayy+uwUxoLdz90DGhUysP+JGU9kZTqYNJYsjC4OgLXS+qKCYai\ \oW/leFs1fdP6SH+E24pOOJARU/f/ZajcMMXAwQdIVeOo7jvDhMydne90/18fcwpNVN0\ \tswhRsnW4uMCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIEBMZHyE=" } Prorock, et al. Expires 10 January 2024 [Page 19] Internet-Draft jose-cose-dilithium July 2023 3.5. Using CRYDI with COSE The approach taken here matches the work done to support secp256k1 in JOSE and COSE in [RFC8812]. The following tables map terms between JOSE and COSE for signatures. +========+=======+======================+=============+ | Name | Value | Description | Recommended | +========+=======+======================+=============+ | CRYDI5 | TBD | CRYSTALS-Dilithium | No | | | | with parameter set 5 | | +--------+-------+----------------------+-------------+ | CRYDI3 | TBD | CRYSTALS-Dilithium | No | | | | with parameter set 3 | | +--------+-------+----------------------+-------------+ | CRYDI2 | TBD | CRYSTALS-Dilithium | No | | | | with parameter set 2 | | +--------+-------+----------------------+-------------+ Table 6 The following tables map terms between JOSE and COSE for key types. +======+=======+=========================+=============+ | Name | Value | Description | Recommended | +======+=======+=========================+=============+ | MLWE | TBD | kty for Learning with | No | | | | Errors based Signatures | | +------+-------+-------------------------+-------------+ Table 7 4. Security Considerations The following considerations SHOULD apply to all parmeter sets described in this specification, unless otherwise noted. Care should be taken to ensure "kty" and intended use match, the algorithms described in this document share many properties with other cryptographic approaches from related families that are used for purposes other than digital signatures. 4.1. Validating public keys All algorithms in that operate on public keys require first validating those keys. For the sign, verify and proof schemes, the use of KeyValidate is REQUIRED. Prorock, et al. Expires 10 January 2024 [Page 20] Internet-Draft jose-cose-dilithium July 2023 4.2. Side channel attacks Implementations of the signing algorithm SHOULD protect the secret key from side-channel attacks. Multiple best practices exist to protect against side-channel attacks. Any implementation of the the CRYSTALS-Dilithium signing algorithms SHOULD utilize the following best practices at a minimum: * Constant timing - the implementation should ensure that constant time is utilized in operations * Sequence and memory access persistance - the implemention SHOULD execute the exact same sequence of instructions (at a machine level) with the exact same memory access independent of which polynomial is being operated on. * Uniform sampling - uniform sampling is the default in CRYSTALS- Dilithium to prevent information leakage, however care should be given in implementations to preserve the property of uniform sampling in implementation. * Secrecy of S1 - utmost care must be given to protection of S1 and to prevent information or power leakage. As is the case with most proposed lattice based approaches to date, fogery and other attacks may succeed, for example, with Dilithium through leakage of S1 (https://eprint.iacr.org/2018/821.pdf) through side channel mechanisms. 4.3. Randomness considerations It is recommended that the all nonces are from a trusted source of randomness. 5. IANA Considerations The following has NOT YET been added to the "JSON Web Key Types" registry: * Name: "MLWE" * Description: MLWE family post-quantum signature algorithm key pairs * JOSE Implementation Requirements: Optional * Change Controller: IESG * Specification Document(s): Section 3.1 of this document (TBD) The following has NOT YET been added to the "JSON Web Key Parameters" registry: * Parameter Name: "pset" * Parameter Description: The parameter set of the crypto system * Parameter Information Class: Public Prorock, et al. Expires 10 January 2024 [Page 21] Internet-Draft jose-cose-dilithium July 2023 * Used with "kty" Value(s): "MLWE" * Change Controller: IESG * Specification Document(s): Section 2 of this document (TBD) The following has NOT YET been added to the "JSON Web Key Parameters" registry: * Parameter Name: "d" * Parameter Description: The private key * Parameter Information Class: Private * Used with "kty" Value(s): "MLWE" * Change Controller: IESG * Specification Document(s): Section 2 of RFC 8037 The following has NOT YET been added to the "JSON Web Key Parameters" registry: * Parameter Name: "x" * Parameter Description: The public key * Parameter Information Class: Public * Used with "kty" Value(s): "MLWE" * Change Controller: IESG * Specification Document(s): Section 2 of RFC 8037 The following has NOT YET been added to the "JSON Web Signature and Encryption Algorithms" registry: * Algorithm Name: "CRYDI2" * Algorithm Description: CRYDI2 signature algorithms * Algorithm Usage Location(s): "alg" * JOSE Implementation Requirements: Optional * Change Controller: IESG * Specification Document(s): Section 3.1 of this document (TBD) * Algorithm Analysis Documents(s): (TBD) The following has NOT YET been added to the "JSON Web Signature and Encryption Algorithms" registry: * Algorithm Name: "CRYDI3" * Algorithm Description: CRYDI3 signature algorithms * Algorithm Usage Location(s): "alg" * JOSE Implementation Requirements: Optional * Change Controller: IESG * Specification Document(s): Section 3.1 of this document (TBD) * Algorithm Analysis Documents(s): (TBD) The following has NOT YET been added to the "JSON Web Signature and Encryption Algorithms" registry: Prorock, et al. Expires 10 January 2024 [Page 22] Internet-Draft jose-cose-dilithium July 2023 * Algorithm Name: "CRYDI5" * Algorithm Description: CRYDI5 signature algorithms * Algorithm Usage Location(s): "alg" * JOSE Implementation Requirements: Optional * Change Controller: IESG * Specification Document(s): Section 3.1 of this document (TBD) * Algorithm Analysis Documents(s): (TBD) 6. Appendix 6.1. General References * JSON Web Signature (JWS) - RFC7515 (https://tools.ietf.org/html/ rfc7515) * JSON Web Encryption (JWE) - RFC7516 (https://tools.ietf.org/html/ rfc7516) * JSON Web Key (JWK) - RFC7517 (https://tools.ietf.org/html/rfc7517) * JSON Web Algorithms (JWA) - RFC7518 (https://tools.ietf.org/html/ rfc7518) * JSON Web Token (JWT) - RFC7519 (https://tools.ietf.org/html/ rfc7519) * JSON Web Key Thumbprint - RFC7638 (https://tools.ietf.org/html/ rfc7638) * JWS Unencoded Payload Option - RFC7797 (https://tools.ietf.org/html/rfc7797) * CFRG Elliptic Curve ECDH and Signatures - RFC8037 (https://tools.ietf.org/html/rfc8037) * CRYSTALS-Dilithium - Dilithium (https://www.pq- crystals.org/dilithium/data/dilithium-specification- round3-20210208.pdf) 6.2. Appendix A. Acknowledgements We would like to especially thank Gabe Cohen for close attention to and contribution to test vectors, and David Balenson for careful review of approach. We would also like to thank Michael B. Jones for guidance in authoring. 6.3. Appendix B. Document History -01 * Added Acknowledgements * Added Document History * Changed key type to MLWE * Updated test vectors -00 Prorock, et al. Expires 10 January 2024 [Page 23] Internet-Draft jose-cose-dilithium July 2023 * Created draft-ietf-cose-dilithium-00 from draft-ietf-cose-post- quantum-signatures-01 following working group feedback 6.4. Appendix C. Test Vectors 6.4.1. MLWE CRYDI5 6.4.1.1. publicKeyJwk ========== NOTE: '\' line wrapping per RFC 8792 ========== { "kty": "MLWE", "alg": "CRYDI5", "x": "TUlJS05EQU5CZ3NyQmdFRUFRS0NDd2NJQndPQ0NpRUFpM1lBMWZnZGZ3YXJM\ UmlmbTB2MEowZlI3TjdMWDZhdmtDU3pIa3kzVUtwOEFpRmhDSWJIbHFwSHAxUXNESGls\ VXhydDhtd1FhQTFUR1FvanBvbmlKa3ZWaFZTZDFMRUhXeXpPOUVPclFFSXo4S2xVUEpF\ ZUgzWTJCVCtpQ245Z2J1ZGFudFIyYUd6WHY4RFBxb1hXbXRaMFZxV3loUnE2MVFVcmJy\ ZjZPU2ZqMkxOQklBaHRPR3JmVkltRisrN2x6NGUyM2hiQzZCcUFiYU8zZDV4dzdhaUlS\ c1l2Y0tHaHpOOE83dU9xRUxJajViWnJrakgzenJ4bWx4Q2pUVHhHSGlkMy8zNTNXWW5p\ S25FUzJ0Njd1K0Vob3FiaG1nUWdQNFI4cmNpSWMzZFY4THF1S3huZTJ4NHd0bno3cW12\ KzhtdmFQbXVMOHJTUEpTbFpCbHd5V2laMGF5VUV0djVxS0hERGxtYnpscUZIeENOdUxV\ MnRKamd5ZUVSTWNUU0htaFVONk9mZGlPTkdIektFOC9ZTTBjUC9OTS9zaEUwdFE4Rk9w\ RUV6UjhwWE5aamhSWEI5SFdBMTRNNjFMTUZ3VWZ1czYweHNDOFhzQit0NEd6ZU1iNWVy\ L0dIejZBOTJoQjd1RzlmYzdxZTViSjJJWnJ2U3h1Sjh3alFCRDdBaTYxTDRpS1JGeTZK\ VzRsdXB6VWlXTldGSjU5Q1dORHdLbUM3ZTlyN1NROUV4dzNUNFIvVDFEcnVzbThUNEt1\ cTJOOGdGSFJDUmpLanhha0NnRy9DZXphRVV1SVRqS293M3RMQ01QalZSRUNRRTIxV0Er\ UXBic2RpZm1tY1dlVFpEQ2JOb3hyYnJhMGpud1RuVVd3WS94a1FyN2NMV2RabU1JNGtn\ NFpOaFNndlFrMUdqczlrcHozekpBbG5KSDNnckt2U1hqSENvSDgyZ29ubnl5OWtkVWdh\ Qk9vbHRCOWd6eXZCOVZ2NUM2LzJJOTdaYWZFUWU3NVV4eU9Hejh4WHc4L1BGdDA0eHFu\ WGVmSmZSTUhDSEQ2WU9OdVp4L3FraWMwUkNCMTJkeVlYQTZ4TWRKVGtDRzhNTzBwQ2N6\ SnBvdm02Tk5GTTZETGVFd3B0QUxycWhtUjdQUkR3ZGVSVSsrLzVtUGlkRkpaZUlpTWxU\ NXpBN0JJUW1tbDBnNmwvdVhsMG9lN2xkaFlCSnE5Rnc2dDB0azBubWUvUlhSb3dEdVZG\ cUpscnJiZHNEZFdRQXUwL3JZVHNnTGhLck1uMHFUOHBNYUNLNkZpQXdNR3BGT0VsVkFx\ VXVGRTQyejZvcmJzZmNVcDJqdy9ESi83MVRDeW9yWVBxakN1Yno0alFKSWZWMTIyWWpo\ aHpUNWNXTVo4Mm0wdnpkanMxaFFhU3BmUHlTekhjbmQ3NyszT3JKbzNJck81NlBHQzJB\ WEl3OUNhVFExd3F6bC9PZ0xHQmdQWDNHZHZxRHNKRzdqR05rN1BoaHRvMDEzRTB5WldZ\ WUFWUXZ0RHQveUN5NUdXMzNXTm85Znc3TkVFaTJUbGdDMHRNVjJEcDhvNmRGY0gwZTRY\ Q0VoVUxpam1EdEkrYzJrYVd6Ui9qTDZjVHlaMXZEWGhpOEpHUmNaZVIzRGpvN2xpcjln\ OTFTN3ZvTGJMT0R4Q21FNjl0UGVvc1dIbDZYYjJtWXk3M2dicWo0SFFCMEZ1Rjc4QnBL\ YUVlN3dieGhuelg1Ry9EYmZTOEt3eXBJUzl0UkFvd0JzWjFVSTRsMHJCYmNBdDRQTjVx\ RUJ0cFZLeTVYTE0xTVZNL2RLY0RiOVgrQU8wZ3hqdmQyNCt2bVNOeFBSSUh3WkU2UTMr\ WXh4dE85eCtrMkxibWNtdFJjRDkyWDAweUc5cmhJSVRIQnE2cWVjUi90WE85S3dobVJj\ dWM2aXZ0UWlYNUV6MkhtN3c5cDRZWVd1aGNEZ3M3VlBZUDdnLy9SM042V0FiL0pnMHhp\ TVpsVXpqTTI5YW1VQXdrNWpVYTF0UUtrdHlMMm51bTRrL1poOEcrWXF6QklDMjhvQ2JU\ VzhJTU93OGJSTEc4WnZ2N1dsUDk3cTgvVFJlYzVPQ3I4N1dHMTJ5K0J6ckxIZlg4TTBX\ ZnVvWkh6cFI4U2VaWXNtWit0dk5EWi9OUjV5R0VWQ24xR21tQU1QcmI0R05XTDFJWkp2\ VGovR0dtT1Y2L3U3NGNlSHlGQXdvdi8yaE5LWkRwYmJiS09KeXpWallQWjBHa1VYRlZW\ Tng0c0tPTTVKRkpUeFdCSTEvQ3JCcGVRWlp5NnBIYjZkOWlXbmRKN0VDek5zVDVqMWFv\ Prorock, et al. Expires 10 January 2024 [Page 24] Internet-Draft jose-cose-dilithium July 2023 NUpCS2t1Z2d5ZDduTTk4OEZRVDVpWnJzYytkby9HNmRsVHZ5NXYrUzZYRkhYSWV4YzJV\ dEhnY2lzTmhGYmRicDRhSXNSNU9ielppRzQyS1JVMTFrZUJEbW1VeFdOMkV0MXpMKzlP\ b3hzeTJDczNMVUhBYkVKRmREWmZSVmR5TnhSZFV1YklkODNyY0pMTmN2aGxidnZCWjll\ K2VSZXNyeS90WmNGYVBWVHZWZkRrWkJmMGF5b2pSbm50WUhEVTR5c0xHUUxZSXczdlhC\ aERHbzVKdGdWY3ZJT21TTHJKbENlVUNCOWJpQkhwYjZxSlZQSzRodURncVlWYUtISDJJ\ S3VTZkRPSFg1R0FhcmVLaGlBWnBHelZYVS9GMlIybjQzK2MxOURCWTF1WWZaU0pQdkt1\ Zk8vWFY4YXFsazh0ZVVraWprWkpiUW1maEVnLzRieDFpVDlKdGMwMlFQN2x2bThnRnpj\ L3l5U2RmaGsxUE8yWXdSNWdHdVh6bHh4TWJLalpaZnRqempaVzQ4aFZpdVhRekRIdjA4\ UlBBc0dPTkM0RTE5aWdkWUoxNGJpaHJncDlVRmJMRXJiMlFES3Y0SllLa25PVHM3L2p1\ cVQwNndEakpOSGc1empQVlFNUW9lbEJ3L2xGdnozZDl2MHJqYTUzeFUrTUhTZGs2WVRx\ c2JHd1F5RGlnVktZaVYyRnYyV3RKbVdvVE1WeDdMUHc3VFlVWFl2Rk5od1U5WHVvUTlJ\ MmZocHo3a0xCWHlLSDByVEt5bytzaVh6SGZyN3BTNFFoUEdPUjUvS0l0d1Y0UTBXaVhh\ bm1TUE0ySTZZdWJIT3lyd0tnRGlnbWhpc2lRY0JJb3JYcXVoVXVpZllDZjdPWEFTRGxj\ M0U4UERmOW8zdkpCWm9MT0tFREg1cEo0YW90NnB2cmtIaEx3dnIwWVNORVdnM1RWOHVV\ NmcySHFBNThzL1BCNFR1RnhUOWVzRUFIZFpRK0U1RE9DWk1yQjk4Y2ZXTDNjN3JtdTZR\ SkVUdkxxclhLTWdoMEJrSzBhZ2pVbU5ramtBbVJBNUdhcG5EK2VYRXNwL3pOcWhZZExm\ bGRFWCtvWWZ1ODJzVGFpZzc1alpYam4zd09BeUpFVEN2T21YY21UZlRVUUJxQ0JhaHNC\ RlZCZlpPdExqQS84ZjFqUWhlSitUMjJ2RlY2R3VPTFZXMXQrSnMyVjgrWVh3V01uVFZP\ ZVRsbXRqeE05VWZLME5laU10YlU5dlhqTkFBU0xpTXNBK2Faa1ZVa3NkM1FNZVNhTmdj\ ZXR6QzhvZ2FZczc5aVZvNTN2RmxzY0NZaXo2alB4OG9PcGxHY0ZIUGIwald6V01FMWJL\ a2hiNlc2eklRS0JZNkNzcHhHcmhOSHhZdWFsY1ZjQWI4M2s1alRwM0Y5YnVGbjkyazRG\ enFIcnJIVFV1ZGVvMmhUUCtuOHVPVm1DbzRlVWcvbkpDQ2hyTVNoNnQzczZScHpIY1A5\ VmJBYlFxdERJc3lGb2RYZnQvK25tdUhxNVh5ejZJY1ByNjFhNjhtQVBoYXF5RkdmakFu\ VGNJSlhzakFvUmIzN0xhdXJYU0h2QWNLcHJxNElQZmZRdGNKYlVzWHRKbXhVbklJL1N0\ VGxMdDlrUkwrejJyUitFV210QldSYmdMbVE1VG4wVWk2eDhGTk5nVTA1eUpFL29YMmdJ\ VEMwL2xLVCtEakh1eTNLcHRiYmVYaHpLWGhOclRteEdRbmhkT3ZpSVIvRS9zczNzTlZV\ WWIzUzBMQWk1anRrOGtGSEhnZUlJUlhKY3NST0Y2OVJjdERzZXNLckFQajFOU2E5SjRT\ MWhKSzU4bEhndmV6MFA0Q0g3bkdOUGE5RER2eVRtUmRzZVVYNkJhMEMvdzFobFFSendM\ R0JNTXNSMlkzZ0NzMjlrMERsVG1wWkhnNDdKMnZTK1hEMS9WVGZYMGE3YnEwQitlc2Z1\ ektValRhMjdITHVkZEorVG5XdDZvVTBsOFVaZ3Z3R0I4anlYT3ZIcElwODZJREhiNHFo\ OTRqUmQxY3hNWVFwUkorZ1IwR210TmpZTFNKSlgzc1l3bFh0dEJ1cnRlZWRtdmwvNzI2\ amZoaDFKSjUxNXkyOVdiU2xUY2oyMFNEb3V0OStNVlB0MldGVnNuOVIva1ZJRlY1bnVN\ cjJRUG50dHFzNkVITXppdFY5NUcvVEJ4cWgwcXBKT0ZXM3BYNExaYnl0QkhtODBNcVlw\ Q3N5aXhMaUVnRGlCaXBNd1BvaHZFZmRqeWY", "use": "sig" } 6.4.1.2. privateKeyJwk ========== NOTE: '\' line wrapping per RFC 8792 ========== { "kty": "MLWE", "alg": "CRYDI5", "x": "TUlJS05EQU5CZ3NyQmdFRUFRS0NDd2NJQndPQ0NpRUFpM1lBMWZnZGZ3YXJM\ UmlmbTB2MEowZlI3TjdMWDZhdmtDU3pIa3kzVUtwOEFpRmhDSWJIbHFwSHAxUXNESGls\ VXhydDhtd1FhQTFUR1FvanBvbmlKa3ZWaFZTZDFMRUhXeXpPOUVPclFFSXo4S2xVUEpF\ ZUgzWTJCVCtpQ245Z2J1ZGFudFIyYUd6WHY4RFBxb1hXbXRaMFZxV3loUnE2MVFVcmJy\ ZjZPU2ZqMkxOQklBaHRPR3JmVkltRisrN2x6NGUyM2hiQzZCcUFiYU8zZDV4dzdhaUlS\ Prorock, et al. Expires 10 January 2024 [Page 25] Internet-Draft jose-cose-dilithium July 2023 c1l2Y0tHaHpOOE83dU9xRUxJajViWnJrakgzenJ4bWx4Q2pUVHhHSGlkMy8zNTNXWW5p\ S25FUzJ0Njd1K0Vob3FiaG1nUWdQNFI4cmNpSWMzZFY4THF1S3huZTJ4NHd0bno3cW12\ KzhtdmFQbXVMOHJTUEpTbFpCbHd5V2laMGF5VUV0djVxS0hERGxtYnpscUZIeENOdUxV\ MnRKamd5ZUVSTWNUU0htaFVONk9mZGlPTkdIektFOC9ZTTBjUC9OTS9zaEUwdFE4Rk9w\ RUV6UjhwWE5aamhSWEI5SFdBMTRNNjFMTUZ3VWZ1czYweHNDOFhzQit0NEd6ZU1iNWVy\ L0dIejZBOTJoQjd1RzlmYzdxZTViSjJJWnJ2U3h1Sjh3alFCRDdBaTYxTDRpS1JGeTZK\ VzRsdXB6VWlXTldGSjU5Q1dORHdLbUM3ZTlyN1NROUV4dzNUNFIvVDFEcnVzbThUNEt1\ cTJOOGdGSFJDUmpLanhha0NnRy9DZXphRVV1SVRqS293M3RMQ01QalZSRUNRRTIxV0Er\ UXBic2RpZm1tY1dlVFpEQ2JOb3hyYnJhMGpud1RuVVd3WS94a1FyN2NMV2RabU1JNGtn\ NFpOaFNndlFrMUdqczlrcHozekpBbG5KSDNnckt2U1hqSENvSDgyZ29ubnl5OWtkVWdh\ Qk9vbHRCOWd6eXZCOVZ2NUM2LzJJOTdaYWZFUWU3NVV4eU9Hejh4WHc4L1BGdDA0eHFu\ WGVmSmZSTUhDSEQ2WU9OdVp4L3FraWMwUkNCMTJkeVlYQTZ4TWRKVGtDRzhNTzBwQ2N6\ SnBvdm02Tk5GTTZETGVFd3B0QUxycWhtUjdQUkR3ZGVSVSsrLzVtUGlkRkpaZUlpTWxU\ NXpBN0JJUW1tbDBnNmwvdVhsMG9lN2xkaFlCSnE5Rnc2dDB0azBubWUvUlhSb3dEdVZG\ cUpscnJiZHNEZFdRQXUwL3JZVHNnTGhLck1uMHFUOHBNYUNLNkZpQXdNR3BGT0VsVkFx\ VXVGRTQyejZvcmJzZmNVcDJqdy9ESi83MVRDeW9yWVBxakN1Yno0alFKSWZWMTIyWWpo\ aHpUNWNXTVo4Mm0wdnpkanMxaFFhU3BmUHlTekhjbmQ3NyszT3JKbzNJck81NlBHQzJB\ WEl3OUNhVFExd3F6bC9PZ0xHQmdQWDNHZHZxRHNKRzdqR05rN1BoaHRvMDEzRTB5WldZ\ WUFWUXZ0RHQveUN5NUdXMzNXTm85Znc3TkVFaTJUbGdDMHRNVjJEcDhvNmRGY0gwZTRY\ Q0VoVUxpam1EdEkrYzJrYVd6Ui9qTDZjVHlaMXZEWGhpOEpHUmNaZVIzRGpvN2xpcjln\ OTFTN3ZvTGJMT0R4Q21FNjl0UGVvc1dIbDZYYjJtWXk3M2dicWo0SFFCMEZ1Rjc4QnBL\ YUVlN3dieGhuelg1Ry9EYmZTOEt3eXBJUzl0UkFvd0JzWjFVSTRsMHJCYmNBdDRQTjVx\ RUJ0cFZLeTVYTE0xTVZNL2RLY0RiOVgrQU8wZ3hqdmQyNCt2bVNOeFBSSUh3WkU2UTMr\ WXh4dE85eCtrMkxibWNtdFJjRDkyWDAweUc5cmhJSVRIQnE2cWVjUi90WE85S3dobVJj\ dWM2aXZ0UWlYNUV6MkhtN3c5cDRZWVd1aGNEZ3M3VlBZUDdnLy9SM042V0FiL0pnMHhp\ TVpsVXpqTTI5YW1VQXdrNWpVYTF0UUtrdHlMMm51bTRrL1poOEcrWXF6QklDMjhvQ2JU\ VzhJTU93OGJSTEc4WnZ2N1dsUDk3cTgvVFJlYzVPQ3I4N1dHMTJ5K0J6ckxIZlg4TTBX\ ZnVvWkh6cFI4U2VaWXNtWit0dk5EWi9OUjV5R0VWQ24xR21tQU1QcmI0R05XTDFJWkp2\ VGovR0dtT1Y2L3U3NGNlSHlGQXdvdi8yaE5LWkRwYmJiS09KeXpWallQWjBHa1VYRlZW\ Tng0c0tPTTVKRkpUeFdCSTEvQ3JCcGVRWlp5NnBIYjZkOWlXbmRKN0VDek5zVDVqMWFv\ NUpCS2t1Z2d5ZDduTTk4OEZRVDVpWnJzYytkby9HNmRsVHZ5NXYrUzZYRkhYSWV4YzJV\ dEhnY2lzTmhGYmRicDRhSXNSNU9ielppRzQyS1JVMTFrZUJEbW1VeFdOMkV0MXpMKzlP\ b3hzeTJDczNMVUhBYkVKRmREWmZSVmR5TnhSZFV1YklkODNyY0pMTmN2aGxidnZCWjll\ K2VSZXNyeS90WmNGYVBWVHZWZkRrWkJmMGF5b2pSbm50WUhEVTR5c0xHUUxZSXczdlhC\ aERHbzVKdGdWY3ZJT21TTHJKbENlVUNCOWJpQkhwYjZxSlZQSzRodURncVlWYUtISDJJ\ S3VTZkRPSFg1R0FhcmVLaGlBWnBHelZYVS9GMlIybjQzK2MxOURCWTF1WWZaU0pQdkt1\ Zk8vWFY4YXFsazh0ZVVraWprWkpiUW1maEVnLzRieDFpVDlKdGMwMlFQN2x2bThnRnpj\ L3l5U2RmaGsxUE8yWXdSNWdHdVh6bHh4TWJLalpaZnRqempaVzQ4aFZpdVhRekRIdjA4\ UlBBc0dPTkM0RTE5aWdkWUoxNGJpaHJncDlVRmJMRXJiMlFES3Y0SllLa25PVHM3L2p1\ cVQwNndEakpOSGc1empQVlFNUW9lbEJ3L2xGdnozZDl2MHJqYTUzeFUrTUhTZGs2WVRx\ c2JHd1F5RGlnVktZaVYyRnYyV3RKbVdvVE1WeDdMUHc3VFlVWFl2Rk5od1U5WHVvUTlJ\ MmZocHo3a0xCWHlLSDByVEt5bytzaVh6SGZyN3BTNFFoUEdPUjUvS0l0d1Y0UTBXaVhh\ bm1TUE0ySTZZdWJIT3lyd0tnRGlnbWhpc2lRY0JJb3JYcXVoVXVpZllDZjdPWEFTRGxj\ M0U4UERmOW8zdkpCWm9MT0tFREg1cEo0YW90NnB2cmtIaEx3dnIwWVNORVdnM1RWOHVV\ NmcySHFBNThzL1BCNFR1RnhUOWVzRUFIZFpRK0U1RE9DWk1yQjk4Y2ZXTDNjN3JtdTZR\ SkVUdkxxclhLTWdoMEJrSzBhZ2pVbU5ramtBbVJBNUdhcG5EK2VYRXNwL3pOcWhZZExm\ bGRFWCtvWWZ1ODJzVGFpZzc1alpYam4zd09BeUpFVEN2T21YY21UZlRVUUJxQ0JhaHNC\ RlZCZlpPdExqQS84ZjFqUWhlSitUMjJ2RlY2R3VPTFZXMXQrSnMyVjgrWVh3V01uVFZP\ Prorock, et al. Expires 10 January 2024 [Page 26] Internet-Draft jose-cose-dilithium July 2023 ZVRsbXRqeE05VWZLME5laU10YlU5dlhqTkFBU0xpTXNBK2Faa1ZVa3NkM1FNZVNhTmdj\ ZXR6QzhvZ2FZczc5aVZvNTN2RmxzY0NZaXo2alB4OG9PcGxHY0ZIUGIwald6V01FMWJL\ a2hiNlc2eklRS0JZNkNzcHhHcmhOSHhZdWFsY1ZjQWI4M2s1alRwM0Y5YnVGbjkyazRG\ enFIcnJIVFV1ZGVvMmhUUCtuOHVPVm1DbzRlVWcvbkpDQ2hyTVNoNnQzczZScHpIY1A5\ VmJBYlFxdERJc3lGb2RYZnQvK25tdUhxNVh5ejZJY1ByNjFhNjhtQVBoYXF5RkdmakFu\ VGNJSlhzakFvUmIzN0xhdXJYU0h2QWNLcHJxNElQZmZRdGNKYlVzWHRKbXhVbklJL1N0\ VGxMdDlrUkwrejJyUitFV210QldSYmdMbVE1VG4wVWk2eDhGTk5nVTA1eUpFL29YMmdJ\ VEMwL2xLVCtEakh1eTNLcHRiYmVYaHpLWGhOclRteEdRbmhkT3ZpSVIvRS9zczNzTlZV\ WWIzUzBMQWk1anRrOGtGSEhnZUlJUlhKY3NST0Y2OVJjdERzZXNLckFQajFOU2E5SjRT\ MWhKSzU4bEhndmV6MFA0Q0g3bkdOUGE5RER2eVRtUmRzZVVYNkJhMEMvdzFobFFSendM\ R0JNTXNSMlkzZ0NzMjlrMERsVG1wWkhnNDdKMnZTK1hEMS9WVGZYMGE3YnEwQitlc2Z1\ ektValRhMjdITHVkZEorVG5XdDZvVTBsOFVaZ3Z3R0I4anlYT3ZIcElwODZJREhiNHFo\ OTRqUmQxY3hNWVFwUkorZ1IwR210TmpZTFNKSlgzc1l3bFh0dEJ1cnRlZWRtdmwvNzI2\ amZoaDFKSjUxNXkyOVdiU2xUY2oyMFNEb3V0OStNVlB0MldGVnNuOVIva1ZJRlY1bnVN\ cjJRUG50dHFzNkVITXppdFY5NUcvVEJ4cWgwcXBKT0ZXM3BYNExaYnl0QkhtODBNcVlw\ Q3N5aXhMaUVnRGlCaXBNd1BvaHZFZmRqeWY", "d": "TUlJZE9nSUJBREFOQmdzckJnRUVBUUtDQ3djSUJ3U0NIU1FFZ2gwZ2kzWUEx\ ZmdkZndhckxSaWZtMHYwSjBmUjdON0xYNmF2a0NTekhreTNVS3BZNWw0N3NXYzB3QXdn\ bm91KzE1cEdaVE5PbDVkVkpJNm5IMnBJMm02QmFMcjhzNTR6a0ZFNEhxNXZUWnRSUnk3\ Tjd3MGFzMXY5dTFGcVpqSlhxQTFtQ1RVSjJTQUlsTVFneEFSQUVVVVJBeUlPWUFRUWlE\ UWh5Y0JBbXhBaWtaU0pZQ2h0Q3hNeDQ2UVJHelF0bWlSRkdDQWxnQ1pTMFlSRlJEWnR5\ RUFRSXdZdEFoRXhDNEZJWWhCdTBqS0tURVNRVUlSQlJLWkp3NkFoRkVOUzVEU0dXd1NP\ V3lBUm1KUms1TWh3UUJKQlNNUUVHTUFnR1lPTjRwSkIyY1JOaENZdVFJQkVnb2FBeWtJ\ QVdySnNnY2dFd1NReDJqUkZBa2R3SUtSRUJLZ0JuQ1FRMGtZbHlCSUlXN1NFQXdlRTVK\ SnhXeklKU0VoSkpDTndBU0p0aVVoS0VoY3k0c2doSVFjcVNyQVIzQkF5SUFWdDJVU0Vn\ aUJnUVVCUXlxQW95YUlCbzZaRkdDa3QyRWlSMlpDQkFhbEFETE1wSktHSVlaS1FCQlFw\ SURrRVc1aFFBaEZOSkJRb3BFaEZKQ0VKR1pKaDJaQmhTTWFORXlORm1RYU1GSVlBRXJN\ QW1pQXNJa0NLQ2tRcUZCV0FFeE1sR0lod3hFSnNrMGdHQ1VNeDBMSXd5NGd0SXlVU1FL\ Sm9EQVJncERZUjBVUWlJekptSWhWUmhEYUdnQkJoQkxFRklzZFFVWUJKekRSa0VnZEZR\ TWlCSURTSXlUZ0ZRcEpvV2lBcHk4QkJFRVF5a2tKSkdibHhGRUl4UzVBcFVRUmlJZ0lv\ ZzdoQXlFQkVnS0FGVkVZUzNJQkVXNUFJMkRRdHlZUU5JZ1psSElTSnl4WkV5b2dNSWNW\ Qkl4TkUwQWFPR0FDQUVpUU9IREVsSERRbElZSlJHS0VBNDBncVREWngyaVp1aTZCSlV4\ SXRqTFJGR1VBSUk0SWhHd1ZNNFlBRlN4YUNVUVJLMjRTUW1nQUZDd0dPR1RjQWhJUkUw\ OFFBQ0xkZ0lrTW9HaVNGb0NZQlN6QXVaQWh0Q0FVTWdLSXhXQ0lHSUVLTkNZV0JFTFlO\ d2pSUVNFWXVDSmNCMFVSdFFjQU41Q0l0d3dDR3loWnA0RUNHMllSSkVpaUJJa1VSWVFK\ UVRBSnBVOEpoQ0NZeVVUWnBGQmttQTBVS0ZNbUVBcWtNQ01KZzRKQWs0RFJtb0NDSUFB\ a0ZCQWtDQ3htSkcwY20ya0p3V3dKR1dRS0NrWVFJNEVZdW1qaVFRZ1l1cEVZdWlFSXFB\ RFlwQWpkSkpFQndDaVJLNUNDSWdFSU9Vd1JrR2tTTkVMRXNTN2dBVVFDTzBLZ3dveVp0\ R3FZQVlVWUZFYmRoRkRFTmdBYU1FMFZFSERTTWs1Umtrb1lwM0tRTlpKQ0l6S1pOR1Ra\ TlFhSVF4SllzSWdORTJxaEVXS1J3R3JFSkFnWVJreGFBV0VoeUdaWUJWRVFKQkJRU0ZD\ U0JKRU5PZ2NTTURDVkVJYWhGQ3NjTm5CQWt6S1l4Q0FkUVc2QUVXQ2hwbkxRaFk0U0Yy\ QUF1b0toQWlMWnhYTFNOQ1Rrc3BFQlEyREJCWWpnUnhKaUZDN1lobVNTSkFrUUpFWWtR\ SWlRbVM2Wk1Da2hOVVlSSnpBUmlETUVwRktZbDI2Um96QUNGMURTSVJBUlJZUmdtM0RR\ ZzBnSUFJcU5JaEVKc0NKZ05BOE5nMU1KcDRUYVNFWmRNa0lhUXhKQVFRS1FCRElkRmlD\ QXlVckFBR2dRUUU0RXhTWlJKaElKbERCQXduQUJ0VExoTkE3Skp5UlJrMUJRSURMUXdF\ TWh3RXdaTkRMSWhBaVp1V2dTTkloSnVFQ1lBRExsQllVSkFJeWNRZ0lndFNZUXNDU2h5\ bkxJb3lDQUpDaklGRVVoeUhLWVF5RFpNSXJSRkFSQWwxQUFNWXNKTW13Z0lHRUJCR2pC\ RVcwSnVpY2dBb0NaSm1FaU1DN0VoUkVZaEVoaEdXUWlBd0tnZ0FZQk5XNWdzd3hoZzBR\ Prorock, et al. Expires 10 January 2024 [Page 27] Internet-Draft jose-cose-dilithium July 2023 SUdJS2dBR1RWaDJrYUpDQWlSa0FLTnlhYUlaQkNOQ0FKZ0RNaUFJeEVTeUpJc1N6UUdH\ cVVwMFJKUkNBWndFN0J4VWdnaEJFUmxvalF3bWlBTkRJVk40b0FrQXhLTUEwbVNnSVls\ b2pJTkk3a2d3YkNSNExKd0NMVnhrZ0l3SktoQlhCaEdvYkJzRExJd0F5TW9FVVpHZ3lp\ S0JBWnhvcllsZ0JCUUlqSUUxQUJPM0RpTkNnTUlveEl3QkVCQTJaWnBrWUlSMHFLUVdn\ WndHcU1rSWFkZ0NKTW93QWFRd0NhUWlZWmdBekVPR3hJcW1LQXRuRUFRSVlkSnl6QlJH\ REl4RUJJTUFFbVJXWVFCU2dBQW9FSU5BeEtJSWdGZ3pNZ0ZCQUFvd1NRZzJiUUpTaEJo\ bXhadEdETUpHemRCV0laSURMZ0lCTWN4V1FSRkdFZ2dtb1lNb2hJeFc0WUZVU1pHbXdK\ d21NaE5rNlpFeUpoc3dUUW8weklLQ2dBQnhFYUdDRUpObWJBUW01WVJBZ0lwekNhSVlh\ Q0FHa1dNQW9raEpCV0JXQmdpR3hSUWtCZ2dVMFJLQ0JFbXhLUmdaQ2FBV2hKeUpKRXBJ\ d2tSTVZyaUZ0ZktsL3RoV3IrWnNKeVhEVm5YWmFDc2RENFNsakNha2prNjh2aTA0OGxV\ bkNqZ0Z3ZVFXTHJQcy9QMW0rYkpPb21aYU5NVUkzeE5XV3RaQ2VpWTZGSE9waU1pbE43\ ZDhmT0J2M2diQnp5RUF3SmsxUnFTZDhMNi9GZ01CWXY4RzBHRXNmSEFYYmJNKzhvMDJ2\ cE9OSHM4UTVxTy80NXc3cjlDRytFUUNmejc0Y2h3eXdDcEtod2NhT29sOUJJN3NIeWJQ\ Rmh4VjJpWnpKL3VzWi80YW4way9qL0xKOGRXR0lCZTduUW9iV3Y2VHptQXMrcVA2Vm1D\ eTA0ZU1vaFl0aWFDU0UrK2J0V1dPcTVHUXlBMzVBc0FzaXhadkpiYmZ0NndFYzM0SXZi\ WXY2dWxNS0RUeWdRc2xCcTdiY2l0OTFoTUJsbGdiYVFRMjFnb3pXZnZOZmd2ZW5PYnhs\ YVFkcXlQT2E4ZWZtSGdZdWhIV1lMNjlIcFdBUHMwNGdrUFNxNWRtdmJqcEpiaTJIdWVo\ MGpqcFBncDZrKy9TclJTV3djQS9YMlZGcXgxYm1UanZVL2szSStlWkt1Vzd0SlREc1FE\ ZWhYeWV4SFMwRFBWODh4THdXVzZVclRHVG9zSzY1T2JBRWpPS2VjcFIyVVEvZ2dzSFZR\ OEhFYjdjVStLUjlPdnpic3VXdytTeTNRazZUYVU2UDUyRlpra0NOcnZ5N0gxMVN3dXJ0\ Nm5EU1dXNk1lS1RMN2FCblJ2NWNpZ3o5QmlBSXRNSE1na1JTaWsxb2ZCV0laQWlIYjR3\ KzIwTFppRzI3Z0ZOaHF3a2ZhRVBWNktqM1FVNmFBUUlvb1JqVkFWNmR5V1BjcjhKYTIw\ NW9WNExrMXhyY2pKTWZZM0ZGYWhzaTF0aU1BWkxqdGIxaHQvSzkzeFdLR2tMY1VVamlH\ RFQ5UjlaYlJpZUo2Nm9DZ0NHNlhiZklFOEh1R0JFUDBYWkozeHl1YmJreTlBazIzN0Fu\ OVpFeTNCZDNSRnp0VklrVXVJYk0zSUIxUGdWL1RTZ1I3Z2phRUlFVEVnNG8yZnI5eHo4\ d21wSlN5SnlBTklpQlVyMVNLeFRxK3kwQmsrZlhHL1RDZm5JWXJuTFlINmtFYktvcU1G\ ZmkxM0tocWduQkVZZE41MDNsZXJ4eVM4dDlPanZNU2swWmpEWGlnVzB0Z1ZIMjBlYW9Y\ L20xMm1TT2J2OGVXcXhxeXBJYjNXMUI0STVVMVlpMmpJczA1Q3FOMmlvMFVXeERkZjRp\ YU1Rb2pOY3RrV0JTaEtEdWNIK1lkZHNINU8zSkJVUkFuOU01WEM5M2FqMWJPTEV3OWw2\ UXBNYk9ZQTRxa3JIT0llWlEwUHpVKzVyZ2JycENCUU9GbDRZRCs5d1YwM1ZFOWgwZERm\ TSs0eDRjNG52dy9GUkgxeko5WStrRGtWOU1MSTUyd3dPcnBGU0xGV0tUekhNMzE2bmti\ elZSUm1vbksySkhLUG5kS0szMG42dmhKa0tmaFZwKys1WFRqck5laTVYWVJjZzVYUm5o\ bmtmRDZ6OFBQZndhems2U3AzN1phTmxZT052Ky9QYTNrcHlUcWpncGplNVBrKzdaNmlG\ K2RIREZuV2NzRlhnUmRSVmRsZDdyL2duRjhoN2NscEUwSmY0ZXF4WFlNa1Y5VDFXdzFp\ eHZhT013bXNaN3NZa01qUkIwdFRudkhFL3duVGFUdjBKdW9WTzdUZHpUNFlhSUI5MlA1\ bHI2VjZjMnRORFZvUW1zM1lyNXExeTg1azJKekJFTDh3L05MYkZrN2M3TlF3VlQ4QlJz\ QkZMZDk2RU0xUWhjYVc1T3JHc25oWWtQU3VpV1l0OHg1NURWMmJHYllsU1NYcW5RaVY3\ R0hid09OL0I3eW5wT1B1VVlpeXZ1a3krbjdpNS9lZ2QzRDhRMlkrTEJFNW5oSkRMUkdz\ Y3J3cUNhbHNFdDNPR01TTzZZSHhBcjdxMDk0QnE3NUozQ0FVYWgxclNYNlpDdGNZeEhm\ R1VITk9IQll6UTgydGR3bHlMQllIRW5wVjFlTWtaZnBIV0oraGp3NFZjK09uK1dMU2RL\ bHpjRjU5czdubGx5QWowYzNlcnlINGxONHdqeUlvSURGR0Z4Z0JGckFoS2pORnpDQ01I\ VjJDMkhuaEoveXNRb2ZJSFgyM2l6cVljT0tUNzl2TlZzS0dBeFhVd00wRUM2ckJ0a0JM\ U2laMU9KUXRhaE9kdWM5OHpja21LOXlDaXZiRjlEN01CWG9UZ1E5M05VV1lNdmdxcHVU\ L2dVOHJGdWhjWk1uL1d4aVF2ck9WMmRtUi85cVhXdmZYM1pyaHg2dlhqY25BVXFObGFE\ RUJsTCtZdVlrVHNZRkIyekRXdjZNS095SGFHaUZ5SEdCTTFTUk5JWVVrQ1dkU01Nbzlz\ c1oveHNGVUxlYkVCM0g3UWlZZUN5dE10dDFkR29mTzQ3MnFpT0hqR0xMbC9kVXU0Z0lh\ d0VRM2RLOU9xTWtKS3RNVnRIYVNFVlBmMWcvaDdHUzNVaHkrZXdXNHNCUGx4Mk1oaGtr\ VU5YOGJsOTRGblpLd0RaZCsyYXJ3aVpwYmI1dzlFUWxUb2pXaXV2bFF1anNJMHF1eDBu\ Prorock, et al. Expires 10 January 2024 [Page 28] Internet-Draft jose-cose-dilithium July 2023 SzcvNjRqbkNxNDR0eVRCWFVFTlhuaVVqREFWZ21kMXdxWEUvam9WbnVHd3pYRWU3K2JB\ UDVraWlNWUtQZVYvcEZDNnlqc0JYdFpZdittUjNVdUk5ZmYzQ0g3WUJheXE4VkhMVTVU\ RzN4VjlOWmM3V1A4enJuaGdYODV5WmRDdkhucUdZbXVMQ1RqTmN4c3lnNG1IOFIxUnZp\ SmlJQVZvT3hCQXFyblRrUkZDTEJwOHVFcEZRMlpNSkYrMTlyY0t4Y2N5eTFDc09MUTZL\ bEh3RWV0WUtMVnlqTHR6ZGgrWW9BTU1kbHdmcE5QdHdubmVSeFdENWU2VGozeEptbHM0\ SWs5Z2h3dzcvZDh6QkcrdDhJbWJqeEs1czBYeXNsdzlyaGdieTAzSkZ1Y1RENm9jS3pR\ Y21ldDk3TUt1MUlHdTlQTkd3VjVXa3VBRTBibzJoWmxJY25UVWhkVzhmWHJQRDF0QnJK\ VUJNbG1EUlR1K2gvZmhwZVpCS2dDVlFJUnd0UXlhMjFQYUIvckhicEpjS09QYmd1akRa\ Qzk3NEpFQ09xbDk1SUFpamJGL0swSFBmTGlQT3B0SE94dHplZVhONjJGNnNGKzA3Q1RF\ KzVaRFNpMDRSSGdNVk1ZUitFTjRUQzlyeTBZMUhha1ROSWN1WXgvcWN0ejJSNFdzdTRU\ MmxuZFQ0aCt4N3c4djk3bTVBU2o1a1RGR1laYXo0ZmVQWit1OW1MUW9IT3Nkcnd5ZGxX\ V0U2UzFQYVNuUGRSY2NMN3RkNTloU3huMlN3K3I0VVZtVC9JK1dSZmw3ZUlTZzhpelJN\ MkZEdkVyNit5ci9SMU9weXpGWmYvYlNwUlNsTnhTR3ltZGIrRTB2YTFSSWl3bFJkS0F1\ U0lZUDM4dzNLN1huRVZYb1l5NlZRRFI3ZVdSUHlLcWp5S3NrU2IzeWptb0RXMlJmbTJk\ M3RyWXphZG9sVjB3QTRBajJKd1h6QXk3aWFmRVQxdnN6TFZsdVJuNEE1VmdLZEdGanlR\ a1NDZTBrclFBN1AxeCtrWDNTeFZKZXVpemFrSFR5SXM2N3d6czVYM3pWWXp6bDZjVXZK\ TmFwQUxScGFlMWtvdmY0WEptS1VPTjBjZTNXcDZObjZlMWxyODJjcTZ2QWVVY2xsR0h3\ M2gvUVg3R2dQbVhxTXZGUG14OVpTenNjVzIrL0daY2puTXAxQnV5L3VxeTlib0h1T1l3\ ZlFzM2UycVVRVVlEL0hkak9DTHZUVlpiU3g1R05ESm5IL3RldVF3NHpVOUhaWS9Qa0U4\ YWR4cW4rOG1zbDBXd05uK2NIYXVBUmhraG1uSlBWTmJUUFNROHRYeXlJSmhIS3ZwK3Bh\ blZFQ2RBd3dnUWRlZXVqdDluR3FweUJGb3drNmttSmtnazBXSHRJK0F3YlFoVFc1OG1u\ VU1WVTJtOUZRdEozZzBqL1RYajE3SFNuR0M0Um93UnlqNzVWTmEza3hKQmJqdkRGeEJs\ R1lQVHY4dDllWS9Ja3g2aWlnR1YrV2hqMXN6Yy9HUnovVnNLRVJzN3dCQlQwNmxaSlc3\ aE9XZFBBOHRlOXZSZUp2ajRmYm5LaFM5dlRkNTZ0YnJRT3UweFBJTUtjQmp2OUNMZGtn\ bGpIY1ZGLzg1RlpYckhEdzFITEhVMHBmT3RwQWtGb29qdkZ1SlhCaExkVTRzVCtkcmlj\ b01YYTV0enQ1MWF0cWRVSkgxN1N6bFFaVk1uOTRpYmdkbUVDcmVINis2YjJBdkRlcXYz\ a2wyRXV5TnZWNXZKTlllK2JRamxyZGpBV2xsc2NEK2kxckxPWlVNanE0RS9MUXg5bkJi\ cEY1Vjg2cGhSN0c0WExua0xBUEJYSkwybXdERnBmY0M2SmNWbGFvQzBESHRVTXNQRmY4\ WFNYeGJyUE1peTdjeGVjTnQ4MmtqaVVPcFphQmdTU1VuMisyTU1MdWhlRjVpUFM4MTQ1\ b3V6UUxBS1ByV2VXTXROdlJhcUpTODZWRHJpWjkweVNaVWtBZDNQNTdZZnl0WUM1dEJS\ eGpNK0JqTXRXYmliekF2M3MyejRnb3FVYjZhaFJaRko0dUpBUXNFS2JRcTNJQnZ0Z21E\ M2hDRGxYS0dOY3hsQ2xPZ1pUUGpDUENoQzVkelZGTk1LSnRCRzRHNkU5T0Rha0tsRGx4\ WjNWRDlncVlmV3VFdUpzVEJPSE1FRXlwOVJydmQrNWpTcC9pcnlPLzZJZ1NQQmZzcnJj\ ZWhFRmtIeEgxYWNGMzU0NjdTU0NCRHA1elFMdVZXSngrKzhmTEdGMXk4UU01cWxzVEhL\ aU9vSWV5blZGSm9aS1BPZ253ZFV5SW1udGNrMDZYZThOTThQYjdXb2c1SmtXcXBQODJ4\ T0VCK2tsS2V6Uk4rUXdSdENHaE9nZVc4RzZhZWQzbmhoYnRUNk1TQ1NIclN2bmtCUFRY\ NXlET2tFbERYenJZRjUzQmorczJjTjNmOU81WjRaR1pHMFBXS0hxb1VUSDhiZkNTbXRn\ emJDUkNGUUJPbWNidStLVGhRQ2NEdWdHUlhNb00vVjZSem54SFdVNHcvcXZuYy9hTXd1\ aExNaXZ5TDhCeDQrK3pIaHovQ2dzNjVMY0x1dXVsYmZSYzBoTmtrcnRIWSs4L2U0YUVQ\ SWx1cERHY2ppNGdyaTFBQ1FzelBVb2p3cXhsNnhRRUpPTGgxT2xQQzZCYnZ4WE5RRTRj\ YUlHdGJZRnl6ZHlrdUZBQjJYYUdBeFN1V0hHeC9EZFBTejBQaDlsR3ZJdjNmdmlVVlgx\ cVQ1WldTSVF5VTJLdDI4UGFraXgrTVNqY1MrUHM0bkY5blA3Ujg3bVI3TnpDV0k3eDBY\ OWZVSTVEUHRsT2xpOVJZcEtHNUtpcjRncmNaTWNsN2xkVVpKOG9DWkpJem1LdXpkVm1x\ UDA4N2VIQnQyWGU1c0hXMFdGVzJseEY0K04yRVJ3eDBVb1BLdTBiN204Mkl2KzFJclVB\ a2hsVElmNnJKMjdNMEJUUjNhQ1BmSmpmQ2pKRG84a0YyQ1daU25EMUI4WmY1TXlDYWFm\ UGQ2Z3gvZVR6TzhCY0VlcTBlV1pwK25KYjFWbjluYmJlUEVMSS83ekdnY1FnZkV6M2lQ\ eW41OXpiamtIT3MxZnQxMXNsTnpHWCtMOE9jeXpRRHQ0dFhtSmhNVDExNG9TbFFvSXRW\ d2FhSWpSMHFRakVhZ2ZBSEh6SHRtb3kvTCtudVpQZTI0dG5nV1B1RG0wdnFkanRqMmtX\ Prorock, et al. Expires 10 January 2024 [Page 29] Internet-Draft jose-cose-dilithium July 2023 Y0ZSb3QyQU5YNEhYOEdxeTBZbjV0TDlDZEgwZXpleTErbXI1QWtzeDVNdDFDcWZBSWhZ\ UWlHeDVhcVI2ZFVMQXg0cFZNYTdmSnNFR2dOVXhrS0k2YUo0aVpMMVlWVW5kU3hCMXNz\ enZSRHEwQkNNL0NwVkR5UkhoOTJOZ1Uvb2dwL1lHN25XcDdVZG1oczE3L0F6NnFGMXBy\ V2RGYWxzb1VhdXRVRksyNjMramtuNDlpelFTQUliVGhxMzFTSmhmdnU1YytIdHQ0V3d1\ Z2FnRzJqdDNlY2NPMm9pRWJHTDNDaG9jemZEdTdqcWhDeUkrVzJhNUl4OTg2OFpwY1Fv\ MDA4Umg0bmQvOStkMW1KNGlweEV0cmV1N3ZoSWFLbTRab0VJRCtFZkszSWlITjNWZkM2\ cmlzWjN0c2VNTFo4KzZwci92SnIyajVyaS9LMGp5VXBXUVpjTWxvbWRHc2xCTGIrYWlo\ d3c1Wm04NWFoUjhRamJpMU5yU1k0TW5oRVRIRTBoNW9WRGVqbjNZampSaDh5aFBQMkRO\ SEQvelRQN0lSTkxVUEJUcVJCTTBmS1Z6V1k0VVZ3ZlIxZ05lRE90U3pCY0ZIN3JPdE1i\ QXZGN0FmcmVCczNqRytYcS94aDgrZ1Bkb1FlN2h2WDNPNm51V3lkaUdhNzBzYmlmTUkw\ QVErd0l1dFMrSWlrUmN1aVZ1SmJxYzFJbGpWaFNlZlFsalE4Q3BndTN2YSswa1BSTWNO\ MCtFZjA5UTY3ckp2RStDcnF0amZJQlIwUWtZeW84V3BBb0J2d25zMmhGTGlFNHlxTU43\ U3dqRDQxVVJBa0JOdFZnUGtLVzdIWW41cG5GbmsyUXdtemFNYTI2MnRJNThFNTFGc0dQ\ OFpFSyszQzFuV1pqQ09KSU9HVFlVb0wwSk5SbzdQWktjOTh5UUpaeVI5NEt5cjBsNHh3\ cUIvTm9LSjU4c3ZaSFZJR2dUcUpiUWZZTThyd2ZWYitRdXY5aVBlMldueEVIdStWTWNq\ aHMvTVY4UFB6eGJkT01hcDEzbnlYMFRCd2h3K21EamJtY2Y2cEluTkVRZ2RkbmNtRndP\ c1RIU1U1QWh2RER0S1FuTXlhYUw1dWpUUlRPZ3kzaE1LYlFDNjZvWmtlejBROEhYa1ZQ\ dnYrWmo0blJTV1hpSWpKVStjd093U0VKcHBkSU9wZjdsNWRLSHU1WFlXQVNhdlJjT3Jk\ TFpOSjVudjBWMGFNQTdsUmFpWmE2MjNiQTNWa0FMdFA2MkU3SUM0U3F6SjlLay9LVEdn\ aXVoWWdNREJxUlRoSlZRS2xMaFJPTnMrcUsyN0gzRktkbzhQd3lmKzlVd3NxSzJENm93\ cm04K0kwQ1NIMWRkdG1JNFljMCtYRmpHZk5wdEw4M1k3TllVR2txWHo4a3N4M0ozZSsv\ dHpxeWFOeUt6dWVqeGd0Z0Z5TVBRbWswTmNLczVmem9DeGdZRDE5eG5iNmc3Q1J1NHhq\ Wk96NFliYU5OZHhOTW1WbUdBRlVMN1E3Zjhnc3VSbHQ5MWphUFg4T3pSQkl0azVZQXRM\ VEZkZzZmS09uUlhCOUh1RndoSVZDNG81ZzdTUG5OcEdsczBmNHkrbkU4bWRidzE0WXZD\ UmtYR1hrZHc0Nk81WXEvWVBkVXU3NkMyeXpnOFFwaE92YlQzcUxGaDVlbDI5cG1NdTk0\ RzZvK0IwQWRCYmhlL0FhU21oSHU4RzhZWjgxK1J2dzIzMHZDc01xU0V2YlVRS01BYkdk\ VkNPSmRLd1czQUxlRHplYWhBYmFWU3N1Vnl6TlRGVFAzU25BMi9WL2dEdElNWTczZHVQ\ cjVramNUMFNCOEdST2tOL21NY2JUdmNmcE5pMjVuSnJVWEEvZGw5Tk1odmE0U0NFeHdh\ dXFubkVmN1Z6dlNzSVprWExuT29yN1VJbCtSTTloNXU4UGFlR0dGcm9YQTRMTzFUMkQr\ NFAvMGR6ZWxnRy95WU5NWWpHWlZNNHpOdldwbEFNSk9ZMUd0YlVDcExjaTlwN3B1SlAy\ WWZCdm1Lc3dTQXR2S0FtMDF2Q0REc1BHMFN4dkdiNysxcFQvZTZ2UDAwWG5PVGdxL08x\ aHRkc3ZnYzZ5eDMxL0RORm43cUdSODZVZkVubVdMSm1mcmJ6UTJmelVlY2hoRlFwOVJw\ cGdERDYyK0JqVmk5U0dTYjA0L3hocGpsZXY3dStISGg4aFFNS0wvOW9UU21RNlcyMnlq\ aWNzMVkyRDJkQnBGRnhWVlRjZUxDampPU1JTVThWZ1NOZndxd2FYa0dXY3VxUjIrbmZZ\ bHAzU2V4QXN6YkUrWTlXcU9TUVNwTG9JTW5lNXpQZlBCVUUrWW1hN0hQbmFQeHVuWlU3\ OHViL2t1bHhSMXlIc1hObExSNEhJckRZUlczVzZlR2lMRWVUbTgyWWh1TmlrVk5kWkhn\ UTVwbE1WamRoTGRjeS92VHFNYk10Z3JOeTFCd0d4Q1JYUTJYMFZYY2pjVVhWTG15SGZO\ NjNDU3pYTDRaVzc3d1dmWHZua1hySzh2N1dYQldqMVU3MVh3NUdRWDlHc3FJMFo1N1dC\ dzFPTXJDeGtDMkNNTjcxd1lReHFPU2JZRlhMeURwa2k2eVpRbmxBZ2ZXNGdSNlcrcWlW\ VHl1SWJnNEttRldpaHg5aUNya253emgxK1JnR3EzaW9ZZ0dhUnMxVjFQeGRrZHArTi9u\ TmZRd1dOYm1IMlVpVDd5cm56djExZkdxcFpQTFhsSklvNUdTVzBKbjRSSVArRzhkWWsv\ U2JYTk5rRCs1YjV2SUJjM1A4c2tuWDRaTlR6dG1NRWVZQnJsODVjY1RHeW8yV1g3WTg0\ MlZ1UElWWXJsME13eDc5UEVUd0xCampRdUJOZllvSFdDZGVHNG9hNEtmVkJXeXhLMjlr\ QXlyK0NXQ3BKems3Ty80N3FrOU9zQTR5VFI0T2M0ejFVREVLSHBRY1A1UmI4OTNmYjlL\ NDJ1ZDhWUGpCMG5aT21FNnJHeHNFTWc0b0ZTbUlsZGhiOWxyU1pscUV6RmNleXo4TzAy\ RkYyTHhUWWNGUFY3cUVQU05uNGFjKzVDd1Y4aWg5SzB5c3FQcklsOHgzNis2VXVFSVR4\ amtlZnlpTGNGZUVORm9sMnA1a2p6TmlPbUxteHpzcThDb0E0b0pvWXJJa0hBU0tLMTZy\ b1ZMb24yQW4remx3RWc1WE54UER3My9hTjd5UVdhQ3ppaEF4K2FTZUdxTGVxYjY1QjRT\ Prorock, et al. Expires 10 January 2024 [Page 30] Internet-Draft jose-cose-dilithium July 2023 OEw2OUdFalJGb04wMWZMbE9vTmg2Z09mTFB6d2VFN2hjVS9YckJBQjNXVVBoT1F6Z21U\ S3dmZkhIMWk5M082NXJ1a0NSRTd5NnExeWpJSWRBWkN0R29JMUpqWkk1QUprUU9SbXFa\ dy9ubHhMS2Y4emFvV0hTMzVYUkYvcUdIN3ZOckUyb29PK1kyVjQ1OThEZ01pUkV3cnpw\ bDNKazMwMUVBYWdnV29iQVJWUVgyVHJTNHdQL0g5WTBJWGlmazl0cnhWZWhyamkxVnRi\ ZmliTmxmUG1GOEZqSjAxVG5rNVpyWThUUFZIeXREWG9qTFcxUGIxNHpRQUVpNGpMQVBt\ bVpGVkpMSGQwREhrbWpZSEhyY3d2S0lHbUxPL1lsYU9kN3haYkhBbUlzK296OGZLRHFa\ Um5CUnoyOUkxczFqQk5XeXBJVytsdXN5RUNnV09ncktjUnE0VFI4V0xtcFhGWEFHL041\ T1kwNmR4Zlc3aFovZHBPQmM2aDY2eDAxTG5YcU5vVXovcC9MamxaZ3FPSGxJUDV5UWdv\ YXpFb2VyZDdPa2FjeDNEL1ZXd0cwS3JReUxNaGFIVjM3Zi9wNXJoNnVWOHMraUhENit0\ V3V2SmdENFdxc2hSbjR3SjAzQ0NWN0l3S0VXOSt5MnJxMTBoN3dIQ3FhNnVDRDMzMExY\ Q1cxTEY3U1pzVkp5Q1AwclU1UzdmWkVTL3M5cTBmaEZwclFWa1c0QzVrT1U1OUZJdXNm\ QlRUWUZOT2NpUlA2RjlvQ0V3dFA1U2svZzR4N3N0eXFiVzIzbDRjeWw0VGEwNXNSa0o0\ WFRyNGlFZnhQN0xON0RWVkdHOTB0Q3dJdVk3WlBKQlJ4NEhpQ0VWeVhMRVRoZXZVWExR\ N0hyQ3F3RDQ5VFVtdlNlRXRZU1N1ZkpSNEwzczlEK0FoKzV4alQydlF3NzhrNWtYYkhs\ RitnV3RBdjhOWVpVRWM4Q3hnVERMRWRtTjRBck52Wk5BNVU1cVdSNE9PeWRyMHZsdzlm\ MVUzMTlHdTI2dEFmbnJIN3N5bEkwMnR1eHk3blhTZms1MXJlcUZOSmZGR1lMOEJnZkk4\ bHpyeDZTS2ZPaUF4MitLb2ZlSTBYZFhNVEdFS1VTZm9FZEJwclRZMkMwaVNWOTdHTUpW\ N2JRYnE3WG5uWnI1Zis5dW8zNFlkU1NlZGVjdHZWbTBwVTNJOXRFZzZMcmZmakZUN2Rs\ aFZiSi9VZjVGU0JWZVo3aks5a0Q1N2Jhck9oQnpNNHJWZmVSdjB3Y2FvZEtxU1RoVnQ2\ VitDMlc4clFSNXZOREttS1FyTW9zUzRoSUE0Z1lxVE1ENklieEgzWThudz09", "use": "sig" } 6.4.1.3. jws ========== NOTE: '\' line wrapping per RFC 8792 ========== eyJhbGciOiAiQ1JZREk1IiwgImt0eSI6ICJNTFdFIiwgInR5cCI6ICJKV1QifQ.eyJtZ\ XNzYWdlIjogImhlbGxvIHdvcmxkIn0.wgc3fMVj3d_w4NLvAtmQQ3fnxk3y5fW8fg-mC\ ctxj8L2SUUbfWlPNPj6ycUW-bQMl-vVA7ibTqPIQQEu_VpX-PVNmQL9fJxfiIOgtOpgy\ t03ZmAHOzQ5fDmNSodEK18k6DHdDLpb4maW9tzFnvQ9lP6jgVOVmDGTIXCP-uPo6G1-z\ 5zGeWldPN6cM3lcOUKuUgKrIva4mzj1H5QZAnfgAu03rDP08rZKFedGrMpwfYUiaYEgO\ w5y-3cgaQLxVb0-INUVktS11cRQXKoX-PBVDJz-BuZPMcjnRLU924rO11P4_PNfbCbQX\ A71f5_kzwbkAGpa-hzjfHhyEmXyBCjHmhvOjUthdKiL_6zmBb3Wx5_ta9ef9ckGzXKxz\ LPkc521Gc688xhbly1eYwiafDz70gPs5nyz48E70wIxTtJ6joGnbcDr6tKOQwO6-XReP\ FiE2FkeOP6b2XHAPPQUzBLu_Uocqra-uGPr49C-6_JtiAvv0VrlfJHRm01Q81LchubWX\ cdtPSku59Z7SwjCVVg63yMC831d4dq_lQ36bUXruRY2wZpqreXvfmIgWWTKVXryAn9Zc\ Q1GguU7UMjCkpxhaunSCgsGtQNXvAGwK12KRzTt9-bzOY5iOwbnDBMjFyk0-TpxJ4Y4L\ bVMUgJk9L6RpIRUu3fYG2bA9Hn65OhvyEXm0o-lxezq27_vPbg2X0RjPQpcaiKxewifE\ dwhPGMS4-X95HX0os8kw5D5sm9RCFOH2vBjE4LBVom49yletdjuxp5igDB6h1dDyHfsO\ 3ruqT6hiGqzamAyHCAqxdQDGBUKCdgEcWcGqYHoVokPXS94r-Qoue_pCa9ONBTuqzMIr\ WOBEacM4K0LAHcCOMhLRKm8Ut6SNhFLY_XS7aC1bgCIl6wYFuFCG3xeac9Av3vOZWkF8\ nsdvKNX_yJ3o0lC3ZQakRrtpgw4VPROngOVqxj5v3vHFO3TtiJZFljgUffhdRmBfSmOw\ ThaJw0If-WKLlybVDK07xQJbrF2QQGk8G7R8LydQPTcb8kL2P0qrhobjtEc2aN5as-C8\ 12BtFlXVdBMBFC5LAJOeYKtLGf1SWFhTWhdtrd4DqtkOTadKP1yWWMPXkiGYPlSlbZE-\ 27jI1TOjr-l_V7acwS1AErpQhSk4s8y-mmqWEqFiHA4FUNVsVSp2-whlttEkx8eAKqrH\ JiDAepuisKq-v1OdT5NZLmy2Zt7q6kN08qwisV24dyU9klk_PWZZPWCQRwhpEJJHEHFp\ Pj7AktUE6k7zY11AKbYQauwkr_fqP4QfPbkyUPvE66Uw5CVdeFTqk7-c27kX0NXNqw0P\ il0qxP7kWoyyQbl8QGt28og9ZHeCKsRwBbOFzYHBaFFiSwvS64jKH_gE3gFl6HUDesDq\ Prorock, et al. Expires 10 January 2024 [Page 31] Internet-Draft jose-cose-dilithium July 2023 kzAVuYyldmQrA0mT1l16jTT3pQOGYXAi2O_ibpvZIGPi-a8S-SPP93xNdq17qmrpdKHz\ 3d5lCa3hcOB_rp4dXW6F3oUbE8cQSfiIflYfUEe6ctZ4jYpSN1JTeMdDlEN_KWB1U_RL\ Gs5EWKhWafQVQnytEVT3rkrVKl2iTo0oKB5JmKGrtHBH2LMeWfD7vlxlf2KCSkrSAF--\ YJF3mgATa7ecpwAZcRpyuPCkIucSQJDAwdqqkYTn0PqQsjcCxOcTupR2EC1d3G2cC103\ VKnZVPu9jHag8DLZt2DftFt2-o_pEQw3r19ZNWaFsZNKt8plWQKB4sDVzfu0jA6seRu4\ nkwZdTDePFGUN8lHTmC2UabKMVKLvKdDQDliNQTOSRFzahucuFQT1JiEabC73Y-kR5N_\ CR_i-V_OZ0S0QsERQflGVE_0K03SE741Xvv_FE7I6k2jrPttwLYFzqSUiST3_SlaSnXk\ zNXew37VrNrRdK2gHgnpPOV7ohtAFP3TYzS9ZRVTn3g2pzTag0cohIVBrEtE7ExmTBgR\ oRZVT549NbVXNUsm72S_3LDq4bcFwk1XT4XozKx-KYhxK-AsXcQP2hyLh2xQnpgAeq83\ qWiiUxteKZBx9qa0qlBeIP-eVsiNo40Qf_Xi_pQ_4Br5CWMo_OAw3kcgQ-ZatqCoPE5R\ PZRz8970QWJ9cOteo542T2DhPEWqGpI8IMGwEUvFoZcTKvuu8H7s9rVSHIx9xpB8Dh3P\ YgldVz4O7Vi7Pe2cOC1Vlcxz9OWJ0B_LB_M-4qLGBu57lgCr755rJ0TyA3MRY55_GESR\ mi8P561loYHhwmtTZlM-2sAFFPLorccQV1NxGTmcX_uNk4ySrNWy8mlxMZX03TRGAcCd\ CesicBkOsNkagn1ek3DCRjrs1BmBv7JejT1-OiZOu-7x8YgCHMUafg2-pW6K6WUVYjiq\ 5W0mGeUaJ4z0HLZJyJKRlJcle4OESto7VpjLT-BZecx17pQ3BwFOm1tkULoRy7pS_Kxz\ 7OSeFjgTsuTExSQTdKTHrnLgMBb23xcxYmINsachG0cbaW4zYMosUU60ZjA0sBoUwVSf\ HEa96vmqCFXyIEbwRwUWAzHGST9MS9aDb50_wJGChK6S7kY3vT1Ud_c0bO1FPPK7AcZn\ giqZawc7uATHYM1il4Z4xqGjEAmfZdu7eIFda2mwPQa2bwC9KlPFqFC0MK2O_7PohGJR\ 2HqEUhA2hsYwMZLrWsvuOpgQq_oJ5ZhALrnmHFVV2lqBCBH8M_jr35HLoJJYzIZj0yvf\ Qk6x2k2BzBGPGifbv6RoI2UbdVIVod87CH_oXz14w8fxMP5QtTphcaYMRJR-t8ssGDAg\ K8wX_U1u6BviCEDz0MokfoxjqsvZ7g6iMOu3Obb7fBALuBfhzvHq9hk7-Zf7FYcMuuvs\ pRawKpIv4iMPw-_iVg8CkGxUfkRYA16l-GMLW9pvYSD7JUDnzSQR8JWunLlQqnR5Ei8o\ 2HWspDnHsjtgAfoiRvb4I2TWGrp5bPw4MavS02m3eFb-Awr7RZtbGpGhZkzXoRjuEHKC\ G8GDXANHPOwQp2m5q_a_Rlao0H49z4P28qI2n1s4L-8VzxB_xUiu8x6z7h-NHOdcfzSy\ sXtynSjWmAOwXDEa-ZloeY3XTb-b4ICyj3mMvyumzYkdknNnYfl06SzThk_7Rgme3e-y\ -T-SVG8WYXl0x93B-6cTOCnT0WMpbnUNhsvdVIAhH7jq-wW22GbKWX1jqCmElbstbyIQ\ -SuEFhDqjLPzRdm188iYKuYI_GNdqvOMfnCg6Pt6536PlaBfDHxJFTgkUBgF5foGWqx8\ KQ4DdvcgOgY08u1Od6sEKacvuOzLgi6_H88ZqOKEs_oN6kq8k750dDMtvVx9XHr2yXQV\ Eq7Hf1_LGLl0T5xJdSE1TtUqrBEME1mQGUMwVJnC6JXIG90Wp1sWx8OEOso-qftNHhKY\ zfyxFZKP-X6V8IRol5dL4-vNeON2Gn1Sfh_63nwRRyTLaLbSmeb_Zyy8cPNHZvPKQ5Dl\ nKniZ1bZ9ol2mdZTP0CbOa9kc8ha7eg8Xx75Ld6QMbXpAKCEtDOv8JScFLHxl5b__xSq\ Wh1rdHYZVm_jBR8O5_S05DwPOLFruciMqtbaMsGUzWOqr6HCXc5GWho1naadMzRvDZLp\ Y9NySYCPReKdozTU8ScNP94g4IpuoGZK2hHM6de4LXJkDrdKRNcROpHjMNfXgfqP-xTk\ G_C8FE7svIvBzhjPbIbSd0JTlNr7G2U_gEwUB7_6fZu3dAGUzp6N173Wk958AYtlgZce\ Z1ooNosxTdg4-1dp27l39pqE6WqPOdlCV6lFVMD1o4Y9FDTLBh8KlC07ClNPVj4sDMPZ\ wTjaZAPO86bu4s5pH7fPngwoYnUVVolGGOd78RcrtKhRqMPE2VZXdZ1g3bIm7CrHTTVu\ -uxQWtf0osgHGpC7z06-Hf1x_5fHShdo3uyejyWAHOb2l_xftKJtFZPBxfT2Xf4moDTH\ AIoRlyAkN4jRLyqJRinPCUUvFGqyv4OzXybjlY1ODwtGbQaaKIySW9CDrWGPOfAZYvQ8\ 54m1O9l4m7TcN-sjks6XFafAgoPM_zyoTWUIeShHq-7EjP0pvVq46uuK8LHyGzs6XzUf\ r88FcXUelfWzkGm3VA8LhyxQTaEBHiermsGCSbmlg00aCC-aG1yOpXArTJaPdt3rLe_f\ ggGqONHydl6-PHsPp27eFWJusTy6qUsDPXq4z99PeHzA_7f9cMHrKsO5gQwmZd20z7Bq\ Qe_Yyfujw8os9mbRJNLdBR4sPu6z1VGgf-FNfwyeF-rAlRfo3-fCSD1FkHI8G5izadS5\ 0dkxeeYLxzgXgZBZ31YM-t7z6CCQfLHml2novA80apLu4OT1gbNTz0xH4fKdizcDujqy\ z1Vlhzy2CMMfsQWh6ZaNlvlxUvnwzD2nY2UEiq5NiDYUP_n59dvlAsrHdWgqM-Bb8pls\ LelyVRb-r8m5nxYwmscdAIuOP5itQARllGszIivDXkOYrLcxL-sEEllsnUvVUnfcrmUR\ 8W_6hUzoqhcbR6jfaIaHK1HBM0GdRHN4UAHO7g_GNxVaVfs4hj8efsouzf9VvXLyh9ry\ 9gsqZEg7K2B7cL3Pjo4X6-WBYwFQJl6BDSPtux0l3Im3rQv3hSe3BjYcjlfQjsIAJR2F\ Nw3F2RiQnVGjBBPXJTObQbHiuIlgT2jmuhWvXFRg0304L97kb-tcQ3NbVQpHnCx3IjqB\ Prorock, et al. Expires 10 January 2024 [Page 32] Internet-Draft jose-cose-dilithium July 2023 VmoMxIZ6nj1-P_3_AWSPU_o8w6yIIiCIAoozmbMGVefDEm0Z8n9pjCRb5XG6HNNvXRXr\ pREvosRCjC1wIu4RDY95MeITSwBOVwEdHWRM2JNF9t0io6mr9kG2C5RS5W7WEzljus-9\ n77J3GLcRblAqQzGzRKSLsG7aNXs3jqhDM58oJHhV0HAJGW-uVe8THtX9qRVogkeHFSW\ zOIG4KUGEqV3LcAJBYYIZ1ik5XCPf1kixwwRpUZgMKBsZlfSyZ9j9Sn2XU5MhIWW4ZGd\ 7tNVLP__Kef4i50VwByW4DOjbcGEbdElctqjaqZgbNAemC-ewqwmPDnjORICf7hA3jtS\ J9rZ0m-PVuRahM08ZN55rrSOoiKT70wnqp2LrwMH0KkEuo-CGeaRiGIbEaeAcDIcqRny\ -W6Pw04ya9i-UpO6SqcsP1tF78Z5JAZQrsb2NZ1jcmX03OLx_iaQaV3YojEIb0-77bil\ 0dpDoM1ygcK2tnt1IFYg296yuaTqhG0ad1figkWOEkZblEWOflkE8DH3eHmJ4x_yZUjY\ AMNCpwL7lFYH1iTvywg7HdlufQdG3P-NeXipEcVacYK6WYrUQJWkRAK1Zt0ZfdnTc-Sj\ dFEdi2lD_27HARCp46ixQJH8BgDmfJlLZbmZ3sspEP6oDBXpQwRZIAqZDlP3lMi1-dqV\ PXw2cHzzOz8e0zAEOYtD96SWfvqtbeq7-halTy-dnkheSar3t9r9yS7Vd84vy-NXknpj\ AERn-jpG7k6Gu7HnSLKI7Tga1Rm9WWkXYnSjaxF0LiiCHCxCYczOP3tSJid3kQ78PUGb\ uy3iGlBvSaBIuUnVgQCmHPcUv8eT99IvTynJKqQwZ9GmU0YfE61Wx8fnj00-l87yexo_\ BJkGS-zMzlO29Vxm0tfFK3_YW2fxDwtuo0W6zCPwnLAMdMOgtdegvRRcxcoMy6s-csTD\ SkbH7OlEXR5zMqnrkSTVoyfNRFK-REMNH-HlDGprK3KDWLBazWFPEUomceuwutFssCtE\ CbG-7VYEaFMznmH2cu9ASfRUcCwSmyXR40vULcl4CcfhxRx668j76r_-f2CLIyBy_xBI\ P_4RDZy6SDvQDfu3ogVt4HJRZKu_dGaJ6vdhGFMZQ8qK6sYZa5Lb2meIMpn_MY8dPUPA\ K8q-Z_2u8j-TazsFIF--_jcNzv1VasyeDgY2mKEHUtUYA0YGynnexMWsfLUz-5hOnEH0\ qHvPwduWYg43seI9-0AYU3IolkhaRnQaEG0t8J80VHe6TK8H77TAH9DWNiGc4A92Yj_U\ IntpHyB0ccWilwFCdtToCxhZQmMfnokDhimuZZz9xmSQNXRL8c8PEJoGWnm6oCaKTpMT\ X2Gi5aYsr7Y2-Lr_iJKWHp-lw0QGDY9QZyl5v0YMzRhc4yQq7O8K0BWXJjAHiIqam2dp\ 7G78AOs9vk3kZy-6_H_AAAAAAAAEBYgKjA6PkU 7. Normative References [CRYSTALS-Dilithium] Ducas, L., Kiltz, E., Lepoint, T., Lyubashevsky, V., Schwabe, P., Seiler, G., and D. Stehle, "CRYSTALS- Dilithium: A Lattice-Based Digital Signature Scheme", 2018, . [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC4648] Josefsson, S., "The Base16, Base32, and Base64 Data Encodings", RFC 4648, DOI 10.17487/RFC4648, October 2006, . [RFC7515] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Signature (JWS)", RFC 7515, DOI 10.17487/RFC7515, May 2015, . [RFC7517] Jones, M., "JSON Web Key (JWK)", RFC 7517, DOI 10.17487/RFC7517, May 2015, . Prorock, et al. Expires 10 January 2024 [Page 33] Internet-Draft jose-cose-dilithium July 2023 [RFC7638] Jones, M. and N. Sakimura, "JSON Web Key (JWK) Thumbprint", RFC 7638, DOI 10.17487/RFC7638, September 2015, . [RFC8702] Kampanakis, P. and Q. Dang, "Use of the SHAKE One-Way Hash Functions in the Cryptographic Message Syntax (CMS)", RFC 8702, DOI 10.17487/RFC8702, January 2020, . [RFC8812] Jones, M., "CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms", RFC 8812, DOI 10.17487/RFC8812, August 2020, . 8. Informative References [RFC6234] Eastlake 3rd, D. and T. Hansen, "US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)", RFC 6234, DOI 10.17487/RFC6234, May 2011, . Authors' Addresses Michael Prorock mesur.io Email: mprorock@mesur.io Orie Steele Transmute Email: orie@transmute.industries Rafael Misoczki Google Email: rafaelmisoczki@google.com Michael Osborne IBM Email: osb@zurich.ibm.com Christine Cloostermans NXP Email: christine.cloostermans@nxp.com Prorock, et al. Expires 10 January 2024 [Page 34]