]> Huawei

lucas.prabel@huawei.com

Huawei

sunshuzhou@huawei.com

Entrust Limited

john.gray@entrust.com

Nokia

Bangalore Karnataka India kondtir@gmail.com

Security Javascript Object Signing and Encryption JOSE COSE PQC ML-DSA Signature Hybrid This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for Post-Quantum Traditional (PQ/T) hybrid composite signatures. The composite algorithms described combine the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) as the post-quantum component and either the Elliptic Curve Digital Signature Algorithm (ECDSA) or the Edwards-Curve Digital Signature Algorithm (EdDSA) as the traditional component. About This Document The latest revision of this draft can be found at . Status information for this document may be found at . Discussion of this document takes place on the Javascript Object Signing and Encryption Working Group mailing list (), which is archived at . Subscribe at . Source for this draft and an issue tracker can be found at .

Introduction The impact of a potential Cryptographically Relevant Quantum Computer (CRQC) on algorithms whose security is based on mathematical problems such as integer factorisation or discrete logarithms over finite fields or elliptic curves raises the need for new algorithms that are perceived to be secure against CRQC as well as classical computers. Such algorithms are called post-quantum, while algorithms based on integer factorisation or discrete logarithms are called traditional. While switching from a traditional algorithm to a post-quantum one intends to strengthen the security against an adversary possessing a quantum computer, the lack of maturing time of post-quantum algorithms compared to traditional algorithms raises uncertainty about their security. Thus, the joint use of a traditional algorithm and a post-quantum algorithm in protocols represents a solution to this problem by providing security as long as at least one of the traditional or post-quantum components remains secure. This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for hybrid composite signatures. The composite algorithms described combine ML-DSA as the post-quantum component and either ECDSA or EdDSA as the traditional component.

Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here. This document follows the terminology for post-quantum hybrid schemes defined in . This section recalls some of this terminology, but also adds other definitions used throughout the whole document: "Asymmetric Traditional Cryptographic Algorithm": An asymmetric cryptographic algorithm based on integer factorisation, finite field discrete logarithms, elliptic curve discrete logarithms, or related mathematical problems. A related mathematical problem is one that can be solved by solving the integer factorisation, finite field discrete logarithm or elliptic curve discrete logarithm problem. Where there is little risk of confusion asymmetric traditional cryptographic algorithms can also be referred to as traditional algorithms for brevity. "Post-Quantum Algorithm": An asymmetric cryptographic algorithm that is intended to be secure against attacks using quantum computers as well as classical computers. As with all cryptography, it always remains the case that attacks, either quantum or classical, may be found against post-quantum algorithms. Therefore it should not be assumed that just because an algorithm is designed to provide post-quantum security it will not be compromised. "Post-Quantum Traditional (PQ/T) Hybrid Scheme": A multi-algorithm scheme where at least one component algorithm is a post-quantum algorithm and at least one is a traditional algorithm. "PQ/T Hybrid Digital Signature": A multi-algorithm digital signature scheme made up of two or more component digital signature algorithms where at least one is a post-quantum algorithm and at least one is a traditional algorithm. "Composite Algorithm": An algorithm which is a sequence of two component algorithms, as defined in . "Component Algorithm": Each cryptographic algorithm that forms part of a cryptographic scheme.

Algorithm Key Pair (AKP) Type This document makes use of the Algorithm Key Pair (AKP) type which is defined in . As a reminder, the AKP type is used to express public and private keys for use with algorithms. The parameters for public and private keys contain byte strings. This document makes use of the serialization routines defined in to obtain the byte string encodings of the composite public and private keys. The process to compute JWK Thumbprint and COSE Key Thumbprint as described in and is detailed in .

Composite ML-DSA in JOSE and COSE The composite algorithms registered in this document are the Composite ML-DSA algorithms defined in . Key generation, signature generation, signature verification, and the serialization of composite keys and signatures are performed exactly as specified in , and are not repeated here. In particular, composite keys and signatures are encoded using the SerializePublicKey, SerializePrivateKey and SerializeSignatureValue routines of , and decoded using the corresponding DeserializePublicKey, DeserializePrivateKey and DeserializeSignatureValue routines.

Use in JOSE and COSE The Composite ML-DSA algorithms are used in JOSE and COSE as follows:

• Signatures are produced as described in for JOSE and in for COSE, using the Composite ML-DSA algorithm as the signature algorithm. The signature value is the output of SerializeSignatureValue.
• The application context string ctx passed to the Composite ML-DSA signature generation and verification algorithms MUST be the empty string, similarly to . As a consequence, the context length byte in the message representative M' defined in is always 0x00.
• The prefix, as well as the label and the pre-hash algorithm of each composite algorithm, are those defined in . The prefix is the ASCII encoding of the string "CompositeAlgorithmSignatures2025", which in hex is 43 6F 6D 70 6F 73 69 74 65 41 6C 67 6F 72 69 74 68 6D 53 69 67 6E 61 74 75 72 65 73 32 30 32 35. The labels are recalled in , and the pre-hash algorithms in (for JOSE) and (for COSE).
• Composite keys are expressed using the AKP key type (see ). The pub parameter contains the output of SerializePublicKey, and the priv parameter contains the output of SerializePrivateKey. As in , the ML-DSA component of the private key MUST be the 32-byte seed.

For the ECDSA component, the signature, private key and public key are encoded as in : the signature as an Ecdsa-Sig-Value , the private key as an ECPrivateKey , and the public key as an uncompressed X9.62 point. gives guidance on how to produce and parse these encodings. For the EdDSA component, keys and signatures are encoded as defined in .

ECDSA Encodings This section describes how to construct and parse the three ECDSA encodings required by this document: the DER-encoded Ecdsa-Sig-Value and ECPrivateKey structures, and the X9.62 uncompressed point encoding used for public keys. None of it requires implementers to write a general-purpose ASN.1 encoder or decoder, but implementers who already have access to a standard ASN.1/DER library MAY use it instead for the two DER structures. When such a library is used to encode, its output has to be exactly the encoding described in this section. When it is used to decode, any other encoding has to be rejected. In particular, some libraries include the optional publicKey field of ECPrivateKey by default, which is not permitted here (see ). Sizes (in bytes) of ECDSA keys and signatures as encoded in this document

Field	Encoding used in this document	P-256	P-384
Private key	ECPrivateKey ()	51	64
Public key	X9.62 uncompressed point ()	65	97
Signature	Ecdsa-Sig-Value ()	<= 72	<= 104

Ecdsa-Sig-Value (Signatures) Ecdsa-Sig-Value is defined in as: r and s are the same big-endian integer values used by and , where they are zero-padded to a fixed length for a given curve (32 bytes each for P-256, 48 bytes each for P-384). As integers, however, r and s can have fewer significant bytes than this fixed length whenever their leading bytes are zero; Step 1 below removes this padding before re-encoding them as DER INTEGERs. Building an Ecdsa-Sig-Value from r and s takes two steps:

• first, r and s are each turned independently into a DER INTEGER (Step 1);
• then the two results are wrapped in a DER SEQUENCE (Step 2).

Decoding reverses these two steps. No prior ASN.1 knowledge is assumed below. Step 1: encode r and s as DER INTEGERs. A DER INTEGER is written as a 0x02 tag byte, a length byte, and the value's bytes. Because a DER INTEGER is signed, an extra 0x00 byte is prepended whenever the value would otherwise be misread as negative, i.e. whenever its first byte is 0x80 or greater. explains how to turn a raw value (r or s) into its DER encoding. Turning a raw value (r or s) into its DER encoding

First byte after removing leading 0x00 bytes (keeping at least one byte)	DER encoding
less than 0x80	0x02, then the length in bytes of the trimmed value, then the trimmed value
0x80 or greater	0x02, then the length in bytes of the trimmed value plus 1, then 0x00, then the trimmed value

The length is always written as a single byte in this document: r, s, and their DER encodings are always well under 128 bytes, so DER's multi-byte "long form" length encoding is never needed here. For example, for P-256 (32-byte r and s):

• if r starts with 4F ... (no leading zero byte, and 0x4F is less than 0x80), its DER encoding is 02 20 <r, 32 bytes> (0x20 = 32);
• if r starts with F3 ... (no leading zero byte, and 0xF3 is greater than 0x80), its DER encoding is 02 21 00 <r, 32 bytes> (0x21 = 33);
• if r starts with 00 07 ... (one leading zero byte to remove, and 0x07 is less than 0x80), its DER encoding is 02 1F <r without its leading 0x00, 31 bytes> (0x1F = 31).

Step 2: wrap r's and s's DER encodings in a SEQUENCE. Using the two encodings produced in Step 1, the full Ecdsa-Sig-Value is simply the concatenation Ecdsa-Sig-Value <- 0x30 || length || r's DER encoding || s's DER encoding where length is a single byte equal to the combined length, in bytes, of r's and s's DER encodings from Step 1, and r's encoding always comes before s's. Continuing the example above: taking r's DER encoding from the third case (02 1F <31 bytes>, 33 bytes total) and an s whose DER encoding corresponds to the first case (02 20 <32 bytes>, 34 bytes total), the combined length is 33 + 34 = 67 = 0x43, and the full Ecdsa-Sig-Value is 30 43 <r's DER encoding> <s's DER encoding> (69 bytes total). Decoding reverses Steps 2 and 1, in that order. An Ecdsa-Sig-Value that is not encoded as described above MUST be rejected.

ECPrivateKey (Private Keys) ECPrivateKey is defined in as: Given the raw, fixed-length ECDSA private key d (curve size n: 32 bytes for P-256, 48 bytes for P-384), the ECPrivateKey is d inserted between two fixed byte sequences that depend only on the curve (the publicKey field is never included): ECPrivateKey <- bytes before d || d || bytes after d The fixed byte sequences are given in : Construction of an ECPrivateKey, by curve

Curve	Bytes before d	d	Bytes after d
P-256	30 31 02 01 01 04 20	<d, 32 bytes>	A0 0A 06 08 2A 86 48 CE 3D 03 01 07
P-384	30 3E 02 01 01 04 30	<d, 48 bytes>	A0 07 06 05 2B 81 04 00 22

For example, for P-256 (n = 32), with d = D1 D2 ...D32: An ECPrivateKey used in this document MUST have exactly this form: the parameters field MUST be present and contain the OID of the curve, and the publicKey field MUST NOT be present. Decoding reverses the same construction. The decoder checks that the ECPrivateKey has the length given in and that the bytes before and after d are those of , and then reads d between them. An ECPrivateKey that fails this check MUST be rejected, even if it is valid according to . This is the case, for example, when the publicKey field is present.

X9.62 Uncompressed Point (Public Keys) The ECDSA public key in this document is encoded as the X9.62 uncompressed point: ECDSA public key <- 0x04 || x || y where x and y are the same raw, fixed-length, big-endian coordinate values already used by and (32 bytes each for P-256, 48 bytes each for P-384).

Composite Signature Instantiations The ML-DSA signature scheme supports three possible parameter sets, each of which corresponding to a specific security strength. See for more considerations on that matter. The combinations in and are a subset of those defined in . As explained there, each ML-DSA parameter set is paired with commonly deployed traditional algorithms, rather than with a traditional algorithm of exactly the same security level, as such an exact match is difficult to define, since there is no consensus on how to compare security against classical adversaries with security against quantum adversaries. The specification defines both pure and pre-hash modes for ML-DSA, referred to as "ML-DSA" and "HashML-DSA" respectively. This document only specifies a single mode which is similar in construction to HashML-DSA. However, because the pre-hashing is done at the composite level, only the pure ML-DSA algorithm is used as the underlying ML-DSA primitive.

JOSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in . JOSE Composite Signature Algorithms for ML-DSA

Name	First Algorithm	Second Algorithm	Pre-Hash	Description
ML-DSA-44-ES256	ML-DSA-44	ecdsa-with-SHA256 with P-256	SHA256	Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA256
ML-DSA-65-ES256	ML-DSA-65	ecdsa-with-SHA256 with P-256	SHA512	Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA256
ML-DSA-65-ES384	ML-DSA-65	ecdsa-with-SHA384 with P-384	SHA512	Composite Signature with ML-DSA-65 and ECDSA using P-384 curve and SHA384
ML-DSA-87-ES384	ML-DSA-87	ecdsa-with-SHA384 with P-384	SHA512	Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA384
ML-DSA-44-Ed25519	ML-DSA-44	Ed25519	SHA512	Composite Signature with ML-DSA-44 and Ed25519
ML-DSA-65-Ed25519	ML-DSA-65	Ed25519	SHA512	Composite Signature with ML-DSA-65 and Ed25519
ML-DSA-87-Ed448	ML-DSA-87	Ed448	SHAKE256	Composite Signature with ML-DSA-87 and Ed448

Examples can be found in .

COSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in . COSE Composite Signature Algorithms for ML-DSA

Name	COSE Value	First Algorithm	Second Algorithm	Pre-Hash	Description
ML-DSA-44-ES256	TBD (request assignment -54)	ML-DSA-44	ecdsa-with-SHA256 with P-256	SHA256	Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA256
ML-DSA-65-ES256	TBD (request assignment -55)	ML-DSA-65	ecdsa-with-SHA256 with P-256	SHA512	Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA256
ML-DSA-65-ES384	TBD (request assignment -56)	ML-DSA-65	ecdsa-with-SHA384 with P-384	SHA512	Composite Signature with ML-DSA-65 and ECDSA using P-384 curve and SHA384
ML-DSA-87-ES384	TBD (request assignment -57)	ML-DSA-87	ecdsa-with-SHA384 with P-384	SHA512	Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA384
ML-DSA-44-Ed25519	TBD (request assignment -58)	ML-DSA-44	Ed25519	SHA512	Composite Signature with ML-DSA-44 and Ed25519
ML-DSA-65-Ed25519	TBD (request assignment -59)	ML-DSA-65	Ed25519	SHA512	Composite Signature with ML-DSA-65 and Ed25519
ML-DSA-87-Ed448	TBD (request assignment -60)	ML-DSA-87	Ed448	SHAKE256	Composite Signature with ML-DSA-87 and Ed448

Examples can be found in .

Composite Labels for JOSE and COSE The JOSE and COSE composite label values are listed in . They are represented here as ASCII strings, but implementers MUST convert them to byte strings using the obvious ASCII conversions prior to concatenating them with other byte values, as in . JOSE/COSE Composite Label Values

"alg" Header Parameter	Label (in ASCII)	Label (in Hex encoding)
ML-DSA-44-ES256	COMPSIG-MLDSA44-ECDSA-P256-SHA256	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 34 34 2D 45 43 44 53 41 2D 50 32 35 36 2D 53 48 41 32 35 36
ML-DSA-65-ES256	COMPSIG-MLDSA65-ECDSA-P256-SHA512	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 36 35 2D 45 43 44 53 41 2D 50 32 35 36 2D 53 48 41 35 31 32
ML-DSA-65-ES384	COMPSIG-MLDSA65-ECDSA-P384-SHA512	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 36 35 2D 45 43 44 53 41 2D 50 33 38 34 2D 53 48 41 35 31 32
ML-DSA-87-ES384	COMPSIG-MLDSA87-ECDSA-P384-SHA512	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 38 37 2D 45 43 44 53 41 2D 50 33 38 34 2D 53 48 41 35 31 32
ML-DSA-44-Ed25519	COMPSIG-MLDSA44-Ed25519-SHA512	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 34 34 2D 45 64 32 35 35 31 39 2D 53 48 41 35 31 32
ML-DSA-65-Ed25519	COMPSIG-MLDSA65-Ed25519-SHA512	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 36 35 2D 45 64 32 35 35 31 39 2D 53 48 41 35 31 32
ML-DSA-87-Ed448	COMPSIG-MLDSA87-Ed448-SHAKE256	43 4F 4D 50 53 49 47 2D 4D 4C 44 53 41 38 37 2D 45 64 34 34 38 2D 53 48 41 4B 45 32 35 36

Security Considerations The security considerations of the component algorithms (ML-DSA, ECDSA, and EdDSA) as described in , , and apply to this document. Similarly, the security considerations relative to the JWS, JWK, AKP and COSE structures , , and apply to this document. The security considerations of also apply to the composite algorithms used in this document. In addition, the following considerations specific to the composite design and its use in JOSE/COSE must be taken into account.

Hybrid Security and Quantum Resistance An important objective of Composite ML-DSA is to provide protection against CRQCs. Under a CRQC, traditional signature algorithms (ECDSA, EdDSA) are vulnerable to private-key recovery, enabling attackers to forge arbitrary JWS objects or COSE_Sign/COSE_Sign1 structures and fully impersonate the signer. By requiring the successful verification of both the ML-DSA component and the traditional component, this construction ensures:

• An adversary that compromises only one of the component algorithms cannot produce cryptographically protected JOSE/COSE objects as long as the other component remains secure. In particular, this prevents JOSE/COSE signature spoofing and impersonation attacks even if the traditional signature component is compromised.
• The scheme provides existential unforgeability under chosen-message attack (EUF-CMA) provided that at least one component algorithm is EUF-CMA secure and the pre-hash function PH is collision-resistant. This is the case for all combinations present in this document: ML-DSA, ECDSA and EdDSA are designed to be EUF-CMA secure (the latter two against classical adversaries only), and the pre-hash functions used (SHA-256, SHA-512, and SHAKE256 with 64-byte output) are collision-resistant.

Component Key Integrity and Reuse The security analysis of Composite ML-DSA in assumes that the two component keys of a composite key are freshly generated together and are not used anywhere else. The considerations below apply to composite keys used with JOSE and COSE.

• To avoid key reuse, when generating a new composite key, the key generation functions for both component algorithms MUST be executed. Moreover, compliant parties MUST NOT use, import, or export component keys that are used in other contexts, combinations, or as standalone keys. In particular, existing key material, such as an ECDSA, EdDSA or ML-DSA key already published as a JWK or COSE_Key, MUST NOT be reused as a component of a composite key. If a component key is also used on its own, a component signature taken out of a composite signature verifies under that key as a signature over the message representative M'. The prefix and label leave evidence that the signature comes from a composite, but they do not prevent this. Key reuse MUST therefore be avoided despite the weak non-separability of the combiner.
• A composite public key can be conveyed in an X.509 certificate, using the x5c header parameter in JOSE () or the x5chain header parameter in COSE . Such a certificate carries the composite key as specified in , with the same serialized public key as the pub parameter. In that case, the binding between the composite key and the signer is only as strong as the signatures on the certificates of the chain. A quantum adversary cannot forge a certificate signed with Composite ML-DSA as long as ML-DSA remains secure. If a certificate of the chain is signed with a traditional algorithm only, such an adversary can obtain a certificate for a composite key of its choice, and the composite signature on the JWS or COSE object no longer provides protection against a CRQC. The same holds for any other mechanism used to distribute composite public keys.

Domain Separation and Non-Separability The Composite ML-DSA signature combiner defined in prepends a fixed Prefix and an algorithm-specific Label to the pre-hashed message before signing.

• By binding the two component signatures to the specific composite algorithm, the composite scheme achieves "weak non-separability" as defined in .
• The label, specific to each composite algorithm, helps protect against component signatures being removed from the composite and used in another context. However, it does not fully prevent it as the traditional component still verifies under the traditional algorithm as a signature over M', which is why key reuse is forbidden.

For more information about the security properties relative to the signature combiner, the user can read .

Security Objectives and Limitations In JOSE/COSE, the security objective of digital signatures is to ensure that only an authorized signer can produce a valid signature over a given protected header and payload. Therefore, users should be aware of specific scenarios where Composite ML-DSA may not be appropriate:

• The ECDSA combinations are not SUF-CMA secure against classical or quantum adversaries, since ECDSA signatures are malleable. The Ed25519 and Ed448 combinations are SUF-CMA secure against classical adversaries, but are not SUF-CMA secure against quantum adversaries, who can break the traditional component. Consequently, applications for which SUF-CMA security is a strict requirement SHOULD NOT use Composite ML-DSA. An application can still use it, after carefully weighing the security implications, if it only needs strong unforgeability against classical adversaries and uses an Ed25519 or Ed448 combination, or if it needs strong unforgeability only to obtain a unique identifier for an object and identifies the object by a signed identifier such as jti or cti rather than by the signature value.
• Composite ML-DSA does not guarantee that a message has a single valid signature. Applications therefore cannot use the signature value, or a hash of the complete JWS or COSE object, as a unique identifier.
• Replay protection is not handled by the signature itself but must be addressed through claims such as exp, nbf, and jti in JOSE () or the equivalent claims in COSE ().

IANA Considerations

JOSE Algorithms The following values of the JWS "alg" (algorithm) are requested to be added to the "JSON Web Signature and Encryption Algorithms" registry. They are represented following the registration template provided in .

ML-DSA-44-ES256

• Algorithm Name: ML-DSA-44-ES256
• Algorithm Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Documents(s):

ML-DSA-65-ES256

• Algorithm Name: ML-DSA-65-ES256
• Algorithm Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Documents(s):

ML-DSA-65-ES384

• Algorithm Name: ML-DSA-65-ES384
• Algorithm Description: Composite Signature with ML-DSA-65 and ECDSA using P-384 curve and SHA-384
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Documents(s):

ML-DSA-87-ES384

• Algorithm Name: ML-DSA-87-ES384
• Algorithm Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Documents(s):

ML-DSA-44-Ed25519

• Algorithm Name: ML-DSA-44-Ed25519
• Algorithm Description: Composite Signature with ML-DSA-44 and Ed25519 using SHA-512
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Document(s):

ML-DSA-65-Ed25519

• Algorithm Name: ML-DSA-65-Ed25519
• Algorithm Description: Composite Signature with ML-DSA-65 and Ed25519 using SHA-512
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Document(s):

ML-DSA-87-Ed448

• Algorithm Name: ML-DSA-87-Ed448
• Algorithm Description: Composite Signature with ML-DSA-87 and Ed448 using SHAKE-256
• Algorithm Usage Location(s): alg
• JOSE Implementation Requirements: Optional
• Change Controller: IETF
• Specification Document(s): RFC XXXX
• Algorithm Analysis Document(s):

COSE Algorithms The following values are requested to be added to the "COSE Algorithms" registry. They are represented following the registration template provided in , .

ML-DSA-44-ES256

• Name: ML-DSA-44-ES256
• Value: TBD (request assignment -54)
• Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

ML-DSA-65-ES256

• Name: ML-DSA-65-ES256
• Value: TBD (request assignment -55)
• Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

ML-DSA-65-ES384

• Name: ML-DSA-65-ES384
• Value: TBD (request assignment -56)
• Description: Composite Signature with ML-DSA-65 and ECDSA using P-384 curve and SHA-384
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

ML-DSA-87-ES384

• Name: ML-DSA-87-ES384
• Value: TBD (request assignment -57)
• Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

ML-DSA-44-Ed25519

• Name: ML-DSA-44-Ed25519
• Value: TBD (request assignment -58)
• Description: Composite Signature with ML-DSA-44 and Ed25519 using SHA-512
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

ML-DSA-65-Ed25519

• Name: ML-DSA-65-Ed25519
• Value: TBD (request assignment -59)
• Description: Composite Signature with ML-DSA-65 and Ed25519 using SHA-512
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

ML-DSA-87-Ed448

• Name: ML-DSA-87-Ed448
• Value: TBD (request assignment -60)
• Description: Composite Signature with ML-DSA-87 and Ed448 using SHAKE-256
• Capabilities: [kty]
• Change Controller: IETF
• Reference: RFC XXXX
• Recommended: No

References Normative References This note describes the fundamental algorithms of Elliptic Curve Cryptography (ECC) as they were defined in some seminal references from 1994 and earlier. These descriptions may be useful for implementing the fundamental algorithms without using any of the specialized methods that were developed in following years. Only elliptic curves defined over fields of characteristic greater than three are in scope; these curves are those used in Suite B. This document is not an Internet Standards Track specification; it is published for informational purposes. This document describes elliptic curve signature scheme Edwards-curve Digital Signature Algorithm (EdDSA). The algorithm is instantiated with recommended parameters for the edwards25519 and edwards448 curves. An example implementation and test vectors are provided. JSON Web Signature (JWS) represents content secured with digital signatures or Message Authentication Codes (MACs) using JSON-based data structures. Cryptographic algorithms and identifiers for use with this specification are described in the separate JSON Web Algorithms (JWA) specification and an IANA registry defined by that specification. Related encryption capabilities are described in the separate JSON Web Encryption (JWE) specification. A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. This specification also defines a JWK Set JSON data structure that represents a set of JWKs. Cryptographic algorithms and identifiers for use with this specification are described in the separate JSON Web Algorithms (JWA) specification and IANA registries established by that specification. This specification registers cryptographic algorithms and identifiers to be used with the JSON Web Signature (JWS), JSON Web Encryption (JWE), and JSON Web Key (JWK) specifications. It defines several IANA registries for these identifiers. This specification defines a method for computing a hash value over a JSON Web Key (JWK). It defines which fields in a JWK are used in the hash computation, the method of creating a canonical form for those fields, and how to convert the resulting Unicode string into a byte sequence to be hashed. The resulting hash value can be used for identifying or selecting the key represented by the JWK that is the subject of the thumbprint. This specification defines a method for computing a hash value over a CBOR Object Signing and Encryption (COSE) Key. It specifies which fields within the COSE Key structure are included in the cryptographic hash computation, the process for creating a canonical representation of these fields, and how to hash the resulting byte sequence. The resulting hash value, referred to as a "thumbprint", can be used to identify or select the corresponding key. This document specifies algorithm identifiers and ASN.1 encoding formats for digital signatures and subject public keys used in the Internet X.509 Public Key Infrastructure (PKI). Digital signatures are used to sign certificates and certificate revocation list (CRLs). Certificates include the public key of the named subject. [STANDARDS-TRACK] This document specifies the syntax and semantics for conveying Elliptic Curve (EC) private key information. The syntax and semantics defined herein are based on similar syntax and semantics defined by the Standards for Efficient Cryptography Group (SECG). This document is not an Internet Standards Track specification; it is published for informational purposes. Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need to be able to define basic security services for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR. This document, along with RFC 9053, obsoletes RFC 8152. This document specifies JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for the Module-Lattice-Based Digital Signature Standard (ML-DSA), a Post-Quantum Cryptography (PQC) digital signature scheme defined in US NIST FIPS 204. Entrust Limited Entrust Limited OpenCA Labs Bundesdruckerei GmbH Cisco Systems This document defines combinations of US NIST Module-Lattice-Based Digital Signature Algorithm (ML-DSA) in hybrid with traditional algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA, Ed25519, and Ed448. These combinations are tailored to meet regulatory guidelines in certain regions. Composite ML-DSA is applicable in applications that use X.509 or PKIX data structures that accept ML-DSA, but where the operator wants extra protection against breaks or catastrophic bugs in ML-DSA, and where existential unforgeability (EUF-CMA) level security is acceptable. IANA n.d. IANA n.d. National Institute of Standards and Technology (NIST) American National Standards Institute In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. Informative References Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need to be able to define basic security services for this data format. This document defines a set of algorithms that can be used with the CBOR Object Signing and Encryption (COSE) protocol (RFC 9052). This document, along with RFC 9052, obsoletes RFC 8152. The CBOR Object Signing and Encryption (COSE) syntax (see RFC 9052) does not define any direct methods for using hash algorithms. There are, however, circumstances where hash algorithms are used, such as indirect signatures, where the hash of one or more contents are signed, and identification of an X.509 certificate or other object by the use of a fingerprint. This document defines hash algorithms that are identified by COSE algorithm identifiers. JSON Web Token (JWT) is a compact, URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is used as the payload of a JSON Web Signature (JWS) structure or as the plaintext of a JSON Web Encryption (JWE) structure, enabling the claims to be digitally signed or integrity protected with a Message Authentication Code (MAC) and/or encrypted. CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR), and CBOR Object Signing and Encryption (COSE) is used for added application-layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The CBOR Object Signing and Encryption (COSE) message structure uses references to keys in general. For some algorithms, additional properties are defined that carry parameters relating to keys as needed. The COSE Key structure is used for transporting keys outside of COSE messages. This document extends the way that keys can be identified and transported by providing attributes that refer to or contain X.509 certificates. One aspect of the transition to post-quantum algorithms in cryptographic protocols is the development of hybrid schemes that incorporate both post-quantum and traditional asymmetric algorithms. This document defines terminology for such schemes. It is intended to be used as a reference and, hopefully, to ensure consistency and clarity across different protocols, standards, and organisations. This document describes classification of design goals and security considerations for hybrid digital signature schemes, including proof composability, non-separability of the component signatures given a hybrid signature, backwards and forwards compatibility, hybrid generality, and Simultaneous Verification (SV).

Examples

JOSE

ML-DSA-44-ES256

ML-DSA-44-Ed25519

ML-DSA-65-ES256

ML-DSA-65-ES384

ML-DSA-65-Ed25519

ML-DSA-87-ES384

ML-DSA-87-Ed448

COSE

ML-DSA-44-ES256 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534134342d45434453412d503235362d5348413235 3600ad9c56542caaef74ac6ad7cbf62386c2f4aac8c329e4a6a614fd272572cc bead' / COSE_Sign1 / 18([ << { / alg ML-DSA-44-ES256 / 1: -54, / kid / 4: h'08e7acdb81ec1e3e' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'2a2fa6272a8cabd04670e6adce8f462c9c905742f528d59012cb6ad1aabe8734 1df45c39c840a5c2007febfbeb0f755becb8d1bfa4bde4b16656cea016f42f8a 5cbdc37ff388b419a91ffc31680c14744c3e4d6263f7db6a6d1ab6a983bb6ff3 5ad62e388b59508913a786ce0fb39d8badbca771021afd7df255002a5ba3dd9c 0da9b2850a816913c3ef3b353fb24e6294287b7d0799d01056e4ef23aaffb68e 10a3df96b90ab38d2d4b5e6373d8f321f8c2ffd0a9fc672f8d0bdb677e39ce5d c1a3ae817cc1b6bc033bc0fdfea2dba7cd24558bddd594f96c8b21f206b7f2bf 64b094f829f54f57be1357c3c610e406250f4a689cf00b23f4107b1c07062e55 b18a73c9ec282abccee312f05a4c057e517647f13593ce6455f1ee721ac7099f 6bb42f61b8cef0d8faebfa2924a48f2210b25ea1b9daeb698d7d96a3348e921b 84b98d9fb78111c174aa8f234eb06f02e78a662c2f76302022be516f9012edbf 26b07b9ee6086d8e5b549d2a953cd35f9a27ad89bbc2747471d38383e4e53c2b cddb293fa2807b9baa18d37f8729dad3ee86ff0efa8fe7750eda6d48e838b70a 94e6b062f402afdb7089bbe24ebd81cfdf0bd73b38c188a9e66bafc3dbe62288 3d4427c276fd3b101add92294fbee3cf4891022e0899446d76e1c6b20f848965 f7fa8bfff642c75a3975b8f4317f528ca46d3c08bef2d586be15bf684619017c 411dcbbefa7333c834f25a137dba319e24b89479a84357765be4be74063d9172 a1cf2891594b5de34aed7a387ca6928d538e0daf4cfda698545f7ec2a71635a7 f086e7e342950000a6ce46cf8c52f8139bddb9288cd0e4130b3e90422bc9f464 fe0453795156f0cd62721e9cc831cc2a9ec0558feb4fa79c1b2b8442b55d9d82 7e085119afef0c8a6706fba58117c4e5c77f1fe1f766c54f0cd789e383479418 c5968230d5f86d319d97a009c35c6288c6ac6b7846b3dcc3b9daae92c7759017 2b77e0ff9258faec938c9996a10d82cbaec999c08a05ee0244002c2383bd110b 8ad7218cada06646455de2afc247b723961961523b5633fb00bc46aac1bb2a26 70ac0cb5e79e4335728535c78374dfbafbced9c8a65d01f20435d0500d3622dc 74ff528cbae4926080c83e4879a0887e168db95c59e85489b0a0146399231f40 fe9d965908d9f685827d0393a74edf8bf6bc015ab4071dbdfa9e1157db6b63d9 35144c481966037a464875fff90555c3d055ac8b39b996d3794fc264dd2a334e 7a0ec253986e283e36c4346e93f97b4f7e62015d72be5352dcc03771c4b4b485 81367f26296645dd1c886b166b7d91bb8ece9e50a42d86bf22855cdd8c190042 b502c5d22c7f1f473b25d2c1b5412efaaf5c195c37846bd455c783f9083e46a2 8a2fcbaeb39a792675ff31431d51a13871091a0c35844904aff57288f076636c a826142943837c0ebe5ad0c3210a89d88655c1792c0704dca97bce5b144d3e94 6100c626d352a1e17e24717fe4478bd9901b0df9fd5eda7eefb1a582732f3a33 cfa7df15234b59cacf868e1141cb22442e8ccbe970d842b7d1dfe2d6ca1e4ed8 ccd0f4fbd8d1799177b6c2ef210602b1dd9033ae899c52137937d1538875b152 dd05357842dd0087325ec0b5343335174968b5b2f15b76db936b6db29bd79e35 ed9eb0575375a884a3efd57bac1449699b93fe186e0cc6e43b3d0d3e2973033b feaf2e1803798b087b049ce8a2c7a2156d1b3a16dde288a158bc740afa154835 ef7d1b5e6dddbcaafbaf2c490a0bf08a14b69c871576aa370d43cdcb9a0e346a 4b79f740a8f0168d95c9e2d684ec6759d0302d5346803252bda5bee8d64dee39 e1686c90a293fb8c2bfedfdc00778141b362e522827a26f3c095ccce0680d7b8 6b7650cd40f94b272dec01e58da108b0312de29b738b04f26034515a35e4235f 92b877c5fb64494b54c9e1f8005140ae73b0d60d8ca0f234ae6de7deec60867e d3eb04b08602b313c99f69a9497e9a65fb574e1a2e749724fbdea47f58192e96 17e90afb5a88681042591aa092acbaaf68424287651bca7b1a35fab63936c85c 440be4aa5a5b86425d7117c6f3a51d499dbf42148cec7dd877733adf30e1c23b e878715e58b3538295b02138144b70398bff8124fe2d4931339769e24e563c89 d75870ffccedb1fd1d5b2eaa2adac94fdf1660dd272513b28b7a2aa8266117e0 58800dafc46fb20de541d275804933e9e30f5beb5bffa36f4665ba334bf88214 672a95a104b1877f74ca9b0a18ec2c0769c67871eae04b5b9820fa4e6742c37e 1ad126a323e28c6c83c2182390297aa304fe8c0b21c85713fbf94f19a2094816 6c1b5fe68371b509e693fbcfc750aa84eff2608a4d1083647eab2af2a074f475 732e5fc667c97f1d7374fab7b54897204d61e4f6de7b949a4a8580407f877056 cb6eee57c95e566fb8f8eb25387f52beacd85813ab6dc779f9b92b278ee414ff 643ae3bf4c4c449ff35392d5b9e9cd914d1eabfa043ac33d9312ce5b9a82dd04 eb0491c4584a711c386b78d8e86705c1c07db3cd5a53a3e4ce340f9a178a6107 eadf883d2ee481ee3c84b73d37d85332b344d235a0ab1cdeb513875949a5948f 918b1243f43c90b135bc8c4867f53348f563f660efb44401f0aa72e90ddefe65 7521a382adb5b6100feea242349b70ceff91391e2ad922fb50842a8fdb8a276e 9f3e5601b8fe27979afd40b1039eaa6b580d672d0a7424162f4a50bd517fe4d3 3a9cf6d6889895c92aea189b18f6505dd72b9434d2a819e5dd62eae2a3fa26e3 211e26c7d8751d4fec2304e13839ead9e006d9ba3bbf4a2789339eb2fd974742 acfecdd9420d3eb68ee031e9d7ad0ca8ab508d9776f2a60e804d0aacad590f60 bc864b042b0b1e1d90e653bb5171d9637b551b0a04b257866ce2a9830f6822c6 f56ba8ee1705e527cd5536a09e71acde5faf65e8ce9d3660cd5d4a6e6554c742 12b01b4baaae32392dc91be9fd764844b7509f7b81c5a54c8ffaba91bc8a9f9a db85f46f15a85662adbabf3320164640e5df7d3e1388fd9503ad5f5b43f2945c 5cdca8cf7f25299ca5b661042fef8a9d3abe25c52003676df0ecda149810dc0f eb0e815027994bd1d7b61d80af71b48f22fa709ae8fc80fbc0ead415303d830b ea2b10d2f2df077635f7bb9d31ab14e1286e1b4fd20016b869c7fef906d6c257 148f6bf73d32952b66267b90723e4252d49aadeed1ef89149b684f9747474b8d 8224afaca962a94c76ead84b91c21fb10c4c3b125c1915978390b525c7010547 2333393d4e5a6d76777da1a8c7d3d7dee3e9ebf609115584868a979fd4effb01 1d232931437f929aa9b6bde8020a12172f344b516e7e9fa5b1b6000000000000 00000000000000000000000000000000141f2c3a3044022064010778b5547a44 84130febea0dfaabf646d09792c8d5c0cb56010da02c11380220518ecbda4c8a f10b5add5af991ed33c9e21ef22c2d0e6aa93a90bbefd410cb69' ]) ]]>

ML-DSA-44-Ed25519 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534134342d456432353531392d5348413531320045 e21ac849ce0a75816c44fe833a3813eaab74e722d23d859b70a2f92bb12e48b1 530f6ffe4b9dfb8a48bb1783752ce44afc5af9607deb5af43fb2baf4fc76ea' / COSE_Sign1 / 18([ << { / alg ML-DSA-44-Ed25519 / 1: -58, / kid / 4: h'b930f85dd9be4a04' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'7bf842d2aeec91023285382a0ae33a7fbef2fab0c92372dfb9b220f95ee192b6 a483f66de8027a387cb3f7bd8cdfb49b1d50d6dd8c04bf899fa38923dc4e764c e850cfc0e6642040612d548a129594a428c7aeb03b5779ef37ab15022d50494d 740a4342f7fe9155e7131e2aa9af637faba2d3a52f94af4764421a4cbb9e4849 96a32b5a98deca539b6c30a496ed3d98c7812de1b035fc8ec9cb13a24705fa00 cbeb66c372a6701574f72484277a2094d7232164ff466dd3421a4e54ad55937c 73214643cd205790f50da8bb30256c6bd85d422869b02c7d765501fb306a74b1 6b70c0dc339a15026181abcb4cae0e00b88d94a732988e3c50eeff8f00207eeb 8bc1af4a15bf0328160fcea5449b65515969f27b0d45515403166cce0f34857f 2db9667f0dcdcd7218aca465d4c0d30f903c09c568f6a33ec4da71a9dac435f2 c05acbda1717335d5fe183a468321d288401ad1b4f0d5d5f8b2450787de3be2c 5d0a910d343d4e123b364f09be66334d6f2de011de4bdcefcd41f0ad23e40d5b 54fc62a62519f302c6d6bc0096eaae6e495d49b5550b91d2035ddd7ad5ac5284 76267420bdc315ecf1f7d256c0b7018cce2d4df032ef278c99af0298cb578276 0f076a7533acde36c349c0dd9073eb2d313b14aed75f47df6bf4630cb3a94d6f 83f26f09139199fcfea3286eec1da738d8451a4fca5fd02deb719bec2864bcdb dbfbc727ab94f7b6fca8abddfc073695ba1676fbae7950ba4f853a454a30441f f5405b306326f461caf9fc5d5a7dd31fc8282590f4196290eb17a98787a4df7c d3537870056271c7c300c2436980932acab502607aecfb3bd371dcfb5d2707a0 46138239e487247e12f7576fc7092c3a77835a0e32b06bcb26e21272a0389815 6dc55c4c751cee57b3662478884f5d711abe979370a52f5b7c292a90ceca4fa2 c2fda5aa0bc87719080e16d3617a7f29776a7f57e6b4ccecdceb1db8be05d948 2ba720cb0cb586b3140209ab51f0f74ae38a0bd141bcf1bbecabd2196af08dd1 8aec1377d8bd62885611c9f4e3da2c657ec47649cc9cc310aef02329589cd1a6 e0d852e1829e37cf4e453451818155b981e46f8f8efa32972d5b4ae01561b1ca 50dc550a069108bec43c2fc63205b960f191b6a87dfed40ad5d0478109314c60 9db6634a414a6da9474defae417e008c140977bab0165584b9cd794763946163 726ac885fd45884be8f4a0a34213e447c91722a0268887f2e6dae5b74b82761a c21ac7fc3760818bb1dbf42937459967a454f24296b9bc58438384cbfa4cfd47 47ec124acebe964f99a72860b27e812ef8020ff28485adf1b81687e4d157a3f8 604cfb7b16af79fa3f7e94cbb07724809d4eca6ff5f9bf3103c14cb6c7801c60 9c4f63ff53cf0fbee3dc551e55362580b350c8b72fdc5830319ee806a6df4f83 15b3ea7e49b59a7019b0533859eb11a343e03eefc646e532b35ff794c068c594 6fd4d9a70da948eb4f355536940292e9acbfe250952ad0fa082a5c7889fc0ca5 3af6d538cf8585346f1890c1b6fea61095cdf7bb2bc18f7ea84b41f7c1795755 a63115d4d4549f63ef31bc909972b98a36bdbfe502a5375abf04f32b1ff957b6 5d70069d0b2a72218fda913c2b999728e2ad3fcfcd9e71aef1395d37fbf56ec8 3432ef0f177dec6e328bca2455275c9db5b81c29726263d96a2823c72d002610 0bd6f5d0a596ff03ef0a1193953421c7a6a1f3c9472dcc1e7091c6fc07e77b5b 70e64e3fbe98769731de15993de329d69174698dc3c5513cf8ae10a5b96f4f53 9a58fc791969614d792c3fb5b710187b38cd08a2c5b3dd2d7f6424cb0d72a1af 458d0ac388680e8a3a4c005a00fb5ae34e23cb8284c14abdf8c3e91be32b805f 861a70c1ba1d1efad90c8c841572e26cecc4e481680ef33dd41186830e2847b9 fb44694c33f431c7402e054bb566133b704a851c5796561212acad6a082357a8 905e214c940a8cc90fca25b800cd96c96e1e53895bd08af925db209e3a3bb2a8 cce3d753494d18c9d856efea5084d7bf9a0c6c1096a89a83239d5bd182864834 788c6f72356d9c54f439f399268408d9f364922b662054cbca457b3d5ee9fef4 caac65896b8a39b114b90ff5291aaea1b75187e538b8fdf78f11ef80ba95a1c3 846874856e60559a16eb5497d810ba46053ceee6b2b215bb69879a604ba6d99c b7aba7c485724436cd13ef97175a7de08e8ae47b0f3a50293dcf6b3c69325a11 df9c03b51e405f271446444b05b5bda324fee4940c15341b6a3cd76d992767a0 eaa5d8d1dbeb0bda853d4e8023c56409e054cc5a020a102607d827dd08ce54a4 5b4b97d85b491b2a31f9d563af92fab9de2ae20ca18d81bedd0235430b3c2bc8 cf6bb81373d2e4fdd21a4c5a9350f3b83eb88afdf8423b9005795ca0c7512ff1 a849cbf5b1118409f4330bc7b09879233f79b489dfb2ac50b660ffe8246677fb da1dfe2b828a74a225357a5c2683302827317a31ade37320476f4d4afa7abc65 894539e2cda388ee1a917d802afb3eccedb715d596243017baf1775b49b131b2 13cbcc36bf42dd63946f6d6c477da79982dee0bee695430a5d9847326a8bdbe1 f1293768a412340f280e6b360f86dd2bcd425b7f9238068826ea21d14d558eb7 0d884e5a471812a4bc1cfa900e32e80ce7b2a88cca93cd5db80e899fd197b518 4fac8beacb4dfbc6ce3cdc1d3e8381ab6474b09973dbe69d8c9a2083671f1eba ad40b4efde4a22586e8747bd231ea427da9c3e9a4cf6eac893ea82bfdb84dbab 6d7b60bd2819627c00e82e8292f4cafba88935b2527829e479e7be7bb4736215 b123fa750f98b8cff289537d100e436bc9b4643caaff0983d133ce334a416459 af68110b0d5352b9aa8720dfaf44692b57382a394e4bec301fee4ed8b7db430a 86d224b7dfa1e1dfa234538852e10f7c3f82d044fe73c8008aebf761e88a82f0 1bb8c57c6cf5b3112728a3f7dca160d7b6bfa91b337d914ee3166f554689a95a 2331b3c9360801de5546e4ec496c1940cd23dcd93598dbb73d04d8341f806637 972c24b89e9f7f85caefc77ff086023a51fd670ac7d3807c1525cfa0dbfb3090 0206338301f60a93ce6340a98bad1f0d4cc986079cc9579a2073f878c42f9d25 9d0ca9562f9010f6be24d0040ad44ac9eac55bb90f8016486e7cf204a071b446 0adb74c7adf02a27aba12e87848e4336ff57cb5e9643e48d842deba1a5d3bfe9 83a00c19163a36a2bd48628078300cf990f2d0c8905634b07640d2ca2a3e3dd7 022b7f8a8b9fadceff0c104d555c7e96a4bcc7ecf9fd0914222b2e4269788a99 a0a7b3e8ec0b142333415760969e9fa9b4bcbec0cdddf7000000000000000000 0000000000000000000000000000000009162537cf4678188930aa96722ddba9 2e7e4ccee2b4283e90c186ee88b19822430c715b5bfa062e3c144c76a71a8d7f 744fd4c14b7104f81d731dceac646ca0f80ce90c' ]) ]]>

ML-DSA-65-ES256 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d45434453412d503235362d5348413531 3200ca2b702903acf278f47a0ca5abb69b13a60605a055f7334ed9c6de25e1ca 63ae2bc4995cc7f9279eaf70c25a1f46a77b90756657e2b1fc623ea4bd79c384 6935' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-ES256 / 1: -55, / kid / 4: h'65c28ec7cdef33cd' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'eb31a839b3b9a2de6740077573d34b0f8536f7bc480f42a07e44eaf3b5efa783 6fb96ee559f841693beb99ac8c458343f233640f6f54243cb93840a13959e0e6 b0dd1b34891b56cc126ee9ac4ebac54ba28a8c0b676266a4543abfa9f00d403f ae8323e28b11d3e0017274bad65ff2a322bd36b86e8108cd9704e47d70d7cc92 8065cfe0c5c18ddcae6debdbd90e1aa08b2101adbd648399987aa2aeee602873 97beb5c3e83b1ad102a31ada5c7a32b265ae5a7dc6643f6591d4b3b6109c7b8f 311d8de6c53efe6100110227106de0475d202de65a6d5cad520909f50cf0d117 fed2b65242014940de066e9d02ae4d56d3b462c7500035911c96164db7b101d6 b68e73babfaa68cc435af83f98d2284c99831e1d1811059153cf25c6300bfd73 a6549bd512f095f3a220530c41090ec52f6b76e29b3e6efa5f016ebb5e351ce2 4f78144d306fd947b921fa14afc10b107e5a801412a5d2332a1eaf2cf7e993c8 baa74a75a26f118ca44da3ffef9c1ecd9d5cedc29cab177a1f0ec58acf6e54d3 4e57177c63fb74e34a15acbaf1cdec9902054f749492c798543384de2195bc56 5002551b52c6d5c5069a7d3c8e4fd9cd4b7d32ee579171952712109efdc2ef4f 1929a69bc40c976d6af90fb956af77b891718dc491845193c14549782f207d70 baa59d9ad3fe201d753e28eb8756a0572500d74cecd1fe5503428e5a925fe09a b42dfa11421be6fd88e96de15bac81d6fa8f7e1390e9671d24540c26b94f2a78 f37bb1a8b9ac908defc8f2771297e1702f10542e6d922ad8332ab16455fa4caf f5c6b246ff8fbb378dd966dc436e03ee22e83e073e60feb916c7ef1be6f424e5 d401423a72b7953f7705bfcf569355b20a9fa8ae340738e98bd8a62369774bba c2a47b8f87cb4a0a4f5e82cc6214c17b517f4ccd556f29caeb8c0e11acf8d018 3e44e313335821c3fcf992597181127d8254a2d74a20369fcd51fe2a5f309815 dee9f9a307808d624145b09b45fb8ca4e14f716823ba465f160da727783c454d 0aca565c56226af06bd0634e969bb950d9fb96555bf8814ab28593f2d4b4a945 4851f7013a4ea7d46d781e219484a43ae4d308c2f546405fd750fa2fb9b187ed 18f9b7d1e52eaa58d78a49a0c0ac390723f975d96277df4a0c0746bc76bf4722 c84ebd11aface18fa9269a7a95a9c6a0667018f78583875d30691d2043437289 c1480a77f6dc55138a9eceadabf7173769c0d1a4e65091244120e51a974238e0 ed3f79eb879f67f6066b3fa40fd9e0f34f55e4aa80edfef9bd8ad073a8e681dd c3cb3b35947549aee8fe3a241ffbfc0cf10cff212c69e7f8d4074ac2fd89bd4b 6111be94c1cf3abd41dbcc414d0956e01a65f7f684abe574dbd4db5fa4afad83 364659577debbcec6fcca437bffe9280a26cae019c01b25d393ddb46e2c09e36 80a3a7bbf4a5908867e761e225a6fb9dc3a9c2226bc68b3849e218b936600a63 34c1586e152e84ad68ac0055ff6142670f2c51a47ffa4dfd8e84d75c289339f0 491f9eb8db2292b4da6ec54c3034e60ad4adceaa7dfcc349ab0964865469a081 3de15284d23d101d02a03b16a1807214b708d79625f86e94f26b234b5640d505 3df76b00b9cb3cc1b46ad08692192f232e1c03dd55d22aa6b3ea3aded2c70a11 c4c8dfc18f4b85ee273d07a9297b5f1c104958927b23733086df4510a1346e34 a01046b12906857f8f789d681c6ccba97526fba5a9e742615484b6a0a32dcc30 7a5215e9d36be0098e4300f29b8601f15e0d0a6facd899304cdc3de814e3ec9c d2f294143c8e5d56780575ba06ec1d34a18df398124397a8d879b59683068a47 07c357f1bede1788569651f2f7ca06beea3096bc5463b4088702c74cf978bee8 96e0d99c2eee8ae2320d4003ccb4903dcf6452baf318df5d9a94f2d9f30ff37b f77a9106d680d73e835b6f23ed8105621e6c8f0e6b02ac5866e439ff3d2ca4fb 32a9398d5a04f507f5f0d5b82a5284492768cdf9a89fbd854c28a459604ddbf6 f6586e23df3cea929a96396cebb03a4321773d23157805edde975290673d8ea5 10f071c04b645009e8b20bafc37324525e550519d17e132253edd3e920b85b71 c877291e36710b5b57933ddf718315c1a230f284b3a1715f858922b37f679508 9ec69874fbf3dd2c544f77fde18775686d85c92a8fa52582fa5f444c5bea0c13 1c593d8ac8b0bd96acde9b9abaa16a05be0bf604c4de1af77ef6b3c9474a5953 2ba10e8d4a05f8d9ec7a6fb545c7b6a30c5a83916603a016977c65e2b8b4583c 24489da237d153c0bbd8ef1009604ecb988cf319de06adf1d24237642373154f 2d6723161b35ecf5d7d1b4ba6bdec9931681cf6dba67c7fe7def2370b7b4f73b 8eb14d2042323843e69761f015940120dc7edea9ea1d6ed4a4a43f4b31e7e692 91cbbbedc615e3e2ef453f65387e180686b08de8cda0a9f761e02c4b76db484f 010908f6f97d73c2154f6083abf12c907415d199ac9df6a157d511f8e2f5d1e2 0c36ce7da69a8457263eada6ab152bc6928b3357eda17314dec890bda5fe33f2 3d0dcc823480bacb02e7b56a68381216f0575cfa2491e68afb88653e349b7574 5b0fa711360762ad8bab39f7e498c65c2ddc796b156dbef72ccfa3bca4789060 ac33f0179c0a925c4697b490523066675bcc40519ac49756832fe73b948af61a f48ea20b775afa4e4880c0cd0001d9ee831e7e0baf5fddf12aba12b5c001108f 16aa342bd1df76ea2f8358e2e5677997c24c1e467906da82c0307dfda6b8c40c 14218c9a98057765bd154b1e6083ed7e9507e67b97d8356cd58c2bf8f68c95e5 b15be7d43577711932f33ae99a99f2329fef451c132651a7aa44a52d0ca8221a a6f8d53779c160b61dcb747863a2a43e96cfea88c1203fbfb1e36a19b2bea394 e9160bd9731ba5ce87509460aefa03396e314de7fc90d5135caba197cd3d991a 5a899d649f9f0335f72cba9885bef04d314ca20740681c0e710cb590494289a9 b331536139b1cb2566bf3f2d3fafbe8016350cb9938ee87e926bfb9b07401d5c 244cd774103fd4a713d7080acd1639158201f17f80244812433e4fcbb69975e8 3c9bc26bd7cc9bdea6fbb29aa52e92177f2cccec409ad1c5d6a3608994c6a8d2 65704ddb492bbf5b580e2c04a8b0ed36b75c8f10569b06b7d0f007ee0f7162b1 f7c3f8d1e7f496568b53d596df98bbd2983337c5b3b37208e1ed4e2f5e9c7e73 dd498e3a3400b34d32240e491bdff35ef7c2ae9e99f13ca5f7d235eebfc6bcd4 5695b47bdf482a792eeaeae048175d3f7a5d51f0dba4f4dd4fcce2300f7df8c7 6e26ab36686e73d2fd29e2be23d577f7efb01549cd5462e69325db648fc09bbd ec3146f3f80a7d0b958c02ad7276e8326d72806570a85131bd0ac4d4bb7b3c16 6247e2669ea62d3bc24da1175f80dc726f29232e5f2136401bc53556add83245 4b3d1b54e22a944028f1c1d05f1741b519b63ab9d2881508a0ae1be515890fdc f8a3b82cd99565335d3120501ae01115f1c0f266a90fb3498528d67b039b77e1 9f050a1cc1837f00f539f65af7e85c57fccbfa054355b501a9f0529b401c86b5 350561c16628c771a34b86e99d3941bc37beb2119f53020eaf71885220216b47 8a867e6d2c39e5ad1d92d8c629f1e851e9b298f1926ecaebff6b57a7f4789cf1 c8c3b9f87c289ef139997382759d991de9733161169185d546ff288e35584f61 d44940c799e1f9bb8591b49a7f5cef234c454e6d97c8879869ce57a2e30bad36 f93a34183e25f0e60a8b9f6ece0426143c0ce94b9545854a8e7ba93ef5af604f 10204de39608915f1826a42acaa4c2ed5840cac6cbb3d65706ecec946d04f6c1 923e1492a40d7d39a68f38f4c5baa982055b5f6e419167a55ac8c9806fdd90d9 5e0f783ec4d90ecf89bc8a90689fd3116c4102a002714822e2754168c70a3cec 69ee0cda813ae34a0c01d46bf6102dbbbfbccf6b9c50fce710621fe2a330a014 0577eb81dee01567a05356cf7433d68368687b909e54f495382a478abbd95efd 17537dbfcc514c43ec522a7c0d0b4829809215ba6a4b1854ca9aacf312df139b 931a1d1f97ebce2cfc6b0c713ab0c7a3c9b9cb543c9f02f316e0f9e813ebe130 bfd6d4c3c7d6c4c0f03940f07548c63226d4327119670c61fa954e31d0c4b47f 9df65076a6a6a672a0fea7cec3de8fd40f1e3a3ffb83c3882c334408d55e788e 0490b1b49c5ca75e2d154f8c507c2183cc7ceb98864c369f29b116c80e80a14b b0a1374c4258721093f386d6161ed32cbc943776ec1136b2bae812ab3f949aa8 5bac47f1a2001f39acedc313cb8f2f1156a8181aa30d86a80a036b1643e5f18b 51ea5a07ce06d972081cd015a348a6e69f963107f5d166e673d96d7f9d574035 667feef40096e9677f12a0ea9cdbbe99a23beafc33311fe85b58d309de9c77d8 ce1a4b104434db0c7e32719b7fc950b2a4cfad52ce167b6acc8c4a84a532a215 13df7b1b28f6526351de26955a0e01924f4e4fb531f2d28a1c1e6312cedaf8d4 a284a26de3f4ce7dc313f34121f8204a5f627c99c5edf0117998b42f315b95d7 016c95d5d9f20415292a4e4f5f74c0ee042b3b7791be00000000000000000000 00000000000000070b101620263046022100ae40ae810e648370eb2082acfcf0 3855c76825510f4c5a28367b1e14ca9fe524022100a47db6fcbab3df76abb69b 8e5c67c86b282abba06e860adfc513637ebdcca703' ]) ]]>

ML-DSA-65-ES384 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d45434453412d503338342d5348413531 3200c79ec61899152e19a013da80986c8027c0089c4f410362d4a331558d420e d28b8c2c60b1befe5fc27b2ee0193537feee42bdd049245fbff880567dfad8f4 6601' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-ES384 / 1: -56, / kid / 4: h'61ef765a64534160' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'e19443c8b83477e64086aa057b1110fdb9e90bbe28e7c372dc8ae29e584327dd a6aaa480c02e0f9ebb633412f3add05c2b6a9840452f99bb1b10d926cba53ab3 7c3854b2bf5637023c427552ceffafea21fbeb755d3a9a922975587deec03a4e 6098cc21bdb3ad0b7ed57a420115f0fc2355f0408c89a0753d64dd2fea01563a f19a4690401f89bf38a18ee47285a32dbfc0d4883305f5fc11e8db301420d904 621cebdd8a73fc16035a407b73d36ff150264e14099be9bb0ffcc59f95435d43 1c9be88869cc2decd63aeb61e8e325d245e8ec47f21afda4c5cf3c8cbb138431 7ed616f905b96ee8da01afdeb2f1f22ded82193673f0c61f94cbdb1dff918340 fa49ff53dcc9c1d6e9577012a644a96095fc6068735397b27ee626afe7a89f4a 9711eff0c79a5a8a131bea4e634ccd2b97b98b2d90b1abbaf3e2bed17bccc6e6 5bd39686fb127a16fd5bfcc7a6233c14b6ce7fd46c2dc993e03f61aa307b0499 e96bf4672d294bf3ed70efa71bd57fd331701cd01d99eb243d13d6079505a208 0b89bfe6293a4a5b0c8bd8c6e6c31e2f702c4a10c5f47ee050223bc3810751e5 84e6074f04b6cc020c028e1f55ee1c420b93e180a0cdcd29b36117ab817856ee 0f5f80c37b6ca47393d94f660579aebaf6ffd08fb8721c7339857706d9bd71fd c497e473772c83b0b82d52889493e7a3cd538c4d35516da79a6136706146f93b 8daf622d9e12a22a4a06403c22535928b9ee88cdfd07bbd19a7144ee7d6ef10e 3388eed8381e3836dcd8d423815f9cb50af9ab50d4ecf12d8b33a4dba37661cb fccadc6acd25f61bae83bb8f297e6858b48f684d545a11b45450795977500b6c c2edbc0dbdea7c675954d712b7226119d60fc30288170d76227f4b076d9d7fcd 8332ebbc8b6b90c0a58003b614583b5aad3c01a0603d3e62a55acd7e8e2c14c9 d068e0e496daec7ce004ce4497b3ce511cba697de4ca0aea8dd58a9ca67ff7fe 5107a3fc08f8462bc44c71963c15ede70ccfe22caed409849270c78ba6309637 16e5c394f02757eda3c26f6e34aecde0fc51cdc06c8002ce9522b2e863f81d2d af464496938a76e6d8ab214021ec191599c8452c5b8fcd7055c9e0fdf3b39593 03f12b8284e5b6b438fe78874c480b1df8a482e5d25a97aeeefd9a5c7b961793 01a964143be3e8628d5a93d3be7d2bd657ffaa0e4672f773c1a99aa0451286c6 f408983add76a6e0773a54a22f248264a1e1f555bfa0ae977896728cac175c27 5fbcf4a8d34a38307a2876ccd55363f8733a239e3d6db915ba6f65f1d461aea8 b957b0ab26821a9bd43f94c10440746758a44172e61c54d2d37d315af5476d39 1e2363308ded7729453b98327a4ca5ee31886c0f46dfca303233b09bfa433974 1b8523b703de76e724f9057dd39f131f63da4a5db930367fa47b0b836c6e39ea 5c4e14f7e8654d21a92344c6b8ae460f2f7eb4a0e3885ddff433424a02e1f3eb ad76573981db0d13f75e853f0ce9236cf2dcebdf225db589fe766620276b048e a4c43460f78ac911a4808c4f4f9cfefd79a17566a2596c5ea62179245d8260b7 b3abdf151beebaf653a6742b2a58e9f7739c72ab8839112907347bacda6ef224 33d916c5c33b727d6c5a51c7c944abd880c424736369b9c0596322a20c82d8a8 2afe568e814ea4089738d63c3ee3c85a056a3b4264c3d878a3a1a4d10bc40763 f982c7ac46ae238e6b9d43a8eff6761f754d830217a94111f221f0854ab8d4c3 83192ca109dbaf0c25fcd88bdb90a0e4e779b212bb500148b566fe09f2a2132c 887ffa1b768b33f49b9dda443b45f254ef2a9eb141bcec85feca9e4bb609668d 71e06318669292ba5e073486cab6cf73ea2035129a3332c61047c6c13d02a079 b85d1437973e465352f8d4889744dda9886bb4ed99b28786e0a3a8253da9b886 7e1e32ddcc5d7d8300e3d74a29bf35676eff7eec712008878ea84241e64de5a2 ff99fcdba1c4c7c7f787acf5ded6f4ba25c60501eb46a5b0ed2f4dfb99d4c031 d50846f3e216baaab4408109bdf7296825057777d81e24218fec57eabf6f3641 ba68707e59de015aa3fe5a68df2b2938441155ddc8008e638605cb8acf53a0f8 3a3494a9128374880e50141a32cea23710bf3a32b25921c21afbfd3423faf2dd 258ca55b0617975e89abaafe1c6268cd55bbf84ecf091272a0d2d319d86a3b5d a5924dea26bd1e369e8e972d7316cc5603f7d59e121aa84936b71ee9f3a16496 b5466ee57539b3772ea0cf5eea5b4b40a2940ffb08f3110692e72906606a4c1a df7023945027d8648560d3eafeebf9215ce0ddacea503ed31f2061f4ccb6507d 7e5ca14f9e7d703e8f0a13ecbd25c7f69a6d39794d96f10dc6fb0a708e85ceee 08c2d3fe89236b3bab1cccbf087b5e59a26297671d9dfdafb8ee933ea9ebbc19 8bf19a97202dd0c479fc5d9a7bc55adbf87cd08a1a8f60aedb885643e112e2c9 6ead81904077e666faac33c59c6d11ada4eafde16e0939fae1f6be3a7396fe6f 9c84e82351fc1b01285c5a5315571ac74b25ed8ae0959608cef6a06e4d8e1e95 2a26a368503b0a35cb0b6aa8750f50de4a76dd33061f25d9db64f809de57f086 fdcee1e8c7c77a9ee4c8748628b1ce306e31b30f2929d0bd0746afd7f46a6e1f 99ec1118552903c27cc14b1c669575e5bb99ca5dd621ec163bf461a627bfd762 af3c7c5ce0cd0662ebd6300933a6734b51ba94baea378f53a661d7a30753fdaa e326a3f8e1ca099ca17bd45277bc8e93eb4d8ec0f94e321d23b13eb3ef46eb78 58ff8b7b441c989b14c92d930c44d93f7bc01cc3b986cfaaa5239cc3e2750c35 da95d65f396542180fb2c633c696451c7378711472152ec3233d25764e077bbd ad28db9fbbfa00eee54944b1a74eee78fa2b655c3603825017c552ae03cfc832 aee94eea6741b7537ff49d227b58e382e7e7aa3fdcaf94590af09c1571bb5218 29241244e2dfc46164ceaa67620ce69198faa09128c82c45efa43879a3c442f5 9fd5688d28f67208adbe8f1dc70f6d2dda33d97094f364908a2dfe4eb13af36a 765ef609443544539b1b22c7509200d7e3bb588fb140f6d0095775ac7e63a2f3 7754d76d66d15174bd33ad4067916bafc536bdb368ef37798084302ba1b63f0e 34eb163b261527076a064bd5482bcd9671cc57428fd31d08a58d34d422538ffd a86b863bfe3be4360a0c49e06bffbd37e8e1775736ad44feda6cde0cd7e02910 9388fdf696a6aedb9e47152ed763ca4678f2c53b4ee9e3ec6970392db05aba67 20249c429d7a96beca39a004b25f43546ef86f011e5b2516924eb5bcb18d4ddf e5172a75e1e54ebe7b31098fd5fe0e05904df13d917b3ee76c7c737f67c6959f 7ce25a1f402dacca1d7d665c017ba94870500b3053342b6ed73f8c9f22e31705 60888bd2bdbb34f46f1a147749f66645012dc9aec549f1535f4bc525e38447af aea61a01b11e6b7955d4ee8524c96c5f920613ea3887b4d1156e3c4507e358f1 8226b1b627b45bb41fe0846c2f9e0b2972a84daca2c5c4dce3900c6720a71cc7 26fba440e1dd3add8b524bbc8c4064c5bb39c40e567f6d05fd834a8c701df592 d01877dd86a08251e915eea99b54a6b07322fa05352bfc06369b0fa81200d62d e4a5d68ecff920a74834a65119f9b4c9acdcf4085ea3eceb7b5eb5910eaf8c50 e86d047b0f7d2d95d84f7f4b34884192755e204e16c02cb7c079e77f410d7783 aa8db52d1ef56ec270ec90d653239a7debe1d77e7c5ff1d8fcab84a63f13a15e 8bde8842f10d80f8754be8f66a7a1339111e7cf13ca50fa6438458af8b59ebc8 4e407898105a6d609893a2b350143ad93d0bc5590a37e656f365edc6fe97aa37 4b221e1efc2e9e31e689dc71ef5c40824cbf6948b8408e3032560baf401fb22f 4e07c3ed4b3d3f00d4c8b13c529f5618cb532d8e69cec545c2e27bee69bc9d2f 36969d619398f3a09ef125b5deb1b2e942cf33776f21a715bfaa86df8f602621 09b3305dd89a985a21248e8e3c16042ab6bc49ee0375255a2846430aeb869f6a cfe176f929e9ca5f3f24b308ad3f7b81acf9ac1aca2f4a920615169c3581c538 326416d4ce07f9d9ddc0f03b8c1982a953dabe2e26deda3d482893a59c35950d 7713fedd625376a38cfd48fc388e372a86f3e16804c52503ed4a71262fd5beb5 cfef3881cd9975cf379546f7d4e0c1ac0b51e7918250675d3142c9b7a3274566 970b6d65529b18575ae44ea5df1ea1af31951b932d9e575ff4908f26d114820e 2846fd377c32423e573b74e6d7ed3de5bb3c696d81a952a2667e82e90643c49a 4f7b65293277aa67a7dab804f0fc47f824fdda01a4ed24abcefa3bdd74277016 6a9c889b34309b725e0f864e97319f28caa4098c755df3e78cc565691fa7161a 6ef264bcf913626c58b2afcf639a715ca459b4ec400eae315959f35b30cbb9e3 49c023431383186a0dcbcf0a04201da39e9dabbf37f65e07d63ee756f58cbac6 66e47220383e1060bc94f6ad889f9b00bf6fea116232a95543ee905bc97aca52 3079ab8e247d8c89ad09d4fcdcffa10491b0b1d37487a3b3bed0d70f5dd1efff 1114375b5e81adb0e8f51c1f3334769aa50041d1ef0000000000000000000000 00000000000000040b101a212530650230101234f6675bd6f8740e479d269dc8 656157db1afb7be02c1bad2d02fc13ea383e16df3321c6725430caffec9a7ad9 0b023100902abda179f4d68e6346ddd9df1726112d99276a0260ff299eeda4c2 0fb7eff54e5a16dc3b8654e79bfbc73d6b3c49ba' ]) ]]>

ML-DSA-65-Ed25519 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d456432353531392d53484135313200d2 7cfe7e2fc5fe46ed5af81f6b9a7428b4dafeb4fe7107433bc42efe2b42b93d68 e52b606e38e1319fd243ef0a20f0f566b49e8de1d68d85da93c7dd7b020432' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-Ed25519 / 1: -59, / kid / 4: h'93fe1616a4131f5a' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'4137288f58044a10f47911e155f1fa50df9ba2525d4ca424c8a57ba69380affb 3be527163b849e7667e5529f2cb0bd0ff483e16e8ccf9b5ded22afcd88d7b7d5 6237eb5ff0f96bcfebab1e6f0602dfefc270451dee3e870dc32fe669c720d085 bcc39adef67f3a99c7a884e361920a2754c0e47442473e662e784b1a5f509f7e 51c41b38fd49231f068d3b871c256d64291dd02789723b2160b3b1bb821baa63 a6d11038f0e8c1b65aac8e74cb02c331ed4a8ba9d695fad39b7f93fd7069f5fa 95d755ff75f849f36fcb06c6c24192412aae6769782fe20a34473acdbb111acb 7930031eeb7cd8dae1f823fa549b56592751559131986b18d2d32d73a507b1df 20f7c24fa9399e8bfa1b21187d608cc289fd1108b9ce427b9c2884b17fc42845 b7d94aa48865747a5f6cd9c36cbad13cc2e9aa8bb12f933df6a0dac625937363 bca110b6848fc77af8fcd5f00ea3d09ce52da5d5f6899b0963a24ce6ae2ec90e 8230f52dcf863d11dd8b70f6220dac80213fd3048d04b5bc2382b2dbf0b18788 f049705996b3b8fd54b2c5a2fd945609fb6735dab8627d118718a6cca9f2225a ca3e2251ae4e7fb27048cfd8733c98e273148a5b284a56dea2c25a47715df32d 3a46d3a58360e5bde530f3b2f72d86ee22c7a8da4ecfe0c06f9805ba7d79b148 a01d7c8fd510c2ae42930ffdd541718b4ff19cce50d97b2c0f7c8288504dae41 4440f1e727cb2a1c1eae7c7b9cf371f7eb168ae774baeb529bf814019817830c ab92e140b5431a8020a0a8a16e540ffce1900dc8b6aeb3c4e2ec734f41ea57f4 8d7a8838f062f6f7543f9f5d0d831d3877892f69ed40f56f990bfad1f5d9dd4a d0a587a6c79cf6cfa5d74e60deceec90e25c69c86391cde3901c8e6bacc59f83 d26fa94a5c84ddf153759631fbadb5192c8575be3bfadf28ca6d8038fc86b524 397d308fd9c05c35f34f190d4b5942f905abd6fa3e2c98cb6d35ff592eb2867b 2eda8b502458fdb60e06aacad135135719835d7fcebe2319479b33cf310c7e2f 179fd87ea8aa89bd35549c1202482b977e26d413aaadc06c2a39948328ac6486 97533fac497264408fead75e4bc6639e6da069090d6e2ddae03961dfa6f8751a dea13941e149b4c933d204bea7b0a7037c05388a4437da03b283dd603e22d606 3a0736f949eca9f264dadb6b7fd3c2636325ec46720008cbcb84a1205476aa6f 34aa3dbe197dba9dc34b50aaedf80445dcd78262dfac533b5fefe1c4e9adc9eb e4e345d3e0386dee5fe1fa93bf74acfe9db2e6cf74c21bf2526a39dced406ad1 5594cf422b8209b002a85da83f7191a1eda15b9adb6c404b7dd8618367ada44b 71dd6373c24781d4d745a0ebde538bb8ecedb1e2b2b973904ad289e8cbc9b9d8 53e510e127662f77c2b447d48c06125d819e372959a3f4655d626b4c919fbe45 1a4ce5de52976cf896002d262ccc21d39842416dec72d85d72617a097af6c432 55454a454161920ddff53149c30393a6f70ddb1068bab35976160934aec18d3f 9fd0d1dfcbe10600fda161a46abbb0194e1819ba8e762610258e4764e805e103 b092e868da02fa127da47dca0d49b327915e7b2b0693554ec9b613145e9b08bd f0c7e594214200467f16b0f797df98a5c72d833dfee6e47c0b7bd8f523b62d4a a4f366523b97feb6c690ccb0cdf3ee8886254bac466a47c2a1bb0f579491ff84 714fa2fd84cf326f4ce7dfb148577943921378bf4d36bb37eb60e790c236e156 d47ce70031bdb75b009edc185a89a2a5e8d670e08077d8e08fb4e831fa573436 2a621d165612bd13ac78c4b591344cf022063bfe54b44abb0f18303214871fbc 6a2c77312bb386fbd6849314992fcaf3877ff35b040788ae3b7c53f6cd564e6d 6639919d161dc7de2636f439347f4b467c2a020d67c521914f3999a4429456f1 d60807703c432995edb9833aacca97e0a1fdf236bd1ca61699851d9a4641f834 5162afe158d74725607c8f47295a4a18bba7064f648e417388dd6e4d0adc2e97 ffbb96e9a300066738ab90eb7a6871a9dc3c8df320f8a8cf559a491345ac0289 3c7f6bdbb2d89b16548703771140e36e6615213ddcda49197823b83bec6384d5 85e959066d994ffd72d3a5481906c18e36d284a3f75e07127d1bcfbf728565a3 def04ce3f9fad8b687c89fc98a71746059d812a45b9ef9c15ff664ab18349ea0 d30e2dade45057066587d570978263a8d5db3aed59b1a913544ae2a92cfb54b7 eba921b9541978e7811a4b8478e1694ffb665d2cd768ee2fcfe2c681c8a83e73 b66b012769cbd62acc291dd1e5b9fd285ae67eef765230543a068cdbdbfd7fcb d0a2e7e04f7757e0f17fb42237f942f5ff3103dbc69b668f98c3c8d407433e4f aa17a947fd27f32fe624aaf02f423be85ba0f65f498bcb931f6d747705faa765 09a61d72c15ddc5f7ade5c8749df10b7219619c42e7271d588b1adc5bd33ef11 7a76e8f356343e0275bf3afded4f521dc5a164e6eebe4885707de1448ad8b019 9fbc702d1bf638453377d942ff2c468f7ef99009fbc6cd64deba2c2108539486 b6e95a22a05a1de2feedfef52367f186ba11d8dda024e05a446eaf708a64edbe a854bbb75a5169a36034bfa1667ba160b4a8346b4f001c0afe95a19886860d89 afe05e0e4114241894fa411991555b6be4cb6dff51ec5d81ce230247158397a5 8ca14f502eb7126a941b51062e4c81eae60c181ebb9de42999003535d2fdf570 ce7f32b80c121552be38f468a2ac2f4ae44a90cdd7a983ae4a4453ed0c70a5ad da0c583805da62fac306cb5e1fe1e8a6a928abd836def927fced5c4e2baebc88 c7e2c5acbb2cb1467b1c933f8a39ee1d5e44ce5ddeddd789287b7b882c7c0793 ded528186c9d10ca09c31bfa8dc4ba605a40a1ef3548e8d34397a3550632e683 28dc10560ad576fdb8207e0067909140cd6f3c615c7e6af3e3d7f44b2dc0cd49 4decc5ef992a2b4f3c1623aa22947369bb5f515437d20039c588249d49c08da9 27fd1430661d6f7f7f6570bf72623eefb44b84d128e7bf0fed3f2ec5d211529e 6e6daa066549185062071295e05e49aa71ea3af49da7303b1b7a1f5e131411f7 cd07d3574bed1fd41e5c850f7635e952b5535f1ff45a33a33eead1ce01c4b469 2504e539f4f5fd7929c3c8554c6dbd4286d58408f6c2ec084c130d18b1a11f2b 43376b27d0ecbee98d6eb5ef06f71501ff42579ce5dad799860859c794372d12 ea465389d511e5bd2b412214b4722eb34148dfe825a1c920b29ee2d35d30bb49 8f17e44bf2be1be90415a34f6cbe627aa741ad345c3cc727cd088061b321d4d9 6bc49d8a8e25b77dd90134c5ed85e115307b9b46bcf7c0208f25a442d5175350 139e2978290b6eac75c3e62e98f4be6bfe1ec0b056d20b2a98397ce242dd1940 3942c30508ce9c0f86b3e655eb57b448f60087bf834c7f9dfae832913d927c40 b5ce3b92d84fd7ca8e85000ee3e3ac0a6f924b59007c59797fa10faeaa0c5fcc 3ad94ec4617be4e57866636af7de240a9dc83da8956e271f00445d937b43a1eb 5b73601536864308aa1d21aa28f258811781c7c2259cd78404de978652ca076f d1ade0f712535442c5cf8bcfe24e2a47dcffbabc9e60dd7af1caf576c9ae1f68 e9f66a8539cfc82e9b01e3d04285ae3b50357575b219b83268effea10e31979d c9d18cd7ad87508b21c902aa6da0b50d9f512840afaa2874de11179df94ebd69 d1acd63c6da4fc1a21b4ae0e81ff356e51b0d2ff0118e480205914fb4425042f 26a8bf677fd961e0884bf7fb432e6b0354d4e2d39bdb178ff38cb9636e5183d6 02dceb17e6b1ac7e02452f337af66bdb60efe9edef5a8800dac1a3dea9f7ab91 caf52205da92bb2b37bcdfafd5beb75783e7182c21d9a95bfce176e4e23d92d2 d8d6ef342b64c432abea2a32a42ab7ecb89e856d3db3f3129debd0d512bedd11 7aa08f0c9230b353e9ceb4a70dd8d27fbe9b9f23c96b049952bb8230402ff660 fde27ed112f90a38c98190403b42f9b66d003f6efe12b4c3193e736a7261c501 c1c1b8e0a60bf90b63033cb0e7b93705857e9ec3af127c4ce141d1f5a0f20655 15d85b21dce502cfa385db9ba08851763f129f0716a3faa77c1137333e920edb e08841541eb4a12234dbf20efe374731cb6e736ad3d2de8227988eeb95c96367 a06d06ddbcc37969c9bfde4d7082fd4f07e68a06fc1c8bcca1b3769a4460e68e 092b24ea1afe5a8bfec06eaa8bb6f02b86424b04995c21191e60de99f5033c05 90e9cadf4727a11a581979160b55f2405a7c903181de943b828ed47eda4e6829 a9b34b986134a0c2daf1d055ff7dd1853525879b2c3f10b7846b659494c2ebc9 2284e2d6a5ccaeaee75a5795b8ab01d67b72464f8e530292defe5d520d2669c2 8f3e9eabe6a4a85b04c480ca4f00238bd4ec1259bd3b1a65ceb4c7cdc0c043fd fcef81934f9ff815ee364f8c4fe2394355316475f505ae0437dec4c32797b482 d5d639f5f13f4fee31fb9fee27bc37301455db12dcd819e6f5fac02ab0a4e89c e567b73c68b72a4f660c5a52a6b8864e09202e535f7a7e9fb1b4b9c4d6e72f3c b9c7273d87c4c5cbcddef92e386c87989a000000000000000000000000000000 00000000000000040e121b1e2156d5f0b67c59091e99501f48e0a427b19342d6 b065f4f589277eeb5a68e45a0e6ec3bdf3a1df6bac396a638a1a6c0c61f40ef7 9da701a73ae284d8f48f69e600' ]) ]]>

ML-DSA-87-ES384 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534138372d45434453412d503338342d5348413531 3200c840f916bd4558291c80b45b2bfb745759b19cf711b02abf84ba80d74b40 21973d3da3a183e28ada2dfc047cfe759c133ddce94d7746345b844798b02db0 915f' / COSE_Sign1 / 18([ << { / alg ML-DSA-87-ES384 / 1: -57, / kid / 4: h'10da59a01e274d3d' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'0743f9e50443d761268d1a3062fdd61c399a63b387c837ba6553c54702163fff 3e68315ab6e851062f186fab61fe642db1ce79ab77016e030fb54f94e3899f76 64f7447b7d24cfd3e606340d067022f1d46ce942d2dec890354c77b713a2e8f2 e4bfb90e9e02b42f14fa37577b561324553f14a44820327c0101d01ca8ed5cbd 6981a84a840a599da08e48e04c9187057fc0c8a75b3050b98dfc6411dae38bbe d7c169f56cd06bbee756f0ba7dd57f81ff4185e18a361912af9116899f4251ae 809e06bf39082b852e364420c1f194248e04a03d06558d069c8d265910c7b7c3 8a9ecf376d7f3d3766e956d26c176f39dc7b94e8a79c09f8c59670784354a3f5 84250cf581af69c0d117dd8d2a43336537bce03ec9c587b8f8576173f8dec898 63e7bba323390716c77bced750f07c1857a59ca30d90c2b90d3b2f94d56a4f36 81e712c95ea294a304d5e7b0b6f6f3ceab7699c135ed3d7b594dde5c8493a0b0 928745684e3bf6102f7a660dcef2afc0d17ef68bfcf2225356cc4ed1fb48a04c 3487f55e1af403e4e9b6abf1f2c7b19d3fe7506ab0ff2d2fb3884880eae0f549 90f57dc520575533d5057017ae44c7142d722262710ccd1dfc8002c564db8bb0 0aead7a79f01d7be3c81777b443495e7c3de7d3b04e868481e2ef43ae57b477f ec6d988f7fae78748cd8579e1ec4186eded0faa8e09787ecd53a25aa879e1686 a559c97c5cdc029a698e694061ff9458adfc5afdc4e8bced846dee11d39b9c87 5195c0681656f051a2d061762c71e6ed63c98a06cbba2a41294cf08362f2a8ec 2c7d62d35f1ebf0949198fa492d157538f3f7994b04b1595537e3bf2d3e08742 c9e23bb42c6986bbb3fb6ad9d0230a6c3210e71aebe5c8aad7bb757965ff7b3d 247fd318d93659d72e4666ac281c7391c35d9e5d1f22d16d6a7640d826e83ce7 7a8730970bf795de9c558cba3af01d85bc312bd9b5b2e674caf7cf0b911f9db2 c4330a8b1912df98f9e395566ce9dc657ed20538d696201894ee030d505616cd 9e2646dc996004ff888c58eddc5427584b21946048a420123e83858047972976 cc81fd4b13f044e22b74347abf1fa524aec1da8eb5fa61be8df72141aaaa877d 7b77c076a1935e51647f5132e06b7a9831a3127e1e8659f39761878ba175b685 cd59fa7d590dd14743be2cf1a16c34d3b0afbee0b2698f1ae0a192d84b7176b8 4b84c8cafe83ef5003bf515a1cc419ef02e4ebd57306d5d3933e254f8e12b5c5 a3f44cb1067c6c52bfa630164de69f54dd64c88c9bab4a48e20087f6eda0d267 8ec9f9e00bf95f4edf8775281d7a42f8bbd417c44149d02426b3636472bd0a3d 16aae0849c1ee947c9dea772a785710c3cfc487c00b8940919c4acb1869fc59e a30d56f6b404a4474bd8a2323aec1144faaa1bea0cd4e1029c4563bcbd94c64d a433cf2ab37829edb1484124feb32ccb7f3cc62222aab28d82797078315db245 2ffde2511a753f754fc306f3b13792848c547e645dc80318fce41b2a80d0b3d7 0f1576d780e21b201b0d4063cc606764f7b52e7f689593560cc77b9852a6a3cb 6cb749154d50c8b40baa8e8c998890bf82e3d788fdebb03f126036312208cd9d 81fac7c31d94820b0c443ec4d586f0fbeebd76302436072000df7f31789595c8 ef33b0f0f239260a64d8060ec6c5b00a15e4e45fcd6564786fd2868a9a2416ce 35548de08f072dc6f4cee9a401f1e151bb3838390f6bb11d3712c30487c317d1 7b52941bf3afa27eae6d267399986330ffa6260eb919e6b5532066bb3230a30d 3da8f3dad910fc7c5486455e83fda3e804caa108158b5b35f24f2a18ed9062f7 b3c9ebc779a16f30ead562fdd02fe7f27cb59d4484f6fb896c0982c1eab7f486 e12b850b33a5869621efed828ce1c2215a08eed28987c0d275efbb3e5ffa4007 2efec95757412e54569440f9c7c36ac082ba4b931c4544abfa35b50486978f2f 9379eff7d583d8d57706ff7671da4c3670294c2053811c3331227c83d92a191d bdbf1f85abc89f9f7458ac0d7f211c392eb6e6a31df310f166b80486e192060d 7933faf5c5411c894416414fda137baf4fda728101623499fe327935deed0819 1167dcfec5693a008ee440e8066383da3cf8c917e92c5147c190e4fdfaf1d37b 8e9d0e6083b75192b2ccb7425cb5f246c44c71ab1a5e7bb369637e86c847e1b7 1dffa9556384fd2bea02f62ca1eb439f6f5137d87ff2d378ee230963796bf209 5c6ec15c6f08298a966b610313917bb65fbebf02ade73856f1f0d9317e346b37 3c85c9696f5a136cfa66bf74761e40f701ce49857b957f23045aae8a07d655f0 0b1ff3bda5752ebd94f44d78d5358a290ae66b29ec2ede48c03338e3f33b335b 26d5eea0e24719c1a76455c30872a655b0f10b36006c0ab9fa099369f0b01a9c e01a7bec315b3f18c8f380fd032d95e18604646d4cc4316f441f32c5497ab9d1 2aecda1cce03db239f8cf1898b402365658bc84a388cbe6dff4d3efbc6c7230c 1daee3ac6bd8263e5379236d9da60fb4d3142c8a302bab12f7b4e1eea461f3a0 a478221f3fad28675885ad93c3d19a3ec26bec877b24b99ba0d61b0532d8fd9b 96611e6eee589a9e9de126a43517ce4c9973dead361fbb171c02478bd2554cdc 0bb1d7cd24b59cd6830e4cda7064eb5fd902ec4562c82a6566a24421df32db66 2639f33e5635398e436aae8cfa562301280be889cf35c2d02feb52f2ab04543f 7e5b86bac9982cbb66efb699531bf681269d697ebaa09fe89fc93b1c78fa51dc b869a417da941d96c61f99121f8d2b5e998ca971a3589896fa2ac1108c350309 ea9efb712492cbcee965cab35e0d0fbf6c626dd4fce1444e9eaaff4fdd0db474 e5c9f5054fd84cd0ebd73819ed8ee4f43c9e1a5653399da0b86e4dba3b13a9b6 0efc215d6444ca939089fffa7bbb4c1b96342a93e5a874b0442b1d964fc5ec28 ee2b5d288881f766b9693d1e59acba52181c760f2c9e886b0858b61f08d54681 b573ab9e9a950a7ef4d9ee74bd8072544bf4095d003bb3a11f89256a235b8711 a6a1d5542bb9bf47b2097afd2c74fec35d4c4bbef9a42935f2b6a71d7da5e751 565fd9e3a7b4a1cc08d967c97ee9dd5e2c1ce8fcf8c86b48f9f6928adfbfd01d 317ab72d1f9c11e2f2af58413e47af03bdd215987887c3444cb252d1e1c9697a 5510abe6572a0a1650141f24ae51d94441db092f3939f15199f117eb2e0f23af 833c8b65e21467c35f1ff5751050f0ae82ec981ab7a739f24ad3be77513b8a9c 40f298a033ebb622d1e2d65541e72b20c0ae7301a695d44028d59c4a586e8eee c87d9497d5f7f543932032c51705257758ee0abe77e6e15d4444ad98980bfeb5 9b626c8ee2ad73c6042e472224fb96f83a9642b47ebb59aac9452ec1d98c7673 ecc1cef89dfddfc5580c045da175c40f5295a58de753c428931e035840ebe957 15f46b11be8be0ff079eb77c5824ebeb6635f6a2e038d07f32d6e1084d493067 c8c41bf05635063ac64c1a57b19c1d74a6a57f526bbafbe7f1b072b2fbc370b1 e856b9cdac1b3af9fcd6a20a73e43355b26abcfb911a9f37246f06874c7c7eaa ec027a673be8593378c6fafdabe787b3c0a2fbf252e61b915ddb643a031f0fd3 4f54c36884178a43339141dbfee316180d1f090daed25c1b023d39d20f469f12 3c66127fd2f94aca7014a0310937d27ec1ab436a676e2b7f6d1d52b3e0df038a bcde87fcf536044a21555bceb6fddf0c8d2128df57889c3fec5afdd515392bb8 98e42e4d11fddf7d2809557017873d558e53254056dc93deec7acda9bfa0261c 5b01625eaaa1948f259e32b365086037c483d71b133dcafbd808a88ba54c4875 86aeab83fd5fd08f6f76f88a3459ea9b09ab728f26255e4f7247545165c6aa38 b40848d8646ab6bf167fac14424ae5741edc4bc8a3fda649ece243190d92fd5e 5978d5a2268a5971c2e4e0328791d97c51fccc630420aac760ddfca80323f8c9 b9c74aee386f7d647d0f7f3df78e7599b7b6ca2a05268924a367f8ebcb82d53c 1f52633fdb681abce8fecf2a9d1265c845d86d509d5829c668ab1f8ead9ac086 c87a0a249e25a440d33c2c5beb0642b61a723d50c74429562a4428f48252eedd 049bcbcabee2b2bf4807f4d39ba168e81660f10322ed5db36dcbd1b67e15d94b ff1b7f99a4714c19dfae5ee97ff3daf9df28b01f96ea7585b79b32465ba4188b f24df9c8847ff48760fa5146b86e728813878cb65d669092bba0d4abe5c0ef7f 59e91fcca97fb511f191e8f93481cbbabf9a610e79ad957c7900810cdd64dcf4 8a8fdb6f20b7dd9d52a91d75a0e4a377743f24974f791700ff7959f0abfa5ca5 467adb091985f171ce19c3cc192529f52cabdc509f4e947d2d904c48d93d99aa 98bd00d9679a72ba59d4d58e45cc42911d51b827d2b5d9119f6a41cb243c7702 aecdb1b91a541d00ef00556bfc8d35acd059dc8e876cc44e01236d7edd729dc3 b68827498f3a9bb1d4105d681fe54c87cc75dcaedf7e7bf91201f68fa103223f 7b17224093e19e332ca0e9f6f41fd97b0f4471f2b0a8c0745051c774674e76e6 4c2fb847e2c27d1376fb055d7b3af5c231206e5a5904a1cbc7fd387e642d4926 8b4d9ae761d1fd05dcf67ee395b2b4d25843e9cef8effa7fc2329b2b78ea6bc2 d72e0e5fe1860dec2fe155c9118289e0185e6b267845dd712bd7fce694412189 90d9345cad890cf0e41680df7058cfee786716e5c02166ac4a34a8824a081638 982614e80a6e17d93253679abe7fb0b33575d4fe5f618d5b871c2571601f0fd7 240ca619ad89f9d8876b6d3bf8446a77804a71d60419d496fef69fa6fe8dd092 ead1b3169feceb74fe12c806d6873ca87c59db980887454822a8a0f199fbd06e 73efb011fff97546cdf2148c769bf4ef0596c6243f899b88855951dca784ff8b d1eab1790447f26cad07cd9e020d1a0c756de39cdcf5d1b81567cf355c9e53d6 7297bf666a730fb41c8eedf3dee4e364fc468a6a3255bb210c6207612eaced13 ed63b5934951105f60148dfcf60d6d07bfeb76d2b6a47eeb83166b2226616bbc 126555212cfea492744aab04bb1ba634dc82e1f594f63dbf15ce95a6d4120220 0d663d5020f449a65452a7535f6d0787ac1432db0d5cf63a756312bdeca8b34e c0f4e7ce4ced51508b68852754c1970a54dfd448fe018195a6cfa93777e2a14f 449b0c53fee3cb878d2706b1a1b4c1470c22ab0e4ae90a6e90b515b857198ea7 0c6d505fed6d8847c2732799f6d244c3259839db828f19b2135949a0dc72811f ad73cd59ee3ccdfc4c4720ed865850b2e0f71636edce1009e730393c8a6b1b0e 8b5696bac3a8743707eba3baac9c22da21048471c290094f56d24afd9a023ad0 3e735b096ae1a61957f8632cfbd79211c63c82dfeea18fee75554320910ae5a0 917f9515d58518c86eb331dbd0cc56e7160cc01496105b2db88adca555e7487d 156499cfe6c71e4ab6bdeaa8c2aa8e18e2773a754ac59fba84c0b2fa708e49cb ce85882a8350a98f9bbff86355971a3972b1a95619afceedf7d883341ade8ab7 ae797120e661f223eaf535338e6e986c4223038af5ed0c5ffd45ff98e0322a16 70f7beb1b2af1cadc142eb597e21ae5f4dcdd44411d9286c9a48496bcc0e454b 530c647e8ad28cb3868b0f9f6c728054f94b47981a192d4f7b83370cd0b2ea0c 0b5d8294eb1a42247f0d9ed66e5733cab78827dab38218da5298a667933d897e c8f8108ed9841e4d682f054a6d4c1be5b1379011c47ad15771bec68702001407 e1296d8574f37239301edd858806e6b24c88f7115f9e9c1ddf16fcd14e5b64c8 2ed739a87413a40827a659ec4bab66bde536ca928b7a30c544c519fe3df85247 aa106efdcdaadcdb83ebad7fee1bf89e41aae48b153055bcd067229cc60236ce fdf9417d84790c6ba40a44efb0a691d7ce39febb0ec23fa2d10bb0a6f65ad625 eb9d7a4092af3418787fae44a31cf80208af0d202a2c2719d8975efb1a5ab21a a9ed21f41157962f77d9c8ff46d2500ae7f65dfb6f529b3830c63cb585b858df 63692ddc63aa87efcce28c8478041396926b834f8ccf85588ff6f91085bae518 f69907577a37db336de8dfd67fbac01c375bdd7041a3bc985ded68def4628c38 8dc327fbb8d02660c1902537b04e79758c9200a4dbbd6bfdfa2ba45b42b61d57 1289af92af6acdfe123a8c300db67fd09cd198a5f35be502f7a77699f4cd4a73 281bd2ddacd2f41e7b98060826a19b40185b1360f4e97d1666127a9c745342d5 39abbe316108875fbd48da6e027acedc122cc40908a055333bc29fea11e466ef 739b0ac42336b9b29f06687d15982acfe143d8feb793b4b848b05d668b42e236 1e86909cbcbfd211266066676a793841485da50723479da6bdeb0a102b3a464c 555a6e7376dce516b0e02ca5b0ddf70d1a3645608bc4dbf20000000000000000 0000000000000000000000070e131a272a2f3830650230062b4dacf0090bc5be b1dd35d092540cb51b2c400ac22ac36e4c2b33a586eda8ea7da1253d309fef00 d5ff255c712e020231009502889319d03f78cbcf2b2eb32bc74a705d0bf8c8a2 cda4348c9d3cb6da09f3bf7fcf679467ae008dec74bb43286e0d' ]) ]]>

ML-DSA-87-Ed448 >, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534138372d45643434382d5348414b453235360006 021f2af2ec0baf9f24cf03bb25c52395adea4ecd783ca310e3a37da65b90af56 e5802c404e38856d70e44b24efc9742e28169cf4c39ccc4597bf2582ab9f2d' / COSE_Sign1 / 18([ << { / alg ML-DSA-87-Ed448 / 1: -60, / kid / 4: h'a03b6fee7d98ff7a' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'99df04038794328c1b7b3e8c5d773ca5ab2fe723ee77777ae30db0a71b39bb16 ee7c928c1f1c7bffe6a30a5802f69c60f38fdc895d69fe60e755c1632b0fafea 2476b386ab96bc6df4bfe6d44391814afe69ee11ecb3f297b052ce380faf01da 920c41651314f89e197ce9a020a9a13af4a6e7720806e435bfb12720f8f425e8 a220827d9c30cf7a08600ae3d5c310ec600d5aea409c853f2fb29943d0ad0ca2 5f5d977941371dc5c0f17dd480286613dfd8b800774d79edde180736dfb99c6f d6b06b714b4324799fa7274c0688790614c95888ac31acbf685f766f0f62604f 3d4debd9589ec5836d12b44b8fda910308cc2c11f1d3b015565f22b16bb713fb df4e2994cf7874599d1f41606a812e960f7ad0412ab6411da23913f5284bc206 86ad00e8ce286427015744b79d68c66907fe7d896b701aaa11e52e880dfd1132 feb32e985bec961314175e963996ae9aea5fb499da378e2c3732fdb3db47324d fd271ca841ac40cb52d8a2261caa6a1731c856b21b197e479a5337aebdb6bb97 96f3a2fe95bdc56ce3aa068b949ba70be28577ea8459f72bc542dc40569bda5e 1e1f128bb22a2d4a6e52ebe16dce3bf8c05ac988285fb86cc54a6954c3a1cfd4 b09ff51711a3434a44e6558b0c4175e8a4df607673f0303d2c5f04d5f0c1cf35 64900c80a658b9d034481f3227f46984eb04d0612930d6dbcff0156f5dd0b6ff 7811074c086e6c23ef437487ba3adfa2ef1712ce501613057a2d4b6ae9159c0e a13bceabaa9c572028de5c205fa638a2dc400767e755541cc6efd7aea4dc9dff f777a7911801c86e17376234766fbb1af0f6a7dd4f52c782d3e619b8fd6c3505 e25f756a6595f102a4745066dcd09bff8498dd221058d625d759a2b459423bc2 94d9fb6fc8a1a2691d74fd44b17159edf36516a8e2fce30547b594e489e345a5 be12d048c3fc53400425f95771faaf15a8784fbcec4ebcf9b219f277214a0b03 6a0ee9c107c7ebc3974c71ce110a74d612a08c1ebbd5a8417dc6ca42c94c8470 c905714f208a82dd652be86e919c855b6c4ae4d37722c433a5a78d1a9f662e06 9fed2f872c703d5409af9defe789ed8c5b653e3a792ed22a71af663542408237 1a8c72f3fb75e40a28c500ed3b3adb8afb2542412793fe12028826fa173dd94e f448d465ec0664ceb587bdeea50ed939cef8491fcaa56d3d6616fa88d3c13305 92d40ab5c10b78ed3f12d36a7a416f8eeb3d5a912a3bd39a547c1fdac44e0f23 bc16bc2beaa14114486bb9a570077a1f6eaefceab57c601436f7c04ea517081d 1e4f5e34d9ea0469263f18d2168e5ac42b3d75d10f58064cca55e74f0bad9bd8 5acf2f0b2070193e02a9d44df37743648ac881406d6f312004b75f893688eaa9 477eefb36d44e44ef8893c3235335febcc63517118224521af12b6154dab172a 225d00da3718aea860a1ff35ead084dfda718801c1df95345348eab0fd021736 c78536783e08d102c16806a88b7f892e42753958fd2b8dbe39b567824344e5cb 3b069e5f025494dccad1f8ac7742a78b5d8f9be206fdff7b0d490d17592e8988 2d2fec466a98d32dd3b7dec0213e42cf42e05282ff9ec5e85de961666dcec528 d0e4a6c7e27a250fef7cea02ccda4d7e3f0f99502bc11407850b7a7e39f4141a be5aef52b51264f84b8ef6fccd3a0dcd86a5960fb93c11051cb581ab8b48b1e6 e06c4cdb2372a08fe493340e683eb553d222c8093bde97eab774bcc7015f68f5 e4ef883d38aab8d46ddd4c52ad0dc74d9f41105421a4d116f183e23c45177d94 7ca36849badfebf20fee75551481a89af9a1a2744b279869f3cbda42f8d4e3f0 7491b4e5ab17bda52b09763e5e3bd7e288ddab56375d72e9327b8ff15df5795e c2bc5bffa13adddda12f23b962310217faf6ebe0826a023a9b94a7e19f335126 b960a3545ad3fd7cb95c905d186db6dc690c55691b6e16aa3a96cecbf1780a5a c7a8ce2376593d96e3ed5beaf2a6aaed84996e784824802054a5473632e07bc1 118564ae1f0454abae846038d502a08e4f48171103d9b0922b65f01a220e23dd 4e32e1510f37589484bb8b990cf291bbd440fff06499a65ebcbdaad969d85778 308473a97660b68072ed16e95938d0dcd47d433d643b434d6b63034a401c0df5 e5f783e6b27dc4f00e8c6034dd87d909b6209014a0c2b36b24ecbb1692ade619 b138fb2ab4d3dec961958e1d08d4e81b89fce89799b8372e2ab804545a1c0600 36c614a9c259952056c595369e86fce2352290a78d2c1f6a407a2d43e96617f0 3e42097fb70eff8065e134c7c56e11830730684dd728eae2fe30a4397baad38a c8dc3fe30f80f7eeee60fd7b97fff0c6c708cd9863b931fba8f2e8fc3c83057b c8941ed0ad7c24882b0609bb4edd43b3246103fdc6d79d94fef2f0318bf0dcff 3ad430ced41567d4b0a99df5323f51b89689ecf78a93c3886d53138d59194e3e d48658ed79181ab646c2fa5b0398a0965d48648cc0957c905fffcefa4dc3ed67 331d57f277b61cc489a142dc637e4cf2920585b49eb7fd903e2d771ad167a91f 2e6f53e2d97fb8ed23f6a00fd95c769c0d78aa2fd3cdb05faa43484550d155e9 788f71cefbcf844b8fc2c003decc19d9a59e7ee6cc3d532d75a5741688fd3e7f 9727f430ca221010e436276b7d88025ce13de290296ce34945a33c21d04f82cd 6929492d08b2ca2d430f44fda2f29710ef05f7063e826a85d64f7ef317f37833 5d13c8134902c303bd1e7b974e5e800a6d5a2f91e515c333b00456e10fdfc54f f75833ae374a148baaf8802c4e8eb13bb9049395940066eb1fc88a601efe92d5 7846b05d3e9386097feeaf48b5bd05b3718b662ff4063d8031943cc2bf586e14 3120952ddd80dc74d0de5b355810f1a64e53d550b3e3d24fb1b9e2ee91274790 5adce85920a7b15db6a45a0df051cdbea8014662d444e27942655ba87674f056 49ebd3633423061edd1b82450af954f5e4f30ad92e60a7fe37461f171dbaa410 cd0074e27661ad5f7601d71c5455def8bd7d5c89d018359fd53f23ddb7cd9860 4b74e1438134ddc06d373296fa5308f773971f1f0db7a3aafb28851245695314 269c33ff875d7c4aa3368434514aaf6a7aec702ece5c67a312ad53d3941e060e 91d7b88d9820cfbc66fc1a969dfe4b4e80c97f08cef8e4e5e1e55bef8b709de1 d3a0d218431634f3d52e56175548bf17bcbbb436022de17148dc9b3d23752d93 ada12b1bbd10c589fb1a196983a3dfd80b4724b05d492210756b997720be5800 917b38b593c2ae0389835b01eb5f99a19dfabe18a3e6c68a6bfd6f847e21734e 869dee1445b7ec35e980c71d2b392f476f9be827bf8c78a0d4b89641e38b6db1 2a9ac08d5f74e16918f8d60424d783aa591f95c9021bc6b0193298f51a54c773 c20b3fef82f25b3127cdf54419c83070c40800a8ff90e529bf5c15214e37d43c bb4bb4e21ef14ae6772da1e360abae83ff8758df42012f2c96978af55b6c65f7 4706fe465add60d3ad167b84fd31197c55f76edb13eed219ec094d1154466370 47dd3c4bd1c3dbe7b5e9a8c4e17d07eccdfbe969608a1511f56f40a1382e0250 a759a1ef77502d46504ece40e8d3422c8d389772494beabb1c41e363852727bd 94db6f1440b0be17389494836e849575005a1c62ebbc182a00d158548faff029 1b8a81fea89b49e6864d9d2f49b903babce125b37203ef37b4313148762e9aa6 63840b1912f4c7f675e1fd6b3dc3bb73f96dd8ac36048f156d6df376332fdbc9 9ca7164dafa090d19b4b2a87f11c98173218d4b52e0fdcb041b3e35acbd3bb6f ecca0ef5fc1908d2d5cfeed37c30e9010feb4fa3dedccf0b8756d0d5942d9e77 b1990edfa7e5bae07b632ebad1ac25a5edc256e4abfef6089f3c5d0c99865bd5 5b494971ba08eb136aa82fbd2d82f1f51bf72be45c0497f84776ee60ebbb9ec2 b8f1c225749160c00e02fb51ad860b34f7885ddcf58b7a137eb598c96e9c2ca2 a1c2175cece06f1a7a2f2b23e1c9c721edd46db7c31d27527610603855611615 6f439e379441ac0974d6eea7073c3713c0cdd4af7b2afc71998aae8a798822f6 561d364f7b2c9653064941d7f9c8f785336a3ebe9af91c1b23b7c82c7dbce223 951c3d415e86ca95c6ead999f580d0d744fd4b7f876e650ba12cc37d98c6a494 3b46774d3a73d2a50b1be7d2b8071953e8e44547c3f1e7a770ff316848ae9dbf b57db576722f6083262617165d3b0ab85aa6f0b8ee936482e14cc6878bc50e92 7db16eda81c95fb1afe563ef9ddf78554e6415c15254795b263c20425925314d 647f09f47c25cfd741fdf924d4f61fec4592321bc06d9355bb97ea58351109e2 c03b49d4a36facd2c98cbc13b1d6f9e94a02004fa70661eb6d24291f594f2e79 255804e141e1b1f7be56362c27f7e8ae03939aeca253074a219564874cfe4d63 697a200ec343b12742ee3fe003ac8886740198ae95535e99df164e1ba8a4744e 965bda5cf2e20c56d82ae4cf5d478189520d4bc3e4e049aedb43755fc1d49ad6 f7b78f625142508c20ad9a181df462fcbff3b9f82fd76255cfca19b74b99aef6 e94133be0f608e91f0b43c5f716eb9c7e4c2a590dd000dda2f3d3be287959d8d af9c64e78eb7209995e2d2abcf66f6e8667fe47d0fcc9b77a5843a49d1a2318e 10a00757da2244f2a10e7c6cb13db4e1486858b5047e189d2777385ea91a2e0e 14895d7e59810e368fc1370d74ce8890fbcf01f9cb15e408ca93bb7e079e83bf 63d8edb8fde579f19f7dc1e5ce42ce7f15b8b60a7dc1fe2abe2ace68acc054d2 6d3165d0488992c8e47ab77db3033e2b312c19d449f9eb4bd7bbda819b94ee5c 067207fc117d6c4723ab667a3eb4b6de7e7f8d8f95de8d0f37e81c047f7b7398 44c7a55b508f319b904c80d6fb521661e7024513161b0bfc3885abe0cf6278d4 57261a3195db36ff23bd74758a757fdfdfe022d34ea3b7b7c347b7c878b2ba77 d6c5b6b497c064ad225a8fa50970b1b45148edbfd85bda76e6d49a2084c117cc 3d861df73773bef3bc274855b6caefea40b610e484665e8e0a4e6d6bf18f5267 e52326fb79b957d3aeae7cf8978f655b8f5d989cedaafea15d6c44b7157d8899 b114d8d889c601c8cdfab81a1025bc3307020e2fa9853df3a192b4c99e1bf85f cfcb8a6e88fdf62994b1d3b32c673060e71a02924678564a6d84917f34b66429 45642dbafc26254f87eefe18e81be34ef113d3e14df5288207405fd0c9f73f51 7480e2961987d0d4b180676b2dbe6467f684ecad0eff1d3ea46f92240ba7b303 909cbe6602198377afbc7f77862c832a4c8238f6d267091cf72f17617c580096 48d9c7390d27e6c60526cadcd6ebc5640a0690c89f614f2d4727aea7a2d0982b b33ff37eb3caf4ae41092dc061e24c1dbd702a77066d7f7a58eab1200eaa0b01 23c00a1f4bf8e1e8ad5950d84e6bf1beb363e28fee3dc144a975ba68c2c9c03f 552bce22a1083ccaa32105e4887cfaf7ce235cd3addda8e1f4f4418384a1f477 5f15ee16ea4c6aacb853dd312792f5973657e2503fa9f0fac07af1c575f0ba14 8987b426ad6ece34e8668022110178d122080f74401203bfcfe985f632b8b338 18959d87be4ebf2864ac63d0caa007ad6b71a8204041b6962e204da558e79a0c 0a3306ab60905fe0131c08a2047941b285b337bfd0b4e603433fda92d4e7c362 a4fe6433650128ad21a521f3960dd6454825916d6794e4c0512a5097815ce11f d55e55f9b67a7930ce139fbed31a845323a48204333cd1ce25defa7fdaeade04 55caf7e2a289d5f8bd626714ab449ca522c7f590ef7b174d97d05e33e8bfa1fb ab3a8daf7acee956314fdbc4f03a43ebcb2dc86940d93006e1181cf1c3d2bc66 52c7264a07b60310c402a11083ad1d47688dc02569a946002f5c07dce2309061 c7189753d932811dc2e6f5f43801ddda3ba4bd44f49e24e34f543ca9affcdab5 b39ed564df7b620b171fd71388775641a088aca69408d34dd931fef5c3b79394 3f6dc5b885c6205bc9d029b05e12a31538557ff129d44ac3907f6ab184d310e1 b0f8fa5e59d096dc4496732b97985a6f16e790a0498e062e0312b64791c06219 38109b2ef3d7dfb5c46d4337f440e8b5d3c87668c7faac009f8f6325c1765c8d 5ccfbf5f8d0264a13a78bec41b2bf9fa2fd2f6c1475248da60eced672879cedd 3869e3c3d13c2a1dedc12c679652ed41d7c25f493cfb77229d7528d91f37bcae 976f3bdb15d454f42a9c9a61dbf592f77d65f48183ef00d5d6f7232d1e67aa81 fa2f04ec87ce121d4d6867701d6fce611a9e163a6d636ab33365b21b71b1353f 54923bcc3c94e0b889a58d5693993ab9da6083c6d8bc56dcbb89460ab9c556da 15a41e7b7e88e0ec008083a4b8b945768e90acbce8728d8eb3f4233c55629abf dd0e1b2530557475b1bcc0e1ec2478a2a5d8e2f6000000000000000000000000 000000000000000000000002080e151a212d341b8bad86b7475f8e4330ddd683 9eddeda3d877d7ac02f819ccc6988c46ceda9e792c9578527c324c5d68ec6691 708e013b6b401b814c9406000a77fa163affed788a1491c6d5d8d1e67c3df240 a049edd34a220acb63f78e029b239e35cbae299d1d166f73609f3da1aa580583 5596f81e00' ]) ]]>

Acknowledgments We thank Orie Steele for his valuable comments on this document.