- extensions/pq-signatures.md: the suite (id-MLDSA65-Ed25519-SHA512 of
draft-ietf-lamps-pq-composite-sigs-19, ML-DSA-65 of FIPS 204 beside
Ed25519) and why -65 and why the composite; the hybrid members; signing and
verifying in WAI's order and what stripping does; the require-hybrid policy;
key logs (hybrid entries and roots, the hybrid commitment, anchors that
require hybrid, confirmation step 4a), group receipts (the payload's third
version), claims and the shared check for wai:<domain>\x01 || JCS records;
security considerations; the reasons; sizes and costs measured on the build
host; the corpus.
- jwp-receipts: pointers at section 2.3, 2.4.1, 2.4.3, 2.7.1, 3, 3.1, 3.3, 7.2,
7.4 and 7.7; SPEC section 5 and section 7 Signatures paragraphs; CHANGELOG.
- pq-conformance/pq_verify.py and _mldsa.py: ML-DSA-65 verification written
from FIPS 204 in pure Python (all 90 ACVP vectors), every case, the sizes,
section 8's table, 26 mutated cases refused, and every one of 14 checks
caught when dropped. README: the corpus rules and the provenance of the
vendored vectors, with the notice their licence asks kept intact.
- the suite registered as a wire identifier; registry export regenerated.
- CI: the reference's tests, the corpus's cross-platform regeneration, both
verifiers, and a diff of their verdicts.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
2ab178d195