W3C home > Mailing lists > Public > public-credentials@w3.org > April 2022

XMSS: Generating usable test vectors for JOSE and COSE

From: Orie Steele <orie@transmute.industries>
Date: Sun, 3 Apr 2022 09:23:27 -0500
Message-ID: <CAN8C-_LQfGSheQDOG9e817huxhp-1CgpNcqcAOHsJ_gNG7wESA@mail.gmail.com>
To: "W3C Credentials CG (Public List)" <public-credentials@w3.org>, cose@ietf.org

We've been working on generating test vectors for:

That we could use to register the `kty` and `alg` for XMSS such that it
could be used by JOSE and COSE.


I've reached the limits of my ability to move this ball forward, and am
here to ask for help.

I'm not very good with GoLang, and the original xmss source I am basing
this on is difficult for me to extend.

I am unsure how correct what I have is even with respect to the RFC, mostly
needing to trust the original go source.

I don't have multiple signature tests, which are pretty critical to gaining
confidence that a stateful signature scheme is functioning correctly.

If you are a Go / TypeScript developer, and would like to help with these
issues, we welcome contributions.

If we cannot get multiple implementations and stable test vectors for XMSS
we will not attempt to register it for use with JOSE / COSE, but that can
always be done later if the scheme becomes more popular.

If you are interested in seeing XMSS for JOSE and COSE registered and have
time and skill to volunteer to contribute to this objective, please message
me or dive into issues and PRs.



Chief Technical Officer

Received on Sunday, 3 April 2022 14:28:52 UTC

This archive was generated by hypermail 2.4.0 : Sunday, 3 April 2022 14:28:53 UTC