JOSE L. Prabel Internet-Draft S. Sun Intended status: Standards Track Huawei Expires: 25 December 2025 J. Gray Entrust 23 June 2025 PQ/T Hybrid Composite Signatures for JOSE and COSE draft-prabel-jose-pq-composite-sigs-02 Abstract This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for PQ/T hybrid composite signatures. The composite algorithms described combine ML-DSA as the post-quantum component and ECDSA as the traditional component. About This Document This note is to be removed before publishing as an RFC. The latest revision of this draft can be found at https://example.com/LATEST. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-prabel-jose-pq- composite-sigs/. Discussion of this document takes place on the Javascript Object Signing and Encryption Working Group mailing list (mailto:jose@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/jose/. Subscribe at https://www.ietf.org/mailman/listinfo/jose/. Source for this draft and an issue tracker can be found at https://github.com/lucasprabel/draft-jose-pq-composite-sigs. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Prabel, et al. Expires 25 December 2025 [Page 1] Internet-Draft JOSE/COSE Composite Signatures June 2025 Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 25 December 2025. Copyright Notice Copyright (c) 2025 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Conventions and Definitions . . . . . . . . . . . . . . . . . 3 3. Algorithm Key Pair (AKP) Type . . . . . . . . . . . . . . . . 4 4. Composite Signature Algorithm . . . . . . . . . . . . . . . . 5 4.1. Composite Key Generation . . . . . . . . . . . . . . . . 5 4.2. Composite Sign . . . . . . . . . . . . . . . . . . . . . 6 4.3. Composite Verify . . . . . . . . . . . . . . . . . . . . 7 4.4. Encoding Rules . . . . . . . . . . . . . . . . . . . . . 8 5. Composite Signature Instantiations . . . . . . . . . . . . . 9 5.1. JOSE algorithms . . . . . . . . . . . . . . . . . . . . . 9 5.2. COSE algorithms . . . . . . . . . . . . . . . . . . . . . 10 5.3. Composite Domain Separators for JOSE and COSE . . . . . . 11 6. Security Considerations . . . . . . . . . . . . . . . . . . . 12 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 12 7.1. JOSE Algorithms . . . . . . . . . . . . . . . . . . . . . 12 7.1.1. ML-DSA-44-ES256 . . . . . . . . . . . . . . . . . . . 12 7.1.2. ML-DSA-65-ES256 . . . . . . . . . . . . . . . . . . . 13 7.1.3. ML-DSA-87-ES384 . . . . . . . . . . . . . . . . . . . 13 7.2. COSE Algorithms . . . . . . . . . . . . . . . . . . . . . 14 7.2.1. ML-DSA-44-ES256 . . . . . . . . . . . . . . . . . . . 14 7.2.2. ML-DSA-65-ES256 . . . . . . . . . . . . . . . . . . . 14 7.2.3. ML-DSA-87-ES384 . . . . . . . . . . . . . . . . . . . 14 8. References . . . . . . . . . . . . . . . . . . . . . . . . . 15 8.1. Normative References . . . . . . . . . . . . . . . . . . 15 8.2. Informative References . . . . . . . . . . . . . . . . . 16 Prabel, et al. Expires 25 December 2025 [Page 2] Internet-Draft JOSE/COSE Composite Signatures June 2025 Appendix A. Examples . . . . . . . . . . . . . . . . . . . . . . 17 A.1. JOSE . . . . . . . . . . . . . . . . . . . . . . . . . . 17 A.2. COSE . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Appendix B. Acknowledgments . . . . . . . . . . . . . . . . . . 18 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 18 1. Introduction The impact of a potential Cryptographically Relevant Quantum Computer (CRQC) on algorithms whose security is based on mathematical problems such as integer factorisation or discrete logarithms over finite fields or elliptic curves raises the need for new algorithms that are perceived to be secure against CRQC as well as classical computers. Such algorithms are called post-quantum, while algorithms based on integer factorisation or discrete logarithms are called traditional. While switching from a traditional algorithm to a post-quantum one intends to strengthen the security against an adversary possessing a quantum computer, the lack of maturing time of post-quantum algorithms compared to traditional algorithms raises uncertainty about their security. Thus, the joint use of a traditional algorithm and a post-quantum algorithm in protocols represents a solution to this problem by providing security as long as at least one of the traditional or post-quantum components remains secure. This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for hybrid composite signatures. The composite algorithms described combine ML- DSA as the post-quantum component and ECDSA as the traditional component. 2. Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. This document follows the terminology for post-quantum hybrid schemes defined in [I-D.draft-ietf-pquip-pqt-hybrid-terminology]. This section recalls some of this terminology, but also adds other definitions used throughout the whole document: Prabel, et al. Expires 25 December 2025 [Page 3] Internet-Draft JOSE/COSE Composite Signatures June 2025 "Asymmetric Traditional Cryptographic Algorithm": An asymmetric cryptographic algorithm based on integer factorisation, finite field discrete logarithms, elliptic curve discrete logarithms, or related mathematical problems. A related mathematical problem is one that can be solved by solving the integer factorisation, finite field discrete logarithm or elliptic curve discrete logarithm problem. Where there is little risk of confusion asymmetric traditional cryptographic algorithms can also be referred to as traditional algorithms for brevity. "Post-Quantum Algorithm": An asymmetric cryptographic algorithm that is intended to be secure against attacks using quantum computers as well as classical computers. As with all cryptography, it always remains the case that attacks, either quantum or classical, may be found against post-quantum algorithms. Therefore it should not be assumed that just because an algorithm is designed to provide post- quantum security it will not be compromised. "Post-Quantum Traditional (PQ/T) Hybrid Scheme": A multi-algorithm scheme where at least one component algorithm is a post-quantum algorithm and at least one is a traditional algorithm. "PQ/T Hybrid Digital Signature": A multi-algorithm digital signature scheme made up of two or more component digital signature algorithms where at least one is a post-quantum algorithm and at least one is a traditional algorithm. "Composite Algorithm": An algorithm which is a sequence of two component algorithms, as defined in [I-D.draft-ietf-lamps-pq-composite-sigs]. "Component Algorithm": Each cryptographic algorithm that forms part of a cryptographic scheme. 3. Algorithm Key Pair (AKP) Type This document makes use of the Algorithm Key Pair (AKP) type which is defined in [I-D.draft-ietf-cose-dilithium]. As a reminder, the AKP type is used to express public and private keys for use with algorithms. The parameters for public and private keys contain byte strings. This document makes use of the serialization routines defined in [I-D.draft-ietf-lamps-pq-composite-sigs] to obtain the byte string encodings of the composite public and private keys. Prabel, et al. Expires 25 December 2025 [Page 4] Internet-Draft JOSE/COSE Composite Signatures June 2025 The process to compute JWK Thumbprint and COSE Key Thumbprint as described in [RFC7638] and [RFC9679] is detailed in [I-D.draft-ietf-cose-dilithium]. 4. Composite Signature Algorithm The structures of the composite keys and composite signatures follow an approach similar to [I-D.draft-ietf-lamps-pq-composite-sigs]. The composite design is chosen so that composite keys and signatures can be used as a drop-in replacement in JOSE / COSE object formats. This section gives some details about their construction. 4.1. Composite Key Generation Composite public and private keys are generated by calling the key generation functions of the two component algorithms and concatenating the keys in an order given by the registered composite algorithm. Composite Public Key <- Public Key of the 1st Algorithm || Public Key of the 2nd Algorithm and Composite Private Key <- Private Key of the 1st Algorithm || Private Key of the 2nd Algorithm For the composite algorithms described in this document (ML-DSA with ECDSA), the Key Generation process is as follows: (pk_1, sk_1) <- ML-DSA.KeyGen() (pk_2 = (x,y), sk_2 = d) <- ECDSA.KeyGen() Composite Public Key <- SerializePublicKey(pk_1, pk_2) Composite Private Key <- SerializePrivateKey(sk_1, sk_2) This document makes use of the serialization routines from [I-D.draft-ietf-lamps-pq-composite-sigs] to obtain the byte string encodings of the composite public and private keys. These encodings are then directly use with the AKP Key Type. For more information, see the SerializePublicKey, DeserializePublicKey, SerializePrivateKey and DeserializePrivateKey algorithms from [I-D.draft-ietf-lamps-pq-composite-sigs]. Point compression for the ECDSA component is not performed for the AKP JSON Web Key Type but can be performed for the AKP COSE Key Type. In this document, as in [I-D.draft-ietf-cose-dilithium], the ML-DSA private key MUST be a 32-bytes seed. Prabel, et al. Expires 25 December 2025 [Page 5] Internet-Draft JOSE/COSE Composite Signatures June 2025 4.2. Composite Sign When signing a message M with the composite Sign algorithm, the signature combiner prepends a prefix as well as a domain separator value specific to the composite algorithm used to bind the two component signatures to the composite algorithm and achieve weak non- separability, as defined in [I-D.draft-ietf-pquip-hybrid-signature-spectrums]. It also makes use of a signature randomizer, in a similar fashion to [I-D.draft-ietf-lamps-pq-composite-sigs], in order to prevent specific attacks unique to composite signature schemes. More details about the security benefits added by the use of a signature randomizer can be found in [I-D.draft-ietf-lamps-pq-composite-sigs]. However, only the pure ML-DSA component algorithm is used internally. A composite signature's value MUST include the randomizer and the two signature components and the two components MUST be in the same order as the components from the corresponding signing key. A composite signature for the message M is generated by: * computing a 32-byte randomizer r; * computing the pre-hash of the message M; * concatenating the prefix, the domain separator, a byte 0x00, the randomizer and the pre-hash; * encoding the resulting message; * calling the two signature component algorithms on this new message; * concatenating the randomizer and the two output signatures. For the composite algorithms described in this document (ML-DSA with ECDSA), the signature process of a message M is as follows: M' <- Prefix || Domain || 0x00 || r || PH(r || M) M' <- Encode(M') sig_1 <- ML-DSA.Sign(sk_1, M', ctx=Domain) sig_2 <- ECDSA.Sign(sk_2, M') Composite Signature <- SerializeSignatureValue(r, sig_1, sig_2) Prabel, et al. Expires 25 December 2025 [Page 6] Internet-Draft JOSE/COSE Composite Signatures June 2025 The serialization routines from [I-D.draft-ietf-lamps-pq-composite-sigs] are again used to obtain the byte string encoding of the composite signature. The SerializeSignatureValue routine simply concatenates the randomizer r, the fixed-length ML-DSA signature value and the signature value from the traditional algorithm. For more information, see the SerializeSignatureValue and DeserializeSignatureValue algorithms from [I-D.draft-ietf-lamps-pq-composite-sigs]. The prefix "Prefix" string is defined as in [I-D.draft-ietf-lamps-pq-composite-sigs] as the byte encoding of the string "CompositeAlgorithmSignatures2025", which in hex is 436F6D706F73697465416C676F726974686D5369676E61747572657332303235. It can be used by a traditional verifier to detect if the composite signature has been stripped apart. The domain separator "Domain" is defined in the same way as [I-D.draft-ietf-lamps-pq-composite-sigs] as the DER encoding of the OID of the specific composite algorithm. The specific values can be found in Table 4. Similarly to [I-D.draft-ietf-cose-dilithium] which indicates that the ctx parameter MUST be the empty string, the application context passed in to the composite signature algorithm MUST be the empty string. To align with the structure of the [I-D.draft-ietf-lamps-pq-composite-sigs] combiner, the byte 0x00 is appended in the message M' after the domain separator to indicate the context has length 0. However, a second non-empty context, defined as the domain separator, is passed down into the underlying pure ML- DSA component algorithm, to bind the Composite-ML-DSA algorithm used. Table 2 (resp. Table 3) indicates the pre-hash algorithms to use for JOSE (resp. COSE). For JOSE (resp. COSE), M' is base64url-encoded (resp. binary encoded) before signature computations. 4.3. Composite Verify The Verify algorithm MUST validates a signature only if all component signatures were successfully validated. The verification process of a signature sig is as follows: * separate the composite public key into the component public keys; * separate the composite signature into the randomizer and the 2 component signatures; Prabel, et al. Expires 25 December 2025 [Page 7] Internet-Draft JOSE/COSE Composite Signatures June 2025 * compute the message M' from the message M whose signature is to be verified; * encode the resulting message M'; * verify each component signature. (pk_1, pk_2) <- DeserializePublicKey(pk) (r, sig_1, sig_2) <- DeserializeSignatureValue(sig) M' <- Prefix || Domain || 0x00 || r || PH(r || M) M' <- Encode(M') if not ML-DSA.Verify(pk_1, M', ctx=Domain) output "Invalid signature" if not ECDSA.Verify(pk_2, M') output "Invalid signature" if all succeeded, then output "Valid signature" The DeserializePublicKey and DeserializeSignatureValue serialization routines from [I-D.draft-ietf-lamps-pq-composite-sigs] are used to get the component public keys, the randomizer r, and the component signatures. For more information, see the DeserializePublicKey and DeserializeSignatureValue algorithms from [I-D.draft-ietf-lamps-pq-composite-sigs]. 4.4. Encoding Rules In each combination, the byte streams of the keys are directly concatenated, and the byte streams of the signatures are directly concatenated with the randomizer r. Randomizer r || Signature of the 1st Algorithm || Signature of the 2nd Algorithm Since all combinations presented in this document start with the ML- DSA algorithm and the key or signature sizes are fixed as defined in [FIPS.204], it is unambiguous to encode or decode a composite key or signature. Table 1 lists sizes of the three parameter sets of the ML-DSA algorithm. Prabel, et al. Expires 25 December 2025 [Page 8] Internet-Draft JOSE/COSE Composite Signatures June 2025 +===========+====================+=============+========+===========+ | | Private Key (seed) | Private | Public | Signature | | | | Key | Key | Size | +===========+====================+=============+========+===========+ | ML-DSA-44 | 32 | 2560 | 1312 | 2420 | +-----------+--------------------+-------------+--------+-----------+ | ML-DSA-65 | 32 | 4032 | 1952 | 3309 | +-----------+--------------------+-------------+--------+-----------+ | ML-DSA-87 | 32 | 4896 | 2592 | 4627 | +-----------+--------------------+-------------+--------+-----------+ Table 1: Sizes (in bytes) of keys and signatures of ML-DSA Note that the seed is always 32 bytes, and that ML- DSA.KeyGen_internal from [FIPS.204] is called to produce the expanded private key from the seed, whose size corresponds to the sizes of the private key in the table above. 5. Composite Signature Instantiations The ML-DSA signature scheme supports three possible parameter sets, each of which corresponding to a specific security strength. See [FIPS.204] for more considerations on that matter. The traditional signature algorithm for each combination in Table 2 and Table 3 was chosen to match the security level of the ML-DSA post-quantum component. The [FIPS.204] specification defines both pure and pre-hash modes for ML-DSA, referred to as "ML-DSA" and "HashML-DSA" respectively. This document only specifies a single mode which is similar in construction to HashML-DSA, with the addition of a signature randomizer. However, because the pre-hashing is done at the composite level, only the pure ML-DSA algorithm is used as the underlying ML-DSA primitive. 5.1. JOSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in [IANA.JOSE]. Prabel, et al. Expires 25 December 2025 [Page 9] Internet-Draft JOSE/COSE Composite Signatures June 2025 +===============+=========+===================+========+===========+ |Name |First | Second Algorithm |Pre-Hash|Description| | |Algorithm| | | | +===============+=========+===================+========+===========+ |ML-DSA-44-ES256|ML-DSA-44| ecdsa-with-SHA256 |SHA256 |Composite | | | | with secp256r1 | |Signature | | | | | |with ML- | | | | | |DSA-44 and | | | | | |ECDSA using| | | | | |P-256 curve| | | | | |and SHA256 | +---------------+---------+-------------------+--------+-----------+ |ML-DSA-65-ES256|ML-DSA-65| ecdsa-with-SHA256 |SHA512 |Composite | | | | with secp256r1 | |Signature | | | | | |with ML- | | | | | |DSA-65 and | | | | | |ECDSA using| | | | | |P-256 curve| | | | | |and SHA256 | +---------------+---------+-------------------+--------+-----------+ |ML-DSA-87-ES384|ML-DSA-87| ecdsa-with-SHA384 |SHA512 |Composite | | | | with secp384r1 | |Signature | | | | | |with ML- | | | | | |DSA-87 and | | | | | |ECDSA using| | | | | |P-384 curve| | | | | |and SHA384 | +---------------+---------+-------------------+--------+-----------+ Table 2: JOSE Composite Signature Algorithms for ML-DSA Examples can be found in Appendix A.1. 5.2. COSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in [IANA.COSE]. Prabel, et al. Expires 25 December 2025 [Page 10] Internet-Draft JOSE/COSE Composite Signatures June 2025 +========+============+===========+===========+======+=============+ |Name | COSE Value | First | Second |Pre- | Description | | | | Algorithm | Algorithm |Hash | | +========+============+===========+===========+======+=============+ |ML-DSA- | TBD | ML-DSA-44 | ecdsa- |SHA256| Composite | |44-ES256| (request | | with- | | Signature | | | assignment | | SHA256 | | with ML- | | | -51) | | with | | DSA-44 and | | | | | secp256r1 | | ECDSA using | | | | | | | P-256 curve | | | | | | | and SHA256 | +--------+------------+-----------+-----------+------+-------------+ |ML-DSA- | TBD | ML-DSA-65 | ecdsa- |SHA512| Composite | |65-ES256| (request | | with- | | Signature | | | assignment | | SHA256 | | with ML- | | | -52) | | with | | DSA-65 and | | | | | secp256r1 | | ECDSA using | | | | | | | P-256 curve | | | | | | | and SHA256 | +--------+------------+-----------+-----------+------+-------------+ |ML-DSA- | TBD | ML-DSA-87 | ecdsa- |SHA512| Composite | |87-ES384| (request | | with- | | Signature | | | assignment | | SHA384 | | with ML- | | | -53) | | with | | DSA-87 and | | | | | secp384r1 | | ECDSA using | | | | | | | P-384 curve | | | | | | | and SHA384 | +--------+------------+-----------+-----------+------+-------------+ Table 3: COSE Composite Signature Algorithms for ML-DSA Examples can be found in Appendix A.2. 5.3. Composite Domain Separators for JOSE and COSE The JOSE and COSE composite domain separators values are listed in Table 4. Prabel, et al. Expires 25 December 2025 [Page 11] Internet-Draft JOSE/COSE Composite Signatures June 2025 +========================+====================================+ | "alg" Header Parameter | Domain Separator (in Hex encoding) | +========================+====================================+ | ML-DSA-44-ES256 | 060B6086480186FA6B50090103 | +------------------------+------------------------------------+ | ML-DSA-65-ES256 | 060B6086480186FA6B50090108 | +------------------------+------------------------------------+ | ML-DSA-87-ES384 | 060B6086480186FA6B5009010C | +------------------------+------------------------------------+ Table 4: JOSE/COSE Composite Domain Separators 6. Security Considerations The security considerations of [RFC7515], [RFC7517], [RFC9053] and [FIPS.204] also apply to this document. All security issues that are pertinent to any cryptographic application must be addressed by JWS/JWK agents. Protecting the user's private key and employing countermeasures to various attacks constitute a priority. For security properties and security issues related to the use of a hybrid signature scheme, the user can refer to [I-D.draft-ietf-pquip-hybrid-signature-spectrums]. For more information about hybrid composite signature schemes and the different hybrid combinations that appear in this document, the user can read [I-D.draft-ietf-lamps-pq-composite-sigs]. In particular, to avoid key reuse, when generating a new composite key, the key generation functions for both component algorithms MUST be executed. Compliant parties MUST NOT use, import or export component keys that are used in other contexts, combinations, or by themselves as keys for standalone algorithm use. 7. IANA Considerations 7.1. JOSE Algorithms The following values of the JWS "alg" (algorithm) are requested to be added to the "JSON Web Signature and Encryption Algorithms" registry. They are represented following the registration template provided in [RFC7518]. 7.1.1. ML-DSA-44-ES256 * Algorithm Name: ML-DSA-44-ES256 Prabel, et al. Expires 25 December 2025 [Page 12] Internet-Draft JOSE/COSE Composite Signatures June 2025 * Algorithm Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Documents(s): TBD 7.1.2. ML-DSA-65-ES256 * Algorithm Name: ML-DSA-65-ES256 * Algorithm Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Documents(s): TBD 7.1.3. ML-DSA-87-ES384 * Algorithm Name: ML-DSA-87-ES384 * Algorithm Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Documents(s): TBD Prabel, et al. Expires 25 December 2025 [Page 13] Internet-Draft JOSE/COSE Composite Signatures June 2025 7.2. COSE Algorithms The following values are requested to be added to the "COSE Algorithms" registry. They are represented following the registration template provided in [RFC9053], [RFC9054]. 7.2.1. ML-DSA-44-ES256 * Name: ML-DSA-44-ES256 * Value: TBD (request assignment -51) * Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.2. ML-DSA-65-ES256 * Name: ML-DSA-65-ES256 * Value: TBD (request assignment -52) * Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.3. ML-DSA-87-ES384 * Name: ML-DSA-87-ES384 * Value: TBD (request assignment -53) * Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384 Prabel, et al. Expires 25 December 2025 [Page 14] Internet-Draft JOSE/COSE Composite Signatures June 2025 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 8. References 8.1. Normative References [IANA.COSE] IANA, "CBOR Object Signing and Encryption (COSE)", n.d., . [IANA.JOSE] IANA, "JSON Object Signing and Encryption (JOSE)", n.d., . [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC7515] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Signature (JWS)", RFC 7515, DOI 10.17487/RFC7515, May 2015, . [RFC7517] Jones, M., "JSON Web Key (JWK)", RFC 7517, DOI 10.17487/RFC7517, May 2015, . [RFC7518] Jones, M., "JSON Web Algorithms (JWA)", RFC 7518, DOI 10.17487/RFC7518, May 2015, . [RFC7638] Jones, M. and N. Sakimura, "JSON Web Key (JWK) Thumbprint", RFC 7638, DOI 10.17487/RFC7638, September 2015, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . Prabel, et al. Expires 25 December 2025 [Page 15] Internet-Draft JOSE/COSE Composite Signatures June 2025 [RFC9679] Isobe, K., Tschofenig, H., and O. Steele, "CBOR Object Signing and Encryption (COSE) Key Thumbprint", RFC 9679, DOI 10.17487/RFC9679, December 2024, . 8.2. Informative References [FIPS.204] National Institute of Standards and Technology (NIST), "Module-Lattice-Based Digital Signature Standard", August 2024, . [I-D.draft-ietf-cose-dilithium] Prorock, M., Steele, O., Misoczki, R., Osborne, M., and C. Cloostermans, "ML-DSA for JOSE and COSE", Work in Progress, Internet-Draft, draft-ietf-cose-dilithium-07, 12 June 2025, . [I-D.draft-ietf-lamps-pq-composite-sigs] Ounsworth, M., Gray, J., Pala, M., Klaußner, J., and S. Fluhrer, "Composite ML-DSA for use in X.509 Public Key Infrastructure", Work in Progress, Internet-Draft, draft- ietf-lamps-pq-composite-sigs-06, 18 June 2025, . [I-D.draft-ietf-pquip-hybrid-signature-spectrums] Bindel, N., Hale, B., Connolly, D., and F. D, "Hybrid signature spectrums", Work in Progress, Internet-Draft, draft-ietf-pquip-hybrid-signature-spectrums-07, 20 June 2025, . [I-D.draft-ietf-pquip-pqt-hybrid-terminology] D, F., P, M., and B. Hale, "Terminology for Post-Quantum Traditional Hybrid Schemes", Work in Progress, Internet- Draft, draft-ietf-pquip-pqt-hybrid-terminology-06, 10 January 2025, . [RFC9053] Schaad, J., "CBOR Object Signing and Encryption (COSE): Initial Algorithms", RFC 9053, DOI 10.17487/RFC9053, August 2022, . [RFC9054] Schaad, J., "CBOR Object Signing and Encryption (COSE): Hash Algorithms", RFC 9054, DOI 10.17487/RFC9054, August 2022, . Prabel, et al. Expires 25 December 2025 [Page 16] Internet-Draft JOSE/COSE Composite Signatures June 2025 Appendix A. Examples A.1. JOSE { "priv": "0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "PL7f9-uTJKx0Q_21YdJ4zGEHPcHdqJNACd_fLup8VrE", "kty": "AKP", "alg": "ML-DSA-44-ES256", "pub": "unH59k4RuutY-pxvu24U5h8YZD2rSVtHU5qRZsoBmBMcRPgmu9VuNOVdteXi1zNIXjnqJg_GAAxepLqA00Vc3lO0bzRIKu39VFD8Lhuk8l0V-cFEJC-zm7UihxiQMMUEmOFxe3x1ixkKZ0jqmqP3rKryx8tSbtcXyfea64QhT6XNje2SoMP6FViBDxLHBQo2dwjRls0k5a-XSQSu2OTOiHLoaWsLe8pQ5FLNfTDqmkrawDEdZyxr3oSWJAsHQxRjcIiVzZuvwxYy1zl2STiP2vy_fTBaPemkleynQzqPg7oPCyXEE8bjnJbrfWkbNNN8438e6tHPIX4l7zTuzz98YPhLjt_d6EBdT4MldsYe-Y4KLyjaGHcAlTkk9oa5RhRwW89T0z_t1DSO3dvfKLUGXh8gd1BD6Fz5MfgpF5NjoafnQEqDjsAAhrCXY4b-Y3yYJEdX4_dp3dRGdHG_rWcPmgX4JG7lCnser4f8QGnDriqiAzJYEXeS8LzUngg_0bx0lqv_KcyU5IaLISFO0xZSU5mmEPvdSoDnyAcV8pV44qhLtAvd29n0ehG259oRihtljTWeiu9V60a1N2tbZVl5mEqSK-6_xZvNYA1TCdzNctvweH24unV7U3wer9XA9Q6kvJWDVJ4oKaQsKMrCSMlteBJMRxWbGK7ddUq6F7GdQw-3j2M-qdJvVKm9UPjY9rc1lPgol25-oJxTu7nxGlbJUH-4m5pevAN6NyZ6lfhbjWTKlxkrEKZvQXs_Yf6cpXEwpI_ZJeriq1UC1XHIpRkDwdOY9MH3an4RdDl2r9vGl_IwlKPNdh_5aF3jLgn7PCit1FNJAwC8fIncAXgAlgcXIpRXdfJk4bBiO89GGccSyDh2EgXYdpG3XvNgGWy7npuSoNTE7WIyblAk13UQuO4sdCbMIuriCdyfE73mvwj15xgb07RZRQtFGlFTmnFcIdZ90zDrWXDbANntv7KCKwNvoTuv64bY3HiGbj-NQ-U9eMylWVpvr4hrXcES8c9K3PqHWADZC0iIOvlzFv4VBoc_wVflcOrL_SIoaNFCNBAZZq-2v5lAgpJTqVOtqJ_HVraoSfcKy5g45p-qULunXj6Jwq21fobQiKubBKKOZwcJFyJD7F4ACKXOrz-HIvSHMCWW_9dVrRuCpJw0s0aVFbRqopDNhu446nqb4_EDYQM1tTHMozPd_jKxRRD0sH75X8ZoToxFSpLBDbtdWcenxj-zBf6IGWfZnmaetjKEBYJWC7QDQx1A91pJVJCEgieCkoIfTqkeQuePpIyu48g2FG3P1zjRF-kumhUTfSjo5qS0YiZQy0E1BMs6M11EvuxXRsHClLHoy5nLYI2Sj4zjVjYyxSHyPRPGGo9hwB34yWxzYNtPPGiqXS_dNCpi_zRZwRY4lCGrQ-hYTEWIK1Dm5OlttvC4_eiQ1dv63NiGkLRJ5kJA3bICN0fzCDY-MBqnd1cWn8YVBijVkgtaoascjL9EywDgJdeHnXK0eeOvUxHHhXJVkNqcibn8O4RQdpVU60TSA-uiu675ytIjcBHC6kTv8A8pmkj_4oypPd-F92YIJC741swkYQoeIHj8rE-ThcMUkF7KqC5VORbZTRp8HsZSqgiJcIPaouuxd1-8Rxrid3fXkE6p8bkrysPYoxWEJgh7ZFsRCPDWX-yTeJwFN0PKFP1j0F6YtlLfK5wv-c4F8ZQHA_-yc_gODicy7KmWDZgbTP07e7gEWzw4MFRrndjbDb9ZLZYWQdL8rdrhiozbesJyigGscX-Q4dHzFdwpsHwee3Ah5jhQivTsrihZx0knrzXobgPR5Yf8XkcqLxDYVrc", "priv": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "jws": "eyJhbGciOiJNTC1EU0EtNDQtRVMyNTYiLCJraWQiOiJQTDdmOS11VEpLeDBRXzIxWWRKNHpHRUhQY0hkcUpOQUNkX2ZMdXA4VnJFIn0.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4.D9GXY_VoL3fYHHXGqpMXlypSZEooR_d4qjHpP1maVEvUlvZz2WDntamafsn-huxfkYUho4OQlFfUQEjfM1PHyV1obWuO2EPRNe3GB3YAG6Pih7s-O8K2CzDy3g_xFPFwNCPsaDWi_aG1TIH1kibKKaKmazJ3jKKZ0Rs-FBTkiyQq_FUL1PNIHGgS5nSWDKI-QVzPbxEiSzhGrGFXiHUVBlR4lEaoXwul2Risg9_Oc9pRz9JXaWFGNmxUn-z4W-3AkthQC3SCfklawqUwhPZRCTOgbTa2ez8MKMummmzUo_apfmI1Lh-Jmb4IOPIorDg2tjqafpockcLVy-M-cwpstbB6zmIvYPvuh8lM11agNvDbmqE-k_dliAJ51BQvAGE3QS0EglKC-RO2p_S4L9SCv85aeWP7C4kSsRybBl6gRMHj_cFkArdE3L6O3EF4FcqUmQx7vpVRp9tdvJW-vVNRXVp98iHrMriMQkPBsqaboGCILgy6RDnl8N8SGYtAKUlNrcSpQhPDPjaurawis9bxdGolFFyfLikyiYIpZYXHypCfCe6FX5TkZi2cfF4vPMpa5-9pSIScMlNj8N9Ui8QeMUUsDCbvT6IPw-PKMXXY-KHCNORJU129CgAOxD9buFq2ztfk2yALu9zuMfCi8fOXvOifHh4M_M358mNjmXbX-pH1GblxGjwzjXPiL20pOTLMn-geEhAM51so230_YkWHQsUoXHygPCMCKRtJU8L5HgVqeq7VIAPkyWk7X_eqHZ_iuIP9NttekOvxwtm58yk51INsXOJPsF0blkorGGeDKGR4zJ3sD3ro2hR12UryNAtB9jBL2HXvUdC0IUMeb-_kbmm1Ly_78UZs0UZTgCNE4RQ9-58Cy6wU1T74Lx3qQJKiHU_kY8pgtCSsdhzHQU6PICmyhhQ-GugloemjSygKxUaQppPm-GZk8fX-qEU_LGT5B8ot0skf7b0afERMye_PRTBrbSsezkGt4HjGhBUPsIR_itnMdyLcVAfG5Aw9pNXxVmevupo13xMoz1SmfGQUxFfKzIRHoY9zC84mfAYG4L2yi-r2Uv3VvqDcdN8N19R4rf1fzNdPK0MOY3heT-Q3o4nbHDMUtUxznn_FIMpeFHx3nPeriI2PLbOrIzI4Bh0U_IYIT5Rz1d-cRWiUU1kcNDsBSX7h8AXEMxsq0e_Oa7E8xQBQGfHA2Ig-7m7TCMIeY5PTEaV_HrkCidhPUUUa_hLzW8GZOWz0XnJxWXYKjR7TZTgUJDni0atwNpA8HduZMzZQdY7sB8erYeUwz794mGfQ99sXbQf-w4lceRpgj0ldxuDm2Gn3yZ0PC4p49RfLJyAdMSPUotvX6Xf8vfmXwY1PkMeahz78PdDvOGJPboj5OkotrsEWHOr_MmyOfjlQ3RCY8o5-SqaLL4Q7Ed8BSMYDAgTd8RLmBhfKCV30ZoIclV53kLdxAnE_lR1HWrQfbyElErqLYWkgYlntaILGbXuLVcAsvoOgeoD8mFb8quPe3_-q4pJDQj1gSocjo9T5KhXuNAnTdjxUD2WIrcun5T3NyT-2gT6Z6BJMIMtEH5fk-pGtPBM_o68lRT4GgshPRLAyf8ncww6t0uvD-KGmLOAfLB8rTtOZz3orASTvuBAkdlxH2_KrhHttq0yAWPoJK87Yb9Ney-4V5mEUeVH3SejciX08NJFZ__zJ9aoaqkdUT05lMuLf8WSYCQoDsPYEzGORQb41b4jw2T29N_tmpY3sxLnsaygyXY-L8cnViF7Q9tQy3atauZjqzwp6JGm9OvCWxHaWOS9S4FUqRSLIQFqVp_k0PNuigysM-ZuZXZG59vJ35VAno0J_UrrCaLgDDmDbIPl1F5SkvC-nFZL3neG4BSD57Nq67l3DP6s-D_29QQ1K-V3luxsmJI7Aou6ZKs5EEu6H90tcPqBdpifRoOQLIa4GhsQ1wcjtekX9nFUsyLdE0HAWC0RlSYytCyGaED2AtokeITXlPT1PFTBZrLMb7WVL5s_SCmCYzPtgMiA2sI1JvwnfTf58_jkdfN4jnp8G9DN75EQEh7QDP5ybOUonHYJhS9DSAMw9-xGlv_zUIA2_3cge2EDM3aDqt8mKaaTPTL9K3z7gzLD4rkCRo0F5OZy7DKx541vhPNK7KL1eoi9cBVYzgpT7z_41RBaPxexKa3ocZREUa2GoQPS5QJNkbMxOaWSwkAELm2U2648v1vEDxPI8lqCb7f9LMIG7c7xhUSeyP0vXs7QePSyzqepjI3NV7H33g4LzN-24DTHiH69afur7pQapfgW-PdSCrLt6vJ1gpg2B6JbhezOWniZHkhnF4TALhxOy8JgQQQhZhW6hpzKy69LgZT0aCz93WB83BGcup2O9iMQHFd62mdiNXvkdFEomXmAK12O8IBTfxMa-YrRsmAp0ILi9m_jlNOl8MMqw7ypJcwsSUbNoKilxYELf4mP-Z8BZPifxJFb0mpVDTBjLR2ghFzz7IBUCz1zSbLXZ_pa0SMQT9JatAm2s1m5Od5aRCFDyPMmI6fpcS4hmtq28WiA-o3PI0XLf9Jw-Vz_CGCRYLlyJRBwdlE7jNtqu5fNXVNkg4hPzmXq5epAmFzXj1-nGlIvoOJyMha9E6Z235Xb9_kg7-8THP2J86WE_bSZaHymTVX8kQfj7UT8XY9wJKAeo0n68bXebqpzKBnQdogTgAdxcbRY8sIO-Z0DAxNWZRin129E2MBsVNr0XDVRcA1c208gQtNkdwbpZhQLbB6-FBzNC9VN7EWdXk2EbKrWN7qTE69ydZGIrR2gOfj922GtvwlNFMteoQw1XB-0fCNZ_3KhB-JiTPsQNdDDEw4ouV0qimPlIuULotzi2ziYyQtRU1lVuTkqWXdC3VVQkqG4iFwWBOQRunbui94ubxOaQ-UpszGMRB1SxyeN3w2CRCbVOFATGkFRflltHYbwonmCpQ9YmwkEgX8kiJyV5w86i1ZHJMMXtzXH8mEfVvPjprYu0OCue3_8haQyFwjMnHnRrS5iKd03ieK2y7y5KFAny1qIBjsU7Z3PzmRd_aCsH3x6u7MRstVuh_8RfLgf11pUrwk20hF7KJ-fOeQcEzp-quYvSYCvAlNHt-GmQ-VtCM3TKHxLSnCvXhkDKOG7hbK6krmWDgLq_5gAFFyssMFWWmKrI4OTp7AAwNVqAgYyTlqy_xs7p8fIDBQoQNEuLoKm1z-wYJy41R0tUZHaCho7HzvYAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx8rOtwyUs6Vrwwgx3-9gwj_0TKeQqdIymRzWjNa8MJmTR-a1pxX67V2By7QycfQffrH73lTOkLyGZ1Zd-Kj1rmxsEc", "raw_randomizer": "0fd19763f5682f77d81c75c6aa9317972a52644a2847f778aa31e93f599a544b", "raw_to_be_signed": "436f6d706f73697465416c676f726974686d5369676e61747572657332303235060b6086480186fa6b50090103000fd19763f5682f77d81c75c6aa9317972a52644a2847f778aa31e93f599a544b15ab5eb43417274ea7e3e40bbd0eea7394cd3c5de78b7b931f2dab08ee854148", "raw_composite_signature": "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", "raw_composite_public_key": "ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca0198131c44f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde53b46f34482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c50498e1717b7c758b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5cd8ded92a0c3fa1558810f12c7050a367708d196cd24e5af974904aed8e4ce8872e8696b0b7bca50e452cd7d30ea9a4adac0311d672c6bde8496240b07431463708895cd9bafc31632d7397649388fdafcbf7d305a3de9a495eca7433a8f83ba0f0b25c413c6e39c96eb7d691b34d37ce37f1eead1cf217e25ef34eecf3f7c60f84b8edfdde8405d4f832576c61ef98e0a2f28da187700953924f686b94614705bcf53d33fedd4348edddbdf28b5065e1f20775043e85cf931f829179363a1a7e7404a838ec00086b0976386fe637c98244757e3f769ddd4467471bfad670f9a05f8246ee50a7b1eaf87fc4069c3ae2aa2033258117792f0bcd49e083fd1bc7496abff29cc94e4868b21214ed316525399a610fbdd4a80e7c80715f29578e2a84bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b5376b5b655979984a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5c0f50ea4bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d430fb78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c9507fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130a48fd925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f23094a3cd761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722945775f264e1b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92a0d4c4ed62326e5024d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e7181bd3b459450b451a51539a715c21d67dd330eb5970db00d9edbfb2822b036fa13bafeb86d8dc78866e3f8d43e53d78cca5595a6faf886b5dc112f1cf4adcfa875800d90b48883af97316fe1506873fc157e570eacbfd222868d14234101966afb6bf9940829253a953ada89fc756b6a849f70acb9838e69faa50bba75e3e89c2adb57e86d088ab9b04a28e670709172243ec5e0008a5ceaf3f8722f487302596ffd755ad1b82a49c34b3469515b46aa290cd86ee38ea7a9be3f103610335b531cca333ddfe32b14510f4b07ef95fc6684e8c454a92c10dbb5d59c7a7c63fb305fe881967d99e669eb632840582560bb403431d40f75a4954908482278292821f4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28e8e6a4b4622650cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3563632c521f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c116389421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e64240ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb00e025d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d203eba2bbaef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242ef8d6cc24610a1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa08897083daa2ebb1775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b645b1108f0d65fec93789c053743ca14fd63d05e98b652df2b9c2ff9ce05f1940703ffb273f80e0e2732eca9960d981b4cfd3b7bb8045b3c3830546b9dd8db0dbf592d961641d2fcaddae18a8cdb7ac2728a01ac717f90e1d1f315dc29b07c1e7b7021e638508af4ecae2859c74927af35e86e03d1e587fc5e472a2f10d856b7" } Figure 1: ML-DSA-44-ES256 { "priv": "0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "4cT9Q1VAUkl8mhuxioA9ZViGLsDoySnT0ZdDr4yHkyo", "kty": "AKP", "alg": "ML-DSA-65-ES256", "pub": "QksvJn5Y1bO0TXGs_Gpla7JpUNV8YdsciAvPof6rRD8JQquL2619cIq7w1YHj22ZolInH-YsdAkeuUr7m5JkxQqIjg3-2AzV-yy9NmfmDVOevkSTAhnNT67RXbs0VaJkgCufSbzkLudVD-_91GQqVa3mk4aKRgy-wD9PyZpOMLzP-opHXlOVOWZ067galJN1h4gPbb0nvxxPWp7kPN2LDlOzt_tJxzrfvC1PjFQwNSDCm_l-Ju5X2zQtlXyJOTZSLQlCtB2C7jdyoAVwrftUXBFDkisElvgmoKlwBks23fU0tfjhwc0LVWXqhGtFQx8GGBQ-zol3e7P2EXmtIClf4KbgYq5u7Lwu848qwaItyTt7EmM2IjxVth64wHlVQruy3GXnIurcaGb_qWg764qZmteoPl5uAWwuTDX292Sa071S7GfsHFxue5lydxIYvpVUu6dyfwuExEubCovYMfz_LJd5zNTKMMatdbBJg-Qd6JPuXznqc1UYC3CccEXCLTOgg_auB6EUdG0b_cy-5bkEOHm7Wi4SDipGNig_ShzUkkot5qSqPZnd2I9IqqToi_0ep2nYLBB3ny3teW21Qpccoom3aGPt5Zl7fpzhg7Q8zsJ4sQ2SuHRCzgQ1uxYlFx21VUtHAjnFDSoMOkGyo4gH2wcLR7-z59EPPNl51pljyNefgCnMSkjrBPyz1wiET-uqi23f8Bq2TVk1jmUFxOwdfLsU7SIS30WOzvwD_gMDexUFpMlEQyL1-Y36kaTLjEWGCi2tx1FTULttQx5JpryPW6lW5oKw5RMyGpfRliYCiRyQePYqipZGoxOHpvCWhCZIN4meDY7H0RxWWQEpiyCzRQgWkOtMViwao6Jb7wZWbLNMebwLJeQJXWunk-gTEeQaMykVJobwDUiX-E_E7fSybVRTZXherY1jrvZKh8C5Gi5VADg5Vs319uN8-dVILRyOOlvjjxclmsRcn6HEvTvxd9MS7lKm2gI8BXIqhzgnTdqNGwTpmDHPV8hygqJWxWXCltBSSgY6OkGkioMAmXjZjYq_Ya9o6AE7WU_hUdm-wZmQLExwtJWEIBdDxrUxA9L9JL3weNyQtaGItPjXcheZiNBBbJTUxXwIYLnXtT1M0mHzMqGFFWXVKsN_AIdHyv4yDzY9m-tuQRfbQ_2K7r5eDOL1Tj8DZ-s8yXG74MMBqOUvlglJNgNcbuPKLRPbSDoN0E3BYkfeDgiUrXy34a5-vU-PkAWCsgAh539wJUUBxqw90V1Du7eTHFKDJEMSFYwusbPhEX4ZTwoeTHg--8Ysn4HCFWLQ00pfBCteqvMvMflcWwVfTnogcPsJb1bEFVSc3nTzhk6Ln8J-MplyS0Y5mGBEtVko_WlyeFsoDCWj4hqrgU7L-ww8vsCRSQfskH8lodiLzj0xmugiKjWUXbYq98x1zSnB9dmPy5P3UNwwMQdpebtR38N9I-jup4Bzok0-JsaOe7EORZ8ld7kAgDWa4K7BAxjc2eD540Apwxs-VLGFVkXbQgYYeDNG2tW1Xt20-XezJqZVUl6-IZXsqc7DijwNInO3fT5o8ZAcLKUUlzSlEXe8sIlHaxjLoJ-oubRtlKKUbzWOHeyxmYZSxYqQhSQj4sheedGXJEYWJ-Y5DRqB-xpy-cftxL10fdXIUhe1hWFBAoQU3b5xRY8KCytYnfLhsFF4O49xhnax3vuumLpJbCqTXpLureoKg5PvWfnpFPB0P-ZWQN35mBzqbb3ZV6U0rU55DvyXTuiZOK2Z1TxbaAd1OZMmg0cpuzewgueV-Nh_UubIqNto5RXCd7vqgqdXDUKAiWyYegYIkD4wbGMqIjxV8Oo2ggOcSj9UQPS1rD5u0rLckAzsxyty9Q5JsmKa0w8Eh7Jwe4Yob4xPVWWbJfm916avRgzDxXo5gmY7txdGFYHhlolJKdhBU9h6f0gtKEtbiUzhp4IWsqAR8riHQs7lLVEz6P537a4kL1r5FjfDf_yjJDBQmy_kdWMDqaNln-MlKK8eENjUO-qZGy0Ql4bMZtNbHXjfJUuSzapA-RqYfkqSLKgQUOW8NTDKhUk73yqCU3TQqDEKaGAoTsPscyMm7u_8QrvUK8kbc-XnxrWZ0BZJBjdinzh2w-QvjbWQ5mqFp4OMgY94__tIU8vvCUNJiYA1RdyodlfPfH5-avpxOCvBD6C7ZIDyQ-6huGEQEAb6DP8ydWIZQ8xY603DoEKKXkJWcP6CJo3nHFEdj_vcEbDQ-WESDpcQFa1fRIiGuALj-sEWcjGdSHyE8QATOcuWl4TLVzRPKAf4tCXx1zyvhJbXQu0jf0yfzVpOhPun4n-xqK4SxPBCeuJOkQ2VG9jDXWH4pnjbAcrqjveJqVti7huMXTLGuqU2uoihBw6mGqu_WSlOP2-XTEyRyvxbv2t-z9V6GPt1V9ceBukA0oGwtJqgD-q7NXFK8zhw7desI5PZMXf3nuVgbJ3xdvAlzkmm5f9RoqQS6_hqwPQEcclq1MEZ3yML5hc99TDtZWy9gGkhR0Hs3QJxxgP7bEqGFP-HjTPnJsrGaT6TjKP7qCxJlcFKLUr5AU_kxMULeUysWWtSGJ9mpxBvsyW1JuraxZ3SSYIXAV2pD29U-wpi-RrpF9EUGje3th-5QGywro6eU0ENNpl-hrV-5Jm2kyEZPSxCCriRfcSqiRdyCnjR", "priv": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "jws": "eyJhbGciOiJNTC1EU0EtNjUtRVMyNTYiLCJraWQiOiI0Y1Q5UTFWQVVrbDhtaHV4aW9BOVpWaUdMc0RveVNuVDBaZERyNHlIa3lvIn0.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4.-g7hBwk8qVgbzmN6qPbmMrBy2nbZZRP0MmUMfRvSxpwSAi7p5jIwEQCNu4IT9K9AJWZHXzc2GQ0l5iQG-1dTKxzM3Q-0Iaolk_YDHJA8ykPYWB03GvJoy1Xqw2BcMYysjVnh4IQrVxsEeTkB3OpaWiZRZ4fgqA4Q75gh01iOvWwqM8kZVG1y4Eg06SwyZZ07Mvz77tPPWiLHRYsJyaX3T8M0H3ogpo4KDLUuEG8L-lfKFYgLRG0Y31yhMpNgDDZCz9FgEudK4o6qcJm40u52ZS8i7fDGF1OQmL14v7pJdiSkxfMONV5wX_o98kiqhprPRk5D8GdxT0ZXHvRRaIhu_JHGuLl3FsQHkqYBiEEAu8PNHkCpJmiou9kAMnriHftDzL-NBQLiN7VjgmUA6jolxzxRUMEzf4Q5IqUNW93si-rBCeY1OO9KxYQwbSXhdbu5yo728WRNCuH4oN3NRbkiNKt-uN2dCgndjGa0XMG45sIdNUO4dphjmi_hhx-Ft0ZmSj6JltKm2ucAt8RV133IGabhppCYnqtKyjo09SmK5kGXms4tpqxNM4LTjZxi1nwHvDc-9_1gg_6Z9rkhHBgnJELIw-tMgs2-FNxX7bA6kayvqN_gcbR-f4OoqhpOJ2denpKJ5esX5lXLVKRy8K0TzlliO0QHM5eKAhfCD0PC2KdBT2C9La-KhDEhADMzTlUGfMfRn6_mBY66UA1-A4QVIzr6Y4-QbuPDS0nrW2ECs0by1FNZ_fpNH5ROLFhEP3a2ZI3waWak9QIlxGkGijVfy2YlOXLpsP1FQlw97NEPyinPwqSIuC32VEoApg6m3KLJrCM2HIK7AF9d_uYsM7i8gjJ4QySFZANJHf630SWufU0Hc0A7HS52cCVachbOqzPci17U2jqcHrnr9eRWjKpCtFvuRlCsRGTd0B1fJ1awMw16ZvbhXX5BjyYq-ZlWOHA3k7pVbWleYtlWReB-vwmVwbT4oHdP-h3dfPvYlMB61uI3r3radi1ChFhKYT1wlhWtJ0aDPLacqO2gN-4sYqDbW23TnJKvh8Tf8obxe1MbX-jl9sKtCMlID8r7whxvVXH_EYCAqFtRqqXR00pQzTxPnh58Unt3__qznbL4yN_YDACskeGliiBYosQg17bqSe6RWKZpYC0ATB_5VWu2mbU1kSqTkpFecrc-l4WOG1KD9QbkRBB3GOzGKABoUQXtxZzl_CZxZMqH9U7frZIZuyJStcGKZr_AfQ_7l5NQ69bHxswhjvsfzdcY84CUdFmiqx73Rb3iBn0_xaCca3zkCNBcU3AxGErXbIUgAKW7Kd8GIPwZZhD6mQcT-CJD2Dj1zzzvzxFLLXjvai0CLB6HXOs0bYVQxtXIfqpfW9oOPab-M4JEAflREEO_tpGb5ysQtsLERrRXjf1zhtRd4OMJcYlcB-k63n6qxNjIkY99xpOSTs1K2TKp9HYCgJUqxRwe3ESwAP9yImoHsRbfkZWBZ8LxLJYJiiJbCutaDcKmsieOvUvudkv5g0e5RlBYVlm7tfleMs6QNTBL5TCHKlkg7DQ8hr1yesaI312KfDrHETPRUMoOK-dkAh7Od-xBfnDsEFjgKLWOH56qQZxGMCHOdYPhq-Nzlo-nZaEiXAGKLsiFY2OGK9xwBZ8yoOG4X2thn54OuLbRtuF_O7zdqLbIaEZWziUWWpW7PSXyGt8aZraaNbnGIpprUPkRObPCroL7d8m7-5CrJKtN6XMRddpvfepL09Dz6FarRlTbMB00cwjcqwikixkU_A6usqve6SniF8WXLWUEMA_9i9iUTgII78HAU1E68E40VYgpC9DT2LB-5hu67jzlaW9iitEYxtgXnl_ych8oFiTphDRByMzVawJ7pkvrc-uMBZfxOEW62YK7dkrSRLqzUYPlUq2NLOHXZV5qpZilDbFBFj6wbluzONUl5NQF3N8LgPpP4_5vfTp0L1MI-XmNG6KjI_7RxFxBSWw3XUHbdldL4cmw4PsZlbgLgLIibONa3QWzfdMo_Dv3BW1WsTlxUyV_n50C8lhLrWVvmu32N2HQez_pEAFFhtn6OEOeZ7d8Kr8n8MzP4O8sLWQoUmjB6U9gsyO1HpEU54TH2j7DE4wd_69Rr79ebJ88zo7Z_Lv4dffULy1ogHstXldn6OCvuMm57n77ms7q89AST2HuSpWs4iKrG1bBxKdn-D9vkjC6nV-pCWzknWjMyHtTxFT7FcEVLxyWH_O09WJ_p5J_21IqkvA082OC_i15bXu63gO8a6vfd14Uc88ZIYYMyxZcC5M0fDwx6Cc8FwgZz5cEXJPzUvZf0v9NHdAQIBQoG-bK_68ccJNEVt1_jdNXHqMsnpafyjsXG0pRa2SmxhlhzkwXlSxLC0AgTXdmK6hwwmk68VeUpMmPA2F-xnbkKlXeiFM7PG37oCyvAYuOg8WdHe_HqvneyENizqzES3qTqRRSm4pKJaeNe62WfjbUm0iDc7qA7kwZineyq89SVMhmmdreDXFriEecu0Jski65R2SDya7HGMCbBTCtVczVR9DQidQWeO-_TbghhGfbUcdIv-m1z-r95iam-DQD_eJ4FNasJB8QGqS3Om3u7elPrv2J7LuAW9M9zPs4K61HOvk8YzkAAlV3A9Dt0ULqWqCoDYafZu62RY0OeuVziTOIGNR8LtfP-Mc3CLzWgQ0TIeMvZ2iba4Jp34DFIOrGCG9PNVJHaJRher1mXaxGGpDU1BlQPH531rXE6gWllgCSW5kJ5JMPAyamSXMf28UKLULi1MCNIItNFBp_bByrnOdLie6SCz-zZJPXuVk_MuAtXMPigkiGNdV6aCtXXCo_FbJw3uioA4wMPSZujqC3tQKBZxyl3-5muZBfsCElQQDABQ7rrnF0UGHBwtGd-gszeu5FzMFBBT5giUlpA4VNbNLHXISmgtHv8ImBMe1D6VK9X3-49WfTQ1p7mRR9gR24hHllTE0kyQ8_J6ojW1CcgoR_8RH9Lk6Au3hVDAJ1BcWpaL7jzYC-4BV4AMPWr4kFumezxG8-u9FwlwP6W0SYyjQ_HR73oWuNR1SqS55mtGJCuctYEVnepiGlm0GpBXUKIIM2512XLcmYrg97iJEY-coOv0wGrjc-rj6zGZvhV3JCrbdVtf-dlZLy5tVTfdEv3Z1OZixKviSQjtbAzkJ9EtVcTZJUv1r8bv1feDfXqq01z-mb0iH-jSzSfIW7NLsGciKn2YMBkxR5cxRycaDo-IutvVYgHgM70fGMZ3e0VJVi9q9K8IU6jjMSZqxWl6jNN8kM8vLsVswLzw_nQ4Axc9trFHiP_Xo0X7XqHtqVjQ_xUGQcWQbiePjzjfnAwxzZSEK54VCkDVtmPkIkCE8mYDYWayM48LhmHGYhEP7m0c2-cLBe5ys9zkn06KUdqTcffl-ubqubg_QPIcXN_x61qXYc0zAmWk9scBMiR3oLn0VlhjAZyG-1TwW5arEouUNaVPA3T0_3PoheXc8vwoGdodu6xMF3-cB1fQiZMMT6TOwrKR-YggwZHs2gIyptcwiH8_jMpCgwaThlw7z-F5b-Dka7NmAK2yYc7edqMZT9OWD62CUp6F-4Lqe8Qh6QaCaIowEx68EUYPyNlCcxa6TP3BFBQR0dzUeLfarvm9ougr11v35Zzy9OswjgO0fe5gXYT4QuSZ5queY9tWJD9OvYSA2qOn9xzxJbTEToRiLMGfYSU7Y0L5LYsnpZRTMCVu_vCWdDzo_Kp4qNU6ZheM8nBuAAKf8Lwqxgk20L8tTPPukiRdjNseMK6t9hex3dDLh5rG8NbldGsGsI_-wTOZWn7BvULU7ZXNB_U0lPez-pQWXYgLC_uIT5JOL460i43otepJy2XJkI9X7aE6RGvpHwI6coPqGwq12iBWfQmfwAgYhNDEzlD7L4DuQGIZu9d90saJ6JpFC21Gg2YL0Lvw49EzyH654fFwpC-Ff8JoITaZRyqh5bC31ufw6TYBnViuq1Z59QzR0DIY_IuNm_PXTfJaYRn0zACqJzKs0FYd2_QpM-PBTg35VM-U2322IGC3xWfJUQHZnAXYX4gEJootljHLTmnu1ocgBHVfLZ7dxSLSMmpjiLYXyjxS2znZT5pocI9g2O_bSzuaxRgazjJG_HwrGifU88-1yND5ckuyIxOGvQgyodoL63dAoOZ7E1fUIUBwc_RS31zKP6B18F6m0al0JK0COMxjvFVjKNZ9F1KvfzBu1rFeGrXfIFpo48NxT6u2YDwDc7cn6nAZfE8sfMv9JjDF32DmXWaY7Ku_8NXcm3s-DNTGHa886e-TLjBZg4paWr58tUt5dRqJbQFTT6LXabHHOn7p9cy3H8fYdDLEMF8cna0nkA_kFWExRHV3Oygg0TLlHhJUFmd5sbQ4C9zNJeyg4kW2PN0f4CGzjS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFChASGR4fu_nzDVvTr0ndl0cYMi4DuaUVyIaqN7Aw6wpmcS3SELIDnYZ4EyI_JjdblADcNUNCvjUtuOiDtlrsUQCDMPRN", "raw_randomizer": "fa0ee107093ca9581bce637aa8f6e632b072da76d96513f432650c7d1bd2c69c", "raw_to_be_signed": "436f6d706f73697465416c676f726974686d5369676e61747572657332303235060b6086480186fa6b5009010800fa0ee107093ca9581bce637aa8f6e632b072da76d96513f432650c7d1bd2c69caaff7641ad9cd7aa5fc022756f1b8b5dbd4404843ac970cfd871a441f293b34cc33bc00c1701a0ac62ac4879c018145eaa7158bb9ee052df5575e676c0dcf106", "raw_composite_signature": "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", "raw_composite_public_key": "424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f0942ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c50a888e0dfed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264802b9f49bce42ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bccffa8a475e5395396674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e53b3b7fb49c73adfbc2d4f8c54303520c29bf97e26ee57db342d957c893936522d0942b41d82ee3772a00570adfb545c1143922b0496f826a0a970064b36ddf534b5f8e1c1cd0b5565ea846b45431f0618143ece89777bb3f61179ad20295fe0a6e062ae6eecbc2ef38f2ac1a22dc93b7b126336223c55b61eb8c0795542bbb2dc65e722eadc6866ffa9683beb8a999ad7a83e5e6e016c2e4c35f6f7649ad3bd52ec67ec1c5c6e7b9972771218be9554bba7727f0b84c44b9b0a8bd831fcff2c9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355180b709c7045c22d33a083f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a4636283f4a1cd4924a2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded796db542971ca289b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb1625171db5554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963c8d79f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7cbb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c45860a2dadc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c9078f62a8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345081690eb4c562c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a3329152686f00d4897f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e5500383956cdf5f6e37cf9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177d312ee52a6da023c05722a8738274dda8d1b04e99831cf57c87282a256c565c296d0524a063a3a41a48a83009978d98d8abf61af68e8013b594fe151d9bec199902c4c70b49584201743c6b53103d2fd24bdf078dc90b5a188b4f8d772179988d0416c94d4c57c0860b9d7b53d4cd261f332a1851565d52ac37f008747cafe320f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f0367eb3cc971bbe0c301a8e52f96094936035c6ee3ca2d13db483a0dd04dc16247de0e0894ad7cb7e1ae7ebd4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c5283244312158c2eb1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b5eaaf32f31f95c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e3299724b4639986044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec907f25a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc3031076979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0aec10318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4f977b326a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734a51177bcb089476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a90852423e2c85e79d19724461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5856141028414ddbe71458f0a0b2b589df2e1b051783b8f718676b1defbae98ba496c2a935e92eeadea0a8393ef59f9e914f0743fe65640ddf9981cea6dbdd957a534ad4e790efc974ee89938ad99d53c5b680775399326834729bb37b082e795f8d87f52e6c8a8db68e515c277bbea82a7570d4280896c987a0608903e306c632a223c55f0ea3682039c4a3f5440f4b5ac3e6ed2b2dc900cecc72b72f50e49b2629ad30f0487b2707b86286f8c4f55659b25f9bdd7a6af460cc3c57a3982663bb717461581e196894929d84153d87a7f482d284b5b894ce1a78216b2a011f2b88742cee52d5133e8fe77edae242f5af91637c37ffca32430509b2fe4756303a9a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df254b92cdaa40f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a6860284ec3ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e42f8db590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4dc3a0428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f448886b802e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1d73caf8496d742ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d951bd8c35d61f8a678db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a1070ea61aabbf59294e3f6f974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900d281b0b49aa00feabb35714af33870edd7ac2393d93177f79ee5606c9df176f025ce49a6e5ff51a2a412ebf86ac0f40471c96ad4c119df230be6173df530ed656cbd8069214741ecdd0271c603fb6c4a8614ff878d33e726cac6693e938ca3fba82c4995c14a2d4af9014fe4c4c50b794cac596b52189f66a7106fb325b526eadac59dd2498217015da90f6f54fb0a62f91ae917d1141a37b7b61fb9406cb0ae8e9e53410d36997e86b57ee499b69321193d2c420ab8917dc4aa8917720a78d1" } Figure 2: ML-DSA-65-ES256 Prabel, et al. Expires 25 December 2025 [Page 17] Internet-Draft JOSE/COSE Composite Signatures June 2025 { "priv": "0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "p1MMg8xj6mCplHRRACr5Afj_-4etB4DQLeRyFOMG1cQ", "kty": "AKP", "alg": "ML-DSA-87-ES384", "pub": "5F_8jMc9uIXcZi5ioYzY44AylxF_pWWIFKmFtf8dt7Roz8gruSnx2Gt37RT1rhamU2h3LOUZEkEBBeBFaXWukf22Q7US8STV5gvWi4x-Mf4Bx7DcZa5HBQHMVlpuHfz8_RJWVDPEr-3VEYIeLpYQxFJ14oNt7jXO1p1--mcv0eQxi-9etuiX6LRRqiAt7QQrKq73envj9pkUbaIpqL2z_6SWRFln51IXv7yQSPmVZEPYcx-DPrMN4Q2slv_-fPZeoERcPjHoYB4TO-ahAHZP4xluJncmRB8xdR-_mm9YgGRPTnJ15X3isPEF5NsFXVDdHJyTT931NbjeKLDHTARJ8iLNLtC7j7x3XM7oyUBmW0D3EvT34AdQ6eHkzZz_JdGUXD6bylPM1PEu7nWBhW69aPJoRZVuPnvrdh8P51vdMb_i-gGBEzl7OHvVnWKmi4r3-iRauTLmn3eOLO79ITBPu4CZ6hPY6lfBgTGXovda4lEHW1Ha04-FNmnp1fmKNlUJiUGZOhWUhg-6cf5TDuXCn1jyl4r2iMy3Wlg4o1nBEumOJahYOsjawfhh_Vjir7pd5aUuAgkE9bQrwIdONb788-YRloR2jzbgCPBHEhd86-YnYHOB5W6q7hYcFym43lHb3kdNSMxoJJ6icWK4eZPmDITtbMZCPLNnbZ61CyyrWjoEnvExOB1iP6b7y8nbHnzAJeoEGLna0sxszU6V-izsJP7spwMYp1Fxa3IT9j7b9lpjM4NX-Dj5TsBxgiwkhRJIiFEHs9HE6SRnjHYU6hrwOBBGGfKuNylAvs-mninLtf9sPiCke-Sk90usNMEzwApqcGrMxv_T2OT71pqZcE4Sg8hQ2MWNHldTzZWHuDxMNGy5pYE3IT7BCDTGat_iu1xQGo7y7K3Rtnej3xpt64br8HIsT1Aw4g-QGN1bb8U-6iT9kre1tAJf6umW0-SP1MZQ2C261-r5NmOWmFEvJiU9LvaEfIUY6FZcyaVJXG__V83nMjiCxUp9tHCrLa-P_Sv3lPp8aS2ef71TLuzB14gOLKCzIWEovii0qfHRUfrJeAiwvZi3tDphKprIZYEr_qxvR0YCd4QLUqOwh_kWynztwPdo6ivRnqIRVfhLSgTEAArSrgWHFU1WC8Ckd6T5MpqJhN0x6x8qBePZGHAdYwz8qa9h7wiNLFWBrLRj5DmQLl1CVxnpVrjW33MFso4P8n060N4ghdKSSZsZozkNQ5b7O6yajYy-rSp6QpD8msb8oEX5imFKRaOcviQ2D4TRT45HJxKs63Tb9FtT1JoORzfkdv_E1bL3zSR6oYbTt2Stnpz-7kVqc8KR2N45EkFKxDkRw3IXOte0cq81xoU87S_ntf4KiVZaszuqb2XN2SgxnXBl4EDnpehPmqkD92SAlLrQcTaxaSe47G28K-8MwoVt4eeVkj4UEsSfJN7rbCH2yKl2XJx5huDaS0xn2ODQyNRmgk-5I9hXMUiZDNLvEzx4zuyrcu2d0oXFo3ZoUtVFNCB__TQCf2x27ej9GjLXLDAEi7qnl9Xfb94n0IfeVyGte3-j6NP3DWv8OrLiUjNTaLv6Fay1yzfUaU6LI86-Jd6ckloiGhg7kE0_hd-ZKakZxU1vh0Vzc6DW7MFAPky75iCZlDXoBpZjTNGo5HR-mCW_ozblu60U9zZA8bn-voANuu_hYwxh-uY1sHTFZOqp2xicnnMChz_GTm1Je8XCkICYegeiHUryEHA6T6B_L9gW8S_R4ptMD0Sv6b1KHqqKeubwKltCWPUsr2En9iYypnz06DEL5Wp8KMhrLid2AMPpLI0j1CWGJExXHpBWjfIC8vbYH4YKVl-euRo8eDcuKosb5hxUGM9Jvy1siVXUpIKpkZt2YLP5pEBP_EVOoHPh5LJomrLMpORr1wBKbEkfom7npX1g817bK4IeYmZELI8zXUUtUkx3LgNTckwjx90Vt6oVXpFEICIUDF_LAVMUftzz6JUvbwOZo8iAZqcnVslAmRXeY_ZPp5eEHFfHlsb8VQ73Rd_p8XlFf5R1WuWiUGp2TzJ-VQvj3BTdQfOwSxR9RUk4xjqNabLqTFcQ7As246bHJXH6XVnd4DbEIDPfNa8FaWb_DNEgQAiXGqa6n7l7aFq5_6Kp0XeBBM0sOzJt4fy8JC6U0DEcMnWxKFDtMM7q06LubQYFCEEdQ5b1Qh2LbQZ898tegmeF--EZ4F4hvYebZPV8sM0ZcsKBXyCr585qs00PRxr0S6rReekGRBIvXzMojmid3dxc6DPpdV3x5zxlxaIBxO3i_6axknSSdxnS04_bemWqQ3CLf6mpSqfTIQJT1407GB4QINAAC9Ch3AXUR_n1jr64TGWzbIr8uDcnoVCJlOgmlXpmOwubigAzJattbWRi7k4QYBnA3_4QMjt73n2Co4-F_Qh4boYLpmwWG2SwcIw2PeXGr2LY2zwkPR4bcSyx1Z6UK5trQpWlpQCxgsvV_RvGzpN22RtHoihPH74K0cBIzCz7tK-jqeuWl1A7af7KmQ66fpRBr5ykTLOsa17WblkcIB_jDvqKfEcdxhPWJUwmOo4TIQS-xH8arLOy_NQFG2m14_yxwUemXC-QxLUYi6_FIcqwPBKjCdpQtadRdyftQSKO0SP-GxUvamMZzWI780rXuOBkq5kyYLy9QF9bf_-bL6QLpe1WMCQlOeXZaCPoncgYoT0WZ17jB52Xb2lPWsyXYK54npszkbKJ4OIqfvF8xqRXcVe22VwJuqT9Uy4-4KKQgQ7TXla7Gdm2H7mKl8YXQlsGCT2Ypc8O4t0Sfw7qYAuaDGf752Hbm3fl1bupcB2huIPlIaDP6IRR9XvTYIW2flbwYfhKLmoVKnG85uUi2qtqCjPOIuU3-peT0othfmwKQXaoOqO-V4r6wPL1VHxVFtIYmEdVt0RccUOvpOVR_OAHG9uHOzTmueK5557Qxp0ojtZCHyN-hgoMZJLrvdKkTCxPNo2-mZQbHoVh2FnThZ9JbO49dB8lKXP4_MU5xAnjXMgKXtbfI8w6ZWATE_XWgf2VQMUpGp4wpy44yWQTxHxh_4T9540BGwG0FU0bkgrwA_erseGZnepqdmz5_ScCs84O5Xr5MbYhJLCGGxY6O5GqS-ooB2w0Mt87KbbE4bpYje9CAHH8FX3pDrJyLsyasA3zxmk4OmGpG7Z70ofONJtHRe56R5287vFmuazEEutXn81kNzB-3aJT1ga3vnWZw4CSvFKoWYSA7auLgrHSHFZdITfOrgtmQmGbFhM9kSBdY1UCnpzf65oos3PZWRa2twfUxxLAnPNtrxpRGyvtsapw7ljUagZmuyh3hLCjhAxYmnoE1dbyIWvpCqSlEtVjL1yb_nuLEzgvmZuV02fHxGuWgHTOMVGXpf81Rce3eoBK3lapW1wkzezlk3tcA2bZOtA9qbxdsbVR37kemzQ9K1e3Y0OWhtSjRqQmtOnSvpya53Ryy2PbQ7cZXO5g_pA-gCiwb4wjVtPLXS9zt3a7nf1VB9h9BWpkajKzgra_MfK_LbjoheW_4M89DYXaJANLwpuQ3-Xw3pYLBRkx5ugklwCgf9teGCjq", "priv": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "jws": "eyJhbGciOiJNTC1EU0EtODctRVMzODQiLCJraWQiOiJwMU1NZzh4ajZtQ3BsSFJSQUNyNUFmal8tNGV0QjREUUxlUnlGT01HMWNRIn0.SXTigJlzIGEgZGFuZ2Vyb3VzIGJ1c2luZXNzLCBGcm9kbywgZ29pbmcgb3V0IHlvdXIgZG9vci4.aOoS-NltTuvx-1JRpIYwIWBn7ALi8rwxM0TfNtOBg04u0c1EcNpb-4BPoPYQGZ7jBtDucKoVAooiRl0YgYvaqRscIC1KwMk-v-T0ZEvQ9cIa4G29SLMZZZy8aSlIW-GDhWSxLm5RLTJvygkQ2YEAWglIFvlZ9S1i336ZKOlMv_AW9HNr88HbFp2TEYG1bzfwTVZ4V5AYNyBzisD3p8DHkDCld5jwzpv0Y4KyQBH4EffcUmvMwJcowVvNax0i5ZronpGHPYpFSSrLGLTZPiFOu5Mj-X9zVWqbxi_2VRMdEC7ItDNgye5fKgKvFQ44We_avKMD2X09WWuTnVcCRqNE1i5ON-GGww4IqsvgbSy2rO9tbfzsUnR_0qPPqkhqtTY7Ls51_bxhPnC-8UTLVxfRwNOP1VGSJwQoAzIV0i4phV-UGPwVnEihCKSDgsnA5mLzHmndHJy9iWDE_DygcvhMxuL2Wo31GSLC7ljNVp8zylSBqLVCoPuYPJzubypeNFXyGWsptNdpBDy_b51rBZvApB-UL3Mng8KJsXcEj0kZAITxF5pfod5JPfJLothT2kF2h3v-LZzvsHcYCggLZu_qEAtZj7rrmkjjXAXmPDLtli5pXUs34_GcWx3Ct6SYnvWkdotnAKiHIrJKwL9MjESvumOv6OUng3vxRzq54AIKwc3TvQc868csAOO7OujKgX_k4usPdUgFliVTIVcpMk8XWtQu3xYAGBL1j9Zf6hrie-CBZjIL3ncPHPz308F1W5nCIsuVctozakKH03gi0baPoO0zlakK5kUAWGQQ8Rp4QsN0HvvCFtzjXYKvPWT7Y8vVuW6VSn1KLKpo4JtUnqQURGTqm1jc8ZN37tFQoqSgfDpKC-fChVUZvEWYlKTs3tYVLFnwGj6SfQwGyWiE3A6VsGDE_OuIrOY0RraJtCIjjGMZ1_G5BSIvUmLT1_7IHYoUW1pFe6BDrOQPtZyCNZd9GsDuWfJ2zOLYrZlo1AGMoJ4eR3aBf_6N2Y0uemPdXyvxKxNlFkYxHFQHH1_JqR3FLDP-bdnnkY_yKLerd51G8RFhV9WPecpz_-H8KxEfylgokxcSKISK7TfUSgVzQ3PYEJ8UNovFDov8wPMFLCFapgGvsUxf_ziXp7I-QexBpqwFA_4TMuDAVP3ziaxyl-zQC-MvtsQkb0nQPFRcHW7oCpHAxpG4f62d2AtlagUKzo-NnDwtPAEC8gvfzhuWIQFdnWaCK7T0QihUkTlN_ywCrGJleP9AIAAcgORio9WPjSZioB8OjTU-jFJcq51nYEVW-aNSjnhZLVTPDGDsZnbgWOvb86rjNsiDi9PD-k2anLlvCS2Ea5L-i1Ph3T6Nq-9jlof5Embw4dvF7qGRg-jOYSCq0BhCn4qHChJvfg39UVT-YYjvp0Abbod-lFaTog7X34Md5Jkpp02FC0-_U5HqcckD-ucw9YZjlblNoB-bGsGal_aLFMKUuS26S-VVRany9FV9V6-iFp4tSngiNPqB6cRkGMG2IRBwAEzFdDA3iVbL9lptUpm4kEEfVNos-fXp2Mlfaf4NHkusFIijekocybe4l4T9axe_yVXPP53VB5SkR2OWFHacCX03xjGT-F_zw871olFD1KxjoIeuXeLDJjovRVmWbKNX-666fYprXhHRNl2HQdnTs-xT7AEkLHKJ9Vn0chUv9Ff0H_xrSWfEU8SoLgPNDMvhx2_rj-9OjaYW-0sfDsHZFYEWv1h3CEenyXwkJRoLwK_oejcsg1nRrzjtC5rvg8TWBbm3mHu1zI8a6FH6yuZZ_OaXHjK3eWrgagpe-ZJQqNoW8Ater31L4g0roeO24WvS6m8HJoWje1izJ6unXKaosIJda1snyaNRIRQl9r-9-nYsEp1CmhTMilgRrpnCOyWjDsZjaqpNINntNxrWblmWf73IJ5E9L6S373E2BU0Cjro-ZibMzF8Ao7dbLimfoBgt5im6B8hFbP9fDcjMgOqOhu38bW5MYnCUIsnxYqOiroTly297SFLiR7WQdsAFoB8JKdPn3YV22eeFXOk0viFT0KqTkjWw4jaCS3l3DTJysLDtlzJklCbOPEaJnXLlWvaF_rmjB-fkY6co4QFueDpD-QlJjp9eVk3cB-Phpw1-hiOSNIrqRccQqMJ6GozwTEKAHIg2QaKmVfsZmp8TKkZP2FlZ-cVWGT1NVytlP30hc1L0kreRPHrbsPsYU-Gbw7nhw_5K4RjV21D-8whe7kbmW7E8TTAV5BXkjp4XQrB7YlcS2IZihLpQ_MaWhl13Gi7B-z_CSrZ1H4YMY-1kmdzTQGZgZL4YH3PEQehSMb8HuOhX-flOSLDGHIbDChOKSTZbWkBfjZ4Q_s16jwDHMIcsMQKFOgIpTjyf3wbEm1HVv8VpgYPwYvaYwtsJ8iLF6TV9213jZjYWMsLzRNf8cjTE0YKhiTNtz4mvmxjcDr_sdkbKRYN9M2cz0Mhyu-VZzWxKUsMadGlz4NZOCw4i0ha38JRRVAljunkDGSl99Gh8412s2Ve76FOOuRNiffu8vJMIrg--DTM2g0lryZlzxhIf9trHNR1wWe1v0VATQVRs5vIBdKIJEAF-A0e1o5ZqgZ-ywEHcKqzcIjFl3wT1mk03fHGD0qTMbNnwOgJmH5MRhuD1c1Y4tqakPI_S3ooKNYRKnGQY3SHx6Hjxeryf5uxbTiY-VGRipm2CQHg5j26ftNgaJYevLDsu233csDpXgELudozv4LUY-jilfJ7iTiYlpGYuSA17IQuRTeHWNl3H-bzHKFROhbRAIc_NGbxiVMukjdNQqADCe7OvjCx2yZr07gah1Bt8N0gILjm83jX1sIBivT8H_NrzkxzjV7nYgPKjKK6bNuw8n1jClqOYSsqSTdbCqhGIaiuhiWXwjnQS-ZhD93Ct3m5r6wYo1T4rwUd5QDwJPo1aGcCI3g2JXd4Jq5O_HRxICd-NaDXw_D2R4GlCj4RECcXIv54SfudYcli0phFOihi7U4mkNz6AHo3sidOfX1iq5mtGVfmGfdguAPOAL3FHlJhGPESmDfnqt2sJ7UHJw2cHP5xGcY4ue6sKlDx2MtruC8r6XRf1TlHEIk-BiLsBkl9GMsV9Kf9QT4ig3CBUr_v2MIxFK-iKKcK9rug9FSJMWgUEpGCuq3JuaUDHEH_AY54zYOt0Gra4rQw2r5DbMGQnGF2g9y4d58pt8LFB-qnmNrwb9RarT605Ia1s847UwZ9Cgk3evjvXQHi6-EfBILdnqnZHKj42oEIKueA-qQjhbOrWGRlPczbh-onal4QroTqo-rhftPQBAbyqB_RSyOwYAQ3gQs5ada8Eg7APmUEemlbI_HLFGEMEynzbVy-oMYZFVhLCVlp_X-SefrmyeXkdoHVCPrK2OqVn6dKi1-vZIw-bxz7qAnL6xEQsxcl-A5bXhQMzBUmG5A0OggFpwloYUNcPbXPGKWpIRaRjmdlRUahKC5iglBSkbdxoY-KE8LnzLYcZav8jG0WF6fnYFfAde5ADXA8dFVPiT7KVAp8G_C39XFs4ulyDP9NUrYuscfMLUq1Auxh2MeG-21GV4pfGWpZxO7KxjtSd9nYkPlae2gb5WZJPNuyZJXn8pWd8wl2ykcFg8dATKLuadgaNuwwoedcYC8Mn8L-lTpS95_Jp1eCqzJkhNfFX6w8g7yKVH_Ao33Ks1kxQA1SloMnuV02fxIXlm4UD-RP0cr0pX8AvUWeXNATYfQJXKqEuTIVU5SkaTt87wXmtKSHdwXqnGRi6XTgVhHKWSWrzTXeMQJIbEIqnxtZqvW0s07Y8m0eKAkmjadKDjLEY_UcYpxwBziN7vvM-2_unQPibkM3E-JAwTjWsiCIWCGhdmfozLB3TVD07fGTranFdhF2OJ2uZUjWQjnoMn63-xVYzkidR73If5ifTfMBtDX-OOzsdhsk6jm9yeUn5pC_MIrpRsCMgWSvmdmmNSJuHDDv4a21zfk7UBU_fCWZ9_ZVnadWD_PNY5Xadtan2yJXBER0OFqX1xroAJzRlBEHatkNk5C5ETSxgYCZl6Tz96usShCwyHz1m2bXEDxLA4Q_ey1YjjLhqtZNPY8kuRPi1s7pwKrpu-JnjmlbmvKJ8kA1ggwJfo_N5VchOYQAzx-7HDfYqO63cXrXv0yEmcqpOECzIFCv2UJP2RWHt2Em5paJKhoFj_kUeuq_hteAekgOipm59zOe8y8cxuoneHciItK2aUxbWrSasTY7DtowWajw40BL7tz_TD5psVnYkghyPqnONcdCmB9FWzGBkIFxZ-Mqwx2bH9ICZU7n4UTavoEhuMHv6rKuUdswMPBG11jPxr2TbW4-UgoM2LIbj4prjYW2N5uWN9TkO65pUZtvOysfeS-EEglwy3f1qu_nBXac0ATeAaOyxYf_CzHCmvZDgjV1EGalkyBZmymqDhmzZ0Ia1o5dj9IfY7qsBR37QU9Miu0lxaA-pMBN3j401eMdm5sVkQb-Q9ZHmtqy-SLLznO8X0oD8oOodmDHeA3BTtl68budNuVBXlEP8SFkWgjY0ZHLORTXw97uV-Okez8LC4efewOu7dB-7F1lxoC-slPpatwqW2KOoeas145pdjt9Etv-3LDpRh0KjBVgXbmRJoGG1BBjyqPmTuXL5UWwGo9CDQfRNJvES-pXVZ7shnBanFOrrBuNJAfWTo894I95HUjAXv2XxQKEJLrRoEB5YrY8F7p2Ag0maNtm1th1X6XzbadGKhnxCt5wVm8okt35vCUcugcSG7sFi1xszYFiCXGCwkDXg1AQsqYk0KMPoKIOHFXgFQoGINTNVfzhRYXQNwxgGyePdZRXAOJtNGNW5_m-ofjMHoPZ0AzOALwms6FR6dtLkXtcZpIfCzzTiF8S-Z7fQcU-l33P0SLcdEmHVrrKyrPW7rxS-6dF7oT-7Mb0zr83Reb6vUTgEH3y5NDX5YUA6NXkS_CncYx9aOhE7dIkJwxLutmqBRld1e5HsCpXyOpv4MuQKqu8qykDj_dOzhrusOwGKom1TZ3sJqjNZ2VGLB2urPKsS3739HtBFmx25KeWtkojz7o8p-dMokHA8x1Ae__dzPUs-HPNyKrCWLV553iDzPYPAoAOYUnbKywmo3qFiMUnHTt0RewAcpCprThCniv_bfGLKhCWuSpp06V53f8jZHyvgZ_BfLNGvo_ziUSIlwxVYFztWXPKFTzTie1WldbijIvVkqvawaMny5Ch85lJiUFXKCO8GhOXdZMMGgdW4PTI5-le849MVjmuBXpzrVdDH1XrD7Dxx_5NUB3rSgB0qYZ9pw-HlcQKnVWRHAPe4TU1ANq9KI1kOlpIrsvhlkJ1x9mXFAZ0V8_OXmuyZWXcZslNCn8iOPcCPJEfto8-Im9Q8puBr8jh-PKIRuSJcDLMrlHzCmU1N16kYHp6zkxEItIImE5ydg7EsnRixmtqc7D9rdj3sEj9QnT4ekb1BPay-sHPMZcHp4AbCQY0pc16Gker3l984I3nSkotZ_V27dE9pk9Aukbar_kr1krY3JAOv9p4sPh_-rQ6A6ONByLRIwqIGBVhiQ5Y2j5RUcaa6iUK2Sp_hZbgulCSqcXD1AgtdRfhOc93heMCxh4PDRXw_AZT6Rgca-76WldzMgbHOkeLTEbTsI9LGQ5OhphUJgv7Ot1yhBUECZZtJ4OIltXQt4QAP814VrBYS5t_ey-_QYhcuOsgc4jtFY5xJCjj9uwlGcJNSmOhpxmxifxD3-ALZ8fIgRZIn5I8aH9YWoMzx45cP9-rnVHHM1h8KAJ0dmCCsOw_iS9_vssl4cvtBnmE2ekEWmAtaiYfoVb5BnHBN2smyzq1ognbdfUNOlnkHZGHLMDDtMgyaRSQYoZopx2Pat7zY1P2mXrV3sI2EM8QURDkUSYN0HLAnNULcaKcqxkS6Hr_USWS4bTEDemXEXIE0opoIjl_k9uaqk3mO2wcVOoFhX6EQD3sag4b6V3-ZPUxIAhlMpGN-1-5SNA5GxfU-_epDKa3eZKBDG0m3NkWPLPg8L0rLwu3o1dReJLQMjOBpWKkOFxQh-vVDLQSFxl66-AI0mhiqB3ZU88bqOeZbOCXpGjF5Tyc6lxEqVVnVJdDbAQYZMTU5VXKXmMDB1e0eJShqePkXHkpzeHyEniFihsvN6xYlKzhBRYDT1ScpWFtdeH6FkpSgutf5AAAAAAAAAAAAAAUIFhwkKjNB_t3norZhrM89RwpYQoTwibJgoDM_clR4PyeFlowh_HG37-AjU_TL-51SP3SI62Zmybm_X--2xFFJE5dmHx5vN5mNh9j-MIJwOqub2nnGyl5C_8e48vUAlv67hR5ZlskU", "raw_randomizer": "68ea12f8d96d4eebf1fb5251a48630216067ec02e2f2bc313344df36d381834e", "raw_to_be_signed": "436f6d706f73697465416c676f726974686d5369676e61747572657332303235060b6086480186fa6b5009010c0068ea12f8d96d4eebf1fb5251a48630216067ec02e2f2bc313344df36d381834e231d75946b497b4e357fc0600956557acbceeae744710d8cb45dcded1d3921e9c8aeb971d04b1bee0f0ca5d5fe187b104858fb73220220bd6462d787c03b2017", "raw_composite_signature": "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", "raw_composite_public_key": "e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b468cfc82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91fdb643b512f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfcfd12565433c4afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4318bef5eb6e897e8b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ffa496445967e75217bfbc9048f9956443d8731f833eb30de10dac96fffe7cf65ea0445c3e31e8601e133be6a100764fe3196e267726441f31751fbf9a6f5880644f4e7275e57de2b0f105e4db055d50dd1c9c934fddf535b8de28b0c74c0449f222cd2ed0bb8fbc775ccee8c940665b40f712f4f7e00750e9e1e4cd9cff25d1945c3e9bca53ccd4f12eee7581856ebd68f26845956e3e7beb761f0fe75bdd31bfe2fa018113397b387bd59d62a68b8af7fa245ab932e69f778e2ceefd21304fbb8099ea13d8ea57c1813197a2f75ae251075b51dad38f853669e9d5f98a3655098941993a1594860fba71fe530ee5c29f58f2978af688ccb75a5838a359c112e98e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0874e35befcf3e6119684768f36e008f04712177cebe627607381e56eaaee161c1729b8de51dbde474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab5a3a049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c24851248885107b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff6c3e20a47be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283c850d8c58d1e5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c501a8ef2ecadd1b677a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24fd92b7b5b4025feae996d3e48fd4c650d82dbad7eaf936639698512f26253d2ef6847c8518e8565cc9a5495c6fff57cde7323882c54a7db470ab2daf8ffd2bf794fa7c692d9e7fbd532eecc1d7880e2ca0b3216128be28b4a9f1d151fac97808b0bd98b7b43a612a9ac865812bfeac6f47460277840b52a3b087f916ca7cedc0f768ea2bd19ea21155f84b4a04c4000ad2ae0587154d560bc0a477a4f9329a8984dd31eb1f2a05e3d918701d630cfca9af61ef088d2c5581acb463e439902e5d425719e956b8d6df7305b28e0ff27d3ad0de2085d292499b19a3390d4396fb3bac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe24360f84d14f8e472712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186d3b764ad9e9cfeee456a73c291d8de3912414ac43911c372173ad7b472af35c6853ced2fe7b5fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094bad07136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ceecab72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c30048bbaa797d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bbfa15acb5cb37d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c54d6f87457373a0d6ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bfa336e5bbad14f73640f1b9febe800dbaefe1630c61fae635b074c564eaa9db189c9e7302873fc64e6d497bc5c29080987a07a21d4af210703a4fa07f2fd816f12fd1e29b4c0f44afe9bd4a1eaa8a7ae6f02a5b4258f52caf6127f62632a67cf4e8310be56a7c28c86b2e277600c3e92c8d23d42586244c571e90568df202f2f6d81f860a565f9eb91a3c78372e2a8b1be61c5418cf49bf2d6c8955d4a482a9919b7660b3f9a4404ffc454ea073e1e4b2689ab2cca4e46bd7004a6c491fa26ee7a57d60f35edb2b821e6266442c8f335d452d524c772e0353724c23c7dd15b7aa155e91442022140c5fcb0153147edcf3e8952f6f0399a3c88066a72756c9409915de63f64fa797841c57c796c6fc550ef745dfe9f179457f94755ae5a2506a764f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec0b36e3a6c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb97b685ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceead3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd879b64f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f33288e689ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2d38fdb7a65aa43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05d447f9f58ebeb84c65b36c8afcb83727a1508994e826957a663b0b9b8a003325ab6d6d6462ee4e106019c0dffe10323b7bde7d82a38f85fd08786e860ba66c161b64b0708c363de5c6af62d8db3c243d1e1b712cb1d59e942b9b6b4295a5a500b182cbd5fd1bc6ce9376d91b47a2284f1fbe0ad1c048cc2cfbb4afa3a9eb9697503b69feca990eba7e9441af9ca44cb3ac6b5ed66e591c201fe30efa8a7c471dc613d6254c263a8e132104bec47f1aacb3b2fcd4051b69b5e3fcb1c147a65c2f90c4b5188bafc521cab03c12a309da50b5a7517727ed41228ed123fe1b152f6a6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff9b2fa40ba5ed5630242539e5d96823e89dc818a13d16675ee3079d976f694f5acc9760ae789e9b3391b289e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a290810ed35e56bb19d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67fbe761db9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a2e6a152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be578afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6b9e2b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe99941b1e8561d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23cc3a65601313f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d011b01b4154d1b920af003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b62124b0861b163a3b91aa4bea28076c3432df3b29b6c4e1ba588def420071fc157de90eb2722ecc9ab00df3c669383a61a91bb67bd287ce349b4745ee7a479dbceef166b9acc412eb579fcd6437307edda253d606b7be7599c38092bc52a8598480edab8b82b1d21c565d2137ceae0b6642619b16133d91205d6355029e9cdfeb9a28b373d95916b6b707d4c712c09cf36daf1a511b2bedb1aa70ee58d46a0666bb287784b0a3840c589a7a04d5d6f2216be90aa4a512d5632f5c9bfe7b8b13382f999b95d367c7c46b968074ce315197a5ff3545c7b77a804ade56a95b5c24cdece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b57b763439686d4a346a426b4e9d2be9c9ae77472cb63db43b7195cee60fe903e8028b06f8c2356d3cb5d2f73b776bb9dfd5507d87d056a646a32b382b6bf31f2bf2db8e885e5bfe0cf3d0d85da24034bc29b90dfe5f0de960b051931e6e8249700a07fdb5e1828ea" } Figure 3: ML-DSA-87-ES384 A.2. COSE Will be completed in later versions. Appendix B. Acknowledgments We thank Orie Steele for his valuable comments on this document. Authors' Addresses Lucas Prabel Huawei Email: lucas.prabel@huawei.com Sun Shuzhou Huawei Email: sunshuzhou@huawei.com John Gray Entrust Limited Email: john.gray@entrust.com Prabel, et al. Expires 25 December 2025 [Page 18]