Subject: [lamps] Re: WG Last Call: draft-ietf-lamps-pq-composite-sigs-08 (Ends 2025-10-06)
From: "Salz, Rich" <[email-masked]>
To: Mike Ounsworth <[email-masked]>, tirumal reddy <[email-masked]>, Max Pala <[email-masked]>
Cc: Russ Housley <[email-masked]>, "[email-masked]" <[email-masked]>, "[email-masked]" <[email-masked]>, "[email-masked]" <[email-masked]>
Date: Wed, 24 Sep 2025 12:56:46 +0000
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>

Perhaps better to contact the Patent holder as identifier in the IPR disclosure.

From: Mike Ounsworth <[email-masked]>
Date: Wednesday, September 24, 2025 at 8:01 AM
To: tirumal reddy <[email-masked]>, Max Pala <[email-masked]>
Cc: Russ Housley <[email-masked]>, [email-masked] <[email-masked]>, [email-masked] <[email-masked]>, [email-masked] <[email-masked]>
Subject: [lamps] Re: WG Last Call: draft-ietf-lamps-pq-composite-sigs-08 (Ends 2025-10-06)

This Message Is From an External Sender
This message came from outside your organization.

@Max you were working at CableLabs at the time, and you are the inventor of the declared patent. Can you please comment on Tiru's IPR question?

On Wed, 24 Sept 2025 at 01:37, tirumal reddy <[email-masked]<mailto:[email-masked]>> wrote:

Hi,

I am reviewing IPR disclosure 4761<https://urldefense.com/v3/__https://datatracker.ietf.org/ipr/4761/?utm_source=chatgpt.com__;!!GjvTz_vk!XalleUgywvhC8GC_G3gfIxVeHh16JER3CsCD2gW-mCnDXnJ9n8JuPPxmeWTTemHyB4_2bHSyhLkrFuGwBtOFmQ$> related to Composite ML-DSA. I would like to understand whether the licensing terms allow implementations in open source projects. From my reading, the disclosure appears to provide a commitment that is conditional.

Does this IPR declaration permit open source implementations without the need for individual agreements with CableLabs ?

Your clarification will help assess whether Composite ML-DSA can be adopted in open source cryptographic libraries and security protocols (use of composite ML-DSA is proposed in TLS, IKEv2 and JOSE).

-Tiru

On Mon, 22 Sept 2025 at 21:23, Russ Housley <[email-masked]<mailto:[email-masked]>> wrote:
As part of this WG Last Call, be aware that this IPR disclosure was submitted four years ago:
https://datatracker.ietf.org/ipr/4761/<https://urldefense.com/v3/__https://datatracker.ietf.org/ipr/4761/__;!!GjvTz_vk!XalleUgywvhC8GC_G3gfIxVeHh16JER3CsCD2gW-mCnDXnJ9n8JuPPxmeWTTemHyB4_2bHSyhLkrFuFI3Bm9yw$>

Russ

On Sep 22, 2025, at 11:50 AM, Russ Housley via Datatracker <[email-masked]<mailto:[email-masked]>> wrote:

Subject: WG Last Call: draft-ietf-lamps-pq-composite-sigs-08 (Ends 2025-10-06)

This message starts a 2-week WG Last Call for this document.

Abstract:
  This document defines combinations of ML-DSA [FIPS.204] in hybrid
  with traditional algorithms RSASSA-PKCS1-v1.5, RSASSA-PSS, ECDSA,
  Ed25519, and Ed448.  These combinations are tailored to meet security
  best practices and regulatory guidelines.  Composite ML-DSA is
  applicable in any application that uses X.509 or PKIX data structures
  that accept ML-DSA, but where the operator wants extra protection
  against breaks or catastrophic bugs in ML-DSA.

File can be retrieved from:
https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/<https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/__;!!GjvTz_vk!XalleUgywvhC8GC_G3gfIxVeHh16JER3CsCD2gW-mCnDXnJ9n8JuPPxmeWTTemHyB4_2bHSyhLkrFuH28u07vg$>

Please review and indicate your support or objection to proceed with the
publication of this document by replying to this email keeping [email-masked]<mailto:[email-masked]>
in copy. Objections should be motivated and suggestions to resolve them are
highly appreciated.

Authors, and WG participants in general, are reminded again of the
Intellectual Property Rights (IPR) disclosure obligations described in BCP 79
[1]. Appropriate IPR disclosures required for full conformance with the
provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of
any. Sanctions available for application to violators of IETF IPR Policy can
be found at [3].

Thank you.

[1] https://datatracker.ietf.org/doc/bcp78/<https://urldefense.com/v3/__https://datatracker.ietf.org/doc/bcp78/__;!!GjvTz_vk!XalleUgywvhC8GC_G3gfIxVeHh16JER3CsCD2gW-mCnDXnJ9n8JuPPxmeWTTemHyB4_2bHSyhLkrFuGr4Lawcg$>
[2] https://datatracker.ietf.org/doc/bcp79/<https://urldefense.com/v3/__https://datatracker.ietf.org/doc/bcp79/__;!!GjvTz_vk!XalleUgywvhC8GC_G3gfIxVeHh16JER3CsCD2gW-mCnDXnJ9n8JuPPxmeWTTemHyB4_2bHSyhLkrFuGHjR-1Sw$>
[3] https://datatracker.ietf.org/doc/rfc6701/<https://urldefense.com/v3/__https://datatracker.ietf.org/doc/rfc6701/__;!!GjvTz_vk!XalleUgywvhC8GC_G3gfIxVeHh16JER3CsCD2gW-mCnDXnJ9n8JuPPxmeWTTemHyB4_2bHSyhLkrFuGsjlP_3g$>

_______________________________________________
Spasm mailing list -- [email-masked]<mailto:[email-masked]>
To unsubscribe send an email to [email-masked]<mailto:[email-masked]>
_______________________________________________
Spasm mailing list -- [email-masked]<mailto:[email-masked]>
To unsubscribe send an email to [email-masked]<mailto:[email-masked]>