Javascript Object Signing and Encryption L. Prabel Internet-Draft S. Sun Intended status: Standards Track Huawei Expires: 14 March 2027 J. Gray Entrust T. Reddy Nokia 10 September 2026 PQ/T Hybrid Composite Signatures for JOSE and COSE draft-ietf-jose-pq-composite-sigs-04 Abstract This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for PQ/T hybrid composite signatures. The composite algorithms described combine ML-DSA as the post-quantum component and either ECDSA or EdDSA as the traditional component. About This Document This note is to be removed before publishing as an RFC. The latest revision of this draft can be found at https://ietf-wg- jose.github.io/draft-ietf-jose-pq-composite-sigs/draft-ietf-jose-pq- composite-sigs.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-jose-pq- composite-sigs/. Discussion of this document takes place on the Javascript Object Signing and Encryption Working Group mailing list (mailto:jose@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/jose/. Subscribe at https://www.ietf.org/mailman/listinfo/jose/. Source for this draft and an issue tracker can be found at https://github.com/ietf-wg-jose/draft-ietf-jose-pq-composite-sigs. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Prabel, et al. Expires 14 March 2027 [Page 1] Internet-Draft JOSE/COSE Composite Signatures September 2026 Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 14 March 2027. Copyright Notice Copyright (c) 2026 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Conventions and Definitions . . . . . . . . . . . . . . . . . 4 3. Algorithm Key Pair (AKP) Type . . . . . . . . . . . . . . . . 5 4. Composite Signature Algorithm . . . . . . . . . . . . . . . . 5 4.1. Composite Key Generation . . . . . . . . . . . . . . . . 5 4.2. Composite Sign . . . . . . . . . . . . . . . . . . . . . 7 4.3. Composite Verify . . . . . . . . . . . . . . . . . . . . 9 4.4. Encoding Rules . . . . . . . . . . . . . . . . . . . . . 10 4.5. ECDSA Encodings . . . . . . . . . . . . . . . . . . . . . 11 4.5.1. Ecdsa-Sig-Value (Signatures) . . . . . . . . . . . . 11 4.5.2. ECPrivateKey (Private Keys) . . . . . . . . . . . . . 14 4.5.3. X9.62 Uncompressed Point (Public Keys) . . . . . . . 15 5. Composite Signature Instantiations . . . . . . . . . . . . . 15 5.1. JOSE algorithms . . . . . . . . . . . . . . . . . . . . . 15 5.2. COSE algorithms . . . . . . . . . . . . . . . . . . . . . 16 5.3. Composite Labels for JOSE and COSE . . . . . . . . . . . 17 6. Security Considerations . . . . . . . . . . . . . . . . . . . 19 6.1. Hybrid Security and Quantum Resistance . . . . . . . . . 20 6.2. Component Key Integrity and Reuse . . . . . . . . . . . . 20 6.3. Domain Separation and Non-Separability . . . . . . . . . 21 Prabel, et al. Expires 14 March 2027 [Page 2] Internet-Draft JOSE/COSE Composite Signatures September 2026 6.4. Security Objectives and Limitations . . . . . . . . . . . 21 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 22 7.1. JOSE Algorithms . . . . . . . . . . . . . . . . . . . . . 22 7.1.1. ML-DSA-44-ES256 . . . . . . . . . . . . . . . . . . . 22 7.1.2. ML-DSA-65-ES256 . . . . . . . . . . . . . . . . . . . 22 7.1.3. ML-DSA-87-ES384 . . . . . . . . . . . . . . . . . . . 22 7.1.4. ML-DSA-44-Ed25519 . . . . . . . . . . . . . . . . . . 23 7.1.5. ML-DSA-65-Ed25519 . . . . . . . . . . . . . . . . . . 23 7.1.6. ML-DSA-87-Ed448 . . . . . . . . . . . . . . . . . . . 24 7.2. COSE Algorithms . . . . . . . . . . . . . . . . . . . . . 24 7.2.1. ML-DSA-44-ES256 . . . . . . . . . . . . . . . . . . . 24 7.2.2. ML-DSA-65-ES256 . . . . . . . . . . . . . . . . . . . 24 7.2.3. ML-DSA-87-ES384 . . . . . . . . . . . . . . . . . . . 25 7.2.4. ML-DSA-44-Ed25519 . . . . . . . . . . . . . . . . . . 25 7.2.5. ML-DSA-65-Ed25519 . . . . . . . . . . . . . . . . . . 25 7.2.6. ML-DSA-87-Ed448 . . . . . . . . . . . . . . . . . . . 26 8. References . . . . . . . . . . . . . . . . . . . . . . . . . 26 8.1. Normative References . . . . . . . . . . . . . . . . . . 26 8.2. Informative References . . . . . . . . . . . . . . . . . 28 Appendix A. Examples . . . . . . . . . . . . . . . . . . . . . . 29 A.1. JOSE . . . . . . . . . . . . . . . . . . . . . . . . . . 29 A.2. COSE . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Appendix B. Acknowledgments . . . . . . . . . . . . . . . . . . 100 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 100 1. Introduction The impact of a potential Cryptographically Relevant Quantum Computer (CRQC) on algorithms whose security is based on mathematical problems such as integer factorisation or discrete logarithms over finite fields or elliptic curves raises the need for new algorithms that are perceived to be secure against CRQC as well as classical computers. Such algorithms are called post-quantum, while algorithms based on integer factorisation or discrete logarithms are called traditional. While switching from a traditional algorithm to a post-quantum one intends to strengthen the security against an adversary possessing a quantum computer, the lack of maturing time of post-quantum algorithms compared to traditional algorithms raises uncertainty about their security. Thus, the joint use of a traditional algorithm and a post-quantum algorithm in protocols represents a solution to this problem by providing security as long as at least one of the traditional or post-quantum components remains secure. Prabel, et al. Expires 14 March 2027 [Page 3] Internet-Draft JOSE/COSE Composite Signatures September 2026 This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for hybrid composite signatures. The composite algorithms described combine ML- DSA as the post-quantum component and either ECDSA or EdDSA as the traditional component. 2. Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. This document follows the terminology for post-quantum hybrid schemes defined in [I-D.draft-ietf-pquip-pqt-hybrid-terminology]. This section recalls some of this terminology, but also adds other definitions used throughout the whole document: "Asymmetric Traditional Cryptographic Algorithm": An asymmetric cryptographic algorithm based on integer factorisation, finite field discrete logarithms, elliptic curve discrete logarithms, or related mathematical problems. A related mathematical problem is one that can be solved by solving the integer factorisation, finite field discrete logarithm or elliptic curve discrete logarithm problem. Where there is little risk of confusion asymmetric traditional cryptographic algorithms can also be referred to as traditional algorithms for brevity. "Post-Quantum Algorithm": An asymmetric cryptographic algorithm that is intended to be secure against attacks using quantum computers as well as classical computers. As with all cryptography, it always remains the case that attacks, either quantum or classical, may be found against post-quantum algorithms. Therefore it should not be assumed that just because an algorithm is designed to provide post- quantum security it will not be compromised. "Post-Quantum Traditional (PQ/T) Hybrid Scheme": A multi-algorithm scheme where at least one component algorithm is a post-quantum algorithm and at least one is a traditional algorithm. "PQ/T Hybrid Digital Signature": A multi-algorithm digital signature scheme made up of two or more component digital signature algorithms where at least one is a post-quantum algorithm and at least one is a traditional algorithm. Prabel, et al. Expires 14 March 2027 [Page 4] Internet-Draft JOSE/COSE Composite Signatures September 2026 "Composite Algorithm": An algorithm which is a sequence of two component algorithms, as defined in [I-D.draft-ietf-lamps-pq-composite-sigs]. "Component Algorithm": Each cryptographic algorithm that forms part of a cryptographic scheme. 3. Algorithm Key Pair (AKP) Type This document makes use of the Algorithm Key Pair (AKP) type which is defined in [I-D.draft-ietf-cose-dilithium]. As a reminder, the AKP type is used to express public and private keys for use with algorithms. The parameters for public and private keys contain byte strings. This document makes use of the serialization routines defined in [I-D.draft-ietf-lamps-pq-composite-sigs] to obtain the byte string encodings of the composite public and private keys. The process to compute JWK Thumbprint and COSE Key Thumbprint as described in [RFC7638] and [RFC9679] is detailed in [I-D.draft-ietf-cose-dilithium]. 4. Composite Signature Algorithm The structures of the composite keys and composite signatures follow an approach similar to [I-D.draft-ietf-lamps-pq-composite-sigs]. The composite design is chosen so that composite keys and signatures can be used as a drop-in replacement in JOSE / COSE object formats. This section gives some details about their construction. 4.1. Composite Key Generation Composite public and private keys are generated by calling the key generation functions of the two component algorithms and concatenating the keys in an order given by the registered composite algorithm. Composite Public Key <- Public Key of the 1st Algorithm || Public Key of the 2nd Algorithm and Composite Private Key <- Private Key of the 1st Algorithm || Private Key of the 2nd Algorithm For the composite algorithms described in this document (ML-DSA with ECDSA or EdDSA), the Key Generation process is as follows: Prabel, et al. Expires 14 March 2027 [Page 5] Internet-Draft JOSE/COSE Composite Signatures September 2026 Composite-ML-DSA.KeyGen() -> (pk, sk) 1. Generate component keys mldsaSeed = Random(32) (mldsaPK, mldsaSK) = ML-DSA.KeyGen_internal(mldsaSeed) (tradPK, tradSK) = Trad.KeyGen() 2. Check for component key generation failure if NOT (mldsaPK, mldsaSK) or NOT (tradPK, tradSK): output "Key generation error" 3. Serialize keys into composite form pk <- SerializePublicKey(mldsaPK, tradPK) sk <- SerializePrivateKey(mldsaSeed, tradSK) 4. Output the composite public and private keys return (pk, sk) As in [I-D.draft-ietf-lamps-pq-composite-sigs], this keygen routine uses the seed-based ML-DSA.KeyGen_internal defined in Algorithm 6 of [FIPS.204]. This document makes use of the serialization routines from [I-D.draft-ietf-lamps-pq-composite-sigs] to obtain the byte string encodings of the composite public and private keys. In particular, the ECDSA keys and signature are encoded exactly as required in [I-D.draft-ietf-lamps-pq-composite-sigs]: the signature as an Ecdsa- Sig-Value [RFC3279], the private key as an ECPrivateKey [RFC5915], and the ECDSA public key uses the uncompressed X9.62 [X9.62-2005] point encoding, including the leading 0x04 byte. Section Section 4.5 gives guidance on how to encode the ECDSA keys and signature. These encodings are then used with the AKP Key Type. For more information, see the SerializePublicKey, DeserializePublicKey, SerializePrivateKey and DeserializePrivateKey algorithms from [I-D.draft-ietf-lamps-pq-composite-sigs]. For the AKP JSON Web Key Type and AKP COSE Key Type, point compression is performed for the EdDSA component, but not for the ECDSA component. In this document, as in [I-D.draft-ietf-cose-dilithium], the ML-DSA private key MUST be a 32-bytes seed. Prabel, et al. Expires 14 March 2027 [Page 6] Internet-Draft JOSE/COSE Composite Signatures September 2026 4.2. Composite Sign When signing a message M with the composite Sign algorithm, the signature combiner prepends a prefix as well as a label value specific to the composite algorithm used to bind the two component signatures to the composite algorithm and achieve weak non- separability, as defined in [I-D.draft-ietf-pquip-hybrid-signature-spectrums]. However, only the pure ML-DSA component algorithm is used internally. A composite signature's value MUST include the two signature components and the two components MUST be in the same order as the components from the corresponding signing key. A composite signature for the message M is generated by: * computing the pre-hash of the message M; * concatenating the prefix, the label, a byte 0x00 and the pre-hash; * calling the two signature component algorithms on this new message; * concatenating the two output signatures. For the composite algorithms described in this document (ML-DSA with ECDSA or EdDSA), the signature process of a message M is as follows: Prabel, et al. Expires 14 March 2027 [Page 7] Internet-Draft JOSE/COSE Composite Signatures September 2026 Composite-ML-DSA.Sign(sk, M) -> s 1. Compute the Message representative M' M' <- Prefix || Label || 0x00 || PH(M) 2. Separate the private key sk into component keys and re-generate the ML-DSA key from seed (mldsaSeed, tradSK) = DeserializePrivateKey(sk) (_, mldsaSK) = ML-DSA.KeyGen_internal(mldsaSeed) 3. Generate the two component signatures mldsaSig <- ML-DSA.Sign(mldsaSK, M', ctx=Label) tradSig <- Trad.Sign(tradSK, M') 4. If either ML-DSA.Sign() or Trad.Sign() return an error, then this process MUST return an error. if NOT mldsaSig or NOT tradSig: output "Signature generation error" 5. Output the encoded composite signature value. s <- SerializeSignatureValue(mldsaSig, tradSig) return s The serialization routines from [I-D.draft-ietf-lamps-pq-composite-sigs] are again used to obtain the byte string encoding of the composite signature. The SerializeSignatureValue routine concatenates the fixed-length ML-DSA signature value and the signature value from the traditional algorithm. For the ECDSA component, this document follows [I-D.draft-ietf-lamps-pq-composite-sigs]: the ECDSA signature is encoded as an Ecdsa-Sig-Value [RFC3279] (see Section 4.5.1).For more information, see the SerializeSignatureValue and DeserializeSignatureValue algorithms from [I-D.draft-ietf-lamps-pq-composite-sigs]. The prefix "Prefix" string is defined as in [I-D.draft-ietf-lamps-pq-composite-sigs] as the byte encoding of the string "CompositeAlgorithmSignatures2025", which in hex is 436F6D706F73697465416C676F726974686D5369676E61747572657332303235. It can be used by a traditional verifier to detect if the composite signature has been stripped apart. Prabel, et al. Expires 14 March 2027 [Page 8] Internet-Draft JOSE/COSE Composite Signatures September 2026 A signature label "Label" is defined in the same way as [I-D.draft-ietf-lamps-pq-composite-sigs]. It is specific to each composite algorithm. Additionally, the composite label is passed into the underlying ML-DSA primitive as the ctx. Signature Label values can be found in Table 7. Similarly to [I-D.draft-ietf-cose-dilithium] which indicates that the ctx parameter MUST be the empty string, the application context passed in to the composite signature algorithm MUST be the empty string. To align with the structure of the [I-D.draft-ietf-lamps-pq-composite-sigs] combiner, the byte 0x00 is appended in the message M' after the label to indicate the context has length 0. However, a second non-empty context, defined as the label, is passed down into the underlying pure ML-DSA component algorithm, to bind the Composite-ML-DSA algorithm used. Table 5 (resp. Table 6) indicates the pre-hash algorithms to use for JOSE (resp. COSE). M' is signed as a raw octet string in both JOSE and COSE. 4.3. Composite Verify The Verify algorithm MUST validate a signature only if all component signatures were successfully validated. The verification process of a signature sig is as follows: * separate the composite public key into the component public keys; * separate the composite signature into its 2 component signatures; * compute the message M' from the message M whose signature is to be verified; * verify each component signature. Prabel, et al. Expires 14 March 2027 [Page 9] Internet-Draft JOSE/COSE Composite Signatures September 2026 Composite-ML-DSA.Verify(pk, M, s) -> true or false 1. Separate the keys and signatures (mldsaPK, tradPK) <- DeserializePublicKey(pk) (mldsaSig, tradSig) <- DeserializeSignatureValue(s) If Error during deserialization, or if any of the component keys or signature values are not of the correct type or length for the given component algorithm then output "Invalid signature" and stop. 2. Compute the message representative M' M' <- Prefix || Label || 0x00 || PH(M) 3. Check each component signature individually, according to its algorithm specification. if NOT ML-DSA.Verify(mldsaPK, M', ctx=Label) output "Invalid signature" if NOT Trad.Verify(tradPK, M') output "Invalid signature" if all succeeded, then output "Valid signature" The DeserializePublicKey and DeserializeSignatureValue serialization routines from [I-D.draft-ietf-lamps-pq-composite-sigs] are used to get the component public keys and the component signatures. For ECDSA, tradSig is encoded as Ecdsa-Sig-Value described in Section 4.5.1. For more information, see the DeserializePublicKey and DeserializeSignatureValue algorithms from [I-D.draft-ietf-lamps-pq-composite-sigs]. 4.4. Encoding Rules In each combination, the byte streams of the keys and of the signatures are directly concatenated. Signature of the 1st Algorithm || Signature of the 2nd Algorithm Since all combinations presented in this document start with the ML- DSA algorithm and the key or signature sizes are fixed as defined in [FIPS.204], it is unambiguous to encode or decode a composite key or signature. Table 1 lists sizes of the three parameter sets of the ML-DSA algorithm. Prabel, et al. Expires 14 March 2027 [Page 10] Internet-Draft JOSE/COSE Composite Signatures September 2026 +===========+====================+=============+========+===========+ | Algorithm | Private Key (seed) | Private | Public | Signature | | | | Key | Key | Size | +===========+====================+=============+========+===========+ | ML-DSA-44 | 32 | 2560 | 1312 | 2420 | +-----------+--------------------+-------------+--------+-----------+ | ML-DSA-65 | 32 | 4032 | 1952 | 3309 | +-----------+--------------------+-------------+--------+-----------+ | ML-DSA-87 | 32 | 4896 | 2592 | 4627 | +-----------+--------------------+-------------+--------+-----------+ Table 1: Sizes (in bytes) of keys and signatures of ML-DSA Note that the seed is always 32 bytes, and that ML- DSA.KeyGen_internal from [FIPS.204] is called to produce the expanded private key from the seed, whose size corresponds to the sizes of the private key in the table above. 4.5. ECDSA Encodings This section describes how to construct and parse the three ECDSA encodings required by this document: the DER-encoded Ecdsa-Sig-Value [RFC3279] and ECPrivateKey [RFC5915] structures, and the X9.62 [X9.62-2005] uncompressed point encoding used for public keys. None of it requires implementers to write a general-purpose ASN.1 encoder or decoder, but implementers who already have access to a standard ASN.1/DER library MAY simply use it instead for the two DER structures. +=============+================================+=======+=======+ | Field | Encoding used in this document | P-256 | P-384 | +=============+================================+=======+=======+ | Private key | ECPrivateKey (Section 4.5.2) | 51 | 64 | +-------------+--------------------------------+-------+-------+ | Public key | X9.62 uncompressed point | 65 | 97 | | | (Section 4.5.3) | | | +-------------+--------------------------------+-------+-------+ | Signature | Ecdsa-Sig-Value | ≤ 72 | ≤ 104 | | | (Section 4.5.1) | | | +-------------+--------------------------------+-------+-------+ Table 2: Sizes (in bytes) of ECDSA keys and signatures as encoded in this document 4.5.1. Ecdsa-Sig-Value (Signatures) Ecdsa-Sig-Value is defined in Section 2.2.3 of [RFC3279] as: Prabel, et al. Expires 14 March 2027 [Page 11] Internet-Draft JOSE/COSE Composite Signatures September 2026 Ecdsa-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } r and s are the same big-endian integer values already used today by [RFC7518] and [RFC9053], where they are zero-padded to a fixed length for a given curve (32 bytes each for P-256, 48 bytes each for P-384). As integers, however, r and s can have fewer significant bytes than this fixed length whenever their leading bytes happen to be zero; Step 1 below removes this padding before re-encoding them as DER INTEGERs. Building an Ecdsa-Sig-Value from r and s takes two steps: * first, r and s are each turned independently into a DER INTEGER (Step 1); * then the two results are wrapped in a DER SEQUENCE (Step 2). Decoding simply reverses these two steps. No prior ASN.1 knowledge is assumed below. *Step 1: encode r and s as DER INTEGERs.* A DER INTEGER is written as a 0x02 tag byte, a length byte, and the value's bytes. Because a DER INTEGER is signed, an extra 0x00 byte is prepended whenever the value would otherwise be misread as negative, i.e. whenever its first byte is 0x80 or greater. Table 3 explains how to turn a raw value (r or s) into its DER encoding. Prabel, et al. Expires 14 March 2027 [Page 12] Internet-Draft JOSE/COSE Composite Signatures September 2026 +========================================+==========================+ | After removing any leading | ...then its DER encoding | | 0x00 bytes from the raw value | is | | (keeping at least 1 byte), the | | | first remaining byte is... | | +========================================+==========================+ | less than 0x80 | 0x02, then the length in | | | bytes of the trimmed | | | value, then the trimmed | | | value | +----------------------------------------+--------------------------+ | 0x80 or greater | 0x02, then the length in | | | bytes of the trimmed | | | value plus 1, then 0x00, | | | then the trimmed value | +----------------------------------------+--------------------------+ Table 3: Turning a raw value (r or s) into its DER encoding The length is always written as a single byte in this document: r, s, and their DER encodings are always well under 128 bytes, so DER's multi-byte "long form" length encoding is never needed here. For example, for P-256 (32-byte r and s): * if r starts with 4F ... (no leading zero byte, and 0x4F is less than 0x80), its DER encoding is 02 20 (0x20 = 32); * if r starts with F3 ... (no leading zero byte, and 0xF3 is greater than 0x80), its DER encoding is 02 21 00 (0x21 = 33); * if r starts with 00 07 ... (one leading zero byte to remove, and 0x07 is less than 0x80), its DER encoding is 02 1F (0x1F = 31). *Step 2: wrap r's and s's DER encodings in a SEQUENCE.* Using the two encodings produced in Step 1, the full Ecdsa-Sig-Value is simply the concatenation Ecdsa-Sig-Value <- 0x30 || length || r's DER encoding || s's DER encoding where length is a single byte equal to the combined length, in bytes, of r's and s's DER encodings from Step 1, and r's encoding always comes before s's. Prabel, et al. Expires 14 March 2027 [Page 13] Internet-Draft JOSE/COSE Composite Signatures September 2026 Continuing the example above: taking r's DER encoding from the third case (02 1F <31 bytes>, 33 bytes total) and an s whose DER encoding corresponds to the first case (02 20 <32 bytes>, 34 bytes total), the combined length is 33 + 34 = 67 = 0x43, and the full Ecdsa-Sig-Value is 30 43 (69 bytes total). *Decoding* reverses Steps 2 and 1, in that order. 4.5.2. ECPrivateKey (Private Keys) ECPrivateKey is defined in [RFC5915] as: ECPrivateKey ::= SEQUENCE { version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1), privateKey OCTET STRING, parameters [0] ECParameters {{ NamedCurve }} OPTIONAL, publicKey [1] BIT STRING OPTIONAL } Given the raw, fixed-length ECDSA private value d (curve size n: 32 bytes for P-256, 48 bytes for P-384), the ECPrivateKey is simply d inserted between two fixed byte sequences that depend only on the curve (the publicKey field is never included), as given in Table 4: +=======+======================+===================+ | Curve | Bytes before d | Bytes after d | +=======+======================+===================+ | P-256 | 30 31 02 01 01 04 20 | A0 0A 06 08 2A 86 | | | | 48 CE 3D 03 01 07 | +-------+----------------------+-------------------+ | P-384 | 30 3E 02 01 01 04 30 | A0 07 06 05 2B 81 | | | | 04 00 22 | +-------+----------------------+-------------------+ Table 4: Fixed bytes surrounding d in an ECPrivateKey, by curve For example, for P-256 (n = 32), with d = D1 D2 ...D32: 30 31 SEQUENCE (length 0x31 = 49) 02 01 01 version (INTEGER, value 1) 04 20 D1 D2 ... D32 private key (OCTET STRING) A0 0A parameters (A0: explicit tag 0) 06 08 2A 86 48 CE 3D 03 01 07 OID (OBJECT IDENTIFIER, P-256) *Decoding* reverses the same construction. Prabel, et al. Expires 14 March 2027 [Page 14] Internet-Draft JOSE/COSE Composite Signatures September 2026 4.5.3. X9.62 Uncompressed Point (Public Keys) The ECDSA public key in this document is encoded as the X9.62 [X9.62-2005] uncompressed point: ECDSA public key <- 0x04 || x || y where x and y are the same raw, fixed-length, big-endian coordinate values already used by [RFC7518] and [RFC9053] (32 bytes each for P-256, 48 bytes each for P-384). 5. Composite Signature Instantiations The ML-DSA signature scheme supports three possible parameter sets, each of which corresponding to a specific security strength. See [FIPS.204] for more considerations on that matter. The traditional signature algorithm for each combination in Table 5 and Table 6 was chosen to match the security level of the ML-DSA post-quantum component. The [FIPS.204] specification defines both pure and pre-hash modes for ML-DSA, referred to as "ML-DSA" and "HashML-DSA" respectively. This document only specifies a single mode which is similar in construction to HashML-DSA. However, because the pre-hashing is done at the composite level, only the pure ML-DSA algorithm is used as the underlying ML-DSA primitive. 5.1. JOSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in [IANA.JOSE]. +=================+=========+=================+========+===========+ |Name |First |Second Algorithm |Pre-Hash|Description| | |Algorithm| | | | +=================+=========+=================+========+===========+ |ML-DSA-44-ES256 |ML-DSA-44|ecdsa-with-SHA256|SHA256 |Composite | | | |with P-256 | |Signature | | | | | |with ML- | | | | | |DSA-44 and | | | | | |ECDSA using| | | | | |P-256 curve| | | | | |and SHA256 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-65-ES256 |ML-DSA-65|ecdsa-with-SHA256|SHA512 |Composite | | | |with P-256 | |Signature | | | | | |with ML- | Prabel, et al. Expires 14 March 2027 [Page 15] Internet-Draft JOSE/COSE Composite Signatures September 2026 | | | | |DSA-65 and | | | | | |ECDSA using| | | | | |P-256 curve| | | | | |and SHA256 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-87-ES384 |ML-DSA-87|ecdsa-with-SHA384|SHA512 |Composite | | | |with P-384 | |Signature | | | | | |with ML- | | | | | |DSA-87 and | | | | | |ECDSA using| | | | | |P-384 curve| | | | | |and SHA384 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-44-Ed25519|ML-DSA-44|Ed25519 |SHA512 |Composite | | | | | |Signature | | | | | |with ML- | | | | | |DSA-44 and | | | | | |Ed25519 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-65-Ed25519|ML-DSA-65|Ed25519 |SHA512 |Composite | | | | | |Signature | | | | | |with ML- | | | | | |DSA-65 and | | | | | |Ed25519 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-87-Ed448 |ML-DSA-87|Ed448 |SHAKE256|Composite | | | | | |Signature | | | | | |with ML- | | | | | |DSA-87 and | | | | | |Ed448 | +-----------------+---------+-----------------+--------+-----------+ Table 5: JOSE Composite Signature Algorithms for ML-DSA Examples can be found in Appendix A.1. 5.2. COSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in [IANA.COSE]. +==========+============+=========+=========+========+=============+ |Name | COSE Value |First |Second |Pre-Hash| Description | | | |Algorithm|Algorithm| | | +==========+============+=========+=========+========+=============+ |ML-DSA- | TBD |ML-DSA-44|ecdsa- |SHA256 | Composite | |44-ES256 | (request | |with- | | Signature | | | assignment | |SHA256 | | with ML- | Prabel, et al. Expires 14 March 2027 [Page 16] Internet-Draft JOSE/COSE Composite Signatures September 2026 | | -54) | |with | | DSA-44 and | | | | |P-256 | | ECDSA using | | | | | | | P-256 curve | | | | | | | and SHA256 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-65|ecdsa- |SHA512 | Composite | |65-ES256 | (request | |with- | | Signature | | | assignment | |SHA256 | | with ML- | | | -55) | |with | | DSA-65 and | | | | |P-256 | | ECDSA using | | | | | | | P-256 curve | | | | | | | and SHA256 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-87|ecdsa- |SHA512 | Composite | |87-ES384 | (request | |with- | | Signature | | | assignment | |SHA384 | | with ML- | | | -56) | |with | | DSA-87 and | | | | |P-384 | | ECDSA using | | | | | | | P-384 curve | | | | | | | and SHA384 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-44|Ed25519 |SHA512 | Composite | |44-Ed25519| (request | | | | Signature | | | assignment | | | | with ML- | | | -57) | | | | DSA-44 and | | | | | | | Ed25519 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-65|Ed25519 |SHA512 | Composite | |65-Ed25519| (request | | | | Signature | | | assignment | | | | with ML- | | | -58) | | | | DSA-65 and | | | | | | | Ed25519 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-87|Ed448 |SHAKE256| Composite | |87-Ed448 | (request | | | | Signature | | | assignment | | | | with ML- | | | -59) | | | | DSA-87 and | | | | | | | Ed448 | +----------+------------+---------+---------+--------+-------------+ Table 6: COSE Composite Signature Algorithms for ML-DSA Examples can be found in Appendix A.2. 5.3. Composite Labels for JOSE and COSE The JOSE and COSE composite label values are listed in Table 7. Prabel, et al. Expires 14 March 2027 [Page 17] Internet-Draft JOSE/COSE Composite Signatures September 2026 They are represented here as ASCII strings, but implementers MUST convert them to byte strings using the obvious ASCII conversions prior to concatenating them with other byte values, as in [I-D.draft-ietf-lamps-pq-composite-sigs]. +===================+===================================+===========+ | "alg" Header | Label (in ASCII) | Label (in | | Parameter | | Hex | | | | encoding) | +===================+===================================+===========+ | ML-DSA-44-ES256 | COMPSIG-MLDSA44-ECDSA-P256-SHA256 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 34 34 | | | | 2D 45 43 | | | | 44 53 41 | | | | 2D 50 32 | | | | 35 36 2D | | | | 53 48 41 | | | | 32 35 36 | +-------------------+-----------------------------------+-----------+ | ML-DSA-65-ES256 | COMPSIG-MLDSA65-ECDSA-P256-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 36 35 | | | | 2D 45 43 | | | | 44 53 41 | | | | 2D 50 32 | | | | 35 36 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-87-ES384 | COMPSIG-MLDSA87-ECDSA-P384-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 38 37 | | | | 2D 45 43 | | | | 44 53 41 | | | | 2D 50 33 | | | | 38 34 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-44-Ed25519 | COMPSIG-MLDSA44-Ed25519-SHA512 | 43 4F 4D | | | | 50 53 49 | Prabel, et al. Expires 14 March 2027 [Page 18] Internet-Draft JOSE/COSE Composite Signatures September 2026 | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 34 34 | | | | 2D 45 64 | | | | 32 35 35 | | | | 31 39 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-65-Ed25519 | COMPSIG-MLDSA65-Ed25519-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 36 35 | | | | 2D 45 64 | | | | 32 35 35 | | | | 31 39 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-87-Ed448 | COMPSIG-MLDSA87-Ed448-SHAKE256 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 38 37 | | | | 2D 45 64 | | | | 34 34 38 | | | | 2D 53 48 | | | | 41 4B 45 | | | | 32 35 36 | +-------------------+-----------------------------------+-----------+ Table 7: JOSE/COSE Composite Label Values 6. Security Considerations The security considerations of the component algorithms (ML-DSA, ECDSA, and EdDSA) as described in [FIPS.204], [RFC6090], and [RFC8032] apply to this document. Similarly, the security considerations relative to the JWS, JWK, and COSE structures [RFC7515], [RFC7517] and [RFC9053] apply to this document. In addition, the following considerations specific to the composite design and its use in JOSE/COSE must be taken into account. Prabel, et al. Expires 14 March 2027 [Page 19] Internet-Draft JOSE/COSE Composite Signatures September 2026 6.1. Hybrid Security and Quantum Resistance An important objective of Composite ML-DSA is to provide protection against CRQCs. Under a CRQC, traditional signature algorithms (RSA, ECDSA, and EdDSA) are vulnerable to private-key recovery, enabling attackers to forge arbitrary JWS objects or COSE_Sign/COSE_Sign1 structures and fully impersonate the signer. By requiring the successful verification of both the ML-DSA component and the traditional component, this construction ensures: * *Dual-Algorithm Security:* An adversary that compromises only one of the component algorithms cannot produce cryptographically protected JOSE/COSE objects as long as the other component remains secure. * *Impersonation Prevention:* In particular, this prevents JOSE/COSE signature spoofing and impersonation attacks even if the traditional signature component is compromised. * *EUF-CMA Security:* The scheme provides existential unforgeability under chosen-message attack (EUF-CMA) provided that at least one component algorithm is EUF-CMA secure and the pre-hash function PH is collision-resistant. This is the case for all combinations present in this document. 6.2. Component Key Integrity and Reuse To maintain the security properties of the composite scheme, strict key management is required: * *No Key Reuse:* To avoid key reuse, when generating a new composite key, the generation functions for both component algorithms MUST be executed. Moreover, compliant parties MUST NOT use, import, or export component keys that are used in other contexts, combinations, or as standalone keys. * *Certificate-Level Protection:* The integrity of the composite public key is protected through mandatory validation of the certificate header (the x5c header in JOSE per [RFC7515] or the x5chain header in COSE per [RFC9360]). Because the certificate itself is protected by a composite signature, an attacker cannot forge a fake certificate to swap a public key even if the traditional algorithm is broken. These specifications require the validation of the composite signature on the certificate itself. Prabel, et al. Expires 14 March 2027 [Page 20] Internet-Draft JOSE/COSE Composite Signatures September 2026 6.3. Domain Separation and Non-Separability This document uses a signature combiner that prepends a fixed Prefix and a specific Label to the message representative M'. * *Non-separability:* By binding the two component signatures to the specific composite algorithm, the composite scheme achieves "weak non-separability" as defined in [I-D.draft-ietf-pquip-hybrid-signature-spectrums]. * *Cross-Algorithm Prevention:* The unique label, specific to each composite algorithm, ensures that signatures cannot be removed from the composite and used in other contexts. For more information about the security properties relative to the signature combiner, the user can read [I-D.draft-ietf-lamps-pq-composite-sigs]. 6.4. Security Objectives and Limitations In JOSE/COSE, the security objective of digital signatures is to ensure that only an authorized signer can produce a valid signature over a given protected header and payload. Therefore, users should be aware of specific scenarios where Composite ML-DSA may not be appropriate: * *SUF-CMA Security:* While the construction is SUF-CMA secure against classical adversaries when paired with Ed25519 or Ed448, it is not SUF-CMA secure against quantum adversaries (who can break the traditional component). Consequently, applications for which SUF-CMA security is a strict requirement MUST NOT use Composite ML-DSA. * *Non-repudiation:* Composite ML-DSA is not suitable for use cases that require non-repudiation or signature uniqueness guarantees. In the JOSE/COSE threat model described above, existential unforgeability under chosen-message attack (EUF-CMA) is sufficient to meet the intended security goals. * *Replay Protection:* This is not handled by the signature itself but must be addressed through claims such as exp, nbf, and jti in JOSE (Section 4.1 of [RFC7519]) or the equivalent claims in COSE (Section 3 of [RFC8392]). Prabel, et al. Expires 14 March 2027 [Page 21] Internet-Draft JOSE/COSE Composite Signatures September 2026 7. IANA Considerations 7.1. JOSE Algorithms The following values of the JWS "alg" (algorithm) are requested to be added to the "JSON Web Signature and Encryption Algorithms" registry. They are represented following the registration template provided in [RFC7518]. 7.1.1. ML-DSA-44-ES256 * Algorithm Name: ML-DSA-44-ES256 * Algorithm Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Documents(s): TBD 7.1.2. ML-DSA-65-ES256 * Algorithm Name: ML-DSA-65-ES256 * Algorithm Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Documents(s): TBD 7.1.3. ML-DSA-87-ES384 * Algorithm Name: ML-DSA-87-ES384 Prabel, et al. Expires 14 March 2027 [Page 22] Internet-Draft JOSE/COSE Composite Signatures September 2026 * Algorithm Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Documents(s): TBD 7.1.4. ML-DSA-44-Ed25519 * Algorithm Name: ML-DSA-44-Ed25519 * Algorithm Description: Composite Signature with ML-DSA-44 and Ed25519 using SHA-512 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Document(s): TBD 7.1.5. ML-DSA-65-Ed25519 * Algorithm Name: ML-DSA-65-Ed25519 * Algorithm Description: Composite Signature with ML-DSA-65 and Ed25519 using SHA-512 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Document(s): TBD Prabel, et al. Expires 14 March 2027 [Page 23] Internet-Draft JOSE/COSE Composite Signatures September 2026 7.1.6. ML-DSA-87-Ed448 * Algorithm Name: ML-DSA-87-Ed448 * Algorithm Description: Composite Signature with ML-DSA-87 and Ed448 using SHAKE-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): n/a * Algorithm Analysis Document(s): TBD 7.2. COSE Algorithms The following values are requested to be added to the "COSE Algorithms" registry. They are represented following the registration template provided in [RFC9053], [RFC9054]. 7.2.1. ML-DSA-44-ES256 * Name: ML-DSA-44-ES256 * Value: TBD (request assignment -54) * Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.2. ML-DSA-65-ES256 * Name: ML-DSA-65-ES256 * Value: TBD (request assignment -55) * Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256 Prabel, et al. Expires 14 March 2027 [Page 24] Internet-Draft JOSE/COSE Composite Signatures September 2026 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.3. ML-DSA-87-ES384 * Name: ML-DSA-87-ES384 * Value: TBD (request assignment -56) * Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.4. ML-DSA-44-Ed25519 * Name: ML-DSA-44-Ed25519 * Value: TBD (request assignment -57) * Description: Composite Signature with ML-DSA-44 and Ed25519 using SHA-512 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.5. ML-DSA-65-Ed25519 * Name: ML-DSA-65-Ed25519 * Value: TBD (request assignment -58) Prabel, et al. Expires 14 March 2027 [Page 25] Internet-Draft JOSE/COSE Composite Signatures September 2026 * Description: Composite Signature with ML-DSA-65 and Ed25519 using SHA-512 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 7.2.6. ML-DSA-87-Ed448 * Name: ML-DSA-87-Ed448 * Value: TBD (request assignment -59) * Description: Composite Signature with ML-DSA-87 and Ed448 using SHAKE-256 * Capabilities: [kty] * Change Controller: IETF * Reference: n/a * Recommended: Yes 8. References 8.1. Normative References [FIPS.204] National Institute of Standards and Technology (NIST), "Module-Lattice-Based Digital Signature Standard", August 2024, . [IANA.COSE] IANA, "CBOR Object Signing and Encryption (COSE)", n.d., . [IANA.JOSE] IANA, "JSON Object Signing and Encryption (JOSE)", n.d., . Prabel, et al. Expires 14 March 2027 [Page 26] Internet-Draft JOSE/COSE Composite Signatures September 2026 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC3279] Bassham, L., Polk, W., and R. Housley, "Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 3279, DOI 10.17487/RFC3279, May 2002, . [RFC5915] Turner, S. and D. Brown, "Elliptic Curve Private Key Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010, . [RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic Curve Cryptography Algorithms", RFC 6090, DOI 10.17487/RFC6090, February 2011, . [RFC7515] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Signature (JWS)", RFC 7515, DOI 10.17487/RFC7515, May 2015, . [RFC7517] Jones, M., "JSON Web Key (JWK)", RFC 7517, DOI 10.17487/RFC7517, May 2015, . [RFC7518] Jones, M., "JSON Web Algorithms (JWA)", RFC 7518, DOI 10.17487/RFC7518, May 2015, . [RFC7638] Jones, M. and N. Sakimura, "JSON Web Key (JWK) Thumbprint", RFC 7638, DOI 10.17487/RFC7638, September 2015, . [RFC8032] Josefsson, S. and I. Liusvaara, "Edwards-Curve Digital Signature Algorithm (EdDSA)", RFC 8032, DOI 10.17487/RFC8032, January 2017, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . Prabel, et al. Expires 14 March 2027 [Page 27] Internet-Draft JOSE/COSE Composite Signatures September 2026 [RFC9679] Isobe, K., Tschofenig, H., and O. Steele, "CBOR Object Signing and Encryption (COSE) Key Thumbprint", RFC 9679, DOI 10.17487/RFC9679, December 2024, . [X9.62-2005] American National Standards Institute, "Public Key Cryptography for the Financial Services Industry: the Elliptic Curve Digital Signature Algorithm (ECDSA)", ANSI X9.62-2005, November 2005. 8.2. Informative References [I-D.draft-ietf-cose-dilithium] Prorock, M. and O. Steele, "ML-DSA for JOSE and COSE", Work in Progress, Internet-Draft, draft-ietf-cose- dilithium-11, 15 November 2025, . [I-D.draft-ietf-lamps-pq-composite-sigs] Ounsworth, M., Gray, J., Pala, M., Klaußner, J., and S. Fluhrer, "Composite Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure", Work in Progress, Internet-Draft, draft- ietf-lamps-pq-composite-sigs-19, 21 April 2026, . [I-D.draft-ietf-pquip-hybrid-signature-spectrums] Bindel, N., Hale, B., Connolly, D., and F. D, "Hybrid signature spectrums", Work in Progress, Internet-Draft, draft-ietf-pquip-hybrid-signature-spectrums-07, 20 June 2025, . [I-D.draft-ietf-pquip-pqt-hybrid-terminology] D, F., P, M., and B. Hale, "Terminology for Post-Quantum Traditional Hybrid Schemes", Work in Progress, Internet- Draft, draft-ietf-pquip-pqt-hybrid-terminology-06, 10 January 2025, . [RFC7519] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Token (JWT)", RFC 7519, DOI 10.17487/RFC7519, May 2015, . Prabel, et al. Expires 14 March 2027 [Page 28] Internet-Draft JOSE/COSE Composite Signatures September 2026 [RFC8392] Jones, M., Wahlstroem, E., Erdtman, S., and H. Tschofenig, "CBOR Web Token (CWT)", RFC 8392, DOI 10.17487/RFC8392, May 2018, . [RFC9053] Schaad, J., "CBOR Object Signing and Encryption (COSE): Initial Algorithms", RFC 9053, DOI 10.17487/RFC9053, August 2022, . [RFC9054] Schaad, J., "CBOR Object Signing and Encryption (COSE): Hash Algorithms", RFC 9054, DOI 10.17487/RFC9054, August 2022, . [RFC9360] Schaad, J., "CBOR Object Signing and Encryption (COSE): Header Parameters for Carrying and Referencing X.509 Certificates", RFC 9360, DOI 10.17487/RFC9360, February 2023, . Appendix A. Examples A.1. JOSE =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "ecdsa_d": "\ 0000000000000000000000000000000000000000000000000000000000000001", "jwk": { "kid": "bJ8aA7ZIsHYNGb4GVaIxupyHLmFNuU1jThxqAXK0Sio", "kty": "AKP", "alg": "ML-DSA-44-ES256", "pub": "unH59k4RuutY-\ pxvu24U5h8YZD2rSVtHU5qRZsoBmBMcRPgmu9VuNOVdteXi1zNIXjnqJg_GAAxepLqA0\ 0Vc3lO0bzRIKu39VFD8Lhuk8l0V-cFEJC-\ zm7UihxiQMMUEmOFxe3x1ixkKZ0jqmqP3rKryx8tSbtcXyfea64QhT6XNje2SoMP6FVi\ BDxLHBQo2dwjRls0k5a-\ XSQSu2OTOiHLoaWsLe8pQ5FLNfTDqmkrawDEdZyxr3oSWJAsHQxRjcIiVzZuvwxYy1zl\ 2STiP2vy_fTBaPemkleynQzqPg7oPCyXEE8bjnJbrfWkbNNN8438e6tHPIX4l7zTuzz9\ 8YPhLjt_d6EBdT4MldsYe-\ Y4KLyjaGHcAlTkk9oa5RhRwW89T0z_t1DSO3dvfKLUGXh8gd1BD6Fz5MfgpF5NjoafnQ\ EqDjsAAhrCXY4b-\ Y3yYJEdX4_dp3dRGdHG_rWcPmgX4JG7lCnser4f8QGnDriqiAzJYEXeS8LzUngg_0bx0\ lqv_KcyU5IaLISFO0xZSU5mmEPvdSoDnyAcV8pV44qhLtAvd29n0ehG259oRihtljTWe\ iu9V60a1N2tbZVl5mEqSK-\ 6_xZvNYA1TCdzNctvweH24unV7U3wer9XA9Q6kvJWDVJ4oKaQsKMrCSMlteBJMRxWbGK\ 7ddUq6F7GdQw-3j2M-qdJvVKm9UPjY9rc1lPgol25-oJxTu7nxGlbJUH-\ 4m5pevAN6NyZ6lfhbjWTKlxkrEKZvQXs_Yf6cpXEwpI_ZJeriq1UC1XHIpRkDwdOY9MH\ Prabel, et al. Expires 14 March 2027 [Page 29] Internet-Draft JOSE/COSE Composite Signatures September 2026 3an4RdDl2r9vGl_IwlKPNdh_5aF3jLgn7PCit1FNJAwC8fIncAXgAlgcXIpRXdfJk4bB\ iO89GGccSyDh2EgXYdpG3XvNgGWy7npuSoNTE7WIyblAk13UQuO4sdCbMIuriCdyfE73\ mvwj15xgb07RZRQtFGlFTmnFcIdZ90zDrWXDbANntv7KCKwNvoTuv64bY3HiGbj-NQ-\ U9eMylWVpvr4hrXcES8c9K3PqHWADZC0iIOvlzFv4VBoc_wVflcOrL_SIoaNFCNBAZZq\ -2v5lAgpJTqVOtqJ_HVraoSfcKy5g45p-\ qULunXj6Jwq21fobQiKubBKKOZwcJFyJD7F4ACKXOrz-\ HIvSHMCWW_9dVrRuCpJw0s0aVFbRqopDNhu446nqb4_EDYQM1tTHMozPd_jKxRRD0sH7\ 5X8ZoToxFSpLBDbtdWcenxj-\ zBf6IGWfZnmaetjKEBYJWC7QDQx1A91pJVJCEgieCkoIfTqkeQuePpIyu48g2FG3P1zj\ RF-\ kumhUTfSjo5qS0YiZQy0E1BMs6M11EvuxXRsHClLHoy5nLYI2Sj4zjVjYyxSHyPRPGGo\ 9hwB34yWxzYNtPPGiqXS_dNCpi_zRZwRY4lCGrQ-\ hYTEWIK1Dm5OlttvC4_eiQ1dv63NiGkLRJ5kJA3bICN0fzCDY-\ MBqnd1cWn8YVBijVkgtaoascjL9EywDgJdeHnXK0eeOvUxHHhXJVkNqcibn8O4RQdpVU\ 60TSA-uiu675ytIjcBHC6kTv8A8pmkj_4oypPd-F92YIJC741swkYQoeIHj8rE-\ ThcMUkF7KqC5VORbZTRp8HsZSqgiJcIPaouuxd1-\ 8Rxrid3fXkE6p8bkrysPYoxWEJgh7ZFsRCPDWX-yTeJwFN0PKFP1j0F6YtlLfK5wv-\ c4F8ZQHA_-\ yc_gODicy7KmWDZgbTP07e7gEWzw4MFRrndjbDQRrF9Hy4SxCR_i85uVjpEDydwN9gS3\ rM6D0oTlF2JjClk_jQuL-Gn-bjufrSnwPnhYrzjNXazFezsu2QGg3v1H1", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMQIBAQQgAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAGgCgYIKoZIzj0DAQc" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNDQtRVMyNTYiLCJraWQiOiJiSjhhQTdaSXNIWU5HYjRHVmFJ\ eHVweUhMbUZOdVUxalRoeHFBWEswU2lvIn0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.\ n4lG9qkiRMktRpBwUO2U_G5mP7tk1Vf7nNX_0OX398PDkz0wmqHgqLodXrVEmErocDkA\ tSusGOEK-MRIdP7mV_6vy4sjXf_U3cbyDiTu8f9j12jPxjFD7tsx--\ Ld5jLiaCcE17uiacS_w0jQaOhA68nz9Et5U16QfDNLlP9k1pKLuwMFEMoJ8yeNOIzvmu\ 3A3aZtD63-\ 8gVX3jNGngxoDcSxkrDdeIM1r6Nmvvbe_ZJaIhcYPAmyObtmF9UbSm1SqL7lYBh7kOnK\ 268DOj4cG950nKjbS84fRfymZf-yb1Slc24DOJj54PGe6KH5wdckUi-\ o2M3WjmA9VywIkMOpKIziqPC0hHe6Rc2V6uQ9c5XgdBptTxDqk8R_u5lk51hdIHk2C5p\ d_VnZEIE9kWym4MevcLcQkD6KLA-KkDmqoIOiLQA9wzy-\ C2EVTwXFKkWC7IBNKGBXHXNVA9XmNdcTNroM7RRVve2MjM9M5uECQl8l6G5Rc9zsck9P\ uicRRc097_2L6fPQ_CoHZ-MK9iu0f0-\ 5spAI60ZikKqp68pVixDFhQ8k59Mby7MTNfkEGLWzAE0XQJrpzJ8_f0IRtWCTyktvqwo\ Ptf81OrKz-MQvV2ii-\ xviKmGqOBnqcAglK_l1OQGbwBa2e1ZlCqJpo2wwtaWzO80KOnKjssuHhidEyjwJArr5a\ 8QppITZvKyVrbIWydFhznpD-\ KeqPKQUM8NhlkqI02PE9TCTmBGa_lYkLbLc5GPUJ1WooDYzG21_Okbg9kJDAnK6BqFeG\ IGEmsqVDBPO4zc9tNVm61HCycG9qTgjqN7z-\ 8rzB6pqCJT0hygSfCPi6LmHswsiOt9gWPxTgtTQGvQWir-\ htv7LRMC7aM0QDhyJVfM4z3mpx1aJn7cfPgpV1Zx3SEycfHaXYHrIsQjgKA6nFTgtBD-\ iA26967TUHKCL6RyJ_nV6Uw60eMRK1GX8YTtqst6WjGN6m9imXQL3fHwER7hg-\ Prabel, et al. Expires 14 March 2027 [Page 30] Internet-Draft JOSE/COSE Composite Signatures September 2026 9m6yyWGojunqmlYe758kC4WrkfGjigR486-GFGwIeZ-\ NaZ39cqAn0tRHySn_P6vtTLRTDwz6y_qARuEERKOIAQx340FDzRXlAqezRjW_7AUOlex\ OpJCzMDiimM3ChDKKUvf3WHejoDCNKdkxwyawOlg__4Lyy_pS4e_mIhMmHL2ALslYYAc\ IWDk2cb_XLy8KsX9nLU3Wa2swYwUJRsUlHaTBFtOL95xBVUJ-\ jMnO0oBKGTlCX1EZ6Hr90cGOJtGj0ngAbuZWJ89vCfyu14o7XbyJMJnbwsRDyJcVTVRk\ HamSdARqd5O-\ S6dNzEICSYxmBCkypBxpM4Mrv_sE4ZWwhNb8a8SOL5vr4MssTRJF_g8fwOj2rK_gLjUs\ h1Ui9qd9si5UIMaXkBvmijGMbu07cVPjsCfyV52uc5wiOCWPvKGiSnf9_jj0d7fY4m2P\ 9S1C5sPc4PC2UueRHgv-H00ZJay3Pt7az1MY6B3uMMFiUc78-\ k2pl4y1lVJNciEhwhQdm_dN2uU-\ WwNmfR_XhxiAk4zib_PIA6JhrzUb5zoSapcVUymMP4a8QUp3vb455rHvWV_V0wMY2-\ wni1rgscMTQsxrEEI3p_pAx1nojzuwc8ixkf7xBcGo3Rqrwxf6NwLa8ZTEl1KA2NMLUM\ UIN_yRAqBZ5OUKqu139qHTROOw48Eu6cBouWLAkkaVVECS7VvnyS259OYMxc4Ut0HHRa\ tE16BTIg6dFbKEiZE4kHtvm-bWNut6M7jRAF9NP-\ i50JBT5e9Rx0wxU5OFfS9lEqMvwdzdrrUdyC9M3ZLgDxK46gFbauphmSnW5pUUzN3gSD\ IJntpwO52G6QB06JJZQHwzwu2AFyLXlc4c3Be10eLVuV_oe02r5I9Zwc3SswMwPce3XT\ OzBq9P6TQYzSYc8LUQEyNPaeNrvMshZYTrYuABUOWXuWGdXQ3AA-\ hu8VeeRmBg07qA7_PZJ1l3IFS3V1CMfAPtRIdn0YG-\ JmbtKATdKb_766CdX7ccs8uOyTQSZQGDDWJGMeiRpUOOLP2bntTww3b_3xhbn77cj957\ -\ Dh95Uv_Y74MOslxI4rrEnt1R4RHOU79GTPkeV7UVRx0_5_uDad8BkFselvogGuPHLa2G\ OBRhv90OeXM6ePJ9wFBZQiLu9KEhvpR9ojGelrbhTCIAxalJ-\ eRmIvH6M5th5mSRvG8WkS5nGk0rlwYwM6ery-\ ULL3im_iBYcu9gHf1V4DcoPZ97oDcyWpxd9n9daaL0uYsCZt29AZu1rmATwUKMtQlr2J\ BETA-XKA4zHg03m7LP4bqciXiv4rQW-vvbtVUVE4o9-6qQEHn-\ tyUhxeruOzsFnRhRu0KzX77d1ywqnZ8FEwUkcr2mb6USXnYKwttkkGTpmJ-\ 07etU35rw30hlUK8pAwh-\ 3irDBvv7gBxt_P8Xw63NJimclQdhHMkaHOOU4ZtSsJ4A3x1cgLjR-0RhcdTpow8-\ pHSl5n81IgEwZc8kDcVtKKmjONh5Sjc05MErnZkSHUlVc0KewUo53ZbVmX2YW0CfQwRc\ a9dyz0zEuGa4WXIPma_QXlpQrumFJsfpYBsyUsXzOs4ZThy-yv1UZQyHNPB_Jtk-\ 2vKMyoyzxEczjXMBcb2mPGXX2UxNEsTuTyO5EB9EMaZoReodXPQ33BXXZRwFlCsEmTt7\ BXglUgnGgx4IdTE-\ ZMnohGnh7IRrwdj1vsU8z8Gf7pcucxuLgb6gCtNa9Ou93VipHkMtP2cbQaUlvDuekzTq\ a4Ha2ddDz4Ce-\ QlJw2sKZolnDKWeHnCOiLrXhKX4VXfaJyx5Lnz5_KKpZf4Aumf4cC_Dz2FW9OfuWLne6\ 2vllyet4obwlwZzQrCIPzoMMxBBkRbk7Q8H2omROIdNGSG8HPLoVaP1mCwQtOrv8yjE4\ RpoYZp0rt3zjahuDDsDbZioak8iv0kX8Z5PlObuNW3eaoTR6BsGdoV5IYW7EbNIlqteS\ 3jNqykFa4qoEXUuIH_PqFvugULnlmZfe9bkP_9wKC1T_8Cxt_2iHG-CSKgKM1pmnX1Ty\ -fgcvuu1-\ bHYv34WoBwftT5lPqZoxTY5hdfmuZLv1kbjIu1qtvDHhfvwIce3nmmb5i6ShvFWWGEoE\ FyUmNTc8P1BVdH-\ Wq7PO8PT3Fxs6Wn6Akaexsr7J3PAPPFZjeJShprLX5foCDyY6O0ZWWGhpb3SMk7LS2d3\ r7_EAAAAAAAAAAAAAAAAAABMhLUIwRQIhAOjAr07oPDkapBoyd9oaab3piy4o218uQ8H\ SFCgo51RLAiATGS0lTRzTYsDhvErZz-OVmCZRkqM126jeC_-17Mywrg", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e44517452564d794e5459694c43\ 4a72615751694f694a69536a68685154646153584e4957553548596a5248566d464a\ 654856776555684d62555a4f64565578616c526f654846425745737755326c76496e\ Prabel, et al. Expires 14 March 2027 [Page 31] Internet-Draft JOSE/COSE Composite Signatures September 2026 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534134342d45434453412d503235362d53484132353600ba96\ 70882b8315b4c583eafaeb079e0488fc557aba239ba5f9f562fea63fee52", "raw_composite_signature": "\ 9f8946f6a92244c92d46907050ed94fc6e663fbb64d557fb9cd5ffd0e5f7f7c3c393\ 3d309aa1e0a8ba1d5eb544984ae8703900b52bac18e10af8c44874fee657feafcb8b\ 235dffd4ddc6f20e24eef1ff63d768cfc63143eedb31fbe2dde632e2682704d7bba2\ 69c4bfc348d068e840ebc9f3f44b79535e907c334b94ff64d6928bbb030510ca09f3\ 278d388cef9aedc0dda66d0fadfef20557de33469e0c680dc4b192b0dd788335afa3\ 66bef6defd925a2217183c09b239bb6617d51b4a6d52a8bee560187b90e9cadbaf03\ 3a3e1c1bde749ca8db4bce1f45fca665ffb26f54a5736e033898f9e0f19ee8a1f9c1\ d724522fa8d8cdd68e603d572c0890c3a9288ce2a8f0b48477ba45cd95eae43d7395\ e0741a6d4f10ea93c47fbb9964e7585d2079360b9a5dfd59d910813d916ca6e0c7af\ 70b710903e8a2c0f8a9039aaa083a22d003dc33cbe0b61154f05c52a4582ec804d28\ 60571d735503d5e635d71336ba0ced1455bded8c8ccf4ce6e102425f25e86e5173dc\ ec724f4fba271145cd3deffd8be9f3d0fc2a0767e30af62bb47f4fb9b29008eb4662\ 90aaa9ebca558b10c5850f24e7d31bcbb31335f90418b5b3004d17409ae9cc9f3f7f\ 4211b56093ca4b6fab0a0fb5ff353ab2b3f8c42f5768a2fb1be22a61aa3819ea7008\ 252bf97539019bc016b67b56650aa269a36c30b5a5b33bcd0a3a72a3b2cb87862744\ ca3c0902baf96bc429a484d9bcac95adb216c9d161ce7a43f8a7aa3ca41433c36196\ 4a88d363c4f5309398119afe56242db2dce463d42755a8a036331b6d7f3a46e0f642\ 430272ba06a15e1881849aca950c13cee3373db4d566eb51c2c9c1bda93823a8def3\ fbcaf307aa6a0894f48728127c23e2e8b987b30b223adf6058fc5382d4d01af4168a\ bfa1b6fecb44c0bb68cd100e1c8955f338cf79a9c756899fb71f3e0a55d59c77484c\ 9c7c7697607ac8b108e0280ea715382d043fa2036ebdebb4d41ca08be91c89fe757a\ 530eb478c44ad465fc613b6ab2de968c637a9bd8a65d02f77c7c0447b860fbd9bacb\ 2586a23ba7aa69587bbe7c902e16ae47c68e2811e3cebe1851b021e67e35a677f5ca\ 809f4b511f24a7fcfeafb532d14c3c33eb2fea011b8411128e200431df8d050f3457\ 940a9ecd18d6ffb0143a57b13a9242ccc0e28a63370a10ca294bdfdd61de8e80c234\ a764c70c9ac0e960fffe0bcb2fe94b87bf98884c9872f600bb2561801c2160e4d9c6\ ff5cbcbc2ac5fd9cb53759adacc18c14251b14947693045b4e2fde71055509fa3327\ 3b4a012864e5097d4467a1ebf74706389b468f49e001bb99589f3dbc27f2bb5e28ed\ 76f224c2676f0b110f225c5535519076a649d011a9de4ef92e9d3731080926319810\ a4ca9071a4ce0caeffec138656c2135bf1af1238be6faf832cb1344917f83c7f03a3\ dab2bf80b8d4b21d548bda9df6c8b950831a5e406f9a28c631bbb4edc54f8ec09fc9\ 5e76b9ce7088e0963ef2868929dff7f8e3d1dedf6389b63fd4b50b9b0f7383c2d94b\ 9e44782ff87d346496b2dcfb7b6b3d4c63a077b8c30589473bf3e936a65e32d65549\ 35c884870850766fdd376b94f96c0d99f47f5e1c62024e3389bfcf200e8986bcd46f\ 9ce849aa5c554ca630fe1af10529def6f8e79ac7bd657f574c0c636fb09e2d6b82c7\ 0c4d0b31ac4108de9fe9031d67a23ceec1cf22c647fbc41706a3746aaf0c5fe8dc0b\ 6bc653125d4a03634c2d431420dff2440a816793942aabb5dfda874d138ec38f04bb\ a701a2e58b02491a5551024bb56f9f24b6e7d39833173852dd071d16ad135e814c88\ 3a7456ca122644e241edbe6f9b58dbade8cee344017d34ffa2e742414f97bd471d30\ c54e4e15f4bd944a8cbf077376bad47720bd33764b803c4ae3a8056daba98664a75b\ Prabel, et al. Expires 14 March 2027 [Page 32] Internet-Draft JOSE/COSE Composite Signatures September 2026 9a545333778120c8267b69c0ee761ba401d3a2496501f0cf0bb6005c8b5e57387370\ 5ed7478b56e57fa1ed36af923d6707374acc0cc0f71edd74cecc1abd3fa4d0633498\ 73c2d4404c8d3da78daef32c859613ad8b800543965ee586757437000fa1bbc55e79\ 1981834eea03bfcf649d65dc8152dd5d4231f00fb5121d9f4606f8999bb4a01374a6\ ffefae82757edc72cf2e3b24d04994060c358918c7a246950e38b3f66e7b53c30ddb\ ff7c616e7efb723f79efe0e1f7952ffd8ef830eb25c48e2bac49edd51e111ce53bf4\ 64cf91e57b515471d3fe7fb8369df01905b1e96fa201ae3c72dad86381461bfdd0e7\ 9733a78f27dc050594222eef4a121be947da2319e96b6e14c2200c5a949f9e46622f\ 1fa339b61e66491bc6f16912e671a4d2b97063033a7abcbe50b2f78a6fe205872ef6\ 01dfd55e037283d9f7ba037325a9c5df67f5d69a2f4b98b0266ddbd019bb5ae6013c\ 1428cb5096bd890444c0f97280e331e0d379bb2cfe1ba9c8978afe2b416fafbdbb55\ 515138a3dfbaa901079feb72521c5eaee3b3b059d1851bb42b35fbeddd72c2a9d9f0\ 513052472bda66fa5125e760ac2db649064e9989fb4edeb54df9af0df486550af290\ 3087ede2ac306fbfb801c6dfcff17c3adcd26299c9507611cc91a1ce394e19b52b09\ e00df1d5c80b8d1fb446171d4e9a30f3ea474a5e67f3522013065cf240dc56d28a9a\ 338d8794a3734e4c12b9d99121d495573429ec14a39dd96d5997d985b409f43045c6\ bd772cf4cc4b866b859720f99afd05e5a50aee98526c7e9601b3252c5f33ace194e1\ cbecafd54650c8734f07f26d93edaf28cca8cb3c447338d730171bda63c65d7d94c4\ d12c4ee4f23b9101f4431a66845ea1d5cf437dc15d7651c05942b04993b7b0578255\ 209c6831e0875313e64c9e88469e1ec846bc1d8f5bec53ccfc19fee972e731b8b81b\ ea00ad35af4ebbddd58a91e432d3f671b41a525bc3b9e9334ea6b81dad9d743cf809\ ef90949c36b0a6689670ca59e1e708e88bad784a5f85577da272c792e7cf9fca2a96\ 5fe00ba67f8702fc3cf6156f4e7ee58b9deeb6be59727ade286f097067342b0883f3\ a0c3310419116e4ed0f07da899138874d1921bc1cf2e855a3f5982c10b4eaeff328c\ 4e11a68619a74aeddf38da86e0c3b036d98a86a4f22bf4917f19e4f94e6ee356dde6\ a84d1e81b067685792185bb11b34896ab5e4b78cdab29056b8aa811752e207fcfa85\ bee8142e796665f7bd6e43fff70282d53ffc0b1b7fda21c6f8248a80a335a669d7d5\ 3cbe7e072fbaed7e6c762fdf85a80707ed4f994fa99a314d8e6175f9ae64bbf591b8\ c8bb5aadbc31e17efc0871ede79a66f98ba4a1bc5596184a0417252635373c3f5055\ 747f96abb3cef0f4f7171b3a5a7e8091a7b1b2bec9dcf00f3c56637894a1a6b2d7e5\ fa020f263a3b46565868696f748c93b2d2d9ddebeff1000000000000000000000000\ 000013212d423045022100e8c0af4ee83c391aa41a3277da1a69bde98b2e28db5f2e\ 43c1d2142828e7544b022013192d254d1cd362c0e1bc4ad9cfe39598265192a335db\ a8de0bffb5ecccb0ae", "raw_composite_public_key": "\ ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca0198131c44\ f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde53b46f34\ 482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c50498e1717b7c75\ 8b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5cd8ded92a0c3fa15\ 58810f12c7050a367708d196cd24e5af974904aed8e4ce8872e8696b0b7bca50e452\ cd7d30ea9a4adac0311d672c6bde8496240b07431463708895cd9bafc31632d73976\ 49388fdafcbf7d305a3de9a495eca7433a8f83ba0f0b25c413c6e39c96eb7d691b34\ d37ce37f1eead1cf217e25ef34eecf3f7c60f84b8edfdde8405d4f832576c61ef98e\ 0a2f28da187700953924f686b94614705bcf53d33fedd4348edddbdf28b5065e1f20\ 775043e85cf931f829179363a1a7e7404a838ec00086b0976386fe637c98244757e3\ f769ddd4467471bfad670f9a05f8246ee50a7b1eaf87fc4069c3ae2aa20332581177\ 92f0bcd49e083fd1bc7496abff29cc94e4868b21214ed316525399a610fbdd4a80e7\ c80715f29578e2a84bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b537\ Prabel, et al. Expires 14 March 2027 [Page 33] Internet-Draft JOSE/COSE Composite Signatures September 2026 6b5b655979984a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5\ c0f50ea4bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d\ 430fb78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950\ 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130a48f\ d925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f23094a3cd\ 761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722945775f264e1\ b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92a0d4c4ed62326e50\ 24d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e7181bd3b459450b451a5153\ 9a715c21d67dd330eb5970db00d9edbfb2822b036fa13bafeb86d8dc78866e3f8d43\ e53d78cca5595a6faf886b5dc112f1cf4adcfa875800d90b48883af97316fe150687\ 3fc157e570eacbfd222868d14234101966afb6bf9940829253a953ada89fc756b6a8\ 49f70acb9838e69faa50bba75e3e89c2adb57e86d088ab9b04a28e670709172243ec\ 5e0008a5ceaf3f8722f487302596ffd755ad1b82a49c34b3469515b46aa290cd86ee\ 38ea7a9be3f103610335b531cca333ddfe32b14510f4b07ef95fc6684e8c454a92c1\ 0dbb5d59c7a7c63fb305fe881967d99e669eb632840582560bb403431d40f75a4954\ 908482278292821f4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28\ e8e6a4b4622650cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3\ 563632c521f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c1\ 16389421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642\ 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb00e0\ 25d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d203eba2bb\ aef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242ef8d6cc24610a\ 1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa08897083daa2ebb1\ 775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b645b1108f0d65fec9378\ 9c053743ca14fd63d05e98b652df2b9c2ff9ce05f1940703ffb273f80e0e2732eca9\ 960d981b4cfd3b7bb8045b3c3830546b9dd8db0d046b17d1f2e12c4247f8bce6e563\ a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e\ 162bce33576b315ececbb6406837bf51f5" } Figure 1: ML-DSA-44-ES256 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "eddsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "5ETztyaAQkvflhmjJ6mtdwlWEb3Nr4ymcDpN8eXQ8h4", "kty": "AKP", "alg": "ML-DSA-44-Ed25519", "pub": "unH59k4RuutY-\ pxvu24U5h8YZD2rSVtHU5qRZsoBmBMcRPgmu9VuNOVdteXi1zNIXjnqJg_GAAxepLqA0\ 0Vc3lO0bzRIKu39VFD8Lhuk8l0V-cFEJC-\ zm7UihxiQMMUEmOFxe3x1ixkKZ0jqmqP3rKryx8tSbtcXyfea64QhT6XNje2SoMP6FVi\ BDxLHBQo2dwjRls0k5a-\ Prabel, et al. Expires 14 March 2027 [Page 34] Internet-Draft JOSE/COSE Composite Signatures September 2026 XSQSu2OTOiHLoaWsLe8pQ5FLNfTDqmkrawDEdZyxr3oSWJAsHQxRjcIiVzZuvwxYy1zl\ 2STiP2vy_fTBaPemkleynQzqPg7oPCyXEE8bjnJbrfWkbNNN8438e6tHPIX4l7zTuzz9\ 8YPhLjt_d6EBdT4MldsYe-\ Y4KLyjaGHcAlTkk9oa5RhRwW89T0z_t1DSO3dvfKLUGXh8gd1BD6Fz5MfgpF5NjoafnQ\ EqDjsAAhrCXY4b-\ Y3yYJEdX4_dp3dRGdHG_rWcPmgX4JG7lCnser4f8QGnDriqiAzJYEXeS8LzUngg_0bx0\ lqv_KcyU5IaLISFO0xZSU5mmEPvdSoDnyAcV8pV44qhLtAvd29n0ehG259oRihtljTWe\ iu9V60a1N2tbZVl5mEqSK-\ 6_xZvNYA1TCdzNctvweH24unV7U3wer9XA9Q6kvJWDVJ4oKaQsKMrCSMlteBJMRxWbGK\ 7ddUq6F7GdQw-3j2M-qdJvVKm9UPjY9rc1lPgol25-oJxTu7nxGlbJUH-\ 4m5pevAN6NyZ6lfhbjWTKlxkrEKZvQXs_Yf6cpXEwpI_ZJeriq1UC1XHIpRkDwdOY9MH\ 3an4RdDl2r9vGl_IwlKPNdh_5aF3jLgn7PCit1FNJAwC8fIncAXgAlgcXIpRXdfJk4bB\ iO89GGccSyDh2EgXYdpG3XvNgGWy7npuSoNTE7WIyblAk13UQuO4sdCbMIuriCdyfE73\ mvwj15xgb07RZRQtFGlFTmnFcIdZ90zDrWXDbANntv7KCKwNvoTuv64bY3HiGbj-NQ-\ U9eMylWVpvr4hrXcES8c9K3PqHWADZC0iIOvlzFv4VBoc_wVflcOrL_SIoaNFCNBAZZq\ -2v5lAgpJTqVOtqJ_HVraoSfcKy5g45p-\ qULunXj6Jwq21fobQiKubBKKOZwcJFyJD7F4ACKXOrz-\ HIvSHMCWW_9dVrRuCpJw0s0aVFbRqopDNhu446nqb4_EDYQM1tTHMozPd_jKxRRD0sH7\ 5X8ZoToxFSpLBDbtdWcenxj-\ zBf6IGWfZnmaetjKEBYJWC7QDQx1A91pJVJCEgieCkoIfTqkeQuePpIyu48g2FG3P1zj\ RF-\ kumhUTfSjo5qS0YiZQy0E1BMs6M11EvuxXRsHClLHoy5nLYI2Sj4zjVjYyxSHyPRPGGo\ 9hwB34yWxzYNtPPGiqXS_dNCpi_zRZwRY4lCGrQ-\ hYTEWIK1Dm5OlttvC4_eiQ1dv63NiGkLRJ5kJA3bICN0fzCDY-\ MBqnd1cWn8YVBijVkgtaoascjL9EywDgJdeHnXK0eeOvUxHHhXJVkNqcibn8O4RQdpVU\ 60TSA-uiu675ytIjcBHC6kTv8A8pmkj_4oypPd-F92YIJC741swkYQoeIHj8rE-\ ThcMUkF7KqC5VORbZTRp8HsZSqgiJcIPaouuxd1-\ 8Rxrid3fXkE6p8bkrysPYoxWEJgh7ZFsRCPDWX-yTeJwFN0PKFP1j0F6YtlLfK5wv-\ c4F8ZQHA_-\ yc_gODicy7KmWDZgbTP07e7gEWzw4MFRrndjbDTtqJ7zOtqQtYqOo0CpvDXNlMhV3HeJ\ DpjrASKGLWdop", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAA" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNDQtRWQyNTUxOSIsImtpZCI6IjVFVHp0eWFBUWt2ZmxobWpK\ Nm10ZHdsV0ViM05yNHltY0RwTjhlWFE4aDQifQ.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.L3S6eNjOhnuAx2SP0Zp8r6E8X2VNKS0iD_IZ_-nD7xpyZWiEg8-\ JLmJZuTwzTyporvUbesjsOSuKfDnquFsv0sDYoOmUSdUtz-\ pS3FrwndyWR_DPZRUODOixq0APbdE4oZPNn3Sw75KOR2wxF9MZHpZ1xkeoJvXJxpdgvW\ AQf06pUuqDbLHRH1OYXZ1qzs2X0QoPl0wlLUhDybARURIycC509igSoMaXdDig8SB0HO\ 6bKWgH0Fjz4MKRm5d18JAwi2BHh5QuRV1QN2V_sNl-lJGvS49x8b-\ 5DKEpsUa26gUSd72i7QbIBKclIFHyEtgvZjo-\ 4Ik3Rehdb5rYgNxtR6s4nVmgm2c_LaQKHPWQvI29NAijhS41djZ0LCslJ6-iMyu-\ rv0bIUiLyYEH8y_huCyx7U3AHSkp4bqk-6xsaQhZSjeiUaEo-Ub22M4x8vCUE-e-\ h3THiPGKhzRdBbHqKIOR1bdNhcNLbJL42ueUEJhjonVhC4k9Z0a65t782nrSEePAvVBE\ Prabel, et al. Expires 14 March 2027 [Page 35] Internet-Draft JOSE/COSE Composite Signatures September 2026 K25ouKOW9vCH_mZTUGEJ8708RvzlxZ_8Zi5bhTrecEB5cnWxdCNTBYQTkPzOoCJpq4xg\ Z_Z2Qa5rQIBDFArHIFvtijsu-\ yGCEbD6BPV8ThNDrslzDeVyDsYDANdUfJZ6NPPqn_5jUwKhqz1L0EtdPz9FMDPktVnQ_\ TxGsBLjawGNLzP64-gqC8A9CBsCsx9znJ1x_GNRjnRFwAVK4ZBA3U-\ FvE_SPiqX0MjeFbCpQwAH4GFef3pk6gO74AfRK_h0ZFXmEWGwv6FIIpfGL4yJC28ocQW\ 0dGNrC0EAldUGNkU6HeKvxwiG5nXxRwAghr_QO-\ YfoLHDQNTR1FOzCk6xTnW26muqFJJef0Y3nLd08uHcoWkNaaDkGWM0FHXJGJCVvLIy04\ WbUR1kV_id5rArx6u1M8L9-yFJEo77SDNo8ba4txgfxd-kvRje5a3HUhAJInOvvbUfMR\ -gW-\ 80wuTaZKjYqRY3l2Cq1mAFbTWdRJTwm04gpfRwkKldnrvOxPwf8w3r2ATolVEZ7vZGcw\ 6BJAlgC0s3vTDY9gUXZi4O8fLptafKbqE8a4Oa5a3Td-\ A0n7h5LKOEI44ZqEXI8zEtADENoFVivJvxGnEHoXKulxEagQH5R2Z4b79oG4B0HCMpT3\ GLEFCzuVlviHOXncKclnftHBJuXbm9Sn8UVgltcdn8-\ iYaYFuBBUubtC8D0uIGPu48_2BTtHZxU8A-ovZHw6itQZpt-\ X_AM8swuqOHsHr4c4TiMhfDXjA-\ sVqJLmlJ86KwB1TgooAwjTyMFXD0kKuaIK57pz3GEZ8VS5jBY_4GvXEbdGM9JOMBbaP7\ yg1sIKqb7XsKvww9_IIGWS-i3rTR4SKpuXMHWeSDYrqvyy5Onr0LZ7e2ocl-\ CWyj7hXl0wWMLU8lo4n5P7wi8mYy5MjKM_W0mqiVvh4rVipeIyfRXaBJxf3hJCUPMBDP\ BUHDvWHl1FiXjbD-N-\ srP7ZXwArDe8elbnayfcGly_y4IkeWIfD_2a5QWerOG7JNfmT5KKw3XjT_2c3Ye6EUOH\ voGMijyGivsDyo7tp_Z73G4fQRpZmkkJtDrZpbdnF94oZ_ugfMniDPNmXQdXFw3Um3ZZ\ KbRsAbu-q393lbspBIfRWcsYHAc0HCd87EI8ujLH-PmMJHq4N-\ NOCjrVDthqvFg4Kp3v6p9kay0yDbqOfGqCrHR3Q681d3e5iL9JjXf2IkfauUxEyWRKSR\ ia0E0-\ KlFZxu8_jZlb8mo5UfjmqHVFEpLa8RQwCa6qTPz5XeXSs08SsyuSRbV8Kn7oiJ7Dbs8s\ swxjWoLVpSXJH3GH_byRe28-\ nJpKffDEEnP_qH2hr0wZ08sEFg1Xv6FBQXnEfP0Zv4HlnkMYFbPh1vQuJ7Bd_IMCfn1H\ DdUNj8CLpBA10R4fnaQvNB4y0ZAYuIhddbXGP2aEd_38LrsQEI-\ MfQ7CYa6wZHGW0pBcWYdT7CWRTe-nYl5iIaWUY1oZdNa5W-\ xvdTlFjonUKLpvY0TzgViSP3asHH034y4jrg0CCxRJ-\ OMleumOrYpHCV_i0gdvQtjX8PWr2D9XChVmS6_tBjwU5Zfoivw-\ pzhtWoWa8VtIrJxd3gTNjPzdbMj9Pp2mJ11xz0HBNTOnooHePSDzccLU3VhV9mvQv-\ NnM5tuKQRK4DYat3p9YalUvcDbkQ_XQygC9pUUPq9Qq24ULiwNgT4U_WewYOUYT-\ oQzJJ5RRV6DFK8cjIxHZ0yXEKgPHxg14RGdM9miAtRuGRSdgClMTWdPWI2VIJ5U4I0ae\ NxefyIn2D2nI1__0sZs3UZCc2SIR-JrrslZGTIGrRfuskvTsfSRU-\ proiOHEOUAf0vneok67e3zXTdfimw7vBeeHPQ4aKmwB8s57_Z6yVnsP1mbEzBvixIEIB\ T2UZiKr-nLiWYR1zeMqXm8QSuT_PX7y5sce7QQD1m9cBCZbDh2GEeje3NiZ2-\ Zx_gbn_zAnPrYF-GDGhxyHd3nlDk63CPo5hsKC-gBC2t_fQTHkEmHu2EqtUlF_d3-\ N_eqoIhlf03pKTElx0rM8t6vqLoQQIbKu0Xr1ud2CqhCqZHmkddccuxlpVLh0XksjNfj\ T1shuan5Nm9zEgMgaEgOGEZTvsiRts8NLfG0k07GO3yVLZgJkVd-\ LhCkw0b9Q13nAcUvh_nAYaO-1-eb2u-Z3btPzEuMBKmcxgnnXgPY5o4YRo-\ DvpyD1vCBOwuq7aM9pCMrccav-4dXPLbq-nllTg1Seb7J-Tu-\ UEtXYVjAg8wkCHlO69amvH6EU_vYgUguMwgtvSKqLrclROnyX1H9yUXStrcJbgVHOSGX\ NIqd813Pr6topyt70Q5NQidZeNtlMxmGBOKk-zzxcI8rRy9r97kZfARqvRwa5tWcj-\ QETqlMs9v7qunVT52beMbhwUc9e_2DYsi_pecqA7edI5px-\ 1oEdCG4acAr8zNrmF1sl5Wlf-\ 3qqyrJtZJay3OhB18JfPm8HFduLiMIbeaQuZkekC6jP3fKtAzGvoUrulFiJH3Rso2Kad\ PAa4_Oyq9dgpT68xpdGxt9DIOh9NVVecTCeKVgdUoTD4IlhgBi9X3o-\ Prabel, et al. Expires 14 March 2027 [Page 36] Internet-Draft JOSE/COSE Composite Signatures September 2026 jwVm3G0eJV58lpmxyt_sAQojNzo8PVNVV2aKjLjA0dvnGBseISc2Um90jJGSpKbG09_m\ 5_8DDxAfMDRMXXSEio-t0dLn6u37AAAAAAAAAAAAAAAAAAocMEPWJ-\ y89hTR1K6ThF8y_33BiCQVCbFU3yyxLkHDq10EPu7QkZOBEDgWuExsrjwdsxRkrUhMym\ G3qs6uCiUjItUP", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e445174525751794e5455784f53\ 4973496d74705a434936496a56465648703065574642555774325a6d786f6257704b\ 4e6d31305a486473563056694d3035794e486c7459305277546a686c574645346144\ 516966512e5358516e6379426849475268626d646c636d39316379426964584e7062\ 6d567a63797767526e4a765a473873494764766157356e4947393164434235623356\ 794947527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534134342d456432353531392d53484135313200d23794746d\ 85892c086d70a49905c7e9e4012755204e01da3af1d4d17743a448ec42685a47c891\ 3bde2cf7eb4deb3e41aee03802d6bb889ebf61177aff41cbab", "raw_composite_signature": "\ 2f74ba78d8ce867b80c7648fd19a7cafa13c5f654d292d220ff219ffe9c3ef1a7265\ 688483cf892e6259b93c334f2a68aef51b7ac8ec392b8a7c39eab85b2fd2c0d8a0e9\ 9449d52dcfea52dc5af09ddc9647f0cf65150e0ce8b1ab400f6dd138a193cd9f74b0\ ef928e476c3117d3191e9675c647a826f5c9c69760bd60107f4ea952ea836cb1d11f\ 53985d9d6acecd97d10a0f974c252d4843c9b011511232702e74f62812a0c6977438\ a0f120741cee9b296807d058f3e0c2919b9775f090308b604787942e455d5037657f\ b0d97e9491af4b8f71f1bfb90ca129b146b6ea051277bda2ed06c804a7252051f212\ d82f663a3ee0893745e85d6f9ad880dc6d47ab389d59a09b673f2da40a1cf590bc8d\ bd3408a3852e357636742c2b2527afa2332bbeaefd1b21488bc98107f32fe1b82cb1\ ed4dc01d2929e1baa4fbac6c6908594a37a251a128f946f6d8ce31f2f09413e7be87\ 74c788f18a87345d05b1ea288391d5b74d85c34b6c92f8dae794109863a275610b89\ 3d6746bae6defcda7ad211e3c0bd50442b6e68b8a396f6f087fe6653506109f3bd3c\ 46fce5c59ffc662e5b853ade7040797275b174235305841390fccea02269ab8c6067\ f67641ae6b408043140ac7205bed8a3b2efb218211b0fa04f57c4e1343aec9730de5\ 720ec60300d7547c967a34f3ea9ffe635302a1ab3d4bd04b5d3f3f453033e4b559d0\ fd3c46b012e36b018d2f33fae3e82a0bc03d081b02b31f739c9d71fc63518e7445c0\ 054ae19040dd4f85bc4fd23e2a97d0c8de15b0a9430007e0615e7f7a64ea03bbe007\ d12bf8746455e61161b0bfa1482297c62f8c890b6f287105b474636b0b410095d506\ 36453a1de2afc70886e675f147002086bfd03be61fa0b1c340d4d1d453b30a4eb14e\ 75b6ea6baa14925e7f46379cb774f2e1dca1690d69a0e41963341475c9189095bcb2\ 32d3859b511d6457f89de6b02bc7abb533c2fdfb2149128efb483368f1b6b8b7181f\ c5dfa4bd18dee5adc75210092273afbdb51f311fa05bef34c2e4da64a8d8a9163797\ 60aad660056d359d4494f09b4e20a5f47090a95d9ebbcec4fc1ff30debd804e89551\ 19eef646730e812409600b4b37bd30d8f60517662e0ef1f2e9b5a7ca6ea13c6b839a\ e5add377e0349fb8792ca384238e19a845c8f3312d00310da05562bc9bf11a7107a1\ 72ae97111a8101f94766786fbf681b80741c23294f718b1050b3b9596f8873979dc2\ 9c9677ed1c126e5db9bd4a7f1456096d71d9fcfa261a605b81054b9bb42f03d2e206\ 3eee3cff6053b4767153c03ea2f647c3a8ad419a6df97fc033cb30baa387b07af873\ 84e23217c35e303eb15a892e6949f3a2b00754e0a280308d3c8c1570f490ab9a20ae\ 7ba73dc6119f154b98c163fe06bd711b74633d24e3016da3fbca0d6c20aa9bed7b0a\ bf0c3dfc8206592fa2deb4d1e122a9b9730759e48362baafcb2e4e9ebd0b67b7b6a1\ Prabel, et al. Expires 14 March 2027 [Page 37] Internet-Draft JOSE/COSE Composite Signatures September 2026 c97e096ca3ee15e5d3058c2d4f25a389f93fbc22f26632e4c8ca33f5b49aa895be1e\ 2b562a5e2327d15da049c5fde124250f3010cf0541c3bd61e5d458978db0fe37eb2b\ 3fb657c00ac37bc7a56e76b27dc1a5cbfcb822479621f0ffd9ae5059eace1bb24d7e\ 64f928ac375e34ffd9cdd87ba114387be818c8a3c868afb03ca8eeda7f67bdc6e1f4\ 11a599a4909b43ad9a5b76717de2867fba07cc9e20cf3665d0757170dd49b765929b\ 46c01bbbeab7f7795bb290487d159cb181c07341c277cec423cba32c7f8f98c247ab\ 837e34e0a3ad50ed86abc58382a9defea9f646b2d320dba8e7c6a82ac747743af357\ 777b988bf498d77f62247dab94c44c9644a49189ad04d3e2a5159c6ef3f8d995bf26\ a3951f8e6a875451292daf1143009aeaa4cfcf95de5d2b34f12b32b9245b57c2a7ee\ 8889ec36ecf2cb30c635a82d5a525c91f7187fdbc917b6f3e9c9a4a7df0c41273ffa\ 87da1af4c19d3cb04160d57bfa1414179c47cfd19bf81e59e431815b3e1d6f42e27b\ 05dfc83027e7d470dd50d8fc08ba41035d11e1f9da42f341e32d19018b8885d75b5c\ 63f668477fdfc2ebb10108f8c7d0ec261aeb0647196d2905c598753ec25914defa76\ 25e6221a594635a1974d6b95bec6f7539458e89d428ba6f6344f38158923f76ac1c7\ d37e32e23ae0d020b1449f8e3257ae98ead8a47095fe2d2076f42d8d7f0f5abd83f5\ 70a15664bafed063c14e597e88afc3ea7386d5a859af15b48ac9c5dde04cd8cfcdd6\ cc8fd3e9da6275d71cf41c13533a7a281de3d20f371c2d4dd5855f66bd0bfe367339\ b6e29044ae0361ab77a7d61a954bdc0db910fd7432802f695143eaf50ab6e142e2c0\ d813e14fd67b060e5184fea10cc927945157a0c52bc7232311d9d325c42a03c7c60d\ 7844674cf66880b51b864527600a531359d3d623654827953823469e37179fc889f6\ 0f69c8d7fff4b19b3751909cd92211f89aebb256464c81ab45fbac92f4ec7d2454fa\ 9ae888e1c439401fd2f9dea24ebb7b7cd74dd7e29b0eef05e7873d0e1a2a6c01f2ce\ 7bfd9eb2567b0fd666c4cc1be2c48108053d946622abfa72e2598475cde32a5e6f10\ 4ae4ff3d7ef2e6c71eed0403d66f5c04265b0e1d8611e8dedcd899dbe671fe06e7ff\ 30273eb605f860c6871c877779e50e4eb708fa3986c282fa0042dadfdf4131e41261\ eed84aad52517f777f8dfdeaa822195fd37a4a4c4971d2b33cb7abea2e841021b2ae\ d17af5b9dd82aa10aa6479a475d71cbb196954b8745e4b2335f8d3d6c86e6a7e4d9b\ dcc480c81a1203861194efb2246db3c34b7c6d24d3b18edf254b66026455df8b8429\ 30d1bf50d779c0714be1fe701868efb5f9e6f6bbe6776ed3f312e3012a67318279d7\ 80f639a38611a3e0efa720f5bc204ec2eabb68cf6908cadc71abfee1d5cf2dbabe9e\ 595383549e6fb27e4eef9412d5d8563020f309021e53baf5a9af1fa114fef620520b\ 8cc20b6f48aa8badc9513a7c97d47f725174adadc25b8151ce4865cd22a77cd773eb\ eada29cadef443935089d65e36d94cc6618138a93ecf3c5c23cad1cbdafdee465f01\ 1aaf4706b9b56723f90113aa532cf6feeaba7553e766de31b87051cf5eff60d8b22f\ e979ca80ede748e69c7ed6811d086e1a700afcccdae6175b25e5695ffb7aaacab26d\ 6496b2dce841d7c25f3e6f0715db8b88c21b79a42e6647a40ba8cfddf2ad0331afa1\ 4aee9458891f746ca3629a74f01ae3f3b2abd760a53ebcc69746c6df4320e87d3555\ 5e71309e29581d5284c3e089618018bd5f7a3e8f0566dc6d1e255e7c9699b1cadfec\ 010a23373a3c3d535557668a8cb8c0d1dbe7181b1e212736526f748c9192a4a6c6d3\ dfe6e7ff030f101f30344c5d74848a8fadd1d2e7eaedfb0000000000000000000000\ 00000a1c3043d627ecbcf614d1d4ae93845f32ff7dc188241509b154df2cb12e41c3\ ab5d043eeed0919381103816b84c6cae3c1db31464ad484cca61b7aaceae0a252322\ d50f", "raw_composite_public_key": "\ ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca0198131c44\ f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde53b46f34\ 482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c50498e1717b7c75\ 8b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5cd8ded92a0c3fa15\ Prabel, et al. Expires 14 March 2027 [Page 38] Internet-Draft JOSE/COSE Composite Signatures September 2026 58810f12c7050a367708d196cd24e5af974904aed8e4ce8872e8696b0b7bca50e452\ cd7d30ea9a4adac0311d672c6bde8496240b07431463708895cd9bafc31632d73976\ 49388fdafcbf7d305a3de9a495eca7433a8f83ba0f0b25c413c6e39c96eb7d691b34\ d37ce37f1eead1cf217e25ef34eecf3f7c60f84b8edfdde8405d4f832576c61ef98e\ 0a2f28da187700953924f686b94614705bcf53d33fedd4348edddbdf28b5065e1f20\ 775043e85cf931f829179363a1a7e7404a838ec00086b0976386fe637c98244757e3\ f769ddd4467471bfad670f9a05f8246ee50a7b1eaf87fc4069c3ae2aa20332581177\ 92f0bcd49e083fd1bc7496abff29cc94e4868b21214ed316525399a610fbdd4a80e7\ c80715f29578e2a84bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b537\ 6b5b655979984a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5\ c0f50ea4bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d\ 430fb78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950\ 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130a48f\ d925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f23094a3cd\ 761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722945775f264e1\ b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92a0d4c4ed62326e50\ 24d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e7181bd3b459450b451a5153\ 9a715c21d67dd330eb5970db00d9edbfb2822b036fa13bafeb86d8dc78866e3f8d43\ e53d78cca5595a6faf886b5dc112f1cf4adcfa875800d90b48883af97316fe150687\ 3fc157e570eacbfd222868d14234101966afb6bf9940829253a953ada89fc756b6a8\ 49f70acb9838e69faa50bba75e3e89c2adb57e86d088ab9b04a28e670709172243ec\ 5e0008a5ceaf3f8722f487302596ffd755ad1b82a49c34b3469515b46aa290cd86ee\ 38ea7a9be3f103610335b531cca333ddfe32b14510f4b07ef95fc6684e8c454a92c1\ 0dbb5d59c7a7c63fb305fe881967d99e669eb632840582560bb403431d40f75a4954\ 908482278292821f4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28\ e8e6a4b4622650cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3\ 563632c521f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c1\ 16389421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642\ 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb00e0\ 25d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d203eba2bb\ aef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242ef8d6cc24610a\ 1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa08897083daa2ebb1\ 775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b645b1108f0d65fec9378\ 9c053743ca14fd63d05e98b652df2b9c2ff9ce05f1940703ffb273f80e0e2732eca9\ 960d981b4cfd3b7bb8045b3c3830546b9dd8db0d3b6a27bcceb6a42d62a3a8d02a6f\ 0d73653215771de243a63ac048a18b59da29" } Figure 2: ML-DSA-44-Ed25519 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "ecdsa_d": "\ 0000000000000000000000000000000000000000000000000000000000000001", "jwk": { Prabel, et al. Expires 14 March 2027 [Page 39] Internet-Draft JOSE/COSE Composite Signatures September 2026 "kid": "RKckYpZD-Fj494Q4vaeNmq6c3mqg_EhLkiUOo5mhNYE", "kty": "AKP", "alg": "ML-DSA-65-ES256", "pub": "\ QksvJn5Y1bO0TXGs_Gpla7JpUNV8YdsciAvPof6rRD8JQquL2619cIq7w1YHj22ZolIn\ H-YsdAkeuUr7m5JkxQqIjg3-2AzV-\ yy9NmfmDVOevkSTAhnNT67RXbs0VaJkgCufSbzkLudVD-_91GQqVa3mk4aKRgy-\ wD9PyZpOMLzP-\ opHXlOVOWZ067galJN1h4gPbb0nvxxPWp7kPN2LDlOzt_tJxzrfvC1PjFQwNSDCm_l-\ Ju5X2zQtlXyJOTZSLQlCtB2C7jdyoAVwrftUXBFDkisElvgmoKlwBks23fU0tfjhwc0L\ VWXqhGtFQx8GGBQ-\ zol3e7P2EXmtIClf4KbgYq5u7Lwu848qwaItyTt7EmM2IjxVth64wHlVQruy3GXnIurc\ aGb_qWg764qZmteoPl5uAWwuTDX292Sa071S7GfsHFxue5lydxIYvpVUu6dyfwuExEub\ CovYMfz_LJd5zNTKMMatdbBJg-Qd6JPuXznqc1UYC3CccEXCLTOgg_auB6EUdG0b_cy-\ 5bkEOHm7Wi4SDipGNig_ShzUkkot5qSqPZnd2I9IqqToi_0ep2nYLBB3ny3teW21Qpcc\ oom3aGPt5Zl7fpzhg7Q8zsJ4sQ2SuHRCzgQ1uxYlFx21VUtHAjnFDSoMOkGyo4gH2wcL\ R7-z59EPPNl51pljyNefgCnMSkjrBPyz1wiET-\ uqi23f8Bq2TVk1jmUFxOwdfLsU7SIS30WOzvwD_gMDexUFpMlEQyL1-\ Y36kaTLjEWGCi2tx1FTULttQx5JpryPW6lW5oKw5RMyGpfRliYCiRyQePYqipZGoxOHp\ vCWhCZIN4meDY7H0RxWWQEpiyCzRQgWkOtMViwao6Jb7wZWbLNMebwLJeQJXWunk-\ gTEeQaMykVJobwDUiX-E_E7fSybVRTZXherY1jrvZKh8C5Gi5VADg5Vs319uN8-\ dVILRyOOlvjjxclmsRcn6HEvTvxd9MS7lKm2gI8BXIqhzgnTdqNGwTpmDHPV8hygqJWx\ WXCltBSSgY6OkGkioMAmXjZjYq_Ya9o6AE7WU_hUdm-\ wZmQLExwtJWEIBdDxrUxA9L9JL3weNyQtaGItPjXcheZiNBBbJTUxXwIYLnXtT1M0mHz\ MqGFFWXVKsN_AIdHyv4yDzY9m-tuQRfbQ_2K7r5eDOL1Tj8DZ-\ s8yXG74MMBqOUvlglJNgNcbuPKLRPbSDoN0E3BYkfeDgiUrXy34a5-vU-\ PkAWCsgAh539wJUUBxqw90V1Du7eTHFKDJEMSFYwusbPhEX4ZTwoeTHg--\ 8Ysn4HCFWLQ00pfBCteqvMvMflcWwVfTnogcPsJb1bEFVSc3nTzhk6Ln8J-\ MplyS0Y5mGBEtVko_WlyeFsoDCWj4hqrgU7L-\ ww8vsCRSQfskH8lodiLzj0xmugiKjWUXbYq98x1zSnB9dmPy5P3UNwwMQdpebtR38N9I\ -jup4Bzok0-JsaOe7EORZ8ld7kAgDWa4K7BAxjc2eD540Apwxs-\ VLGFVkXbQgYYeDNG2tW1Xt20-XezJqZVUl6-\ IZXsqc7DijwNInO3fT5o8ZAcLKUUlzSlEXe8sIlHaxjLoJ-\ oubRtlKKUbzWOHeyxmYZSxYqQhSQj4sheedGXJEYWJ-Y5DRqB-xpy-\ cftxL10fdXIUhe1hWFBAoQU3b5xRY8KCytYnfLhsFF4O49xhnax3vuumLpJbCqTXpLur\ eoKg5PvWfnpFPB0P-\ ZWQN35mBzqbb3ZV6U0rU55DvyXTuiZOK2Z1TxbaAd1OZMmg0cpuzewgueV-\ Nh_UubIqNto5RXCd7vqgqdXDUKAiWyYegYIkD4wbGMqIjxV8Oo2ggOcSj9UQPS1rD5u0\ rLckAzsxyty9Q5JsmKa0w8Eh7Jwe4Yob4xPVWWbJfm916avRgzDxXo5gmY7txdGFYHhl\ olJKdhBU9h6f0gtKEtbiUzhp4IWsqAR8riHQs7lLVEz6P537a4kL1r5FjfDf_yjJDBQm\ y_kdWMDqaNln-MlKK8eENjUO-qZGy0Ql4bMZtNbHXjfJUuSzapA-\ RqYfkqSLKgQUOW8NTDKhUk73yqCU3TQqDEKaGAoTsPscyMm7u_8QrvUK8kbc-\ XnxrWZ0BZJBjdinzh2w-QvjbWQ5mqFp4OMgY94__tIU8vvCUNJiYA1RdyodlfPfH5-\ avpxOCvBD6C7ZIDyQ-\ 6huGEQEAb6DP8ydWIZQ8xY603DoEKKXkJWcP6CJo3nHFEdj_vcEbDQ-\ WESDpcQFa1fRIiGuALj-\ sEWcjGdSHyE8QATOcuWl4TLVzRPKAf4tCXx1zyvhJbXQu0jf0yfzVpOhPun4n-\ xqK4SxPBCeuJOkQ2VG9jDXWH4pnjbAcrqjveJqVti7huMXTLGuqU2uoihBw6mGqu_WSl\ Prabel, et al. Expires 14 March 2027 [Page 40] Internet-Draft JOSE/COSE Composite Signatures September 2026 OP2-XTEyRyvxbv2t-z9V6GPt1V9ceBukA0oGwtJqgD-\ q7NXFK8zhw7desI5PZMXf3nuVgbJ3xdvAlzkmm5f9RoqQS6_hqwPQEcclq1MEZ3yML5h\ c99TDtZWy9gGkhR0Hs3QJxxgP7bEqGFP-\ HjTPnJsrGaT6TjKP7qCxJlcFKLUr5AU_kxMULeUysWWtSGJ9mpxBvsyW1JuoEaxfR8uE\ sQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpZP40Li_hp_m47n60p8D54WK84zV2sxXs7\ LtkBoN79R9Q", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMQIBAQQgAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAGgCgYIKoZIzj0DAQc" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNjUtRVMyNTYiLCJraWQiOiJSS2NrWXBaRC1GajQ5NFE0dmFl\ Tm1xNmMzbXFnX0VoTGtpVU9vNW1oTllFIn0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.\ GzphtwRHY9KgNF0UqxtQAOwpz2g9EAzf469GH_RPhCcHtYVOjmAAiGh_KvWorExxhXNC\ acrIjS_YSNGpMJuabMMDDCLDD2AHcRkcrdr65_KohNi_RZYlVZa5K-\ 620DyWmPdtGGrM9q8QZyv_Jxtujzl5RRjMZgk3JPEVn1gw5Ep21WYYiw84LQ-\ ZAJWkfNTaz8pRFDHN0vOtg8vuuqpsjXuB5qdXlxZRn_O4QAReU374i2LqjYttYqomSMX\ hqz-\ VuHS2ua5XMvtdCRB13O3ag_gglbMDqfSINcHrRB65SjzGHv9LdOzvlTlAVQoLLKh3tCa\ vaJxnrLLtbY9SjCAp24IlaciluqM3g5k6NAW6s-XAhXwBKa5jAILcNqq3z9pSG3ZaT9-\ RtixIdJ6E4BVNdaow4MKUvIytQ4xwlWJkZXZOolHcOYbXrRzAEou63CyfUyDljKdlhms\ I4_i3UhelYr-0AmdNcWXfC1LPMMfS1tH4laI8p9XI1ZAL4ZX05Wdki8TyJzBc9-\ 7Mo7eCt-\ XCRvrwqIS_FI4Lmp0OL62XwIftpYnrqgCoV3_EwxfbGGgtutO88lczZDHm7vwwnDvMEx\ klPsHSBP_hY9IGELelTEe_yIboAQKNeuPfPJeR4WEqEyhk_qf2AlYYbAVwenVZqKUTmz\ gcIi4aWQGyISsZuSMGkYryNGf7l6SjbiQzY83l4V49zcKZ-\ ZwPafmsiSG3_Te7Cyyg9nuJmBSohvm7YyibTkHypjHVzyJPXbxDeWnm71xEEk7ulwv_m\ 7r9c7yBJ4M2b9sElnppTZ5buMpmW0ViR7Rd7b7F2xComMbzB1Df2V9klY31qd-\ 6OB1lvlRXVLnBfD0N997-Hxbz6Z2iTK9RxJFwYnR-\ oV_UsPUY0AmWduGCSbTe2NUtMNjFyLI2bsNaS9z5nJJrlysuwa2uFnCT65eUx2yi8yIQ\ qUGh_lg4cz5h9s3Dc_mdcTdGqCKqy0YHYMNqDP6eVCUjJ88QZnUzH56xdNdRUPgJyX0R\ 1fEEW2CK-\ S3pL3cJptHF8Q1KJBBhfJZz7npHw1A1p1mGwcxTvJgnK0hPpQHT5RQD8jXmwcbrHVNtO\ bH5WWHAx0llzLy1VKpjPEkDXTQqcAgCyL2HNDQNdl3h9F9yc9EGkXzu_wvDJif661o-\ JD2f3O8W8BYZvLMP3GO9zCusvtgSSF4ycc78gCLnKuTQJ41P0XeF-lGxM_k-\ lGEDI8JmFBPFYOmz2t62Q1FtKUX9QFZTnOf7G-WAuWDrIyFq-\ ie3FnBDIyH3LuV1_dBJ0OUNyz1eh_OMjTnkl8j6XI0_Kqhw2G3ysOIRjAraGaXWLcAJH\ e4xCeG_96z8faM18k0flmiM39aqoKByPoKGGg5MFjqn--\ MDFp3j8p3aEHh6EGs8ZV1AzuRT_xlE9urzByHPOTU4dzaXZtNmXuYtP-NvKZsRnG36-\ RP3vzvaK7vE4qm6YwvMxuRlZqX-\ zFnjfeN7V5HSsXRvkAvN9xjhiX1vzZHOLCzfCIR7NCz4SdAI9zmjukYMZ4RlTYRYfUbz\ o5Hya1v_5-\ C2z9Vb5ozCoMNcArckv64mEsd1E4_8bgniCZf2ryZVKKhkDUqnPPHom1YfBlf20TcLp-\ qYZRcO1Q3ebjRt_gp44TGfSlJrL_cfutXnSJ6Td5ID8noFrCC1BagB1TAOwhZamVrtHX\ L9otOpv5hc9pCdG4y-\ zoCpCRKAoir2t3lqI8muetAU1b3uicceAZHfX2ISij2_nfp1dmahBkbqO8UuYJW50K2w\ Prabel, et al. Expires 14 March 2027 [Page 41] Internet-Draft JOSE/COSE Composite Signatures September 2026 JS7DPxBg2Ms8iLAsI-JOolzDKafq-Mru79jRJIGHqlyhb9tTskKix-\ EpMsDuD3UwBFhqf-\ pnlQaHpVaMdawhhsYbwyXcgS2ckxBODmeXsUG1jvNZ_CHVI71fgG_bzUHDVJDmqQeoNU\ 6V0HY4Upx6uNHL7sY_fpt9LX4i2hfOrLjUJSXSxRMiDP31rbdHae2Fr0Z80o-\ tlcqA0JRLT1PO4l94CGDn1E3L2YJzjRBi1A6Ihy7XaAfpZPGIE_HJkXfjW_bXe1cJ1Ba\ a1h5lBz9ASyKSxxy9P0gaqa4qAz6-\ KSPwaKlGoxQpVklPj7C0eli7ohcmqe_vjodFSHG8feXbOWYki-\ n9lJyAoIj_0eCihoz1K9dr34Uj7Edb7gHXhN-tQyLQik328d_jSZJ5XsLFuIe-\ YGifdFpm39DPtWTVPh7LtM_3tGh-SiF1qVFSzXknQa82s5EEn2168-\ yxWmxgZzvUTN_TQ1CWLgjTVriQ9EiGFAcKd1Adzb7sJBzlsXgShYYzn_APQUaHtAJUC2\ OUe7W91Ub4hfmiNRy5-VOmSPiocsDS30mpeZUPxYjDJg1Jk-\ 1ZpyKLoj0dNNVSVRboKuuMUM-RXBXzJGiQJnPlucNxiZfxl_-\ HmgEM7fh3wrQztg1dM969BaG2GjDgdyyzSGXO9-0xY4TvoEMLJ1vb283LYkDVL_C0-\ nUpcSxRlkLvmW05urVhxqG_Sr162fty-\ lxrxaVfGTHrroyHkv9frx2_ultrAne75SwoLJ0tgdf4iVOQwbMaukK8LVRdxU6stYHiG\ cusUPYu-I5m6NS69kYRU4huHMUnFMZX3WoMhN-\ smzZOgPPDzS9CBK1o5st7_f9hkJcWNYHKNsXgqwq4djqqOR9nxMFap0uCntQSOYyO5dC\ qyP_osNnrkSTEEjuoa8N4xyTvZQKDVZDzLGbcWx099ZHyC--\ SauSsf26Ix6k6OkyowtXn-qoq-xLSjBoaZs_MnZTRvTJiHMmJkvMcNeDDRkhbvwzd-\ EsoVlMxP5iqYXPzo0X5wFmwOGif6gEoZdAAfsw9eP1LccOM69d18c4-\ Wh39dkwOzxXBiMwCwukKuJRDSyu0WHu_tJqjhjSs5PwF7HAiJu2o3WhtX3L_mCC9WIq_\ 6GE6__O0dXYELoye5-\ 7zmNQFSTrm6GPFb430ertDPVuvg7CZpNdysY9HnX2BrmKbZQNx5plDmitBrhmAt7xsAs\ nujR6TqPaCnxoMv8d8PYUjPRFSxEqZz8iP7vOaN_fDSkLytGowJZfmabm5DaF1wl14Zb\ PHFZWvzsLjanGlk6mNJUuLNPDKSuKvPdwua83NSR1_Xy4psMK6-\ _6AJP_vofuZ0Ctgj3KYCyxzxOKgaDU1nIL_VfzgkrOVU_VyoqTmE1HIk7qNQiJO1fJhM\ ql70IiiF9yl4O5ohA0_XMASMMpeU0jNHDNXHs8V-\ 3vlefLzu3KeiMLm7u7krWEoK8GU1rVnVhXgSqbQcCjroN3dR80wGsXL-\ m24GMFJsW4GBXw92RyPUsUTXgPgq6EMsPqJ8axYTWvyajar2S-D5fhFeYsZg-1VdXZl-\ cIBGZwBc-\ Az9LyKfdmgGM9knMWzfhoCxdJZNhMp3_1DPENeNXdmOIqvqUs83UwWyq9MQGoE91W8ef\ eR9-kyPEJ4q8R8g_HJ_QSomij6W7nsFLWYMA1xyIpy5v8H3-\ YVSgbKKoY7oGcyQClQ6HTE7RxnywFG1mPJab2IPyQuxHTe3TSe4Xbwx83dwfohnF1DyS\ NJ-m4cjRyRdcbFac0ypQ-DX5vlEn2G6ktOOMuwgm3dMr2lD_uv_1RTCgqMJkT-\ HGwVpU91DcI4y9z2X8LWrpJCbTdbtgxoWEwlRecW13rUXhc6iYEzRu8cbRpuA43LD-\ BoU-RpGpzoZ-E4OG8wy9l9VSBvYFxEk2bTVdCpAJdz4JFWWqAqsBKKF-\ ZPhsQU2RKjtIwKxfTi_ruP5y9OUUiIb7uE1B_85m6OVieMurDiaFwytN7Yx3bfzXHQ-\ ZkBM1LWJTzOoWJ7I-\ KMmCIggnxvOSezvUXYQzJxKrPCqYXGlB21MG9XzJl37BjWGgCEUl8XIZHGRYTorJukBo\ AyoyofUnS5q1zglvnkhuZQKyJxCYa-p0CNNHaLTHisD3Qpq0-\ yTp0_hBMgFp2sPgBK7CkiECoQCckqxt4gTnZOCAhAhGjTSBrubxuqZj79hB9G_8eTjed\ KiHSPUxIzBkYkqFeUbo5NNG3leRd9wOtaH4BmYXsNLFKdLJeQ16839y70dy9Gqwzj9ya\ XJVCkG2i92ChfM0GYr2RJi9XXlsypMkLKC1sUeab0vXQShOBS4To9OIRxjAfA0V7O3VY\ ziCgMrl3vLbWMT71tx_uk0QJUKqHddCj0CW8pMsd8nI63if6KQ1_Q77YK8exeMJTDMd4\ kG7S8wSgFIOW0QmICQqnfE8nzYtxllu0baGM4Nl4mQ5Rx_1WjE1JHJQt3Tg5kTjcgjXN\ 6sUMuEBbxy5sk5p34AtQyX8BidJ1YG4Kb2cmJakW85dkpwF6Gjqmq5O7-\ kIMbgpGtvs7pCCc7ZZiys9LyE1u5yA0aMThMaI2p0OMECjBKU4nf_P4PFjhAUVxqoqkA\ AAAAAAAABxAUHicwMEYCIQDy7mwJZP7YTHhQZZ5CZUjR-\ Prabel, et al. Expires 14 March 2027 [Page 42] Internet-Draft JOSE/COSE Composite Signatures September 2026 Bw5RT6ZEsYkJHKFHEJPcQIhAJgT0iHolAsEaWlheBcvYLIC6WHf1mID_ntuZlcHexAp", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e6a557452564d794e5459694c43\ 4a72615751694f694a5353324e725758426152433147616a51354e464530646d466c\ 546d31784e6d4d7a6258466e5830566f54477470565539764e57316f546c6c46496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534136352d45434453412d503235362d534841353132003c08\ 60140c9827362bea6ce409bad08c87f67b85daf9ed683ef2e6af2bc559a92ccaff26\ d3da9ee6b7cad46d1332f08ec2ca4b817ca5c27d3f260b73cf4325b4", "raw_composite_signature": "\ 1b3a61b7044763d2a0345d14ab1b5000ec29cf683d100cdfe3af461ff44f842707b5\ 854e8e600088687f2af5a8ac4c7185734269cac88d2fd848d1a9309b9a6cc3030c22\ c30f600771191caddafae7f2a884d8bf4596255596b92beeb6d03c9698f76d186acc\ f6af10672bff271b6e8f39794518cc66093724f1159f5830e44a76d566188b0f382d\ 0f990095a47cd4dacfca511431cdd2f3ad83cbeebaaa6c8d7b81e6a7579716519ff3\ b840045e537ef88b62ea8d8b6d62aa2648c5e1ab3f95b874b6b9ae5732fb5d091075\ dcedda83f82095b303a9f48835c1eb441eb94a3cc61eff4b74ecef953940550a0b2c\ a877b426af689c67acb2ed6d8f528c2029db822569c8a5baa33783993a3405bab3e5\ c0857c0129ae630082dc36aab7cfda521b765a4fdf91b62c48749e84e0154d75aa30\ e0c294bc8cad438c7095626465764ea251dc3986d7ad1cc0128bbadc2c9f5320e58c\ a765866b08e3f8b75217a562bfb402674d7165df0b52cf30c7d2d6d1f895a23ca7d5\ c8d5900be195f4e567648bc4f227305cf7eecca3b782b7e5c246faf0a884bf148e0b\ 9a9d0e2fad97c087eda589ebaa00a8577fc4c317db18682dbad3bcf257336431e6ee\ fc309c3bcc1319253ec1d204ffe163d20610b7a54c47bfc886e801028d7ae3df3c97\ 91e1612a132864fea7f60256186c05707a7559a8a5139b381c222e1a5901b2212b19\ b92306918af23467fb97a4a36e243363cde5e15e3dcdc299f99c0f69f9ac8921b7fd\ 37bb0b2ca0f67b899814a886f9bb63289b4e41f2a631d5cf224f5dbc437969e6ef5c\ 44124eee970bff9bbafd73bc812783366fdb04967a694d9e5bb8ca665b456247b45d\ edbec5db10a898c6f30750dfd95f64958df5a9dfba381d65be545754b9c17c3d0df7\ defe1f16f3e99da24caf51c4917062747ea15fd4b0f518d0099676e18249b4ded8d5\ 2d30d8c5c8b2366ec35a4bdcf99c926b972b2ec1adae167093eb9794c76ca2f32210\ a941a1fe5838733e61f6cdc373f99d713746a822aacb460760c36a0cfe9e54252327\ cf106675331f9eb174d75150f809c97d11d5f1045b608af92de92f7709a6d1c5f10d\ 4a2410617c9673ee7a47c35035a75986c1cc53bc98272b484fa501d3e51403f235e6\ c1c6eb1d536d39b1f95961c0c74965ccbcb554aa633c49035d342a700802c8bd8734\ 340d765de1f45f7273d106917ceeff0bc32627faeb5a3e243d9fdcef16f01619bcb3\ 0fdc63bdcc2bacbed812485e3271cefc8022e72ae4d0278d4fd17785fa51b133f93e\ 94610323c2661413c560e9b3dadeb643516d2945fd4056539ce7fb1be580b960eb23\ 216afa27b71670432321f72ee575fdd049d0e50dcb3d5e87f38c8d39e497c8fa5c8d\ 3f2aa870d86df2b0e2118c0ada19a5d62dc0091dee3109e1bff7acfc7da335f24d1f\ 96688cdfd6aaa0a0723e82861a0e4c163aa7fbe303169de3f29dda10787a106b3c65\ 5d40cee453ff1944f6eaf30721cf39353877369766d3665ee62d3fe36f299b119c6d\ faf913f7bf3bda2bbbc4e2a9ba630bccc6e46566a5fecc59e37de37b5791d2b1746f\ 900bcdf718e1897d6fcd91ce2c2cdf08847b342cf849d008f739a3ba460c6784654d\ Prabel, et al. Expires 14 March 2027 [Page 43] Internet-Draft JOSE/COSE Composite Signatures September 2026 84587d46f3a391f26b5bffe7e0b6cfd55be68cc2a0c35c02b724bfae2612c775138f\ fc6e09e20997f6af265528a8640d4aa73cf1e89b561f0657f6d1370ba7ea9865170e\ d50dde6e346dfe0a78e1319f4a526b2ff71fbad5e7489e93779203f27a05ac20b505\ a801d5300ec2165a995aed1d72fda2d3a9bf985cf6909d1b8cbece80a9091280a22a\ f6b7796a23c9ae7ad014d5bdee89c71e0191df5f62128a3dbf9dfa757666a10646ea\ 3bc52e6095b9d0adb0252ec33f1060d8cb3c88b02c23e24ea25cc329a7eaf8caeeef\ d8d1248187aa5ca16fdb53b242a2c7e12932c0ee0f753004586a7fea67950687a556\ 8c75ac2186c61bc325dc812d9c93104e0e6797b141b58ef359fc21d523bd5f806fdb\ cd41c35490e6a907a8354e95d07638529c7ab8d1cbeec63f7e9b7d2d7e22da17ceac\ b8d42525d2c513220cfdf5adb74769ed85af467cd28fad95ca80d0944b4f53cee25f\ 780860e7d44dcbd982738d1062d40e88872ed76807e964f18813f1c99177e35bf6d7\ 7b5709d4169ad61e65073f404b2292c71cbd3f481aa9ae2a033ebe2923f068a946a3\ 142956494f8fb0b47a58bba21726a9efef8e87454871bc7de5db3966248be9fd949c\ 80a088ffd1e0a2868cf52bd76bdf8523ec475bee01d784dfad4322d08a4df6f1dfe3\ 4992795ec2c5b887be60689f745a66dfd0cfb564d53e1ecbb4cff7b4687e4a2175a9\ 5152cd792741af36b391049f6d7af3ecb15a6c60673bd44cdfd34350962e08d356b8\ 90f4488614070a77501dcdbeec241ce5b178128586339ff00f414687b402540b6394\ 7bb5bdd546f885f9a2351cb9f953a648f8a872c0d2df49a979950fc588c3260d4993\ ed59a7228ba23d1d34d5525516e82aeb8c50cf915c15f32468902673e5b9c3718997\ f197ff879a010cedf877c2b433b60d5d33debd05a1b61a30e0772cb34865cef7ed31\ 6384efa0430b275bdbdbcdcb6240d52ff0b4fa7529712c519642ef996d39bab561c6\ a1bf4abd7ad9fb72fa5c6bc5a55f1931ebae8c8792ff5faf1dbfba5b6b0277bbe52c\ 282c9d2d81d7f8895390c1b31aba42bc2d545dc54eacb581e219cbac50f62ef88e66\ e8d4baf6461153886e1cc52714c657dd6a0c84dfac9b364e80f3c3cd2f4204ad68e6\ cb7bfdff619097163581ca36c5e0ab0ab8763aaa391f67c4c15aa74b829ed412398c\ 8ee5d0aac8ffe8b0d9eb9124c4123ba86bc378c724ef6502835590f32c66dc5b1d3d\ f591f20bef926ae4ac7f6e88c7a93a3a4ca8c2d5e7faaa2afb12d28c1a1a66cfcc9d\ 94d1bd32621cc98992f31c35e0c346485bbf0cddf84b285653313f98aa6173f3a345\ f9c059b038689fea012865d0007ecc3d78fd4b71c38cebd775f1ce3e5a1dfd764c0e\ cf15c188cc02c2e90ab894434b2bb4587bbfb49aa38634ace4fc05ec702226eda8dd\ 686d5f72ff9820bd588abfe8613afff3b47576042e8c9ee7eef398d405493ae6e863\ c56f8df47abb433d5baf83b099a4d772b18f479d7d81ae629b650371e699439a2b41\ ae1980b7bc6c02c9ee8d1e93a8f6829f1a0cbfc77c3d85233d1152c44a99cfc88fee\ f39a37f7c34a42f2b46a302597e669b9b90da175c25d7865b3c71595afcec2e36a71\ a593a98d254b8b34f0ca4ae2af3ddc2e6bcdcd491d7f5f2e29b0c2bafbfe8024ffef\ a1fb99d02b608f72980b2c73c4e2a06835359c82ff55fce092b39553f572a2a4e613\ 51c893ba8d42224ed5f26132a97bd088a217dca5e0ee68840d3f5cc01230ca5e5348\ cd1c33571ecf15fb7be579f2f3bb729e88c2e6eeeee4ad61282bc194d6b5675615e0\ 4aa6d07028eba0dddd47cd301ac5cbfa6db818c149b16e06057c3dd91c8f52c5135e\ 03e0aba10cb0fa89f1ac584d6bf26a36abd92f83e5f845798b1983ed55757665f9c2\ 01199c0173e033f4bc8a7dd9a018cf649cc5b37e1a02c5d259361329dffd433c435e\ 357766388aafa94b3cdd4c16caaf4c406a04f755bc79f791f7e9323c4278abc47c83\ f1c9fd04a89a28fa5bb9ec14b598300d71c88a72e6ff07dfe6154a06ca2a863ba067\ 32402950e874c4ed1c67cb0146d663c969bd883f242ec474dedd349ee176f0c7cddd\ c1fa219c5d43c92349fa6e1c8d1c9175c6c569cd32a50f835f9be5127d86ea4b4e38\ cbb0826ddd32bda50ffbafff54530a0a8c2644fe1c6c15a54f750dc238cbdcf65fc2\ d6ae92426d375bb60c68584c2545e716d77ad45e173a89813346ef1c6d1a6e038dcb\ 0fe06853e4691a9ce867e138386f30cbd97d55206f605c449366d355d0a9009773e0\ Prabel, et al. Expires 14 March 2027 [Page 44] Internet-Draft JOSE/COSE Composite Signatures September 2026 91565aa02ab0128a17e64f86c414d912a3b48c0ac5f4e2febb8fe72f4e5148886fbb\ 84d41ffce66e8e56278cbab0e2685c32b4ded8c776dfcd71d0f999013352d6253cce\ a1627b23e28c982220827c6f3927b3bd45d84332712ab3c2a985c6941db5306f57cc\ 9977ec18d61a0084525f172191c64584e8ac9ba4068032a32a1f5274b9ab5ce096f9\ e486e6502b22710986bea7408d34768b4c78ac0f7429ab4fb24e9d3f841320169dac\ 3e004aec2922102a1009c92ac6de204e764e0808408468d3481aee6f1baa663efd84\ 1f46ffc7938de74a88748f531233064624a857946e8e4d346de579177dc0eb5a1f80\ 66617b0d2c529d2c9790d7af37f72ef4772f46ab0ce3f726972550a41b68bdd8285f\ 334198af64498bd5d796cca93242ca0b5b1479a6f4bd741284e052e13a3d3884718c\ 07c0d15ecedd563388280cae5def2db58c4fbd6dc7fba4d102542aa1dd7428f4096f\ 2932c77c9c8eb789fe8a435fd0efb60af1ec5e3094c331de241bb4bcc1280520e5b4\ 42620242a9df13c9f362dc6596ed1b686338365e26439471ff55a3135247250b774e\ 0e644e37208d737ab1432e1016f1cb9b24e69df802d4325fc062749d581b829bd9c9\ 896a45bce5d929c05e868ea9aae4eefe90831b8291adbecee908273b6598b2b3d2f2\ 135bb9c80d1a31384c688da9d0e3040a304a5389dffcfe0f163840515c6aa2a90000\ 00000000000710141e27303046022100f2ee6c0964fed84c7850659e426548d1f81c\ 39453e9912c6242472851c424f710221009813d221e8940b0469696178172f60b202\ e961dfd66203fe7b6e6657077b1029", "raw_composite_public_key": "\ 424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f0942\ ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c50a888e0d\ fed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264802b9f49bce4\ 2ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bccffa8a475e539539\ 6674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e53b3b7fb49c73adfbc2d\ 4f8c54303520c29bf97e26ee57db342d957c893936522d0942b41d82ee3772a00570\ adfb545c1143922b0496f826a0a970064b36ddf534b5f8e1c1cd0b5565ea846b4543\ 1f0618143ece89777bb3f61179ad20295fe0a6e062ae6eecbc2ef38f2ac1a22dc93b\ 7b126336223c55b61eb8c0795542bbb2dc65e722eadc6866ffa9683beb8a999ad7a8\ 3e5e6e016c2e4c35f6f7649ad3bd52ec67ec1c5c6e7b9972771218be9554bba7727f\ 0b84c44b9b0a8bd831fcff2c9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355\ 180b709c7045c22d33a083f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a46\ 36283f4a1cd4924a2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded79\ 6db542971ca289b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb16\ 25171db5554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963\ c8d79f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c\ bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c45860a2d\ adc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c9078f62a\ 8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345081690eb4c56\ 2c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a3329152686f00d48\ 97f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e5500383956cdf5f6e37c\ f9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177d312ee52a6da023c05722a87\ 38274dda8d1b04e99831cf57c87282a256c565c296d0524a063a3a41a48a83009978\ d98d8abf61af68e8013b594fe151d9bec199902c4c70b49584201743c6b53103d2fd\ 24bdf078dc90b5a188b4f8d772179988d0416c94d4c57c0860b9d7b53d4cd261f332\ a1851565d52ac37f008747cafe320f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f\ 0367eb3cc971bbe0c301a8e52f96094936035c6ee3ca2d13db483a0dd04dc16247de\ 0e0894ad7cb7e1ae7ebd4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c\ 5283244312158c2eb1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b\ Prabel, et al. Expires 14 March 2027 [Page 45] Internet-Draft JOSE/COSE Composite Signatures September 2026 5eaaf32f31f95c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e329972\ 4b4639986044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec90\ 7f25a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107\ 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0aec1\ 0318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4f977b326\ a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734a51177bcb089\ 476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a90852423e2c85e79d197\ 24461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5856141028414ddbe7145\ 8f0a0b2b589df2e1b051783b8f718676b1defbae98ba496c2a935e92eeadea0a8393\ ef59f9e914f0743fe65640ddf9981cea6dbdd957a534ad4e790efc974ee89938ad99\ d53c5b680775399326834729bb37b082e795f8d87f52e6c8a8db68e515c277bbea82\ a7570d4280896c987a0608903e306c632a223c55f0ea3682039c4a3f5440f4b5ac3e\ 6ed2b2dc900cecc72b72f50e49b2629ad30f0487b2707b86286f8c4f55659b25f9bd\ d7a6af460cc3c57a3982663bb717461581e196894929d84153d87a7f482d284b5b89\ 4ce1a78216b2a011f2b88742cee52d5133e8fe77edae242f5af91637c37ffca32430\ 509b2fe4756303a9a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df\ 254b92cdaa40f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a68\ 60284ec3ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e4\ 2f8db590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e\ 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4dc3a0\ 428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f448886b802\ e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1d73caf8496d7\ 42ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d951bd8c35d61f8a6\ 78db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a1070ea61aabbf59294e3f6f\ 974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900d281b0b49aa00feabb35714a\ f33870edd7ac2393d93177f79ee5606c9df176f025ce49a6e5ff51a2a412ebf86ac0\ f40471c96ad4c119df230be6173df530ed656cbd8069214741ecdd0271c603fb6c4a\ 8614ff878d33e726cac6693e938ca3fba82c4995c14a2d4af9014fe4c4c50b794cac\ 596b52189f66a7106fb325b526ea046b17d1f2e12c4247f8bce6e563a440f277037d\ 812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b\ 315ececbb6406837bf51f5" } Figure 3: ML-DSA-65-ES256 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "eddsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "87Vn3JTmvTdxvpetv0rA5GwfoLnCkMxBDCJvYgFVuh4", "kty": "AKP", "alg": "ML-DSA-65-Ed25519", "pub": "\ QksvJn5Y1bO0TXGs_Gpla7JpUNV8YdsciAvPof6rRD8JQquL2619cIq7w1YHj22ZolIn\ Prabel, et al. Expires 14 March 2027 [Page 46] Internet-Draft JOSE/COSE Composite Signatures September 2026 H-YsdAkeuUr7m5JkxQqIjg3-2AzV-\ yy9NmfmDVOevkSTAhnNT67RXbs0VaJkgCufSbzkLudVD-_91GQqVa3mk4aKRgy-\ wD9PyZpOMLzP-\ opHXlOVOWZ067galJN1h4gPbb0nvxxPWp7kPN2LDlOzt_tJxzrfvC1PjFQwNSDCm_l-\ Ju5X2zQtlXyJOTZSLQlCtB2C7jdyoAVwrftUXBFDkisElvgmoKlwBks23fU0tfjhwc0L\ VWXqhGtFQx8GGBQ-\ zol3e7P2EXmtIClf4KbgYq5u7Lwu848qwaItyTt7EmM2IjxVth64wHlVQruy3GXnIurc\ aGb_qWg764qZmteoPl5uAWwuTDX292Sa071S7GfsHFxue5lydxIYvpVUu6dyfwuExEub\ CovYMfz_LJd5zNTKMMatdbBJg-Qd6JPuXznqc1UYC3CccEXCLTOgg_auB6EUdG0b_cy-\ 5bkEOHm7Wi4SDipGNig_ShzUkkot5qSqPZnd2I9IqqToi_0ep2nYLBB3ny3teW21Qpcc\ oom3aGPt5Zl7fpzhg7Q8zsJ4sQ2SuHRCzgQ1uxYlFx21VUtHAjnFDSoMOkGyo4gH2wcL\ R7-z59EPPNl51pljyNefgCnMSkjrBPyz1wiET-\ uqi23f8Bq2TVk1jmUFxOwdfLsU7SIS30WOzvwD_gMDexUFpMlEQyL1-\ Y36kaTLjEWGCi2tx1FTULttQx5JpryPW6lW5oKw5RMyGpfRliYCiRyQePYqipZGoxOHp\ vCWhCZIN4meDY7H0RxWWQEpiyCzRQgWkOtMViwao6Jb7wZWbLNMebwLJeQJXWunk-\ gTEeQaMykVJobwDUiX-E_E7fSybVRTZXherY1jrvZKh8C5Gi5VADg5Vs319uN8-\ dVILRyOOlvjjxclmsRcn6HEvTvxd9MS7lKm2gI8BXIqhzgnTdqNGwTpmDHPV8hygqJWx\ WXCltBSSgY6OkGkioMAmXjZjYq_Ya9o6AE7WU_hUdm-\ wZmQLExwtJWEIBdDxrUxA9L9JL3weNyQtaGItPjXcheZiNBBbJTUxXwIYLnXtT1M0mHz\ MqGFFWXVKsN_AIdHyv4yDzY9m-tuQRfbQ_2K7r5eDOL1Tj8DZ-\ s8yXG74MMBqOUvlglJNgNcbuPKLRPbSDoN0E3BYkfeDgiUrXy34a5-vU-\ PkAWCsgAh539wJUUBxqw90V1Du7eTHFKDJEMSFYwusbPhEX4ZTwoeTHg--\ 8Ysn4HCFWLQ00pfBCteqvMvMflcWwVfTnogcPsJb1bEFVSc3nTzhk6Ln8J-\ MplyS0Y5mGBEtVko_WlyeFsoDCWj4hqrgU7L-\ ww8vsCRSQfskH8lodiLzj0xmugiKjWUXbYq98x1zSnB9dmPy5P3UNwwMQdpebtR38N9I\ -jup4Bzok0-JsaOe7EORZ8ld7kAgDWa4K7BAxjc2eD540Apwxs-\ VLGFVkXbQgYYeDNG2tW1Xt20-XezJqZVUl6-\ IZXsqc7DijwNInO3fT5o8ZAcLKUUlzSlEXe8sIlHaxjLoJ-\ oubRtlKKUbzWOHeyxmYZSxYqQhSQj4sheedGXJEYWJ-Y5DRqB-xpy-\ cftxL10fdXIUhe1hWFBAoQU3b5xRY8KCytYnfLhsFF4O49xhnax3vuumLpJbCqTXpLur\ eoKg5PvWfnpFPB0P-\ ZWQN35mBzqbb3ZV6U0rU55DvyXTuiZOK2Z1TxbaAd1OZMmg0cpuzewgueV-\ Nh_UubIqNto5RXCd7vqgqdXDUKAiWyYegYIkD4wbGMqIjxV8Oo2ggOcSj9UQPS1rD5u0\ rLckAzsxyty9Q5JsmKa0w8Eh7Jwe4Yob4xPVWWbJfm916avRgzDxXo5gmY7txdGFYHhl\ olJKdhBU9h6f0gtKEtbiUzhp4IWsqAR8riHQs7lLVEz6P537a4kL1r5FjfDf_yjJDBQm\ y_kdWMDqaNln-MlKK8eENjUO-qZGy0Ql4bMZtNbHXjfJUuSzapA-\ RqYfkqSLKgQUOW8NTDKhUk73yqCU3TQqDEKaGAoTsPscyMm7u_8QrvUK8kbc-\ XnxrWZ0BZJBjdinzh2w-QvjbWQ5mqFp4OMgY94__tIU8vvCUNJiYA1RdyodlfPfH5-\ avpxOCvBD6C7ZIDyQ-\ 6huGEQEAb6DP8ydWIZQ8xY603DoEKKXkJWcP6CJo3nHFEdj_vcEbDQ-\ WESDpcQFa1fRIiGuALj-\ sEWcjGdSHyE8QATOcuWl4TLVzRPKAf4tCXx1zyvhJbXQu0jf0yfzVpOhPun4n-\ xqK4SxPBCeuJOkQ2VG9jDXWH4pnjbAcrqjveJqVti7huMXTLGuqU2uoihBw6mGqu_WSl\ OP2-XTEyRyvxbv2t-z9V6GPt1V9ceBukA0oGwtJqgD-\ q7NXFK8zhw7desI5PZMXf3nuVgbJ3xdvAlzkmm5f9RoqQS6_hqwPQEcclq1MEZ3yML5h\ c99TDtZWy9gGkhR0Hs3QJxxgP7bEqGFP-\ HjTPnJsrGaT6TjKP7qCxJlcFKLUr5AU_kxMULeUysWWtSGJ9mpxBvsyW1Juo7aie8zra\ kLWKjqNAqbw1zZTIVdx3iQ6Y6wEihi1naKQ", Prabel, et al. Expires 14 March 2027 [Page 47] Internet-Draft JOSE/COSE Composite Signatures September 2026 "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAA" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNjUtRWQyNTUxOSIsImtpZCI6Ijg3Vm4zSlRtdlRkeHZwZXR2\ MHJBNUd3Zm9MbkNrTXhCRENKdllnRlZ1aDQifQ.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.\ HQzXDOt_0U5JbfGg3fySZbFMUN0oMYioizVn8LMY6gR22JZBDsl2jQDdo05OHipwSzh0\ MtL_LLfARhpLiy1NpHOKAY2vCkVRQZEnInlxVDPWy2j2qLhLj6R11Hy6DVATfFM8flaj\ 8h4J5dwbATjxcnkmx7lTzkUU8iqucFiM3QTJAOkh9zd4-\ P8pWMPCqZezcGEPZvGwAf0nYY4bETkluouEt7xZ6HitQUSl_csj1PaI0lT0bu9sjI8Kl\ 4QGMa46ZpYvAaHI2dEGrI-\ h96rVSYICli2SfvoQixGXucAJBpcJV9Zgw7QWz2XrIV45TyFBzp_DrSF7Q9_ojQN9Mh2\ TN9gx52-\ K6ZEsvxckX6Dh_nxieeCE5YJBzjowB2rL5SBa9nCAHOjQTuahHriWMoscQT9mQeqUOM1\ aOjkGwJYIM_hyeWX2ILIm1ViO951S52iI-v7Po-0sSK_P7GlOYELHwjWrbbHX7rSyPL-\ ZEOVMwVp1TDIsdcLJhVyjQnyxphtRJGAqEjjaIFkGj5pZPVl0IoWOC0TdSE3rfUuXjmo\ 5seD6HrX7s2sCUUVftMepSD9mow1x3W9gIQEcqn8xIwqMYFlDsbRrGncCJGZ3xR4VktO\ Alv4fAK2JvSf15ooh58WOi1ACNDWQXZQxGOITCWXjQjwQ-8Rs78KkRuHrunNwS-\ KpAXaRTzvd14zbdX87zaT2itx7PEfaQZ6zvEalW-GlGJnAqyE4Ncmd9-\ vmg4ZNaWexCM7WaZ0is0z0nptLkRkzcQVbfzNfhkhcL1EfQp-\ iSOjuZlDl3zsWW66b8Z2WXTs1ANLuRmWNdEhkefHsT7RbmsZqoXieBQSy4etk7LWxEUo\ 7QwyRUttj0npRH4B0_jAY5RUJxcoUySom4f2KRGeDnk3ACyxEwsqzSoImiDEXL93rbjT\ iKacerNOe-ET-\ vekzUytuS5Rwp5PpFEhRaGDtYkUXoF39vrHg6KXEbcZIdMTfVERKrrskoZRDs32kT--\ e1a-\ L5lVJAHQDkEr7zr_icNZUp2vagN2wxsn016962jDdYn6VxtxqatsPO7ZAV3ekNYgzxyc\ u0I4VzctooEFh7l5rcU4zakCPrJhPu2F2nzozPhJH1MQwIQvy479C3MBn9-\ IsilRjh01ZEkWmwzl_lzIDLR005tMRfQr2hOewbpI6ZbDvuTf3ycXJ2Acy-\ VsJ1BOVDJt_HP4axvNMWGPqQWuWYN6la4Ok1HQBxAHRr5b-AArfsVepUFUyZyPA1Ej8c\ -ldaXWFChWJYK98aLLIPl2k0ZPaen8aq8NQCrP1OQZ7BC1yI-eJ4F-\ fCPU0II1f4QycmTQAyq8eHpmz6Zsafrz_H4aueQrs5zaPErqrsQJGvGDdUtphYkedwkA\ fUE7Uj6UZ4rHDcRm6uzBBtLkQGgA0ELyCRs6E71X7RsOC4_ztcngVGlsPymedNIM0pZy\ hM8lElHQz-\ OySh5Q5Ewdjck0TC6pA72yM3gf7xFgH3bzItSy3_REB7L89dbPD1fg1t56wMDTkuZXgx\ YH2CeDjkrHbUeP1MsJ8srg0E8k1A226op9l3DpSZAS4baPGdEXHKTDD4yylZuq-\ az9QSPQJUjSn1mYHFzJRLXtUwiGOmTtpZ-\ 6xocxGybFAx71qCJs_swcpthX9H7vaIXjUKLtYQwesZ8ak8Csofg8vCHcNRarh_bP8Ef\ zILJtHqTkHAwNwYNPUyUzxUdDG_qB2PeGxREzgAKG1dA_GeKLoEY4Z2mGxoBiatmdOKJ\ VIsoRH7lfiUe9urawNcdZ9NZxCYZKK9gvgxCzQC8tuSLp8H-\ 6hv65Oec4WFibfOhUjval_o4iN4gOvV2mGQT4giswbBAXAI7JyGf-\ W2Hgaw2mTlcz1MHOZhoPH7ZH9D4FLM1pteD8vyUwwF2Nri8OWQxkFk5o6CkujbmQYveR\ CEV5GiNFEtH53JSgi6SbXHTVN4UBUn6V6fz6jNICJZ6J3qw3qFQ6bVa0n4ge61gQFRPX\ 4enSdoaTZNtIbfkU1m89CEqUASlcUZeVpXjU8vhn3vbW-kToThYxd_D-\ yQCY8GWzrisBW4ejt3cnVKTNjDQJp7J5-\ 7u2OoBMcu4536PylI4ZeWSU_au0DuBYQuXzgmowQMwzVpJrmmaOJTOYxg1T2zKxhXbv4\ Prabel, et al. Expires 14 March 2027 [Page 48] Internet-Draft JOSE/COSE Composite Signatures September 2026 0CXzM7DqNv11Rrgxa7Fu0NDMGyWqpVAF7lJx-\ oS28r04F7WP3XcHVcF9NjtfbeVOnneN7IjnKL0uLhuSgDU-\ tOTu0OF9TyPZUKrPAKZEa9e-\ FmNIwxKFIPwa_kzOOgu1ce8IlFyoyxYQDcILKIdDX8rrPTR0TvN8yKSA44TYaQsyr9Ys\ rY0Kwq3LANKfn1LLSq45nRzLyuKbHX0QR0omUVV3nRrs8IEW8aPqWUzzqFME-\ MFPWuNG3OqwFrVswNZANvcBJikQWien3Ni8bFrRJr_RVp9RL1n_Q8f5IZeMAxtQ7lwsi\ v4nhbw2r5i1DXWuDhkkoHTZ4jP8SNYFYDkWRx44NPwaCASSnCmE5zGqTVKKpUIylEUyj\ 6IXV6J0lHAnJcy93z4div-q8RADTS46UF4j_Ob7Ds3AXjfXty-\ LNeia7ITk5DZl1fA4WOXTp94NAh8Vn-3ZkERATOtN5rtKxqz33-93y5LPpxiuGhy-\ pCOQU0int-\ d9fO6F3uIPuFhNATn0RnvkXn5wV25BNqRRg25d44OZ56cZ831yfHL32dYfs6XX2iYSZ7\ Djgw2sMnGd6IhNrZzuqWw68CfSgLoFGf-\ uH95HtykcI6ZCikeviHQyB464jzh1cvE0XIj2b-YktNr7LJPn-Gho2faAHWlIqYivB0-\ Qwi1tz3PvWCazKNK1q88lmfVbrhf8OsmjkmH46gcUB3vfteDysfRphYhn5jNOnuPQW6A\ 2l53VCiEHnD8l1zL8cF1vhNvBHQR_V57VDyxafqs7IdGcZ0C3hVMtxoiy6Shujl7LKR5\ 1IcyaIGcBZdBS8Up4VPTMNps0I4JEP7CJysYf6HEUID6HGcNmX1T61yK6QLFtza73VB7\ oFgUOB6G4Jd8dNRbgR1FliDxdQmThMNisLL64m2_6BjTtCNDOarlcVi7UmZynleQ0ZaN\ _epx5JdPWB9EjtHBeN4kv_VrAj75jxLz-\ Qqrlvt_bWijsAkxWC0vxk8xYw2D52pbMORdXIaO-\ mGB8Wt0wj9KtTWDTrCZO1bqkWyA2Bx1Fh2boYjagrUOCnVCTW_J27RsJ6HLZ5ixUfeeV\ BH_j4C-hZCYDq-\ 8kju6hjXACjfUzpDzc_XpMdzIxZcsQCx6ORB7lgWZgH3brq5aCD0s2kLHjCaRLfl0Owi\ 4hyYIx7AjMZMEpf3HWztxawZcR_8aBL-\ IKwxZcVJ4H7D8OLcYvhxOUxeWVtoKTQIhyh4qfeSyciZQnTjdyZ42FxfiTJzVYvTqC9O\ MGUqX8Y6uPvI9rojCzp_CMzd6ne0ANdwvJzfHn0RZlixAuHYWkUm2MlAOaSjJzsYMxAc\ NeLC1GqNFivCH-k1ToLh3A_ELOWL05ny7eB-\ sTbtUQ4M3jsATs3zJ9jE1OVugrJUA297bHyoDhSV3UUnIcLUuVaVkLSejniMKTK1RFuA\ 3qHdh8vLVkmwhHcEeNYClc6uac8X4-GP3nmoO7aOlhzKleNSAAZ3pX-\ za5KLJzRfpoK3K77EdVXqSOF3_LMMFdrQOZll8B_BRCAKqPg-\ yqcR3_3pTmd2eiKSQ58JGDRex9EE3WD6u2ia8H9G-OG0Hi0GR8XEpYa41LOfJcPVw-\ 3mnXjoVCI7SAf_oOLvKTPO8k6qef9vGS6MjNVUF9jOfkONI8RDibJm0aEKqK6EUB6cgQ\ mZhv5ZuK3Pig4dmQjSS8EovSQt-\ e0IQepxh9U4b28sBA_1wz5jzHqUPQRteUyrebuHuYV6qffcSnEs23uZYvXL7xWY6RfB3\ nzm6p4p7G6sVhKUR66sSHoFzjCkYG97HEOZRb-\ C6CtQ_s9eX5FpQftzmuxaKvfnjnmoxlkzbQja7iv_WLmIWC74aEpnp0Qkz5nUVklGA5p\ bnShMc1MTQdpyzZfOt1v2gf8TTOx_HBw-\ p4CRM61kiKWSJ8fo3pRAWmAVVvDb0PQj08VkAKqgCybPRbDM4gapiQR7S9FTjLpH5Atg\ NR1M_QRRgrN6AKwYob_mHpCTADljG97h1T_hTy6gfp2c_hWxRK2rpSQVmyOhOfJwU744\ fpwh9wK1RCRL_Gg5rF9jHiH7Kda_HbM3DFGclLlYz5VV7a18i5r-\ BzsstYrNzQSd9T0oyeQewOU9tJxzPhXFxXoNKaezF-\ q4qWG8qN2BrTE_FlcuUkSNXh4KS3l-\ gDIJdVe_4bSaz5IVaio9Y3VGR_g7a3xQVGmJvu8fsGUrXfIFN6qa3CzwAAAAAAAAAAAA\ AAAAAAAAAAAAAABAkRGBwjNUYAqgGJg3NQcfHhBVBj2oVBjTkJ-\ s_G7cw3fKwZThZbntTjBar8kdYMKJ093EIMqQcN9wICjPVuEdzV3hHZDg", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e6a5574525751794e5455784f53\ 4973496d74705a434936496a6733566d347a536c5274646c526b65485a775a585232\ 4d484a424e5564335a6d394d626b4e725458684352454e4b646c6c6e526c5a316144\ Prabel, et al. Expires 14 March 2027 [Page 49] Internet-Draft JOSE/COSE Composite Signatures September 2026 516966512e5358516e6379426849475268626d646c636d39316379426964584e7062\ 6d567a63797767526e4a765a473873494764766157356e4947393164434235623356\ 794947527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534136352d456432353531392d534841353132009baf580467\ 49538103f9d14500c2e6a53857983cee47d2a8b6f6170ecee7ba4f854c69a342305f\ aeb17563aa5269250d7be5c3ec63a4e9429e1f5399f014a7f1", "raw_composite_signature": "\ 1d0cd70ceb7fd14e496df1a0ddfc9265b14c50dd283188a88b3567f0b318ea0476d8\ 96410ec9768d00dda34e4e1e2a704b387432d2ff2cb7c0461a4b8b2d4da4738a018d\ af0a45514191272279715433d6cb68f6a8b84b8fa475d47cba0d50137c533c7e56a3\ f21e09e5dc1b0138f1727926c7b953ce4514f22aae70588cdd04c900e921f73778f8\ ff2958c3c2a997b370610f66f1b001fd27618e1b113925ba8b84b7bc59e878ad4144\ a5fdcb23d4f688d254f46eef6c8c8f0a97840631ae3a66962f01a1c8d9d106ac8fa1\ f7aad5498202962d927efa108b1197b9c00906970957d660c3b416cf65eb215e394f\ 2141ce9fc3ad217b43dfe88d037d321d9337d831e76f8ae9912cbf17245fa0e1fe7c\ 6279e084e58241ce3a30076acbe5205af670801ce8d04ee6a11eb896328b1c413f66\ 41ea9438cd5a3a3906c0960833f8727965f620b226d5588ef79d52e76888fafecfa3\ ed2c48afcfec694e6042c7c235ab6db1d7eeb4b23cbf9910e54cc15a754c322c75c2\ c9855ca3427cb1a61b5124602a1238da2059068f9a593d597422858e0b44dd484deb\ 7d4b978e6a39b1e0fa1eb5fbb36b0251455fb4c7a9483f66a30d71dd6f6021011caa\ 7f31230a8c605943b1b46b1a7702246677c51e1592d38096fe1f00ad89bd27f5e68a\ 21e7c58e8b50023435905d943118e2130965e3423c10fbc46cefc2a446e1ebba7370\ 4be2a90176914f3bddd78cdb757f3bcda4f68adc7b3c47da419eb3bc46a55be1a518\ 99c0ab213835c99df7ebe683864d6967b108ced6699d22b34cf49e9b4b9119337105\ 5b7f335f86485c2f511f429fa248e8ee6650e5df3b165bae9bf19d965d3b3500d2ee\ 46658d74486479f1ec4fb45b9ac66aa1789e0504b2e1eb64ecb5b1114a3b430c9152\ db63d27a511f8074fe3018e51509c5ca14c92a26e1fd8a4467839e4dc00b2c44c2ca\ b34a82268831172fddeb6e34e229a71eacd39ef844febde933532b6e4b9470a793e9\ 1448516860ed624517a05dfdbeb1e0e8a5c46dc64874c4df54444aaebb24a19443b3\ 7da44fef9ed5af8be65549007403904afbcebfe270d654a76bda80ddb0c6c9f4d7af\ 7ada30dd627e95c6dc6a6adb0f3bb6405777a4358833c7272ed08e15cdcb68a04161\ ee5e6b714e336a408fac984fbb61769f3a333e1247d4c430210bf2e3bf42dcc067f7\ e22c8a5463874d591245a6c3397f9732032d1d34e6d3117d0af684e7b06e923a65b0\ efb937f7c9c5c9d80732f95b09d413950c9b7f1cfe1ac6f34c5863ea416b9660dea5\ 6b83a4d47401c401d1af96fe000adfb157a95055326723c0d448fc73e95d6975850a\ 158960af7c68b2c83e5da4d193da7a7f1aabc3500ab3f539067b042d7223e789e05f\ 9f08f534208d5fe10c9c993400caaf1e1e99b3e99b1a7ebcff1f86ae790aece7368f\ 12baabb10246bc60dd52da6162479dc2401f504ed48fa519e2b1c37119babb3041b4\ b9101a003410bc8246ce84ef55fb46c382e3fced7278151a5b0fca679d348334a59c\ a133c944947433f8ec92879439130763724d130baa40ef6c8cde07fbc45807ddbcc8\ b52cb7fd1101ecbf3d75b3c3d5f835b79eb03034e4b995e0c581f609e0e392b1db51\ e3f532c27cb2b83413c935036dbaa29f65dc3a526404b86da3c67445c72930c3e32c\ a566eabe6b3f5048f4095234a7d666071732512d7b54c2218e993b6967eeb1a1cc46\ c9b140c7bd6a089b3fb30729b615fd1fbbda2178d428bb584307ac67c6a4f02b287e\ 0f2f08770d45aae1fdb3fc11fcc82c9b47a9390703037060d3d4c94cf151d0c6fea0\ 763de1b1444ce000a1b5740fc678a2e8118e19da61b1a0189ab6674e289548b28447\ Prabel, et al. Expires 14 March 2027 [Page 50] Internet-Draft JOSE/COSE Composite Signatures September 2026 ee57e251ef6eadac0d71d67d359c4261928af60be0c42cd00bcb6e48ba7c1feea1bf\ ae4e79ce161626df3a1523bda97fa3888de203af576986413e208acc1b0405c023b2\ 7219ff96d8781ac3699395ccf53073998683c7ed91fd0f814b335a6d783f2fc94c30\ 17636b8bc396431905939a3a0a4ba36e6418bde442115e4688d144b47e77252822e9\ 26d71d354de140549fa57a7f3ea334808967a277ab0dea150e9b55ad27e207bad604\ 0544f5f87a749da1a4d936d21b7e45359bcf4212a5004a571465e5695e353cbe19f7\ bdb5be913a13858c5dfc3fb240263c196ceb8ac056e1e8edddc9d52933630d0269ec\ 9e7eeeed8ea0131cbb8e77e8fca523865e59253f6aed03b81610b97ce09a8c10330c\ d5a49ae699a3894ce6318354f6ccac615dbbf8d025f333b0ea36fd7546b8316bb16e\ d0d0cc1b25aaa55005ee5271fa84b6f2bd3817b58fdd770755c17d363b5f6de54e9e\ 778dec88e728bd2e2e1b9280353eb4e4eed0e17d4f23d950aacf00a6446bd7be1663\ 48c3128520fc1afe4cce3a0bb571ef08945ca8cb16100dc20b2887435fcaeb3d3474\ 4ef37cc8a480e384d8690b32afd62cad8d0ac2adcb00d29f9f52cb4aae399d1ccbca\ e29b1d7d10474a265155779d1aecf08116f1a3ea594cf3a85304f8c14f5ae346dcea\ b016b56cc0d64036f7012629105a27a7dcd8bc6c5ad126bfd1569f512f59ff43c7f9\ 21978c031b50ee5c2c8afe2785bc36af98b50d75ae0e1924a074d9e233fc48d60560\ 3916471e3834fc1a0804929c2984e731aa4d528aa542329445328fa21757a2749470\ 2725ccbddf3e1d8affaaf110034d2e3a505e23fce6fb0ecdc05e37d7b72f8b35e89a\ ec84e4e43665d5f03858e5d3a7de0d021f159fedd99044404ceb4de6bb4ac6acf7df\ ef77cb92cfa718ae1a1cbea423905348a7b7e77d7cee85dee20fb8584d0139f4467b\ e45e7e70576e4136a451836e5de38399e7a719f37d727c72f7d9d61fb3a5d7da2612\ 67b0e3830dac32719de8884dad9ceea96c3af027d280ba0519ffae1fde47b7291c23\ a6428a47af887432078eb88f387572f1345c88f66fe624b4dafb2c93e7f86868d9f6\ 801d6948a988af074f90c22d6dcf73ef5826b328d2b5abcf2599f55bae17fc3ac9a3\ 9261f8ea0714077bdfb5e0f2b1f469858867e6334e9ee3d05ba036979dd50a21079c\ 3f25d732fc705d6f84dbc11d047f579ed50f2c5a7eab3b21d19c6740b785532dc688\ b2e9286e8e5ecb291e7521cc9a20670165d052f14a7854f4cc369b342382443fb089\ cac61fe87114203e8719c3665f54fad722ba40b16dcdaef7541ee816050e07a1b825\ df1d3516e0475165883c5d4264e130d8ac2cbeb89b6ffa0634ed08d0ce6ab95c562e\ d4999ca795e43465a37f7a9c7925d3d607d123b4705e37892ffd5ac08fbe63c4bcfe\ 42aae5bedfdb5a28ec024c560b4bf193cc58c360f9da96cc39175721a3be98607c5a\ dd308fd2ad4d60d3ac264ed5baa45b2036071d458766e86236a0ad43829d50935bf2\ 76ed1b09e872d9e62c547de795047fe3e02fa1642603abef248eeea18d70028df533\ a43cdcfd7a4c77323165cb100b1e8e441ee58166601f76ebab96820f4b3690b1e309\ a44b7e5d0ec22e21c98231ec08cc64c1297f71d6cedc5ac19711ffc6812fe20ac316\ 5c549e07ec3f0e2dc62f871394c5e595b68293408872878a9f792c9c8994274e3772\ 678d85c5f893273558bd3a82f4e30652a5fc63ab8fbc8f6ba230b3a7f08ccddea77b\ 400d770bc9cdf1e7d116658b102e1d85a4526d8c94039a4a3273b1833101c35e2c2d\ 46a8d162bc21fe9354e82e1dc0fc42ce58bd399f2ede07eb136ed510e0cde3b004ec\ df327d8c4d4e56e82b254036f7b6c7ca80e1495dd452721c2d4b9569590b49e8e788\ c2932b5445b80dea1dd87cbcb5649b084770478d60295ceae69cf17e3e18fde79a83\ bb68e961cca95e352000677a57fb36b928b27345fa682b72bbec47555ea48e177fcb\ 30c15dad0399965f01fc144200aa8f83ecaa711dffde94e67767a2292439f0918345\ ec7d104dd60fabb689af07f46f8e1b41e2d0647c5c4a586b8d4b39f25c3d5c3ede69\ d78e854223b4807ffa0e2ef2933cef24eaa79ff6f192e8c8cd55417d8ce7e438d23c\ 44389b266d1a10aa8ae84501e9c81099986fe59b8adcf8a0e1d9908d24bc128bd242\ df9ed0841ea7187d5386f6f2c040ff5c33e63cc7a943d046d794cab79bb87b9857aa\ 9f7dc4a712cdb7b9962f5cbef1598e917c1de7ce6ea9e29ec6eac56129447aeac487\ Prabel, et al. Expires 14 March 2027 [Page 51] Internet-Draft JOSE/COSE Composite Signatures September 2026 a05ce30a4606f7b1c439945bf82e82b50fecf5e5f916941fb739aec5a2af7e78e79a\ 8c659336d08daee2bff58b988582ef8684a67a74424cf99d4564946039a5b9d284c7\ 3531341da72cd97ceb75bf681ff134cec7f1c1c3ea7809133ad6488a59227c7e8de9\ 4405a601556f0dbd0f423d3c56400aaa00b26cf45b0cce206a989047b4bd1538cba4\ 7e40b60351d4cfd045182b37a00ac18a1bfe61e90930039631bdee1d53fe14f2ea07\ e9d9cfe15b144adaba524159b23a139f27053be387e9c21f702b544244bfc6839ac5\ f631e21fb29d6bf1db3370c519c94b958cf9555edad7c8b9afe073b2cb58acdcd049\ df53d28c9e41ec0e53db49c733e15c5c57a0d29a7b317eab8a961bca8dd81ad313f1\ 6572e52448d5e1e0a4b797e8032097557bfe1b49acf92156a2a3d63754647f83b6b7\ c50546989beef1fb0652b5df20537aa9adc2cf000000000000000000000000000000\ 0000000000040911181c23354600aa018983735071f1e1055063da85418d3909facf\ c6edcc377cac194e165b9ed4e305aafc91d60c289d3ddc420ca9070df702028cf56e\ 11dcd5de11d90e", "raw_composite_public_key": "\ 424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f0942\ ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c50a888e0d\ fed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264802b9f49bce4\ 2ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bccffa8a475e539539\ 6674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e53b3b7fb49c73adfbc2d\ 4f8c54303520c29bf97e26ee57db342d957c893936522d0942b41d82ee3772a00570\ adfb545c1143922b0496f826a0a970064b36ddf534b5f8e1c1cd0b5565ea846b4543\ 1f0618143ece89777bb3f61179ad20295fe0a6e062ae6eecbc2ef38f2ac1a22dc93b\ 7b126336223c55b61eb8c0795542bbb2dc65e722eadc6866ffa9683beb8a999ad7a8\ 3e5e6e016c2e4c35f6f7649ad3bd52ec67ec1c5c6e7b9972771218be9554bba7727f\ 0b84c44b9b0a8bd831fcff2c9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355\ 180b709c7045c22d33a083f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a46\ 36283f4a1cd4924a2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded79\ 6db542971ca289b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb16\ 25171db5554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963\ c8d79f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c\ bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c45860a2d\ adc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c9078f62a\ 8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345081690eb4c56\ 2c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a3329152686f00d48\ 97f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e5500383956cdf5f6e37c\ f9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177d312ee52a6da023c05722a87\ 38274dda8d1b04e99831cf57c87282a256c565c296d0524a063a3a41a48a83009978\ d98d8abf61af68e8013b594fe151d9bec199902c4c70b49584201743c6b53103d2fd\ 24bdf078dc90b5a188b4f8d772179988d0416c94d4c57c0860b9d7b53d4cd261f332\ a1851565d52ac37f008747cafe320f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f\ 0367eb3cc971bbe0c301a8e52f96094936035c6ee3ca2d13db483a0dd04dc16247de\ 0e0894ad7cb7e1ae7ebd4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c\ 5283244312158c2eb1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b\ 5eaaf32f31f95c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e329972\ 4b4639986044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec90\ 7f25a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107\ 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0aec1\ 0318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4f977b326\ Prabel, et al. Expires 14 March 2027 [Page 52] Internet-Draft JOSE/COSE Composite Signatures September 2026 a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734a51177bcb089\ 476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a90852423e2c85e79d197\ 24461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5856141028414ddbe7145\ 8f0a0b2b589df2e1b051783b8f718676b1defbae98ba496c2a935e92eeadea0a8393\ ef59f9e914f0743fe65640ddf9981cea6dbdd957a534ad4e790efc974ee89938ad99\ d53c5b680775399326834729bb37b082e795f8d87f52e6c8a8db68e515c277bbea82\ a7570d4280896c987a0608903e306c632a223c55f0ea3682039c4a3f5440f4b5ac3e\ 6ed2b2dc900cecc72b72f50e49b2629ad30f0487b2707b86286f8c4f55659b25f9bd\ d7a6af460cc3c57a3982663bb717461581e196894929d84153d87a7f482d284b5b89\ 4ce1a78216b2a011f2b88742cee52d5133e8fe77edae242f5af91637c37ffca32430\ 509b2fe4756303a9a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df\ 254b92cdaa40f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a68\ 60284ec3ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e4\ 2f8db590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e\ 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4dc3a0\ 428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f448886b802\ e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1d73caf8496d7\ 42ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d951bd8c35d61f8a6\ 78db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a1070ea61aabbf59294e3f6f\ 974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900d281b0b49aa00feabb35714a\ f33870edd7ac2393d93177f79ee5606c9df176f025ce49a6e5ff51a2a412ebf86ac0\ f40471c96ad4c119df230be6173df530ed656cbd8069214741ecdd0271c603fb6c4a\ 8614ff878d33e726cac6693e938ca3fba82c4995c14a2d4af9014fe4c4c50b794cac\ 596b52189f66a7106fb325b526ea3b6a27bcceb6a42d62a3a8d02a6f0d7365321577\ 1de243a63ac048a18b59da29" } Figure 4: ML-DSA-65-Ed25519 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "ecdsa_d": "\ 00000000000000000000000000000000000000000000000000000000000000000000\ 0000000000000000000000000001", "jwk": { "kid": "yH7Hzh-v4jQOca8n6vLtFOG31o0pT2MDZD5FtvQ7Reg", "kty": "AKP", "alg": "ML-DSA-87-ES384", "pub": "\ 5F_8jMc9uIXcZi5ioYzY44AylxF_pWWIFKmFtf8dt7Roz8gruSnx2Gt37RT1rhamU2h3\ LOUZEkEBBeBFaXWukf22Q7US8STV5gvWi4x-\ Mf4Bx7DcZa5HBQHMVlpuHfz8_RJWVDPEr-3VEYIeLpYQxFJ14oNt7jXO1p1--\ mcv0eQxi-\ 9etuiX6LRRqiAt7QQrKq73envj9pkUbaIpqL2z_6SWRFln51IXv7yQSPmVZEPYcx-\ DPrMN4Q2slv_-fPZeoERcPjHoYB4TO-ahAHZP4xluJncmRB8xdR-\ Prabel, et al. Expires 14 March 2027 [Page 53] Internet-Draft JOSE/COSE Composite Signatures September 2026 _mm9YgGRPTnJ15X3isPEF5NsFXVDdHJyTT931NbjeKLDHTARJ8iLNLtC7j7x3XM7oyUB\ mW0D3EvT34AdQ6eHkzZz_JdGUXD6bylPM1PEu7nWBhW69aPJoRZVuPnvrdh8P51vdMb_\ i-gGBEzl7OHvVnWKmi4r3-\ iRauTLmn3eOLO79ITBPu4CZ6hPY6lfBgTGXovda4lEHW1Ha04-\ FNmnp1fmKNlUJiUGZOhWUhg-\ 6cf5TDuXCn1jyl4r2iMy3Wlg4o1nBEumOJahYOsjawfhh_Vjir7pd5aUuAgkE9bQrwId\ ONb788-YRloR2jzbgCPBHEhd86-\ YnYHOB5W6q7hYcFym43lHb3kdNSMxoJJ6icWK4eZPmDITtbMZCPLNnbZ61CyyrWjoEnv\ ExOB1iP6b7y8nbHnzAJeoEGLna0sxszU6V-izsJP7spwMYp1Fxa3IT9j7b9lpjM4NX-\ Dj5TsBxgiwkhRJIiFEHs9HE6SRnjHYU6hrwOBBGGfKuNylAvs-mninLtf9sPiCke-\ Sk90usNMEzwApqcGrMxv_T2OT71pqZcE4Sg8hQ2MWNHldTzZWHuDxMNGy5pYE3IT7BCD\ TGat_iu1xQGo7y7K3Rtnej3xpt64br8HIsT1Aw4g-QGN1bb8U-6iT9kre1tAJf6umW0-\ SP1MZQ2C261-r5NmOWmFEvJiU9LvaEfIUY6FZcyaVJXG__V83nMjiCxUp9tHCrLa-\ P_Sv3lPp8aS2ef71TLuzB14gOLKCzIWEovii0qfHRUfrJeAiwvZi3tDphKprIZYEr_qx\ vR0YCd4QLUqOwh_kWynztwPdo6ivRnqIRVfhLSgTEAArSrgWHFU1WC8Ckd6T5MpqJhN0\ x6x8qBePZGHAdYwz8qa9h7wiNLFWBrLRj5DmQLl1CVxnpVrjW33MFso4P8n060N4ghdK\ SSZsZozkNQ5b7O6yajYy-\ rSp6QpD8msb8oEX5imFKRaOcviQ2D4TRT45HJxKs63Tb9FtT1JoORzfkdv_E1bL3zSR6\ oYbTt2Stnpz-\ 7kVqc8KR2N45EkFKxDkRw3IXOte0cq81xoU87S_ntf4KiVZaszuqb2XN2SgxnXBl4EDn\ pehPmqkD92SAlLrQcTaxaSe47G28K-\ 8MwoVt4eeVkj4UEsSfJN7rbCH2yKl2XJx5huDaS0xn2ODQyNRmgk-\ 5I9hXMUiZDNLvEzx4zuyrcu2d0oXFo3ZoUtVFNCB__TQCf2x27ej9GjLXLDAEi7qnl9X\ fb94n0IfeVyGte3-j6NP3DWv8OrLiUjNTaLv6Fay1yzfUaU6LI86-\ Jd6ckloiGhg7kE0_hd-ZKakZxU1vh0Vzc6DW7MFAPky75iCZlDXoBpZjTNGo5HR-\ mCW_ozblu60U9zZA8bn-voANuu_hYwxh-\ uY1sHTFZOqp2xicnnMChz_GTm1Je8XCkICYegeiHUryEHA6T6B_L9gW8S_R4ptMD0Sv6\ b1KHqqKeubwKltCWPUsr2En9iYypnz06DEL5Wp8KMhrLid2AMPpLI0j1CWGJExXHpBWj\ fIC8vbYH4YKVl-\ euRo8eDcuKosb5hxUGM9Jvy1siVXUpIKpkZt2YLP5pEBP_EVOoHPh5LJomrLMpORr1wB\ KbEkfom7npX1g817bK4IeYmZELI8zXUUtUkx3LgNTckwjx90Vt6oVXpFEICIUDF_LAVM\ Uftzz6JUvbwOZo8iAZqcnVslAmRXeY_ZPp5eEHFfHlsb8VQ73Rd_p8XlFf5R1WuWiUGp\ 2TzJ-\ VQvj3BTdQfOwSxR9RUk4xjqNabLqTFcQ7As246bHJXH6XVnd4DbEIDPfNa8FaWb_DNEg\ QAiXGqa6n7l7aFq5_6Kp0XeBBM0sOzJt4fy8JC6U0DEcMnWxKFDtMM7q06LubQYFCEEd\ Q5b1Qh2LbQZ898tegmeF--\ EZ4F4hvYebZPV8sM0ZcsKBXyCr585qs00PRxr0S6rReekGRBIvXzMojmid3dxc6DPpdV\ 3x5zxlxaIBxO3i_6axknSSdxnS04_bemWqQ3CLf6mpSqfTIQJT1407GB4QINAAC9Ch3A\ XUR_n1jr64TGWzbIr8uDcnoVCJlOgmlXpmOwubigAzJattbWRi7k4QYBnA3_4QMjt73n\ 2Co4-\ F_Qh4boYLpmwWG2SwcIw2PeXGr2LY2zwkPR4bcSyx1Z6UK5trQpWlpQCxgsvV_RvGzpN\ 22RtHoihPH74K0cBIzCz7tK-\ jqeuWl1A7af7KmQ66fpRBr5ykTLOsa17WblkcIB_jDvqKfEcdxhPWJUwmOo4TIQS-\ xH8arLOy_NQFG2m14_yxwUemXC-QxLUYi6_FIcqwPBKjCdpQtadRdyftQSKO0SP-\ GxUvamMZzWI780rXuOBkq5kyYLy9QF9bf_-\ bL6QLpe1WMCQlOeXZaCPoncgYoT0WZ17jB52Xb2lPWsyXYK54npszkbKJ4OIqfvF8xqR\ XcVe22VwJuqT9Uy4-\ 4KKQgQ7TXla7Gdm2H7mKl8YXQlsGCT2Ypc8O4t0Sfw7qYAuaDGf752Hbm3fl1bupcB2h\ Prabel, et al. Expires 14 March 2027 [Page 54] Internet-Draft JOSE/COSE Composite Signatures September 2026 uIPlIaDP6IRR9XvTYIW2flbwYfhKLmoVKnG85uUi2qtqCjPOIuU3-\ peT0othfmwKQXaoOqO-\ V4r6wPL1VHxVFtIYmEdVt0RccUOvpOVR_OAHG9uHOzTmueK5557Qxp0ojtZCHyN-\ hgoMZJLrvdKkTCxPNo2-\ mZQbHoVh2FnThZ9JbO49dB8lKXP4_MU5xAnjXMgKXtbfI8w6ZWATE_XWgf2VQMUpGp4w\ py44yWQTxHxh_4T9540BGwG0FU0bkgrwA_erseGZnepqdmz5_ScCs84O5Xr5MbYhJLCG\ GxY6O5GqS-\ ooB2w0Mt87KbbE4bpYje9CAHH8FX3pDrJyLsyasA3zxmk4OmGpG7Z70ofONJtHRe56R5\ 287vFmuazEEutXn81kNzB-\ 3aJT1ga3vnWZw4CSvFKoWYSA7auLgrHSHFZdITfOrgtmQmGbFhM9kSBdY1UCnpzf65oo\ s3PZWRa2twfUxxLAnPNtrxpRGyvtsapw7ljUagZmuyh3hLCjhAxYmnoE1dbyIWvpCqSl\ EtVjL1yb_nuLEzgvmZuV02fHxGuWgHTOMVGXpf81Rce3eoBK3lapW1wkzezlk3tcA2bZ\ OtA9qbxdsbVR37kemzQ9K1e3Y0OWhtSjBKqHyiK-\ iwU3jrHHHvMgrXRuHTtii6ebmFn3QeCCVCo4VQLyXb9VKWw6VF44cnYKtzYX3kqWJixv\ XZ6Yv5KS3Cn49B29KJoUfOnaMRO18LjACmCxzh1-gZ16Qx18kOoOXw", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPgIBAQQwAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoAcGBSuBBAAi" }, "jws": "\ eyJhbGciOiJNTC1EU0EtODctRVMzODQiLCJraWQiOiJ5SDdIemgtdjRqUU9jYThuNnZM\ dEZPRzMxbzBwVDJNRFpENUZ0dlE3UmVnIn0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.Gr-\ m2mj44blFE8GI2xxWdoJ3_AwG4ysPNVVh0ganXkQDpvSiPubgG07DOVB0Nk4g-\ vasqvTbuAvknKvQaeSMwR0D6o3noXBtQT2oR-XjWKe30pgMzPQLf-\ NkQqKGZv3AoJ4GqUVx22ZWn3E0Mzb6XvNrRTzf7GC0tJTb786wx-\ dYRjJd0axkjTxD_xV8JZ-\ lMmUia2ATU3fIv2LBX0YWDOmSF31h86dh3g8Q3dbY7XDnwf_cWlGtfDfqDB0NDlsj_rq\ J-rhd7iH-0gtrrnEkHt5X_qK_0XgS-\ ro6eXvXpW7WMYcUbAMC0dfz6z98LaPwJ1_lxoYFHEAgAZvm4_M-\ fqgpgMbM_qgGzqnZFoOZC_E2hKpL7wpn-C5NFamV3M-\ WCSvSuX8txLlK7gf2RS7zjdnpX1QYQhXHJuydua-\ 51ekczClU2Y3wab_GnXGP5NWnzDrcpIuZnCBqB_o2EY_SCQ_Pdup9QTTdNVvTM-kqIN-\ 0DzCNYU8KHmZ3N_y1M9rZBZNjpPhYUSYqE2VWTWFhxL7Gr12XshR1pZs_rxpQtCkwSoA\ 7CY8eQ6NtDUAWIO87QeAtHNfpf0L2H_i85mZItDirJUHnBKkbvGl10qiCbqitjIfQLdB\ H2XawWDzz2J94uNztAbsp9GfYeALOD7uMiAd47GTiXV26F33-vdD-\ FmZoY6VJMCb7huk3AKhwbtOXkCP4BVmlGDYGaIXBUeQ4EenylcvBAXixejfken1r-\ 0XQ6TNWi_F14v7v_HMKPz0n_S38oNMIc7SfIEoVLQpwhg27EVwvHv94vPBmKNC8WGhtQ\ TeiimIouGp9mFF4ASlh2Vq6c0RX3rKnMjFtwQg-\ TPfK_rHSvIogm6ZZP8tKf_qfpvmC6tPSA8M-sNKSz-\ 16clacLOrLLPafq7Daxh_vNGpVm3xnFl5wKosOzJNARGbE0hNdjpxxKyTuOFm8iN1yUD\ OYwyQdVziY_5ym4UGoUe4UbeMrQQB_foumtu-\ D4fzmDMR4hrbAFDrxfUckHcBHJwAHSA13YtxY6UmOtN8mkOaC4XYUdOK_DnkcOSW-\ T_SMiPbFf245GtaztWMscWr4W_WOz4qY99HE3sVEcEw-Vu70VDy3dw3u1cKHC68koKQ-\ 8l-\ 6YHxpUkfJCa1f0vkD2gLMERWwMCZw7878TMxo0Q2SAclyfvNavTUbMgoeNxEnEBbV_xd\ 75FV9flUX6NxZtA8XCL97iKmx9yOISh9wbsF7CGgjDP7r_4z0vTTk_2zONWeQ7dY9ra3\ Prabel, et al. Expires 14 March 2027 [Page 55] Internet-Draft JOSE/COSE Composite Signatures September 2026 9ldrmNAmgN0YOLil8b2Cd1STS_4VQbFGTsTIEstGTF2maKjHe_hRK58_eECvEPub2VyM\ SCvffBxDUWQIJfxosGofP_MejtSfx4Nk0MoLjiI23wz4V0K_j12Olx0VSnoqFY8nntoc\ JLbT-kwWjkksKXd8Soq3uYk-r-\ gjHilxuGauA6CoIG6vHLv3ymgVdIuJvKEcLjXvYaYDVgjWStwbaqub6jCv1KHcygnmww\ U3_fcs63u_OhtH3miLGh_qBSRcsHmL5he8142tGECHJa0rKMH1ICcUSz02I6m_VdfHqO\ V6IJBpzelgA-\ 16arD16a5KDjhv3ndODnU21JLIm8QMTnqmSiWwfif6dz9UVrXoZ7Us0DAmlBoX70vPQm\ zQ7nzTlRhhSlO5BO8u_8wB7OOlcankVoA3mZyf-\ vo2ZEmkSDrlpD_EiGKrQs98hUM2yjYV1VKPkkW-\ Sb9e_6NgFHM6JutpbGA53r79WL0Qfg9M0xXLSaxgc7Xmdw9beWX4RUyFBGGXeCQEmpeh\ k5OEj9usFZUhIsbkTjMzIjkT_BQsQYwpX55AhleVmORkNcpVX8Yobu6-\ JTslTxafiooHiO02WVTMoGSMBF8wCftUy_t2AzDbKkQoYclrbkI-\ uZaz_3XvbIVKg0ErPzvV1aLMFgTTDvS07lc9MVV11aixngaqaZxVsIxPzgAOGbhP2rf4\ KWUwvgphfaYondjSGwKgbwlRZIXQHI2o-6bXr-\ g3YLgfFarJkZFGgb8VWi3nBM_3Ng3QI7NUOcnx6gaAR7aZHjI5hNv-\ nUknUU2yzpGAgIpJHZubv__5YL2CB877x6AAWiJF47u3zC9JYXV9POGKuQbhnT_Nfi__\ Ri20aZFMalkqCeqaCkvYpm-Bz-\ A55NWhfZsjXnkcxSTRsTglDwa0lr24TO2gwrShqn9bWiH0NfuCXxEJZFwdW0Cj3IgyfG\ ZIjKdf54X0Hdp1Q3Viy8-EsGxIWHM1-\ Vc27lp9W4MfSlESsa_bYcAmWOdVwkLbtXeaySC7a7uVS-\ 92f6Z6_Vj0lVq3FQAhmHJAlMYJtvPGWKvzlCT1RmCgQl5pBOLQDB_ZxGQQYPWjSBALvB\ sVeG75UgrVnToWktKRtm0YXgVsr0TfUW4qe5GlQV28uKpL-\ imeNOGGT7yk3TN7rkU3iJ5Cj6PSb4grsxLEAno6jLYCoDv_IRYB1xfpMMrlScXwdcvlv\ p0-6FFnpJ9q3PZel0xUz3yMv524Gxka0CmtWmT9-\ Y1xyoPosBIgao_Fv7eRmOvUYSCHFwFeRdTzezb-\ SxtmhCPXmw3Diig08gWv7eOymA7DEYCOdNAkk8KpdyifIVnLNg8GkKOQpEQ5vUf_SjN3\ FPwZQxhtoFU0PnrCq1SLg6y8oa1eTZgMB33abAqtzRLSJGyPSZdoqsHWOh9OLEFuNG-\ a889JWIuWN2hAFOYgWRwI1GWrrfh0abH_lgw4NoXyE19wjft18Ll4mz2RihSBdIntA29\ nR_IAkYjk8ZCUUaw3l8cL-y4-\ qdKgWUc4dXE3GmM1bXQO3kgq87SwedK_tydHo2AN86ZMXByz1Q2jlWRtLIOnBlbENlx_\ X0POlOjDT8DSWZ9t29hFOCvpAWFSUVYkRxKLD4tm7MWxNZqBcpx5byJrwITpW_QkjiLH\ B0UMhK3zIfQnYKQpvA2HQd4macntYFlns5Owy6ZFRaVolROCLv-dDudBEMO1hBax-\ 60EHkGZObx44KZP7yu0d3uNjI190Pt-UIC4l07fTh8QSOzD89FaGV0MhBjKFCJlJw-\ v99lI5AZ5dfDqe5-h8Budkn4lr_7OVgtFsmwjZiyFvazIDktDzt5Fe1-\ u8uBaWyVtNZMh_wcpQQMdu-N45LEba5lt-d3jqQgcB1YPFkwdok3if1qaIuSDhJbsnQ2\ -iZuAMyeOT9TvJTXirVoiF9buVN-\ 51YgryXjOWgRqb1fs0MvWB3eHQAXv3hcXQ6PbuCRm7_j6Me8QsN54OnAGlBB30HfLaHu\ rELKJ5EMjEEUyadwfQoNUPH2kp_YlVX_G0ck7Qx17fqSode93Wbgfz9lQqsy0FdABwVL\ EYqzvufAYEMEBf8n7FpW6V-Qnpe-\ Sa094aV47CNcznuSYviTKdxvEyGLI8_mEcVoUtl2vvQR9xViaC0q0YuH-\ LjuEE9VgS3MXKGAxVqtVYiVE6UyhU1kWMDVNA3_PFjCt4-hN-\ G5qnJuM2SqA8oKGsoBW9NPMy_fe6tA1p_l3Q7mhkoeC9MMBRPpNwO3toWB013X03LF6H\ P-xd5JU-TFIlV0_-6vAcNov8mNt_TMwj5IiXuN-\ flZrgCMiI2wjCtKI_UDLWSZK9p4DwQPwPWu7BjlidTJd6yk8D-\ V4iP3acZ8YMFMzywWwx1MbarkQQ7N5uKT1G5Di5n8uMCPTFxfcdZq1QuE1jRG_MDGSab\ PpyhW5tKD2TJrZLQM2DbJ9Cuvb7uUF1bqT72bYM4IAnnoWopI4BssMp0MCBPM_go7WS1\ S6d9qJyWK69-zmT0xP-fhOz3x9NV12R7KVG2bmszWLNih2t58OdSKdwnQFw8kv-\ 81zfNlj2XGntyUBA6ewP79ltIfEC5XwC_sc1EuNtkhUn_AeJQRhV67LMu1JCf7IkBZht\ Prabel, et al. Expires 14 March 2027 [Page 56] Internet-Draft JOSE/COSE Composite Signatures September 2026 -fbc6zoXBaULXwhP_5GHdHg9wteIWRD9WppWpnRdaQSVrpO0so1UiXx28PqtQ1DEi-\ 47xl1W1fZ8O-VywfHMZPSnhvVjR-\ mKWb0k35PUHAVp4rOt8P4hlicEGcAXeE3sFWd3cteCrv9Y23YzVnSKrafiXhMUVAex23\ qKtDZSMmAaUtVbFFOIdNfrTnEe5yvHz-7ThoN-ppL509m3Dpl1Soq2UacNMvguK1u-\ niQ46YgEKARHKyYIf3SnlZM8ao1YLCGDSeIlOekrn2tY5abeuEMPSQZpErhNX-\ 3XvHnGLAXNMi3d7se0H9SatG2Cf17eGrzlInYpxYZHCgzMmxx-\ wHXJIGnSGGpwPKq1urbRoLgFvKOVEMGf9JGClaacag7QuyHD0umOuXjSNxkbkIOxrMu6\ xr1iBfTyU-vrEfSv-W_i615Re0gZhxXOhlM1_I5YXm6xKzG1POZO5eCfA_Phyv1-\ UMHSLO3LhOea8oaNhkNroi9SndW5ZJ8esaucaRCVnXelFI8PcGANS41W2AUjENoXPlMD\ l3SSPcMdeLZ9wzO6FtuH81xQwk8cplcooLLleGYZDuJRkIneNeT_udx38D_iDg8SwwQe\ 98u3HwPwUYKtlpLgHcoZ3p_ppvZh5D0lGzriJ5DhidSJ8x--\ oj4HJrTjpzN3EwNblVdJecTLZ_EefzqewU9hGZI0YQpU06xSt81NPqVjOPsDlf38VkOx\ Iqe5HK5-\ Mjlse5lHrCP2oHVxb4YWDrrydL28ooO8RYMpbQFeivzW0eOPlKVXd5I100UU82sQ8siF\ 0vYci90HqDWds8_Ihj1chmQ_s8ZL7KaR3ja8b6bmUhK0a5G0BMS6Fn0lHshuW93hUZMp\ H-m9MaJj98K9XqsUtBYa5jzn4NNw5oKOfRWV2Krt4v-\ HYjt8ryKymqS_63uIrfKaztMMO09albvSzojHHU5DHnVhh3mgo6-\ kxCqa3wmuRBuAhFx6nRod5M0vITWTPEjSgrhnK85fpaeF8GAzgDJSwDcRjDKwgK3fUk8\ MJfkfUXAf7VxveUhJyW6ehyNttaV2NWTnHnCy5UZdd8xwqSyx119ldyPTRTret2ysDgD\ V7VbUPdT9kKzqNjoBH9mfZjQtCNfgmLjYR5_2AEypcEuAGIFFDGMTtEJBtvl-\ M9uOxNv4RXXQocknqChXJV2UjMNlzE3IvLzXnING2TN2zYRImY_9FMvlKL7j19qOL7IQ\ Ed2-gBhw8B0a3TfYVsXlOR2zv2BPftntzlepEbnogDqhHzwhnYnf-\ ug5Aq_Dvz4GSyV9JM4WhURCFbA8lFD_XTXgVt2iwcZ_iZYdOgfBJpC0uTX-\ d5Jjd1vWiY93HUKo6GfH5YggrZ7bVRmvjNgs2CuzYgEmSLwa4az5mogKCI-lR7-\ BeVsNLCkFrZsRny77hC6UdJwMGxoLg5hnHFtd-q-\ BhOzrOsPDO1UGCdueZJVpJBmzLEXpYRm4QOfDGzoXa6p_wsvtwcsLZ_4sNUNnSji-\ CyjWVXEreoWC8Uh5aM4Uu1-XVpyOoWt54D9292PZyp1c7pw-\ rBethi6Cx4RwwOg3lpqeNU-XYs3gaBXUrGOXF6vbmQrx7VXfcyDIs-U6d-v-cj6z7_jb\ -\ q82PbCPOMhnfzMyZrSUNJ6WQjP8dHMWIbqLv7w4WLjblEzf5eVwka7uTCJw2yIaUY2E4\ hmzi_egTlGrRtmmq56pZJ6JIadCS1_WLbPG4SkunsZESVofRjrIM2E9iEgAJ2zSgLP3f\ CDX9nKGxgR0XIBpDkwn7q58mCN6Res_n5dkunuKAoxRYG8W9s9WARjEp1BARhjS3_fGM\ ScSUrs6gz4nV7eaHpgLYNgjVRNiTHLRL9oYRyZcLO39fmAtR4j9AaA-\ F4zCbhPngfloWUK-Ln8mJhGj6L-\ 38dGsYmY3J09jvLJD8eR0suGP_1cnog6hr2sUKN10vOTTZBF5Vg6mvP4feX2Nz5j_qxl\ AxgFGWvPd7Pn79KZYfqt6i7g1OZm3v6h09QVnGjnTfNKXA9nUSI8UdIzrd_XPtiq7SZd\ vUf-mAWZ-EPJFXvsEejuYSGmAMq9tF5pE7h8kmVypHXedh6JIwkWAzxb_z-\ Eg_V7mcRYI2g6pvnZDz_VAvY2jG1KEi64Qv3dC-1sqvqig_Y0CKEFyMD0-\ owMkqa7xDSc3OViEmgoiQmB0eoCDoKrEy9rl9QwTFW6vt7_K1vSpyszZBiU_T1zhAAAA\ AAAAAAAAAAAAAAAAAAAAAAAECA0UIy0xNzBlAjAQsZsAdWJwbgbLsFb50mLC4qcOyAWw\ CwByc7cJNUrOkx8ifQwYSGIprc2wYhZ9fvACMQDQS7GcWIO_KPTM-qUvF7eIRA-\ muI56ohc6SaefM0dh6PE63Tx4HmFqWq4SnNqzYY0", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744f44637452564d7a4f4451694c43\ 4a72615751694f694a3553446449656d6774646a52715555396a595468754e6e5a4d\ 64455a50527a4d78627a427756444a4e524670454e555a30646c4533556d566e496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ Prabel, et al. Expires 14 March 2027 [Page 57] Internet-Draft JOSE/COSE Composite Signatures September 2026 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534138372d45434453412d503338342d53484135313200c6e7\ 4eec87cc66427e79b59b94d43773c7e5f186967e8be973ed9d3f56fdab8cc6037c00\ 3b066915d54565074e83ab2e4f2ef6a1921ca96231fe6a6b6b63b109", "raw_composite_signature": "\ 1abfa6da68f8e1b94513c188db1c56768277fc0c06e32b0f355561d206a75e4403a6\ f4a23ee6e01b4ec3395074364e20faf6acaaf4dbb80be49cabd069e48cc11d03ea8d\ e7a1706d413da847e5e358a7b7d2980cccf40b7fe36442a28666fdc0a09e06a94571\ db66569f71343336fa5ef36b453cdfec60b4b494dbefceb0c7e75846325dd1ac648d\ 3c43ff157c259fa53265226b60135377c8bf62c15f46160ce992177d61f3a761de0f\ 10ddd6d8ed70e7c1ffdc5a51ad7c37ea0c1d0d0e5b23feba89fab85dee21fed20b6b\ ae71241ede57fea2bfd17812faba3a797bd7a56ed63187146c0302d1d7f3eb3f7c2d\ a3f0275fe5c686051c4020019be6e3f33e7ea82980c6ccfea806cea9d91683990bf1\ 3684aa4bef0a67f82e4d15a995dccf96092bd2b97f2dc4b94aee07f6452ef38dd9e9\ 5f54184215c726ec9db9afb9d5e91ccc2954d98df069bfc69d718fe4d5a7cc3adca4\ 8b999c206a07fa36118fd2090fcf76ea7d4134dd355bd333e92a20dfb40f308d614f\ 0a1e667737fcb533dad9059363a4f85851262a1365564d6161c4bec6af5d97b21475\ a59b3faf1a50b429304a803b098f1e43a36d0d401620ef3b41e02d1cd7e97f42f61f\ f8bce66648b438ab2541e704a91bbc6975d2a8826ea8ad8c87d02dd047d976b0583c\ f3d89f78b8dced01bb29f467d87802ce0fbb8c880778ec64e25d5dba177dfebdd0fe\ 16666863a5493026fb86e93700a8706ed3979023f80559a51836066885c151e43811\ e9f295cbc10178b17a37e47a7d6bfb45d0e933568bf175e2feeffc730a3f3d27fd2d\ fca0d30873b49f204a152d0a70860dbb115c2f1eff78bcf06628d0bc58686d4137a2\ 8a6228b86a7d985178012961d95aba734457deb2a732316dc1083e4cf7cafeb1d2bc\ 8a209ba6593fcb4a7ffa9fa6f982ead3d203c33eb0d292cfed7a72569c2ceacb2cf6\ 9fabb0dac61fef346a559b7c67165e702a8b0ecc93404466c4d2135d8e9c712b24ee\ 3859bc88dd72503398c3241d573898ff9ca6e141a851ee146de32b41007f7e8ba6b6\ ef83e1fce60cc47886b6c0143af17d47241dc047270007480d7762dc58e9498eb4df\ 2690e682e1761474e2bf0e791c3925be4ff48c88f6c57f6e391ad6b3b5632c716af8\ 5bf58ecf8a98f7d1c4dec544704c3e56eef4543cb7770deed5c2870baf24a0a43ef2\ 5fba607c695247c909ad5fd2f903da02cc1115b0302670efcefc4ccc68d10d9201c9\ 727ef35abd351b320a1e3711271016d5ff177be4557d7e5517e8dc59b40f1708bf7b\ 88a9b1f723884a1f706ec17b0868230cfeebff8cf4bd34e4ff6cce356790edd63dad\ adfd95dae63409a037460e2e297c6f609dd524d2ff85506c5193b13204b2d1931769\ 9a2a31defe144ae7cfde102bc43ee6f65723120af7df0710d45902097f1a2c1a87cf\ fcc7a3b527f1e0d9343282e3888db7c33e15d0afe3d763a5c745529e8a8563c9e7b6\ 87092db4fe9305a3924b0a5ddf12a2adee624fabfa08c78a5c6e19ab80e82a081bab\ c72efdf29a055d22e26f28470b8d7bd86980d5823592b706daaae6fa8c2bf5287732\ 8279b0c14dff7dcb3adeefce86d1f79a22c687fa8149172c1e62f985ef35e36b4610\ 21c96b4aca307d4809c512cf4d88ea6fd575f1ea395e88241a737a5800fb5e9aac3d\ 7a6b92838e1bf79dd3839d4db524b226f103139ea992896c1f89fe9dcfd515ad7a19\ ed4b340c09a50685fbd2f3d09b343b9f34e546185294ee413bcbbff3007b38e95c6a\ 7915a00de66727febe8d991269120eb9690ff12218aad0b3df2150cdb28d857554a3\ e4916f926fd7bfe8d8051cce89bada5b180e77afbf562f441f83d334c572d26b181c\ ed799dc3d6de597e115321411865de090126a5e864e4e123f6eb05654848b1b9138c\ ccc88e44ff050b10630a57e7902195e56639190d729557f18a1bbbaf894ec953c5a7\ Prabel, et al. Expires 14 March 2027 [Page 58] Internet-Draft JOSE/COSE Composite Signatures September 2026 e2a281e23b4d9655332819230117cc027ed532fedd80cc36ca910a18725adb908fae\ 65acffdd7bdb2152a0d04acfcef57568b3058134c3bd2d3b95cf4c555d756a2c6781\ aa9a67156c2313f38003866e13f6adfe0a594c2f82985f698a27763486c0a81bc254\ 59217407236a3ee9b5ebfa0dd82e07c56ab2646451a06fc5568b79c133fdcd837408\ ecd50e727c7a81a011eda6478c8e6136ffa75249d4536cb3a4602022924766e6efff\ fe582f6081f3bef1e80016889178eeedf30bd2585d5f4f3862ae41b8674ff35f8bff\ d18b6d1a64531a964a827aa68292f6299be073f80e7935685f66c8d79e473149346c\ 4e0943c1ad25af6e133b6830ad286a9fd6d6887d0d7ee097c44259170756d028f722\ 0c9f19922329d7f9e17d07769d50dd58b2f3e12c1b12161ccd7e55cdbb969f56e0c7\ d29444ac6bf6d870099639d57090b6ed5de6b2482edaeee552fbdd9fe99ebf563d25\ 56adc54008661c902531826dbcf1962afce5093d51982810979a4138b40307f67119\ 04183d68d20402ef06c55e1bbe5482b5674e85a4b4a46d9b4617815b2bd137d45b8a\ 9ee46950576f2e2a92fe8a678d386193ef29374cdeeb914de22790a3e8f49be20aec\ c4b1009e8ea32d80a80effc8458075c5fa4c32b952717c1d72f96fa74fba1459e927\ dab73d97a5d31533df232fe76e06c646b40a6b56993f7e635c72a0fa2c04881aa3f1\ 6fede4663af5184821c5c05791753cdecdbf92c6d9a108f5e6c370e28a0d3c816bfb\ 78eca603b0c460239d340924f0aa5dca27c85672cd83c1a428e429110e6f51ffd28c\ ddc53f0650c61b68154d0f9eb0aad522e0eb2f286b5793660301df769b02ab7344b4\ 891b23d265da2ab0758e87d38b105b8d1be6bcf3d25622e58dda1005398816470235\ 196aeb7e1d1a6c7fe5830e0da17c84d7dc237edd7c2e5e26cf646285205d227b40db\ d9d1fc802462393c6425146b0de5f1c2fecb8faa74a81651ce1d5c4dc698cd5b5d03\ b7920abced2c1e74afedc9d1e8d8037ce99317072cf54368e5591b4b20e9c195b10d\ 971fd7d0f3a53a30d3f0349667db76f6114e0afa40585494558911c4a2c3e2d9bb31\ 6c4d66a05ca71e5bc89af0213a56fd092388b1c1d143212b7cc87d09d8290a6f0361\ d077899a727b581659ece4ec32e99151695a2544e08bbfe743b9d04430ed6105ac7e\ eb410790664e6f1e382993fbcaed1ddee363235f743edf94202e25d3b7d387c4123b\ 30fcf45686574321063285089949c3ebfdf65239019e5d7c3a9ee7e87c06e7649f89\ 6bffb39582d16c9b08d98b216f6b320392d0f3b7915ed7ebbcb81696c95b4d64c87f\ c1ca5040c76ef8de392c46dae65b7e7778ea420701d583c593076893789fd6a688b9\ 20e125bb27436fa266e00cc9e393f53bc94d78ab568885f5bb9537ee75620af25e33\ 96811a9bd5fb3432f581dde1d0017bf785c5d0e8f6ee0919bbfe3e8c7bc42c379e0e\ 9c01a5041df41df2da1eeac42ca27910c8c4114c9a7707d0a0d50f1f6929fd89555f\ f1b4724ed0c75edfa92a1d7bddd66e07f3f6542ab32d0574007054b118ab3bee7c06\ 0430405ff27ec5a56e95f909e97be49ad3de1a578ec235cce7b9262f89329dc6f132\ 18b23cfe611c56852d976bef411f71562682d2ad18b87f8b8ee104f55812dcc5ca18\ 0c55aad55889513a532854d6458c0d5340dff3c58c2b78fa137e1b9aa726e3364aa0\ 3ca0a1aca015bd34f332fdf7bab40d69fe5dd0ee6864a1e0bd30c0513e93703b7b68\ 581d35dd7d372c5e873fec5de4953e4c5225574ffeeaf01c368bfc98db7f4ccc23e4\ 8897b8df9f959ae008c888db08c2b4a23f5032d64992bda780f040fc0f5aeec18e58\ 9d4c977aca4f03f95e223f769c67c60c14ccf2c16c31d4c6daae4410ecde6e293d46\ e438b99fcb8c08f4c5c5f71d66ad50b84d63446fcc0c649a6cfa72856e6d283d9326\ b64b40cd836c9f42baf6fbb941756ea4fbd9b60ce080279e85a8a48e01b2c329d0c0\ 813ccfe0a3b592d52e9df6a27258aebdfb3993d313fe7e13b3df1f4d575d91eca546\ d9b9accd62cd8a1dade7c39d48a7709d0170f24bfef35cdf3658f65c69edc94040e9\ ec0fefd96d21f102e57c02fec73512e36d921527fc0789411855ebb2ccbb52427fb2\ 2405986df9f6dceb3a1705a50b5f084fff918774783dc2d7885910fd5a9a56a6745d\ 690495ae93b4b28d54897c76f0faad4350c48bee3bc65d56d5f67c3be572c1f1cc64\ f4a786f56347e98a59bd24df93d41c0569e2b3adf0fe2196270419c017784dec1567\ Prabel, et al. Expires 14 March 2027 [Page 59] Internet-Draft JOSE/COSE Composite Signatures September 2026 7772d782aeff58db763356748aada7e25e13145407b1db7a8ab4365232601a52d55b\ 14538874d7eb4e711ee72bc7cfeed386837ea692f9d3d9b70e99754a8ab651a70d32\ f82e2b5bbe9e2438e988042804472b26087f74a795933c6a8d582c218349e22539e9\ 2b9f6b58e5a6deb8430f49066912b84d5fedd7bc79c62c05cd322dddeec7b41fd49a\ b46d827f5ede1abce5227629c586470a0ccc9b1c7ec075c92069d2186a703caab5ba\ b6d1a0b805bca39510c19ff4918295a69c6a0ed0bb21c3d2e98eb978d237191b9083\ b1accbbac6bd6205f4f253ebeb11f4aff96fe2eb5e517b48198715ce865335fc8e58\ 5e6eb12b31b53ce64ee5e09f03f3e1cafd7e50c1d22cedcb84e79af2868d86436ba2\ 2f529dd5b9649f1eb1ab9c6910959d77a5148f0f70600d4b8d56d8052310da173e53\ 039774923dc31d78b67dc333ba16db87f35c50c24f1ca65728a0b2e57866190ee251\ 9089de35e4ffb9dc77f03fe20e0f12c3041ef7cbb71f03f05182ad9692e01dca19de\ 9fe9a6f661e43d251b3ae22790e189d489f31fbea23e0726b4e3a7337713035b9557\ 4979c4cb67f11e7f3a9ec14f61199234610a54d3ac52b7cd4d3ea56338fb0395fdfc\ 5643b122a7b91cae7e32396c7b9947ac23f6a075716f86160ebaf274bdbca283bc45\ 83296d015e8afcd6d1e38f94a557779235d34514f36b10f2c885d2f61c8bdd07a835\ 9db3cfc8863d5c86643fb3c64beca691de36bc6fa6e65212b46b91b404c4ba167d25\ 1ec86e5bdde15193291fe9bd31a263f7c2bd5eab14b4161ae63ce7e0d370e6828e7d\ 1595d8aaede2ff87623b7caf22b29aa4bfeb7b88adf29aced30c3b4f5a95bbd2ce88\ c71d4e431e75618779a0a3afa4c42a9adf09ae441b80845c7a9d1a1de4cd2f213593\ 3c48d282b8672bce5fa5a785f06033803252c037118c32b080addf524f0c25f91f51\ 701fed5c6f794849c96e9e87236db5a5763564e71e70b2e5465d77cc70a92cb1d75f\ 657723d3453adeb76cac0e00d5ed56d43dd4fd90acea363a011fd99f66342d08d7e0\ 98b8d8479ff6004ca9704b801881450c6313b44241b6f97e33db8ec4dbf84575d0a1\ c927a82857255d948cc365cc4dc8bcbcd79c8346d93376cd8448998ffd14cbe528be\ e3d7da8e2fb21011ddbe801870f01d1add37d856c5e5391db3bf604f7ed9edce57a9\ 11b9e8803aa11f3c219d89dffae83902afc3bf3e064b257d24ce1685444215b03c94\ 50ff5d35e056dda2c1c67f89961d3a07c12690b4b935fe779263775bd6898f771d42\ a8e867c7e58820ad9edb5519af8cd82cd82bb362012648bc1ae1acf99a880a088fa5\ 47bf81795b0d2c2905ad9b119f2efb842e94749c0c1b1a0b8398671c5b5dfaaf8184\ eceb3ac3c33b550609db9e6495692419b32c45e96119b840e7c31b3a176baa7fc2cb\ edc1cb0b67fe2c3543674a38be0b28d655712b7a8582f1487968ce14bb5f97569c8e\ a16b79e03f76f763d9ca9d5cee9c3eac17ad862e82c78470c0e837969a9e354f9762\ cde06815d4ac639717abdb990af1ed55df7320c8b3e53a77ebfe723eb3eff8dbfaaf\ 363db08f38c8677f333266b494349e964233fc74731621ba8bbfbc3858b8db944cdf\ e5e57091aeee4c2270db221a518d84e219b38bf7a04e51ab46d9a6ab9ea9649e8921\ a7424b5fd62db3c6e1292e9ec644495a1f463ac833613d884800276cd280b3f77c20\ d7f67286c604745c80690e4c27eeae7c98237a45eb3f9f9764ba7b8a028c51606f16\ f6cf560118c4a750404618d2dff7c631271252bb3a833e2757b79a1e980b60d82355\ 13624c72d12fda1847265c2cedfd7e602d4788fd01a03e178cc26e13e781f9685942\ be2e7f262611a3e8bfb7f1d1ac626637274f63bcb243f1e474b2e18fff5727a20ea1\ af6b1428dd74bce4d3641179560ea6bcfe1f797d8dcf98ffab1940c601465af3ddec\ f9fbf4a6587eab7a8bb8353999b7bfa874f505671a39d37cd29703d9d4488f14748c\ eb77f5cfb62abb49976f51ffa601667e10f2455efb047a3b9848698032af6d179a44\ ee1f24995ca91d779d87a248c24580cf16ffcfe120fd5ee6711608da0ea9be7643cf\ f540bd8da31b52848bae10bf7742fb5b2abea8a0fd8d02284172303d3ea30324a9ae\ f10d27373958849a0a224260747a8083a0aac4cbdae5f50c13156eafb7bfcad6f4a9\ caccd906253f4f5ce1000000000000000000000000000000000000000004080d1423\ 2d31373065023010b19b007562706e06cbb056f9d262c2e2a70ec805b00b007273b7\ Prabel, et al. Expires 14 March 2027 [Page 60] Internet-Draft JOSE/COSE Composite Signatures September 2026 09354ace931f227d0c18486229adcdb062167d7ef0023100d04bb19c5883bf28f4cc\ faa52f17b788440fa6b88e7aa2173a49a79f334761e8f13add3c781e616a5aae129c\ dab3618d", "raw_composite_public_key": "\ e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b468cf\ c82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91fdb643b5\ 12f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfcfd12565433c4\ afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4318bef5eb6e897e8\ b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ffa496445967e75217bfbc\ 9048f9956443d8731f833eb30de10dac96fffe7cf65ea0445c3e31e8601e133be6a1\ 00764fe3196e267726441f31751fbf9a6f5880644f4e7275e57de2b0f105e4db055d\ 50dd1c9c934fddf535b8de28b0c74c0449f222cd2ed0bb8fbc775ccee8c940665b40\ f712f4f7e00750e9e1e4cd9cff25d1945c3e9bca53ccd4f12eee7581856ebd68f268\ 45956e3e7beb761f0fe75bdd31bfe2fa018113397b387bd59d62a68b8af7fa245ab9\ 32e69f778e2ceefd21304fbb8099ea13d8ea57c1813197a2f75ae251075b51dad38f\ 853669e9d5f98a3655098941993a1594860fba71fe530ee5c29f58f2978af688ccb7\ 5a5838a359c112e98e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0\ 874e35befcf3e6119684768f36e008f04712177cebe627607381e56eaaee161c1729\ b8de51dbde474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab\ 5a3a049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24\ feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c248512488851\ 07b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff6c3e20a4\ 7be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283c850d8c58d1e\ 5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c501a8ef2ecadd1b677\ a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24fd92b7b5b4025feae996\ d3e48fd4c650d82dbad7eaf936639698512f26253d2ef6847c8518e8565cc9a5495c\ 6fff57cde7323882c54a7db470ab2daf8ffd2bf794fa7c692d9e7fbd532eecc1d788\ 0e2ca0b3216128be28b4a9f1d151fac97808b0bd98b7b43a612a9ac865812bfeac6f\ 47460277840b52a3b087f916ca7cedc0f768ea2bd19ea21155f84b4a04c4000ad2ae\ 0587154d560bc0a477a4f9329a8984dd31eb1f2a05e3d918701d630cfca9af61ef08\ 8d2c5581acb463e439902e5d425719e956b8d6df7305b28e0ff27d3ad0de2085d292\ 499b19a3390d4396fb3bac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe\ 24360f84d14f8e472712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186\ d3b764ad9e9cfeee456a73c291d8de3912414ac43911c372173ad7b472af35c6853c\ ed2fe7b5fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094\ bad07136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9\ 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ceecab\ 72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c30048bbaa797\ d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bbfa15acb5cb37\ d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c54d6f87457373a0d6\ ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bfa336e5bbad14f73640f1\ b9febe800dbaefe1630c61fae635b074c564eaa9db189c9e7302873fc64e6d497bc5\ c29080987a07a21d4af210703a4fa07f2fd816f12fd1e29b4c0f44afe9bd4a1eaa8a\ 7ae6f02a5b4258f52caf6127f62632a67cf4e8310be56a7c28c86b2e277600c3e92c\ 8d23d42586244c571e90568df202f2f6d81f860a565f9eb91a3c78372e2a8b1be61c\ 5418cf49bf2d6c8955d4a482a9919b7660b3f9a4404ffc454ea073e1e4b2689ab2cc\ a4e46bd7004a6c491fa26ee7a57d60f35edb2b821e6266442c8f335d452d524c772e\ 0353724c23c7dd15b7aa155e91442022140c5fcb0153147edcf3e8952f6f0399a3c8\ Prabel, et al. Expires 14 March 2027 [Page 61] Internet-Draft JOSE/COSE Composite Signatures September 2026 8066a72756c9409915de63f64fa797841c57c796c6fc550ef745dfe9f179457f9475\ 5ae5a2506a764f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec\ 0b36e3a6c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb9\ 7b685ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea\ d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd879b64\ f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f33288e68\ 9ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2d38fdb7a65aa\ 43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05d447f9f58ebeb84c\ 65b36c8afcb83727a1508994e826957a663b0b9b8a003325ab6d6d6462ee4e106019\ c0dffe10323b7bde7d82a38f85fd08786e860ba66c161b64b0708c363de5c6af62d8\ db3c243d1e1b712cb1d59e942b9b6b4295a5a500b182cbd5fd1bc6ce9376d91b47a2\ 284f1fbe0ad1c048cc2cfbb4afa3a9eb9697503b69feca990eba7e9441af9ca44cb3\ ac6b5ed66e591c201fe30efa8a7c471dc613d6254c263a8e132104bec47f1aacb3b2\ fcd4051b69b5e3fcb1c147a65c2f90c4b5188bafc521cab03c12a309da50b5a75177\ 27ed41228ed123fe1b152f6a6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff\ 9b2fa40ba5ed5630242539e5d96823e89dc818a13d16675ee3079d976f694f5acc97\ 60ae789e9b3391b289e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a29081\ 0ed35e56bb19d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67\ fbe761db9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a\ 2e6a152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57\ 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6b9e2\ b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe99941b1e8561\ d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23cc3a65601313\ f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d011b01b4154d1b920a\ f003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b62124b0861b163a3b91aa\ 4bea28076c3432df3b29b6c4e1ba588def420071fc157de90eb2722ecc9ab00df3c6\ 69383a61a91bb67bd287ce349b4745ee7a479dbceef166b9acc412eb579fcd643730\ 7edda253d606b7be7599c38092bc52a8598480edab8b82b1d21c565d2137ceae0b66\ 42619b16133d91205d6355029e9cdfeb9a28b373d95916b6b707d4c712c09cf36daf\ 1a511b2bedb1aa70ee58d46a0666bb287784b0a3840c589a7a04d5d6f2216be90aa4\ a512d5632f5c9bfe7b8b13382f999b95d367c7c46b968074ce315197a5ff3545c7b7\ 7a804ade56a95b5c24cdece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b\ 57b763439686d4a304aa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859\ f741e082542a385502f25dbf55296c3a545e3872760ab73617de4a96262c6f5d9e98\ bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90\ ea0e5f" } Figure 5: ML-DSA-87-ES384 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "eddsa_seed": "\ 00000000000000000000000000000000000000000000000000000000000000000000\ 0000000000000000000000000000000000000000000000", Prabel, et al. Expires 14 March 2027 [Page 62] Internet-Draft JOSE/COSE Composite Signatures September 2026 "jwk": { "kid": "qVsShuAUuE5EUbqI481LsrarR_kKdrix0rnVJ226Ko4", "kty": "AKP", "alg": "ML-DSA-87-Ed448", "pub": "\ 5F_8jMc9uIXcZi5ioYzY44AylxF_pWWIFKmFtf8dt7Roz8gruSnx2Gt37RT1rhamU2h3\ LOUZEkEBBeBFaXWukf22Q7US8STV5gvWi4x-\ Mf4Bx7DcZa5HBQHMVlpuHfz8_RJWVDPEr-3VEYIeLpYQxFJ14oNt7jXO1p1--\ mcv0eQxi-\ 9etuiX6LRRqiAt7QQrKq73envj9pkUbaIpqL2z_6SWRFln51IXv7yQSPmVZEPYcx-\ DPrMN4Q2slv_-fPZeoERcPjHoYB4TO-ahAHZP4xluJncmRB8xdR-\ _mm9YgGRPTnJ15X3isPEF5NsFXVDdHJyTT931NbjeKLDHTARJ8iLNLtC7j7x3XM7oyUB\ mW0D3EvT34AdQ6eHkzZz_JdGUXD6bylPM1PEu7nWBhW69aPJoRZVuPnvrdh8P51vdMb_\ i-gGBEzl7OHvVnWKmi4r3-\ iRauTLmn3eOLO79ITBPu4CZ6hPY6lfBgTGXovda4lEHW1Ha04-\ FNmnp1fmKNlUJiUGZOhWUhg-\ 6cf5TDuXCn1jyl4r2iMy3Wlg4o1nBEumOJahYOsjawfhh_Vjir7pd5aUuAgkE9bQrwId\ ONb788-YRloR2jzbgCPBHEhd86-\ YnYHOB5W6q7hYcFym43lHb3kdNSMxoJJ6icWK4eZPmDITtbMZCPLNnbZ61CyyrWjoEnv\ ExOB1iP6b7y8nbHnzAJeoEGLna0sxszU6V-izsJP7spwMYp1Fxa3IT9j7b9lpjM4NX-\ Dj5TsBxgiwkhRJIiFEHs9HE6SRnjHYU6hrwOBBGGfKuNylAvs-mninLtf9sPiCke-\ Sk90usNMEzwApqcGrMxv_T2OT71pqZcE4Sg8hQ2MWNHldTzZWHuDxMNGy5pYE3IT7BCD\ TGat_iu1xQGo7y7K3Rtnej3xpt64br8HIsT1Aw4g-QGN1bb8U-6iT9kre1tAJf6umW0-\ SP1MZQ2C261-r5NmOWmFEvJiU9LvaEfIUY6FZcyaVJXG__V83nMjiCxUp9tHCrLa-\ P_Sv3lPp8aS2ef71TLuzB14gOLKCzIWEovii0qfHRUfrJeAiwvZi3tDphKprIZYEr_qx\ vR0YCd4QLUqOwh_kWynztwPdo6ivRnqIRVfhLSgTEAArSrgWHFU1WC8Ckd6T5MpqJhN0\ x6x8qBePZGHAdYwz8qa9h7wiNLFWBrLRj5DmQLl1CVxnpVrjW33MFso4P8n060N4ghdK\ SSZsZozkNQ5b7O6yajYy-\ rSp6QpD8msb8oEX5imFKRaOcviQ2D4TRT45HJxKs63Tb9FtT1JoORzfkdv_E1bL3zSR6\ oYbTt2Stnpz-\ 7kVqc8KR2N45EkFKxDkRw3IXOte0cq81xoU87S_ntf4KiVZaszuqb2XN2SgxnXBl4EDn\ pehPmqkD92SAlLrQcTaxaSe47G28K-\ 8MwoVt4eeVkj4UEsSfJN7rbCH2yKl2XJx5huDaS0xn2ODQyNRmgk-\ 5I9hXMUiZDNLvEzx4zuyrcu2d0oXFo3ZoUtVFNCB__TQCf2x27ej9GjLXLDAEi7qnl9X\ fb94n0IfeVyGte3-j6NP3DWv8OrLiUjNTaLv6Fay1yzfUaU6LI86-\ Jd6ckloiGhg7kE0_hd-ZKakZxU1vh0Vzc6DW7MFAPky75iCZlDXoBpZjTNGo5HR-\ mCW_ozblu60U9zZA8bn-voANuu_hYwxh-\ uY1sHTFZOqp2xicnnMChz_GTm1Je8XCkICYegeiHUryEHA6T6B_L9gW8S_R4ptMD0Sv6\ b1KHqqKeubwKltCWPUsr2En9iYypnz06DEL5Wp8KMhrLid2AMPpLI0j1CWGJExXHpBWj\ fIC8vbYH4YKVl-\ euRo8eDcuKosb5hxUGM9Jvy1siVXUpIKpkZt2YLP5pEBP_EVOoHPh5LJomrLMpORr1wB\ KbEkfom7npX1g817bK4IeYmZELI8zXUUtUkx3LgNTckwjx90Vt6oVXpFEICIUDF_LAVM\ Uftzz6JUvbwOZo8iAZqcnVslAmRXeY_ZPp5eEHFfHlsb8VQ73Rd_p8XlFf5R1WuWiUGp\ 2TzJ-\ VQvj3BTdQfOwSxR9RUk4xjqNabLqTFcQ7As246bHJXH6XVnd4DbEIDPfNa8FaWb_DNEg\ QAiXGqa6n7l7aFq5_6Kp0XeBBM0sOzJt4fy8JC6U0DEcMnWxKFDtMM7q06LubQYFCEEd\ Q5b1Qh2LbQZ898tegmeF--\ EZ4F4hvYebZPV8sM0ZcsKBXyCr585qs00PRxr0S6rReekGRBIvXzMojmid3dxc6DPpdV\ Prabel, et al. Expires 14 March 2027 [Page 63] Internet-Draft JOSE/COSE Composite Signatures September 2026 3x5zxlxaIBxO3i_6axknSSdxnS04_bemWqQ3CLf6mpSqfTIQJT1407GB4QINAAC9Ch3A\ XUR_n1jr64TGWzbIr8uDcnoVCJlOgmlXpmOwubigAzJattbWRi7k4QYBnA3_4QMjt73n\ 2Co4-\ F_Qh4boYLpmwWG2SwcIw2PeXGr2LY2zwkPR4bcSyx1Z6UK5trQpWlpQCxgsvV_RvGzpN\ 22RtHoihPH74K0cBIzCz7tK-\ jqeuWl1A7af7KmQ66fpRBr5ykTLOsa17WblkcIB_jDvqKfEcdxhPWJUwmOo4TIQS-\ xH8arLOy_NQFG2m14_yxwUemXC-QxLUYi6_FIcqwPBKjCdpQtadRdyftQSKO0SP-\ GxUvamMZzWI780rXuOBkq5kyYLy9QF9bf_-\ bL6QLpe1WMCQlOeXZaCPoncgYoT0WZ17jB52Xb2lPWsyXYK54npszkbKJ4OIqfvF8xqR\ XcVe22VwJuqT9Uy4-\ 4KKQgQ7TXla7Gdm2H7mKl8YXQlsGCT2Ypc8O4t0Sfw7qYAuaDGf752Hbm3fl1bupcB2h\ uIPlIaDP6IRR9XvTYIW2flbwYfhKLmoVKnG85uUi2qtqCjPOIuU3-\ peT0othfmwKQXaoOqO-\ V4r6wPL1VHxVFtIYmEdVt0RccUOvpOVR_OAHG9uHOzTmueK5557Qxp0ojtZCHyN-\ hgoMZJLrvdKkTCxPNo2-\ mZQbHoVh2FnThZ9JbO49dB8lKXP4_MU5xAnjXMgKXtbfI8w6ZWATE_XWgf2VQMUpGp4w\ py44yWQTxHxh_4T9540BGwG0FU0bkgrwA_erseGZnepqdmz5_ScCs84O5Xr5MbYhJLCG\ GxY6O5GqS-\ ooB2w0Mt87KbbE4bpYje9CAHH8FX3pDrJyLsyasA3zxmk4OmGpG7Z70ofONJtHRe56R5\ 287vFmuazEEutXn81kNzB-\ 3aJT1ga3vnWZw4CSvFKoWYSA7auLgrHSHFZdITfOrgtmQmGbFhM9kSBdY1UCnpzf65oo\ s3PZWRa2twfUxxLAnPNtrxpRGyvtsapw7ljUagZmuyh3hLCjhAxYmnoE1dbyIWvpCqSl\ EtVjL1yb_nuLEzgvmZuV02fHxGuWgHTOMVGXpf81Rce3eoBK3lapW1wkzezlk3tcA2bZ\ OtA9qbxdsbVR37kemzQ9K1e3Y0OWhtSjWzr-A4eKSbKCMtTxpEKuveEJ-\ Aes7339mn9luWL-UtZUcxLKzs_wQzdQj50lKajxZpFpshwyxIAA", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "jws": "\ eyJhbGciOiJNTC1EU0EtODctRWQ0NDgiLCJraWQiOiJxVnNTaHVBVXVFNUVVYnFJNDgx\ THNyYXJSX2tLZHJpeDByblZKMjI2S280In0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.6mlv0vprz3_C3jIdjEy5TjdnZJWfwglag-\ piJ1yINZZh5cNJ9WbU_D7KPjyIrLp9I6atROfKb4_g4kiimLnfhOs3J0ZoOgxGMQ1gaa\ -GpPmKieV3cxq-\ AaTe11cbkDMfk68jGpZsXb86JM4ZUgC4QyOIphaf9DQZxIdaJRTEFnlDzFxIu8FyK6Bn\ m0b8eF16xO9OtZMtn1dDVfxZnIgleuMTFl-028pULw-ChPRhBkJ8NeKa4uuMm_u-\ N5ySqopXXD5rRr9QDnbIONHzQy8C4nZDe3DVaeykmh1D8OXU9AJJ2Dw4ipW3xpE3_oJD\ 4nyHEVnIxLhhnQa-\ NpSGB_OOBqPrQwiKobx2abjWZP7y11bzgnvQPzkZZt8k9MsNNjwuurN_qvcBGwX6pYd7\ iU1-A0_qYQQnCI1CB2l74-\ Z9VosbZlSOZH2vdtB9waEI0QSaQxeYYR2eo3IFEFxtmm2g5Pod2Co8VQbL9nJO2SdLqQ\ my7aQMbq9VwSAB5iV9NDXIJXzVLoEISVPXmdnvxF09Hcxp0oAMiuEJcPKvwSzfy_xe-\ eLhVCGlKQ8ad3ByZ4jON0vv1ISldy1_1LGIRR8EWWzkavAknxdA_-\ 1XeyPfADSZPipS2k1iWIj_jiG6QtUnHthlhzmSzVbTjWg7_C1J_jWEFxems6fu4TAa1Y\ DD8aCVoapfSnAmtIYSZVjn3oDuZ_VSd_3E1ScVtkbQXiUQPuz0Mo6RY-\ YnDUfUBfTCz8Meyo_G8igMtwvUOZgXqft8h2xp_3Y1Ang6AJL2nduPSyWG-\ Prabel, et al. Expires 14 March 2027 [Page 64] Internet-Draft JOSE/COSE Composite Signatures September 2026 qmAZYvk_Ub6Dsw2TCshCAJmdqYIFXYHrSku-\ SxrKW2nwLrOvMNUjVmRpFiO8GhyaQ65Ytos0GM_QrHgtXKtYrJpQoj6jo6MgSrWEQ7kA\ XZsho8Hv-1yf2MZj7ZNBlaSCqlWc6GXChdvXILrKppWM-\ uZalbgt2duSZY3LGg2dqN_1YwPSwqNuGIpsD8GFwwsOQ2UfYDcAUaoNoT7bwdMwyPrq8\ yLIhRG37uMkLwMCyuNOPN1lZ2hKKo4uP1tkhlggKKyrKAOaSPXy3t0fk3apLKqpTweMn\ LzGTAixYGAlpDXW72fdxED8cVK1LzpDTZaIg7bLs3Ox0lfWAfBmQWv9WOpWmCWBvXEuN\ 41SyAim_PxqUPH8o5HWAXuBx9fAb7WpcgtquIJv2x-\ cPP7NncmIWabdA3HfVRBMAjVAgAHDRjRrwADMtRJodwGMNi3b9tyeuZjy4Vt_ciQeR9A\ Sd2QTyhc3MQKgIrwqZsJDNzQBWrz7HnWaWhQ61M16gySlh3S6isJD8vzwgB7VANiQDw1\ pYekUn_JlzQpC_o33wjjgUrIyXwQHDmEGL3XyaOeHDdlCJcTMWbvGcuvDE_Svt87uiHv\ GdkUtFVhWcI2Nqwr54QWD5sYvnzNQ83UdNXFMUhxQ1SPupBJOmQCZks-\ n8qOr5b2YoknwU_07YkIZUhrNuupuq23DeEWa9vCV9Ab00K2opUrhexdcAIif-\ n_6ZwJ8kb0ykFgvR3GfK3lAkqbTaSeSYzdUvBrRNA34L_XRFGryciaP87MYTh4k8OdfK\ 5j8-OXKRuzpbpIneXqh60s_6W2KGQqmXsU3rK10c2J0JD5aSeGoWVUj3LqHJLA-\ BlgBerdTlwSo3V2JA-\ H5e9Lf60OdhNieNbEgztjdcq5jlzIXrgcZQcMt4bjI_Hs3l9NNt2SBsxTEA2DQ06NVv9\ mLwE4lHqMCYQpXSqBA2lPOT3P_d03YVVneBrIh04IjsTnMvLY9iHtDPBFfLBy2ovLNYN\ XcZT-WeCNM9UcH7p8MHscuxsY8LCh0sihZsZ4QDVEBdFgV8s_IUV6Xk-\ yT6zd0M_g6DNi46UqZyU7kofd1NuDNzgA_C1jdkPQz4FavXifAMrstfly2--\ jrcjN5Y_qjFrAIDHm2ohXSH8kzwiGE4a_L3BcfMEp14ixNJaL26apMPtAFCzqcD3R_5a\ qOdp2mE8mIAX4YwXTLckIwad6Kxi_ZPa3VRwjRo1uYfeoUczgJ4t1tpVps15luUYfWQI\ Eo4NXPKuUKKbFbbp7dTaIsDKNloBbCJrL1FiSAZIBxBSjyE6GMf59AXjZL0o920In5YE\ vLk5moeSm__KMHUPQbK44ipMKSMQjxCefN3ph3b44LvgnAOe8il1M_MvJfKuQOufAD8q\ 5pZNIpMsYFiE7iUzV9BkTwapfo-GB_WfPZMN7Qe-\ T4of1wo5SMNDCoDggFJaDGQvsAqUGJXqgYAASG_YaMwoHGpvnfGoMUvQRbOrioMqrmN9\ 9J88JlqSPt2aEk7L47zf_0aWmcRrL2S4LZyPPaXrgjhuP76jhjasqngVlahIzOfU8cs9\ AclI9h5HakP0jOCaooAW2tAmd1zqj7rXwln2sQr5CaLhkTXJt6XllqDUaX42rxhXCuuY\ LXLflsBrtsoXmru7hEw5SF4jlvprg8L-syKm0ebvbJPoQR1MzrEwP-\ kfr4q2Iv0c8pEnW-\ 8UyYiOIoPv4r1xHRWtcGmPK5utPaUU56SJ6iGjtETDbiXvT5ZySjtgAjOWvIoRoL-X3-\ ubkUgR3AS_1KBOt8JaLWAHJVgbocCh_qFbsZS36sSVKDaxPu0SHH0J2bFXGpjJxs6VSS\ jkCsvv2RUtW502YCrNycmj_4Wl5NGqgb-\ 1WNdcspPgv8Sb5LV5rJhj_R0CEmvE0MeI4Nh97lqa4IvqsrPHcMymfBsBoI8nayArDWy\ 2wm5m85aLIdj0ON8srD9ikYD2TO-\ xBTb9gaSONJPq1UTzbvSdrq0rkoEbbMf69UmSiu34us-\ _tvQpaS1BjjPHpD3pBmsiaXT5rY_Oq_S11C3OYXe4ZIYmhdqMBR-\ Qjk0DQLkGy45QJSaULViZx4m2P2ziTdd_M-\ TH2GCzke5Ks8ONnJ3TI2bC_RKQaK9AqHmjETbC_ydtTvLwhT6E2xy3WKb_E0UCFqYd91\ 40-UNYVxcXBhP9lBsI3QHALWRXEU9nI3TgYYVdWpfgrc9DV996c6Dc-3iSGNMW-\ bwbPzM_et5TJEDpCgYq2aMDammYUwnknTPp7m8qI05aT5wwnZuBQWWXdy8zGYUW-\ fPxUgr7UGuYQLjQOY53BAkhbni-Z1s-bsIjTKup3kRgI1oOY-\ JVQPeNnK1QGuZnxMRcoPJ3Q96S2YfNNMSjo2rYebmt_9jnlsvhLN0O5niL1_1bcK-\ mPu_PKMxmTBswKj8ZI-DJFf5YwDDj6RsrKv629MeJ7Iad-2LSs006DLxBBN-\ nOpsRDtra47X7cjle3LDq2l_lN8f3fTjlfh-\ B1ps6TZ6u4GRReH21COwk7H_vdG5G9Hq4UNczV_r6AzIK32EgBwF5HNA5yVrS915a4IU\ -oKDo1gL_tZUKrZJmL0m0K8Nu-C1M0EP-6WTQMxppc5-\ CxAAnIvHNTVO3EhNj76ObDPjRdDAm94ayRjMosvCDaUGdBEu31d-\ qmHl4aqhkn0y7MivNdrvamxPQPlN4E7GV8xQrIJXRz_KaoM0MypOUUHRPrVNMiWlrxOC\ Prabel, et al. Expires 14 March 2027 [Page 65] Internet-Draft JOSE/COSE Composite Signatures September 2026 Nhbf7xHAKdXmX-\ vxmnDbG4qwSUSyE03xVwQS0Beoutrqy2N0zs2cbUhnW5RhGHyr17GWgf1qtEBzaaIkRx\ 6HlPOFvNncSVDvxsY--\ FBRiNcxvopEaJvBCuI83T60o9EDQHAVb8SK_VVsFbph4NifyHNUZUZ_ppoTJBOO00Bzo\ mR0glpomirfGlMoqoiG_2huhHxRX0Q4F-\ ugWFLRpC0eil2we1okPFUqpPyEpfk6DHVC_jmKEv8-\ ZtjJLHWPb6V0zo6X5jnHJeKg_etsM4YbgFbqxcjVya7ZE09zlJd9hHlmefg6sB8SGl21\ 4yOM6_sbWFsC4uVb7Zb0gEHwuqsxaCDNicugM41NkAmZltBCi6eKgGlAb1TAnKl8Vlz3\ xSO803BNvsawTG1ZpJQEDAIEWfYPumlxgBxGmOEaoKX6PXwt7ufxRArrkUpZ-\ 3Q2lOXqKZTd8hf-oXD3sB0M6bVf-\ uFfe7GyeUbC1_lcuQn6ZlRi87MHCRoVWOFVOaE3znF_HgG3GQFPgNZ1rp7l2ezWc6eRY\ u5ub77HPAyFt_9qyv0jctN9JPszVxa9gRD8vPtiifYOzsZH9t7CgGbBPgtGZW6KYLhRu\ AqFQ0cGD6EifApAgEgqFdzDb1O8RweQcYHGM7NJGZi2k5wM-\ 1XBSM7LpoATzgOoXAuvx22shY-\ jvUNzXo0YnvTzwnMr_YlJur8hmW6A3K1gS2RNAZnSAVhtxCgTeO1p6ritfBsvgtikoGI\ qQZrGkGdGsbtEXlGowtt1q4lQA6ac-\ 1RSpb3wD8HjdrbGmvtihNrIHT31rVkQE01fSk0m4R9QiOB7HqpE98f3HbWDi-\ Vc3uL6mbAVzM-4yh0AkacA6kRi5FbttCkyl0l3zcgydyh2tYNGna1AUGC-l2Mpc-\ mIao5cCXPWrcH1J0rRAz4ro9yf695jjk6KD-hHxn7rPoJFrhD--\ sUEERcPlkV_ev4we2ZFtB91UNlymMVclpU2R5c4AiMe9Bm4hxpEwxDWGCAPoZJr0qTyK\ f2f0Un_Lxtcr5Re0XjKi1xOAm6tJPgXl3KUXlxJGcsFOEUKnDqY9JrkmC4aG52dMC72k\ 1z17AMC6XqX__j7lnx4-qkWFzbLo2ET6DN-x10bItq9OcrgisUaatfJikssUlLwxwLc0\ -\ faty46lWgmSsx5FO4L7RdlXTaMb0wn2B8lTCzOa3KOwVJk83RmZJcqajxeSHdgwpMwfz\ 7v3PQvzeus5CN_H-ZT2iQT9-\ ni09WSPaRNQeypf1ZRFtdmSdY58zAN0cQwcKflY4Qe0Y4SaMEaBSd1mGh7Zo8XkLeBKV\ XhpEwBCQR1j5lL7rfq2fZ7skCnBo0vxl-awrtw7wn92z1D0LHpPt7pG-\ mpaxhuEpQnuXlcFLO75wdGeosDp5gSKkhysP6NF3ALNKmHwPggQKs1RCgRyx2vC8jzi-\ OStU4Q-ZM-\ _vKxCkbVPegEXCfmcqHGBZWEAjhk15bnE35rmvfJZhPxuJukKm9KK5E9NF98oqQw2kbW\ cADq9oXf3XhoFsE7HkJH2-\ BzM2eyVas9AyMCjTzhf6DAcMJ9SKYFVpE2e2cF8C3SzFag0qTRB2TzL5ANpkvlPgeSV5\ 0ejqBW3jLWWCsNNqN0XaVIj6QlQje4BU5-Rt7u1tGc4mHQu4mlT-\ 8LaxCzvmANSL2_nk9TcHDt2dk4KCjrwTWvl7s8HpSZz6ZWSxfZIWmu3G4lAxNfjgDrPx\ ZsiHXUy_X5rK9H2dJrJz7b--ZlMj0RVOQxK-\ Gy89E2FxuINuJEUQ9m0PBKkDYKYcDNPQ5KctARHWs7JEjHGd09A86doqk5J6t-\ 9bWSliiNq-\ dRESLX25HF_36YrwycT1lVEIXiAfPci8rUDYXbhJR6yqiAvHpqce9gktVgft5zxgdh2D\ o-MadmAAqg6xG-jBYt0FiYkRhJ_6V-\ c0zt_sPhUstyOa0IGBS6tp_ITbkwhQfRhVPQLzbOwjYmFvqEc_JQjpFDpH-\ 8g93aFoPh8BQWvBkLjtDVqN8UX-\ 1MSJv8tNgbfdxW1ugUljHDTgtGci0TWzIZQgZVOHiJaIRvH1frkwaCslsXhlcesq04mp\ TnqTDONc8aqFKlNITedv52VX3UYfl-\ EfxiTYz05sMdYDMJ_iPtJMXH5LMMT3D5j5YNItz5PtKKwQI9xdLk3et2-\ dZzAsavRxyb0gg4s1oEQN2ChD7ttQgYNflZEulS45Q8o7xzCDTwe1w1bet-\ YGpPZacfoqFpVULeqISBaVAxCK3dXdH-g4qIPipupJb0Wl6oan-\ 2M8xO9cfTi6vSbtCF9dFooEQFJyMQLqBSWDO9RdW3tF5-\ FqjQqIYiOxiXVEqafbfOLuXf2YO_ltvD4e5rGgigpPeYcH8GUanFPhKQ-\ Prabel, et al. Expires 14 March 2027 [Page 66] Internet-Draft JOSE/COSE Composite Signatures September 2026 J9t3OE3NMmZzg3QzoQVG6WEbYO8OlMLYnAW3ImcayLMlW-kCVL-u8U5ojHIbGorPP-\ d5PGykGKYe0q9OlXofimQ4OsGBCdekc7ZPNNVJhnib6Ab-6aI-\ ApxdJT5LEb4Oqam0ZAjHrJk87U3Ohttzi6gILEBQmX3F6s-\ Ht9RssLz1ASVCUuL_HztrbLDVGXmRto7K83_t-\ wAIIOj53wve20AAAAAAAAAAAAAAAAAAAAAAAAAAACBQiLS82ODQ__MolBYkpUE97bImu\ HSfUSIYTkZmwTA5iomXOc4Y7j8WJfFGNI7lMtiXzokkpteDeXAyirf9JgEfP8fEbBssP\ pTy45VBP1FGecxR_8UdCoVSAExR6T7PpNKis4POoP_0-Y3K0Ta5-yZ8J1z7iwTEnAA", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744f446374525751304e4467694c43\ 4a72615751694f694a78566e4e5461485642565856464e555656596e464a4e446778\ 54484e7959584a535832744c5a484a7065444279626c5a4b4d6a493253323830496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534138372d45643434382d5348414b4532353600c86e106632\ b46f3f7ada053b838a8cbf21f8773ee7b1f1f2bb80d108008c2378d18bf1a314a40f\ aefed6bbd88bbda4cbae01e4d335b9097c7862e3750b4c7414", "raw_composite_signature": "\ ea696fd2fa6bcf7fc2de321d8c4cb94e376764959fc2095a83ea62275c88359661e5\ c349f566d4fc3eca3e3c88acba7d23a6ad44e7ca6f8fe0e248a298b9df84eb372746\ 683a0c46310d6069af86a4f98a89e577731abe01a4ded7571b90331f93af231a966c\ 5dbf3a24ce195200b8432388a6169ff43419c4875a2514c4167943cc5c48bbc1722b\ a0679b46fc785d7ac4ef4eb5932d9f574355fc599c88257ae313165fb4dbca542f0f\ 8284f46106427c35e29ae2eb8c9bfbbe379c92aa8a575c3e6b46bf500e76c838d1f3\ 432f02e276437b70d569eca49a1d43f0e5d4f40249d83c388a95b7c69137fe8243e2\ 7c871159c8c4b8619d06be36948607f38e06a3eb43088aa1bc7669b8d664fef2d756\ f3827bd03f391966df24f4cb0d363c2ebab37faaf7011b05faa5877b894d7e034fea\ 610427088d4207697be3e67d568b1b66548e647daf76d07dc1a108d1049a43179861\ 1d9ea37205105c6d9a6da0e4fa1dd82a3c5506cbf6724ed9274ba909b2eda40c6eaf\ 55c12001e6257d3435c8257cd52e81084953d799d9efc45d3d1dcc69d2800c8ae109\ 70f2afc12cdfcbfc5ef9e2e15421a5290f1a7770726788ce374befd484a5772d7fd4\ b188451f04596ce46af0249f1740ffed577b23df0034993e2a52da4d625888ff8e21\ ba42d5271ed865873992cd56d38d683bfc2d49fe35841717a6b3a7eee1301ad580c3\ f1a095a1aa5f4a7026b486126558e7de80ee67f55277fdc4d52715b646d05e25103e\ ecf4328e9163e6270d47d405f4c2cfc31eca8fc6f2280cb70bd4399817a9fb7c876c\ 69ff763502783a0092f69ddb8f4b2586faa980658be4fd46fa0ecc364c2b21080266\ 76a608157607ad292ef92c6b296da7c0bacebcc3548d5991a4588ef06872690eb962\ da2cd0633f42b1e0b572ad62b2694288fa8e8e8c812ad6110ee401766c868f07bfed\ 727f63198fb64d0656920aa95673a1970a176f5c82eb2a9a5633eb996a56e0b7676e\ 4996372c683676a37fd58c0f4b0a8db86229b03f06170c2c390d947d80dc0146a836\ 84fb6f074cc323ebabcc8b221446dfbb8c90bc0c0b2b8d38f375959da128aa38b8fd\ 6d92196080a2b2aca00e6923d7cb7b747e4ddaa4b2aaa53c1e3272f3193022c58180\ 9690d75bbd9f771103f1c54ad4bce90d365a220edb2ecdcec7495f5807c19905aff5\ 63a95a609606f5c4b8de354b20229bf3f1a943c7f28e475805ee071f5f01bed6a5c8\ 2daae209bf6c7e70f3fb36772621669b740dc77d54413008d50200070d18d1af0003\ 32d449a1dc0630d8b76fdb727ae663cb856dfdc890791f4049dd904f285cdcc40a80\ Prabel, et al. Expires 14 March 2027 [Page 67] Internet-Draft JOSE/COSE Composite Signatures September 2026 8af0a99b090cdcd0056af3ec79d6696850eb5335ea0c92961dd2ea2b090fcbf3c200\ 7b540362403c35a587a4527fc99734290bfa37df08e3814ac8c97c101c398418bdd7\ c9a39e1c37650897133166ef19cbaf0c4fd2bedf3bba21ef19d914b4556159c23636\ ac2be784160f9b18be7ccd43cdd474d5c531487143548fba90493a6402664b3e9fca\ 8eaf96f6628927c14ff4ed890865486b36eba9baadb70de1166bdbc257d01bd342b6\ a2952b85ec5d7002227fe9ffe99c09f246f4ca4160bd1dc67cade5024a9b4da49e49\ 8cdd52f06b44d037e0bfd74451abc9c89a3fcecc61387893c39d7cae63f3e397291b\ b3a5ba489de5ea87ad2cffa5b628642a997b14deb2b5d1cd89d090f9692786a16554\ 8f72ea1c92c0f8196005eadd4e5c12a37576240f87e5ef4b7fad0e76136278d6c483\ 3b6375cab98e5cc85eb81c65070cb786e323f1ecde5f4d36dd9206cc53100d83434e\ 8d56ff662f0138947a8c0984295d2a8103694f393dcffddd37615567781ac8874e08\ 8ec4e732f2d8f621ed0cf0457cb072da8bcb3583577194fe59e08d33d51c1fba7c30\ 7b1cbb1b18f0b0a1d2c8a166c67840354405d16057cb3f21457a5e4fb24facddd0cf\ e0e83362e3a52a67253b9287ddd4db83373800fc2d637643d0cf815abd789f00caec\ b5f972dbefa3adc8cde58fea8c5ac02031e6da8857487f24cf08861386bf2f705c7c\ c129d788b134968bdba6a930fb40142cea703dd1ff96aa39da76984f262005f86305\ d32dc908c1a77a2b18bf64f6b7551c23468d6e61f7a851cce0278b75b69569b35e65\ b9461f590204a383573cab9428a6c56dba7b753688b0328d96805b089acbd4589201\ 9201c414a3c84e8631fe7d0178d92f4a3ddb4227e5812f2e4e66a1e4a6fff28c1d43\ d06cae388a930a48c423c4279f377a61ddbe382ef82700e7bc8a5d4cfccbc97cab90\ 3ae7c00fcab9a59348a4cb1816213b894cd5f41913c1aa5fa3e181fd67cf64c37b41\ ef93e287f5c28e5230d0c2a03820149683190bec02a506257aa06000121bf61a330a\ 071a9be77c6a0c52f4116ceae2a0caab98df7d27cf0996a48fb7668493b2f8ef37ff\ d1a5a6711acbd92e0b6723cf697ae08e1b8fefa8e18dab2a9e05656a123339f53c72\ cf4072523d8791da90fd233826a8a005b6b4099dd73aa3eeb5f0967dac42be4268b8\ 644d726de97965a8351a5f8dabc615c2bae60b5cb7e5b01aedb285e6aeeee1130e52\ 1788e5be9ae0f0bfacc8a9b479bbdb24fa10475333ac4c0ffa47ebe2ad88bf473ca4\ 49d6fbc532622388a0fbf8af5c47456b5c1a63cae6eb4f694539e9227a8868ed1130\ db897bd3e59c928ed8008ce5af2284682fe5f7fae6e4520477012ff52813adf0968b\ 5801c95606e870287fa856ec652dfab1254a0dac4fbb44871f42766c55c6a63271b3\ a5524a3902b2fbf6454b56e74d980ab3727268ffe16979346aa06fed5635d72ca4f8\ 2ff126f92d5e6b2618ff4740849af13431e238361f7b96a6b822faacacf1dc33299f\ 06c06823c9dac80ac35b2db09b99bce5a2c8763d0e37cb2b0fd8a4603d933bec414d\ bf6069238d24fab5513cdbbd276bab4ae4a046db31febd5264a2bb7e2eb3efedbd0a\ 5a4b50638cf1e90f7a419ac89a5d3e6b63f3aafd2d750b73985dee192189a176a301\ 47e4239340d02e41b2e3940949a50b562671e26d8fdb389375dfccf931f6182ce47b\ 92acf0e3672774c8d9b0bf44a41a2bd02a1e68c44db0bfc9db53bcbc214fa136c72d\ d629bfc4d14085a9877dd78d3e50d615c5c5c184ff6506c23740700b5915c453d9c8\ dd3818615756a5f82b73d0d5f7de9ce8373ede248634c5be6f06cfcccfdeb794c910\ 3a42818ab668c0da9a6614c279274cfa7b9bca88d39693e70c2766e0505965ddcbcc\ c66145be7cfc5482bed41ae6102e340e639dc102485b9e2f99d6cf9bb088d32aea77\ 911808d68398f895503de3672b5406b999f13117283c9dd0f7a4b661f34d3128e8da\ b61e6e6b7ff639e5b2f84b3743b99e22f5ff56dc2be98fbbf3ca33199306cc0a8fc6\ 48f832457f96300c38fa46cacabfadbd31e27b21a77ed8b4acd34e832f104137e9ce\ a6c443b6b6b8ed7edc8e57b72c3ab697f94df1fddf4e395f87e075a6ce9367abb819\ 145e1f6d423b093b1ffbdd1b91bd1eae1435ccd5febe80cc82b7d84801c05e47340e\ 7256b4bdd796b8214fa8283a3580bfed6542ab64998bd26d0af0dbbe0b533410ffba\ 59340cc69a5ce7e0b10009c8bc735354edc484d8fbe8e6c33e345d0c09bde1ac918c\ Prabel, et al. Expires 14 March 2027 [Page 68] Internet-Draft JOSE/COSE Composite Signatures September 2026 ca2cbc20da50674112edf577eaa61e5e1aaa1927d32ecc8af35daef6a6c4f40f94de\ 04ec657cc50ac8257473fca6a8334332a4e5141d13eb54d3225a5af13823616dfef1\ 1c029d5e65febf19a70db1b8ab04944b2134df1570412d017a8badaeacb6374cecd9\ c6d48675b9461187cabd7b19681fd6ab4407369a224471e8794f385bcd9dc4950efc\ 6c63ef8505188d731be8a44689bc10ae23cdd3eb4a3d1034070156fc48afd556c15b\ a61e0d89fc8735465467fa69a1324138ed34073a26474825a689a2adf1a5328aa888\ 6ff686e847c515f443817eba05852d1a42d1e8a5db07b5a243c552aa4fc84a5f93a0\ c7542fe398a12ff3e66d8c92c758f6fa574ce8e97e639c725e2a0fdeb6c33861b805\ 6eac5c8d5c9aed9134f7394977d84796679f83ab01f121a5db5e3238cebfb1b585b0\ 2e2e55bed96f48041f0baab316820cd89cba0338d4d90099996d0428ba78a8069406\ f54c09ca97c565cf7c523bcd3704dbec6b04c6d59a494040c020459f60fba6971801\ c4698e11aa0a5fa3d7c2deee7f1440aeb914a59fb743694e5ea2994ddf217fea170f\ 7b01d0ce9b55ffae15f7bb1b27946c2d7f95cb909fa665462f3b307091a1558e1553\ 9a137ce717f1e01b719014f80d675ae9ee5d9ecd673a79162ee6e6fbec73c0c85b7f\ f6acafd2372d37d24fb335716bd8110fcbcfb6289f60ecec647f6dec28066c13e0b4\ 6656e8a60b851b80a854347060fa1227c0a4080482a15dcc36f53bc4707907181c63\ 3b3491998b6939c0cfb55c148cecba68013ce03a85c0bafc76dac858fa3bd43735e8\ d189ef4f3c2732bfd8949babf21996e80dcad604b644d0199d201586dc4281378ed6\ 9eab8ad7c1b2f82d8a4a0622a419ac6906746b1bb445e51a8c2db75ab895003a69cf\ b5452a5bdf00fc1e376b6c69afb6284dac81d3df5ad5910134d5f4a4d26e11f5088e\ 07b1eaa44f7c7f71db5838be55cdee2fa99b015cccfb8ca1d0091a700ea4462e456e\ db42932974977cdc832772876b583469dad405060be97632973e9886a8e5c0973d6a\ dc1f5274ad1033e2ba3dc9febde638e4e8a0fe847c67eeb3e8245ae10fefac504111\ 70f96457f7afe307b6645b41f7550d97298c55c96953647973802231ef419b8871a4\ 4c310d618200fa1926bd2a4f229fd9fd149ff2f1b5caf945ed178ca8b5c4e026ead2\ 4f8179772945e5c4919cb0538450a9c3a98f49ae4982e1a1b9d9d302ef6935cf5ec0\ 302e97a97fff8fb967c78faa9161736cba36113e8337ec75d1b22dabd39cae08ac51\ a6ad7c98a4b2c5252f0c702dcd3e7dab72e3a9568264acc7914ee0bed17655d368c6\ f4c27d81f254c2cce6b728ec15264f3746664972a6a3c5e487760c293307f3eefdcf\ 42fcdebace4237f1fe653da2413f7e9e2d3d5923da44d41eca97f565116d76649d63\ 9f3300dd1c43070a7e563841ed18e1268c11a05277598687b668f1790b7812955e1a\ 44c010904758f994beeb7ead9f67bb240a7068d2fc65f9ac2bb70ef09fddb3d43d0b\ 1e93edee91be9a96b186e129427b9795c14b3bbe707467a8b03a798122a4872b0fe8\ d17700b34a987c0f82040ab35442811cb1daf0bc8f38be392b54e10f9933efef2b10\ a46d53de8045c27e672a1c6059584023864d796e7137e6b9af7c96613f1b89ba42a6\ f4a2b913d345f7ca2a430da46d67000eaf685dfdd786816c13b1e4247dbe0733367b\ 255ab3d0323028d3ce17fa0c070c27d48a6055691367b6705f02dd2cc56a0d2a4d10\ 764f32f900da64be53e0792579d1e8ea056de32d6582b0d36a3745da5488fa425423\ 7b8054e7e46deeed6d19ce261d0bb89a54fef0b6b10b3be600d48bdbf9e4f537070e\ dd9d9382828ebc135af97bb3c1e9499cfa6564b17d92169aedc6e2503135f8e00eb3\ f166c8875d4cbf5f9acaf47d9d26b273edbfbe665323d1154e4312be1b2f3d136171\ b8836e244510f66d0f04a90360a61c0cd3d0e4a72d0111d6b3b2448c719dd3d03ce9\ da2a93927ab7ef5b59296288dabe7511122d7db91c5ff7e98af0c9c4f59551085e20\ 1f3dc8bcad40d85db84947acaa880bc7a6a71ef6092d5607ede73c60761d83a3e31a\ 766000aa0eb11be8c162dd05898911849ffa57e734cedfec3e152cb7239ad081814b\ ab69fc84db9308507d18553d02f36cec2362616fa8473f2508e9143a47fbc83ddda1\ 683e1f01416bc190b8ed0d5a8df145fed4c489bfcb4d81b7ddc56d6e8149631c34e0\ b46722d135b321942065538788968846f1f57eb930682b25b1786571eb2ad389a94e\ Prabel, et al. Expires 14 March 2027 [Page 69] Internet-Draft JOSE/COSE Composite Signatures September 2026 7a930ce35cf1aa852a53484de76fe76557dd461f97e11fc624d8cf4e6c31d603309f\ e23ed24c5c7e4b30c4f70f98f960d22dcf93ed28ac1023dc5d2e4ddeb76f9d67302c\ 6af471c9bd20838b35a0440dd82843eedb5081835f95912e952e3943ca3bc730834f\ 07b5c356deb7e606a4f65a71fa2a1695542dea8848169503108addd5dd1fe838a883\ e2a6ea496f45a5ea86a7fb633cc4ef5c7d38babd26ed085f5d168a044052723102ea\ 0525833bd45d5b7b45e7e16a8d0a886223b1897544a9a7db7ce2ee5dfd983bf96dbc\ 3e1ee6b1a08a0a4f798707f0651a9c53e1290f89f6ddce13734c999ce0dd0ce84151\ ba5846d83bc3a530b627016dc899c6b22cc956fa40952febbc539a231c86c6a2b3cf\ f9de4f1b29062987b4abd3a55e87e2990e0eb0604275e91ced93cd3552619e26fa01\ bfba688f80a717494f92c46f83aa6a6d190231eb264f3b5373a1b6dce2ea020b1014\ 265f717ab3e1edf51b2c2f3d40495094b8bfc7cedadb2c35465e646da3b2bcdffb7e\ c002083a3e77c2f7b6d000000000000000000000000000000000000000000814222d\ 2f3638343ffcca25058929504f7b6c89ae1d27d44886139199b04c0e62a265ce7386\ 3b8fc5897c518d23b94cb625f3a24929b5e0de5c0ca2adff498047cff1f11b06cb0f\ a53cb8e5504fd4519e73147ff14742a1548013147a4fb3e934a8ace0f3a83ffd3e63\ 72b44dae7ec99f09d73ee2c1312700", "raw_composite_public_key": "\ e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b468cf\ c82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91fdb643b5\ 12f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfcfd12565433c4\ afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4318bef5eb6e897e8\ b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ffa496445967e75217bfbc\ 9048f9956443d8731f833eb30de10dac96fffe7cf65ea0445c3e31e8601e133be6a1\ 00764fe3196e267726441f31751fbf9a6f5880644f4e7275e57de2b0f105e4db055d\ 50dd1c9c934fddf535b8de28b0c74c0449f222cd2ed0bb8fbc775ccee8c940665b40\ f712f4f7e00750e9e1e4cd9cff25d1945c3e9bca53ccd4f12eee7581856ebd68f268\ 45956e3e7beb761f0fe75bdd31bfe2fa018113397b387bd59d62a68b8af7fa245ab9\ 32e69f778e2ceefd21304fbb8099ea13d8ea57c1813197a2f75ae251075b51dad38f\ 853669e9d5f98a3655098941993a1594860fba71fe530ee5c29f58f2978af688ccb7\ 5a5838a359c112e98e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0\ 874e35befcf3e6119684768f36e008f04712177cebe627607381e56eaaee161c1729\ b8de51dbde474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab\ 5a3a049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24\ feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c248512488851\ 07b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff6c3e20a4\ 7be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283c850d8c58d1e\ 5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c501a8ef2ecadd1b677\ a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24fd92b7b5b4025feae996\ d3e48fd4c650d82dbad7eaf936639698512f26253d2ef6847c8518e8565cc9a5495c\ 6fff57cde7323882c54a7db470ab2daf8ffd2bf794fa7c692d9e7fbd532eecc1d788\ 0e2ca0b3216128be28b4a9f1d151fac97808b0bd98b7b43a612a9ac865812bfeac6f\ 47460277840b52a3b087f916ca7cedc0f768ea2bd19ea21155f84b4a04c4000ad2ae\ 0587154d560bc0a477a4f9329a8984dd31eb1f2a05e3d918701d630cfca9af61ef08\ 8d2c5581acb463e439902e5d425719e956b8d6df7305b28e0ff27d3ad0de2085d292\ 499b19a3390d4396fb3bac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe\ 24360f84d14f8e472712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186\ d3b764ad9e9cfeee456a73c291d8de3912414ac43911c372173ad7b472af35c6853c\ ed2fe7b5fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094\ Prabel, et al. Expires 14 March 2027 [Page 70] Internet-Draft JOSE/COSE Composite Signatures September 2026 bad07136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9\ 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ceecab\ 72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c30048bbaa797\ d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bbfa15acb5cb37\ d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c54d6f87457373a0d6\ ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bfa336e5bbad14f73640f1\ b9febe800dbaefe1630c61fae635b074c564eaa9db189c9e7302873fc64e6d497bc5\ c29080987a07a21d4af210703a4fa07f2fd816f12fd1e29b4c0f44afe9bd4a1eaa8a\ 7ae6f02a5b4258f52caf6127f62632a67cf4e8310be56a7c28c86b2e277600c3e92c\ 8d23d42586244c571e90568df202f2f6d81f860a565f9eb91a3c78372e2a8b1be61c\ 5418cf49bf2d6c8955d4a482a9919b7660b3f9a4404ffc454ea073e1e4b2689ab2cc\ a4e46bd7004a6c491fa26ee7a57d60f35edb2b821e6266442c8f335d452d524c772e\ 0353724c23c7dd15b7aa155e91442022140c5fcb0153147edcf3e8952f6f0399a3c8\ 8066a72756c9409915de63f64fa797841c57c796c6fc550ef745dfe9f179457f9475\ 5ae5a2506a764f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec\ 0b36e3a6c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb9\ 7b685ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea\ d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd879b64\ f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f33288e68\ 9ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2d38fdb7a65aa\ 43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05d447f9f58ebeb84c\ 65b36c8afcb83727a1508994e826957a663b0b9b8a003325ab6d6d6462ee4e106019\ c0dffe10323b7bde7d82a38f85fd08786e860ba66c161b64b0708c363de5c6af62d8\ db3c243d1e1b712cb1d59e942b9b6b4295a5a500b182cbd5fd1bc6ce9376d91b47a2\ 284f1fbe0ad1c048cc2cfbb4afa3a9eb9697503b69feca990eba7e9441af9ca44cb3\ ac6b5ed66e591c201fe30efa8a7c471dc613d6254c263a8e132104bec47f1aacb3b2\ fcd4051b69b5e3fcb1c147a65c2f90c4b5188bafc521cab03c12a309da50b5a75177\ 27ed41228ed123fe1b152f6a6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff\ 9b2fa40ba5ed5630242539e5d96823e89dc818a13d16675ee3079d976f694f5acc97\ 60ae789e9b3391b289e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a29081\ 0ed35e56bb19d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67\ fbe761db9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a\ 2e6a152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57\ 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6b9e2\ b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe99941b1e8561\ d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23cc3a65601313\ f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d011b01b4154d1b920a\ f003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b62124b0861b163a3b91aa\ 4bea28076c3432df3b29b6c4e1ba588def420071fc157de90eb2722ecc9ab00df3c6\ 69383a61a91bb67bd287ce349b4745ee7a479dbceef166b9acc412eb579fcd643730\ 7edda253d606b7be7599c38092bc52a8598480edab8b82b1d21c565d2137ceae0b66\ 42619b16133d91205d6355029e9cdfeb9a28b373d95916b6b707d4c712c09cf36daf\ 1a511b2bedb1aa70ee58d46a0666bb287784b0a3840c589a7a04d5d6f2216be90aa4\ a512d5632f5c9bfe7b8b13382f999b95d367c7c46b968074ce315197a5ff3545c7b7\ 7a804ade56a95b5c24cdece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b\ 57b763439686d4a35b3afe03878a49b28232d4f1a442aebde109f807acef7dfd9a7f\ 65b962fe52d6547312cacecff04337508f9d2529a8f1669169b21c32c48000" } Prabel, et al. Expires 14 March 2027 [Page 71] Internet-Draft JOSE/COSE Composite Signatures September 2026 Figure 6: ML-DSA-87-Ed448 A.2. COSE / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / ECDSA private key d (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000001' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-44-ES256 / 3: -54, / kid / 2: h'08e7acdb81ec1e3e', / public key / -1: h'ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca019813 1c44f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde 53b46f34482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c504 98e1717b7c758b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5 cd8ded92a0c3fa1558810f12c7050a367708d196cd24e5af974904aed8e4ce88 72e8696b0b7bca50e452cd7d30ea9a4adac0311d672c6bde8496240b07431463 708895cd9bafc31632d7397649388fdafcbf7d305a3de9a495eca7433a8f83ba 0f0b25c413c6e39c96eb7d691b34d37ce37f1eead1cf217e25ef34eecf3f7c60 f84b8edfdde8405d4f832576c61ef98e0a2f28da187700953924f686b9461470 5bcf53d33fedd4348edddbdf28b5065e1f20775043e85cf931f829179363a1a7 e7404a838ec00086b0976386fe637c98244757e3f769ddd4467471bfad670f9a 05f8246ee50a7b1eaf87fc4069c3ae2aa2033258117792f0bcd49e083fd1bc74 96abff29cc94e4868b21214ed316525399a610fbdd4a80e7c80715f29578e2a8 4bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b5376b5b65597998 4a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5c0f50ea4 bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d430f b78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130 a48fd925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f2 3094a3cd761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722 945775f264e1b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92 a0d4c4ed62326e5024d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e718 1bd3b459450b451a51539a715c21d67dd330eb5970db00d9edbfb2822b036fa1 3bafeb86d8dc78866e3f8d43e53d78cca5595a6faf886b5dc112f1cf4adcfa87 5800d90b48883af97316fe1506873fc157e570eacbfd222868d14234101966af b6bf9940829253a953ada89fc756b6a849f70acb9838e69faa50bba75e3e89c2 adb57e86d088ab9b04a28e670709172243ec5e0008a5ceaf3f8722f487302596 ffd755ad1b82a49c34b3469515b46aa290cd86ee38ea7a9be3f103610335b531 cca333ddfe32b14510f4b07ef95fc6684e8c454a92c10dbb5d59c7a7c63fb305 fe881967d99e669eb632840582560bb403431d40f75a4954908482278292821f 4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28e8e6a4b46226 50cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3563632c5 Prabel, et al. Expires 14 March 2027 [Page 72] Internet-Draft JOSE/COSE Composite Signatures September 2026 21f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c11638 9421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb 00e025d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d2 03eba2bbaef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242e f8d6cc24610a1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa 08897083daa2ebb1775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b 645b1108f0d65fec93789c053743ca14fd63d05e98b652df2b9c2ff9ce05f194 0703ffb273f80e0e2732eca9960d981b4cfd3b7bb8045b3c3830546b9dd8db0d 046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2 964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51 f5', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 3031020101042000000000000000000000000000000000000000000000000000 00000000000001a00a06082a8648ce3d030107' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-44-ES256 / 1: -54, / kid / 4: h'08e7acdb81ec1e3e' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534134342d45434453412d503235362d5348413235 3600ad9c56542caaef74ac6ad7cbf62386c2f4aac8c329e4a6a614fd272572cc bead' / COSE_Sign1 / 18([ << { / alg ML-DSA-44-ES256 / 1: -54, / kid / 4: h'08e7acdb81ec1e3e' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'2a2fa6272a8cabd04670e6adce8f462c9c905742f528d59012cb6ad1aabe8734 1df45c39c840a5c2007febfbeb0f755becb8d1bfa4bde4b16656cea016f42f8a Prabel, et al. Expires 14 March 2027 [Page 73] Internet-Draft JOSE/COSE Composite Signatures September 2026 5cbdc37ff388b419a91ffc31680c14744c3e4d6263f7db6a6d1ab6a983bb6ff3 5ad62e388b59508913a786ce0fb39d8badbca771021afd7df255002a5ba3dd9c 0da9b2850a816913c3ef3b353fb24e6294287b7d0799d01056e4ef23aaffb68e 10a3df96b90ab38d2d4b5e6373d8f321f8c2ffd0a9fc672f8d0bdb677e39ce5d c1a3ae817cc1b6bc033bc0fdfea2dba7cd24558bddd594f96c8b21f206b7f2bf 64b094f829f54f57be1357c3c610e406250f4a689cf00b23f4107b1c07062e55 b18a73c9ec282abccee312f05a4c057e517647f13593ce6455f1ee721ac7099f 6bb42f61b8cef0d8faebfa2924a48f2210b25ea1b9daeb698d7d96a3348e921b 84b98d9fb78111c174aa8f234eb06f02e78a662c2f76302022be516f9012edbf 26b07b9ee6086d8e5b549d2a953cd35f9a27ad89bbc2747471d38383e4e53c2b cddb293fa2807b9baa18d37f8729dad3ee86ff0efa8fe7750eda6d48e838b70a 94e6b062f402afdb7089bbe24ebd81cfdf0bd73b38c188a9e66bafc3dbe62288 3d4427c276fd3b101add92294fbee3cf4891022e0899446d76e1c6b20f848965 f7fa8bfff642c75a3975b8f4317f528ca46d3c08bef2d586be15bf684619017c 411dcbbefa7333c834f25a137dba319e24b89479a84357765be4be74063d9172 a1cf2891594b5de34aed7a387ca6928d538e0daf4cfda698545f7ec2a71635a7 f086e7e342950000a6ce46cf8c52f8139bddb9288cd0e4130b3e90422bc9f464 fe0453795156f0cd62721e9cc831cc2a9ec0558feb4fa79c1b2b8442b55d9d82 7e085119afef0c8a6706fba58117c4e5c77f1fe1f766c54f0cd789e383479418 c5968230d5f86d319d97a009c35c6288c6ac6b7846b3dcc3b9daae92c7759017 2b77e0ff9258faec938c9996a10d82cbaec999c08a05ee0244002c2383bd110b 8ad7218cada06646455de2afc247b723961961523b5633fb00bc46aac1bb2a26 70ac0cb5e79e4335728535c78374dfbafbced9c8a65d01f20435d0500d3622dc 74ff528cbae4926080c83e4879a0887e168db95c59e85489b0a0146399231f40 fe9d965908d9f685827d0393a74edf8bf6bc015ab4071dbdfa9e1157db6b63d9 35144c481966037a464875fff90555c3d055ac8b39b996d3794fc264dd2a334e 7a0ec253986e283e36c4346e93f97b4f7e62015d72be5352dcc03771c4b4b485 81367f26296645dd1c886b166b7d91bb8ece9e50a42d86bf22855cdd8c190042 b502c5d22c7f1f473b25d2c1b5412efaaf5c195c37846bd455c783f9083e46a2 8a2fcbaeb39a792675ff31431d51a13871091a0c35844904aff57288f076636c a826142943837c0ebe5ad0c3210a89d88655c1792c0704dca97bce5b144d3e94 6100c626d352a1e17e24717fe4478bd9901b0df9fd5eda7eefb1a582732f3a33 cfa7df15234b59cacf868e1141cb22442e8ccbe970d842b7d1dfe2d6ca1e4ed8 ccd0f4fbd8d1799177b6c2ef210602b1dd9033ae899c52137937d1538875b152 dd05357842dd0087325ec0b5343335174968b5b2f15b76db936b6db29bd79e35 ed9eb0575375a884a3efd57bac1449699b93fe186e0cc6e43b3d0d3e2973033b feaf2e1803798b087b049ce8a2c7a2156d1b3a16dde288a158bc740afa154835 ef7d1b5e6dddbcaafbaf2c490a0bf08a14b69c871576aa370d43cdcb9a0e346a 4b79f740a8f0168d95c9e2d684ec6759d0302d5346803252bda5bee8d64dee39 e1686c90a293fb8c2bfedfdc00778141b362e522827a26f3c095ccce0680d7b8 6b7650cd40f94b272dec01e58da108b0312de29b738b04f26034515a35e4235f 92b877c5fb64494b54c9e1f8005140ae73b0d60d8ca0f234ae6de7deec60867e d3eb04b08602b313c99f69a9497e9a65fb574e1a2e749724fbdea47f58192e96 17e90afb5a88681042591aa092acbaaf68424287651bca7b1a35fab63936c85c 440be4aa5a5b86425d7117c6f3a51d499dbf42148cec7dd877733adf30e1c23b e878715e58b3538295b02138144b70398bff8124fe2d4931339769e24e563c89 d75870ffccedb1fd1d5b2eaa2adac94fdf1660dd272513b28b7a2aa8266117e0 58800dafc46fb20de541d275804933e9e30f5beb5bffa36f4665ba334bf88214 Prabel, et al. Expires 14 March 2027 [Page 74] Internet-Draft JOSE/COSE Composite Signatures September 2026 672a95a104b1877f74ca9b0a18ec2c0769c67871eae04b5b9820fa4e6742c37e 1ad126a323e28c6c83c2182390297aa304fe8c0b21c85713fbf94f19a2094816 6c1b5fe68371b509e693fbcfc750aa84eff2608a4d1083647eab2af2a074f475 732e5fc667c97f1d7374fab7b54897204d61e4f6de7b949a4a8580407f877056 cb6eee57c95e566fb8f8eb25387f52beacd85813ab6dc779f9b92b278ee414ff 643ae3bf4c4c449ff35392d5b9e9cd914d1eabfa043ac33d9312ce5b9a82dd04 eb0491c4584a711c386b78d8e86705c1c07db3cd5a53a3e4ce340f9a178a6107 eadf883d2ee481ee3c84b73d37d85332b344d235a0ab1cdeb513875949a5948f 918b1243f43c90b135bc8c4867f53348f563f660efb44401f0aa72e90ddefe65 7521a382adb5b6100feea242349b70ceff91391e2ad922fb50842a8fdb8a276e 9f3e5601b8fe27979afd40b1039eaa6b580d672d0a7424162f4a50bd517fe4d3 3a9cf6d6889895c92aea189b18f6505dd72b9434d2a819e5dd62eae2a3fa26e3 211e26c7d8751d4fec2304e13839ead9e006d9ba3bbf4a2789339eb2fd974742 acfecdd9420d3eb68ee031e9d7ad0ca8ab508d9776f2a60e804d0aacad590f60 bc864b042b0b1e1d90e653bb5171d9637b551b0a04b257866ce2a9830f6822c6 f56ba8ee1705e527cd5536a09e71acde5faf65e8ce9d3660cd5d4a6e6554c742 12b01b4baaae32392dc91be9fd764844b7509f7b81c5a54c8ffaba91bc8a9f9a db85f46f15a85662adbabf3320164640e5df7d3e1388fd9503ad5f5b43f2945c 5cdca8cf7f25299ca5b661042fef8a9d3abe25c52003676df0ecda149810dc0f eb0e815027994bd1d7b61d80af71b48f22fa709ae8fc80fbc0ead415303d830b ea2b10d2f2df077635f7bb9d31ab14e1286e1b4fd20016b869c7fef906d6c257 148f6bf73d32952b66267b90723e4252d49aadeed1ef89149b684f9747474b8d 8224afaca962a94c76ead84b91c21fb10c4c3b125c1915978390b525c7010547 2333393d4e5a6d76777da1a8c7d3d7dee3e9ebf609115584868a979fd4effb01 1d232931437f929aa9b6bde8020a12172f344b516e7e9fa5b1b6000000000000 00000000000000000000000000000000141f2c3a304502205c08a0f6a7e4cc02 8b2ecb57f92bfdf3908b35257e5262d3e54580ddf9465c29022100ed86790395 b1fbf5356fa8da76381cb2cc10e0b4789c70fc2f21a9e9f7dd9f7b' ]) Figure 7: ML-DSA-44-ES256 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / Ed25519 seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-44-Ed25519 / 3: -57, / kid / 2: h'b930f85dd9be4a04', / public key / -1: h'ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca019813 1c44f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde 53b46f34482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c504 98e1717b7c758b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5 Prabel, et al. Expires 14 March 2027 [Page 75] Internet-Draft JOSE/COSE Composite Signatures September 2026 cd8ded92a0c3fa1558810f12c7050a367708d196cd24e5af974904aed8e4ce88 72e8696b0b7bca50e452cd7d30ea9a4adac0311d672c6bde8496240b07431463 708895cd9bafc31632d7397649388fdafcbf7d305a3de9a495eca7433a8f83ba 0f0b25c413c6e39c96eb7d691b34d37ce37f1eead1cf217e25ef34eecf3f7c60 f84b8edfdde8405d4f832576c61ef98e0a2f28da187700953924f686b9461470 5bcf53d33fedd4348edddbdf28b5065e1f20775043e85cf931f829179363a1a7 e7404a838ec00086b0976386fe637c98244757e3f769ddd4467471bfad670f9a 05f8246ee50a7b1eaf87fc4069c3ae2aa2033258117792f0bcd49e083fd1bc74 96abff29cc94e4868b21214ed316525399a610fbdd4a80e7c80715f29578e2a8 4bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b5376b5b65597998 4a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5c0f50ea4 bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d430f b78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130 a48fd925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f2 3094a3cd761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722 945775f264e1b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92 a0d4c4ed62326e5024d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e718 1bd3b459450b451a51539a715c21d67dd330eb5970db00d9edbfb2822b036fa1 3bafeb86d8dc78866e3f8d43e53d78cca5595a6faf886b5dc112f1cf4adcfa87 5800d90b48883af97316fe1506873fc157e570eacbfd222868d14234101966af b6bf9940829253a953ada89fc756b6a849f70acb9838e69faa50bba75e3e89c2 adb57e86d088ab9b04a28e670709172243ec5e0008a5ceaf3f8722f487302596 ffd755ad1b82a49c34b3469515b46aa290cd86ee38ea7a9be3f103610335b531 cca333ddfe32b14510f4b07ef95fc6684e8c454a92c10dbb5d59c7a7c63fb305 fe881967d99e669eb632840582560bb403431d40f75a4954908482278292821f 4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28e8e6a4b46226 50cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3563632c5 21f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c11638 9421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb 00e025d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d2 03eba2bbaef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242e f8d6cc24610a1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa 08897083daa2ebb1775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b 645b1108f0d65fec93789c053743ca14fd63d05e98b652df2b9c2ff9ce05f194 0703ffb273f80e0e2732eca9960d981b4cfd3b7bb8045b3c3830546b9dd8db0d 3b6a27bcceb6a42d62a3a8d02a6f0d73653215771de243a63ac048a18b59da29', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-44-Ed25519 / 1: -57, Prabel, et al. Expires 14 March 2027 [Page 76] Internet-Draft JOSE/COSE Composite Signatures September 2026 / kid / 4: h'b930f85dd9be4a04' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534134342d456432353531392d53484135313200e1 3c73e6534f34e69f9e2dfa19e812f1f92e308c477bf2eb351a47fa69e68af55e dea2a595419d44082ea6d38d0908d59ea3e97aac61ae9391dbe56c0e5b85eb' / COSE_Sign1 / 18([ << { / alg ML-DSA-44-Ed25519 / 1: -57, / kid / 4: h'b930f85dd9be4a04' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'b90b8fd47a1c28cb219c3cfc816935c875de6c45578c2f0188e3be659eee9003 d58f029bf5a0abb8af014c0b56bbb3b79ffeb188b7c55cd3111c0fdf6ae109d6 231225b426f2cc014885306e3286416c3f3bf6d76f93745c15bb47e413356a0a db194d5434f542e63a9ad3d6dd9cf79df2c525ba2b7a4e584bbc6ce189dea259 557f6edf772d2eeb0deedb703e4af723290ac5703394ddea72f9b12597cd52f9 619df061b0cbf81f428e24fcbc4938caa118201e620a514993b393b3e339f6a6 7e292f443c72502a4901b6578b8444d76e5a55ed379bd2553b476d522a78bb0e 18ea01bc09bb89ecc53e606d1082f1010add7c92301b5f8167fde54215fd28ef d0aa4e7704312e4d081375917e5697826b1eab14f37765ab1ff1ae9804ebcc1b ce26f3a109b563ecf293106536a5623578ae851e35f3431f8a963a1f5186bf1c e61612984a06659e1bf49dcbf5dcba6c811b079a03749aebaa56125ecf8f3c9f 608e2c12993885641dbc97b8ab171ada3f7f0fb29a4280aceacb5b2e7709efe9 0a1fdf0eea4bb2b702914da3be3d553bb632d4b90fb1c5269121b15d81d4d859 6cbc60898eb0f0c6acc12fbf28bd0a49d5ee7b666b92ce92712a77f80de223d1 63e4e6ce002375c4a299d7f1113332ad0d9c04a2ec29090ea57c6f2ae37e3c65 97f93951a4de89e0cd585a6c24341d67f9f30a576c8d231e8084278d02fe7895 6df4eb22bfe3ef8a62e18d865f03890551e79626540e7d83c213d3f5f01d6093 eeab5741dbfed50b3af9511821726325b7f56783cb7bef0ba5db19277a27d05b 794fc5918e19ef40404f50bcefe8ec06c672b0289ff514d47bedbe8bee7185c1 20289b3ad26550116189bb7f789c2b73fcc257f3f96fd6d398277934dc224beb 7f3ee5282e8798203c563045aa0d722c7c4b7b0d0a70a69306cee51d506de71a dc8f5b2d2cd9bb77d89f2b2a87914bb9c4d0cf8a32688ed9388ae6e6306f91c0 c5bb10c6f28bb2d4ac53863c2cec9dd18b4f68dccca8006ed0f2f0675fbd7439 5c47f4d7e6242f5a8273c406e7bc01181cc12a87cc23c967e2e4731a6eb43c5c 775b4b1a74658bc38d184d2b5f9fe1a781e57fb9151b45b50e7c959cf73810a9 Prabel, et al. Expires 14 March 2027 [Page 77] Internet-Draft JOSE/COSE Composite Signatures September 2026 ec4bc2ab6bcfda35f92ce53b8e5147fec4a41cc626d1fcce2bcd0b2e8d701694 bf2b99a895163149ece20b4ed17eb6046ac0eeb7f595b1c85836b246813ac414 f993ce346bc98ea56fe2e60e4225f22d338d5e6db71c9de0fb83162159eab381 b1961680d8a87b59bb29096653f27a92eeac28eeb1df6c6c78e4f67288887a23 bd2294431942cfc3f3deb3d053aace6cf813cb4326ce1004aeba4835f3bd48c8 ae2b4a9e964d4b24eef0cec84193910c2d0a971dc055cd3f4f248f24a9216e79 209f73868ea79f692b4cd1e7d262a657566130ff0433459931d309c00f304a31 5f2fcf7ab89f3206e0a13e0d9e8ef7e1e968b48d071e146d4af01c5fad74f6e1 2a531018c52113621b9b71252c4dfb11a0674b7d485d791eeee21dc6b86f3c1e e8557fee3077c055b7194221a365bcf71898dfed6b9d870d29a63a199b1dae83 309356a457d660218f53d65e973d2d68eaf43cef0c2990fbc322b76269032f2d d5e54dff349d81ec9be3de4d20c101752bc0cb7ff519240a9da5e74b0accdfff 797c116e338adee136e955d2be61440a23e2b0d05eee023ed777bbf7f32bb4f8 363f5887aa5e69f456f4865aadbeb450eddc25736466bfa71ec8cbe0a48c6bed 5fe28ff3d61c5f955318e8fbaa8bb4390ac152ae84fa043b1be624238b4bf1b0 629bfbb341222fb186d36f2f2349b185fc9f52933433ac02d8430142dc93783d 9a0324e044e0f0cb7b5881baaa06898dc78c856f0e0884c8c174d82437755e88 d2717a893a63812b71313248620ed519b2031c6466a16d4fe448df3313e8702a 8c55485aa7219fb2d178464a5cb044420b135c650905205683fdc0b31c225808 bbf689310aaa7333e87e7b5e45d85a8c987d14cc65a9f41d7ea3c24fa44aab90 cf87519ea9b1d61940dfe99d3a84966e1429955ecb9207087268aef699282100 10096815f3a88a967f595009f7cd778aeb28daec5c6e3be09b1a32f4580517e3 6253d4942cb160300a60cc8c02df6fdb8db861dbbee60a537a738f9225266c22 471a20acd4049c9c32334fc216765e51b56da9ec3cfbdb816a05d1615635b51e f41ab87cab6687a8d7935d1dc3e74a2daa5e122149c0d1679b0ea2ea912fd9da ac610e9fc591f9544d893d1dcc58187b9149e9a66d7a7c3408fdf5ea79bd962d e72b5c3e2f741f5185bcb12fa3e58c96d6c7bcabcfb87b2862194feb09660693 f3d5aa9eb4b717724ba78f13cee6ba9a60894971dbf266f986a003225e0e20c0 0d3dbe577d27274d4123595fd4fd8223edab6268dc0bab3501c2249a3a6a6531 fa571482562894994fd661c1718d7e0295417fb917dd5feb8dbeb3233cab2b37 be26833f29142113bfef92eac50327639312a33db9947892916a0d2245b49551 1e6f9d4ae25b79763295dae1dc33f4df38394c4a85c192370c002670d20271cf 8db0cfeb8ab5c1bace322c7dc9df3a6131c797f4cccb4afe12b46a2aad3b713c 69632f4e82c665a1c42292ec4c6dff66e881cc283d7d1c4923cf2a827255d616 7a578ab43b315a574488f95dac92c0e4196559bfc5977f83da68a8f7ec6ff7a8 256df71a071950d3cbfd84f7ed706b7d358eb200f2e92ce2d79e9f3d6adfd834 5691fbea66ce1099d55520f635b47ad32a3d158cada5253fba8ce2c7a5042fa0 d20f3402f06d7bcbcb9c8e8a5c6fec6f00d88c131f3e8f17c3389668ac3bd971 1a982f24c36cd6d56108556e98227313199aed7a79ce9cc661569f482c4a228f 8c85b3ac65cde8477dd16e3197629c6ec2836ef6ffd032c732f17d420aeb4cc8 0f41608716d87a9e77a5fece9d38dc99108ff09910c925ad7e82a1bc84bd45de 4057f64539ca1c63e46d0247ab8dac08d28fe430aebd9aa97cc53322303aa791 173633a253856d5b956ad23d9d14827040eccbefb5950332493b90fb1763dea2 7031a146362da86f0b6c750adea1b0386a3e50d072c56b882feabaf7e07898a9 85152a603468e0d41b8ffb941c343a7255781f5c608f98cbfedb01565f355f84 cefc32b4562239e42ed0387a1a59d2d68f730288d608cd4385e4b01b2e135b6e b11b6c39767675878858236595bed7d7fda32472ad50dbb033cbf94925f8f8ea b7e349a300cc2c1ada46f8f59c1f052e06dddd3a5bb8ca455b9a2e1b673675f9 Prabel, et al. Expires 14 March 2027 [Page 78] Internet-Draft JOSE/COSE Composite Signatures September 2026 0b1318252b313a3e445d7077808c979aa1b5bdc1cbd8e7effd03202c3b436f8a 91a0a6bcdcdde5e9f6f7f8154c5983b7c2cbd0dde1e5f4f7181b5a5d6265a0ae b5b7bbd5dbe8f5000000000000000000192b3847c9961e24ac6f9ffe772eeb6a c83bccfd7c09891a34e65475b990a446c6dfe19c88afee71cf55978a927cc021 127ec31626c3284c31c05eb64cc58fcec24c9d06' ]) Figure 8: ML-DSA-44-Ed25519 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / ECDSA private key d (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000001' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-65-ES256 / 3: -55, / kid / 2: h'65c28ec7cdef33cd', / public key / -1: h'424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f 0942ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c5 0a888e0dfed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264 802b9f49bce42ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bc cffa8a475e5395396674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e 53b3b7fb49c73adfbc2d4f8c54303520c29bf97e26ee57db342d957c89393652 2d0942b41d82ee3772a00570adfb545c1143922b0496f826a0a970064b36ddf5 34b5f8e1c1cd0b5565ea846b45431f0618143ece89777bb3f61179ad20295fe0 a6e062ae6eecbc2ef38f2ac1a22dc93b7b126336223c55b61eb8c0795542bbb2 dc65e722eadc6866ffa9683beb8a999ad7a83e5e6e016c2e4c35f6f7649ad3bd 52ec67ec1c5c6e7b9972771218be9554bba7727f0b84c44b9b0a8bd831fcff2c 9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355180b709c7045c22d33a0 83f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a4636283f4a1cd4924a 2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded796db542971ca2 89b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb1625171db5 554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963c8d7 9f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c4586 0a2dadc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c 9078f62a8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345 081690eb4c562c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a 3329152686f00d4897f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e 5500383956cdf5f6e37cf9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177 d312ee52a6da023c05722a8738274dda8d1b04e99831cf57c87282a256c565c2 96d0524a063a3a41a48a83009978d98d8abf61af68e8013b594fe151d9bec199 902c4c70b49584201743c6b53103d2fd24bdf078dc90b5a188b4f8d772179988 d0416c94d4c57c0860b9d7b53d4cd261f332a1851565d52ac37f008747cafe32 Prabel, et al. Expires 14 March 2027 [Page 79] Internet-Draft JOSE/COSE Composite Signatures September 2026 0f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f0367eb3cc971bbe0c301a8e5 2f96094936035c6ee3ca2d13db483a0dd04dc16247de0e0894ad7cb7e1ae7ebd 4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c5283244312158c2e b1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b5eaaf32f31f9 5c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e3299724b463998 6044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec907f25 a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0 aec10318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4 f977b326a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734 a51177bcb089476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a9085 2423e2c85e79d19724461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5 856141028414ddbe71458f0a0b2b589df2e1b051783b8f718676b1defbae98ba 496c2a935e92eeadea0a8393ef59f9e914f0743fe65640ddf9981cea6dbdd957 a534ad4e790efc974ee89938ad99d53c5b680775399326834729bb37b082e795 f8d87f52e6c8a8db68e515c277bbea82a7570d4280896c987a0608903e306c63 2a223c55f0ea3682039c4a3f5440f4b5ac3e6ed2b2dc900cecc72b72f50e49b2 629ad30f0487b2707b86286f8c4f55659b25f9bdd7a6af460cc3c57a3982663b b717461581e196894929d84153d87a7f482d284b5b894ce1a78216b2a011f2b8 8742cee52d5133e8fe77edae242f5af91637c37ffca32430509b2fe4756303a9 a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df254b92cdaa40 f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a6860284ec3 ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e42f8d b590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4d c3a0428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f44 8886b802e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1 d73caf8496d742ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d 951bd8c35d61f8a678db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a107 0ea61aabbf59294e3f6f974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900 d281b0b49aa00feabb35714af33870edd7ac2393d93177f79ee5606c9df176f0 25ce49a6e5ff51a2a412ebf86ac0f40471c96ad4c119df230be6173df530ed65 6cbd8069214741ecdd0271c603fb6c4a8614ff878d33e726cac6693e938ca3fb a82c4995c14a2d4af9014fe4c4c50b794cac596b52189f66a7106fb325b526ea 046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2 964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51 f5', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 3031020101042000000000000000000000000000000000000000000000000000 00000000000001a00a06082a8648ce3d030107' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-65-ES256 / 1: -55, Prabel, et al. Expires 14 March 2027 [Page 80] Internet-Draft JOSE/COSE Composite Signatures September 2026 / kid / 4: h'65c28ec7cdef33cd' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d45434453412d503235362d5348413531 3200ca2b702903acf278f47a0ca5abb69b13a60605a055f7334ed9c6de25e1ca 63ae2bc4995cc7f9279eaf70c25a1f46a77b90756657e2b1fc623ea4bd79c384 6935' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-ES256 / 1: -55, / kid / 4: h'65c28ec7cdef33cd' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'eb31a839b3b9a2de6740077573d34b0f8536f7bc480f42a07e44eaf3b5efa783 6fb96ee559f841693beb99ac8c458343f233640f6f54243cb93840a13959e0e6 b0dd1b34891b56cc126ee9ac4ebac54ba28a8c0b676266a4543abfa9f00d403f ae8323e28b11d3e0017274bad65ff2a322bd36b86e8108cd9704e47d70d7cc92 8065cfe0c5c18ddcae6debdbd90e1aa08b2101adbd648399987aa2aeee602873 97beb5c3e83b1ad102a31ada5c7a32b265ae5a7dc6643f6591d4b3b6109c7b8f 311d8de6c53efe6100110227106de0475d202de65a6d5cad520909f50cf0d117 fed2b65242014940de066e9d02ae4d56d3b462c7500035911c96164db7b101d6 b68e73babfaa68cc435af83f98d2284c99831e1d1811059153cf25c6300bfd73 a6549bd512f095f3a220530c41090ec52f6b76e29b3e6efa5f016ebb5e351ce2 4f78144d306fd947b921fa14afc10b107e5a801412a5d2332a1eaf2cf7e993c8 baa74a75a26f118ca44da3ffef9c1ecd9d5cedc29cab177a1f0ec58acf6e54d3 4e57177c63fb74e34a15acbaf1cdec9902054f749492c798543384de2195bc56 5002551b52c6d5c5069a7d3c8e4fd9cd4b7d32ee579171952712109efdc2ef4f 1929a69bc40c976d6af90fb956af77b891718dc491845193c14549782f207d70 baa59d9ad3fe201d753e28eb8756a0572500d74cecd1fe5503428e5a925fe09a b42dfa11421be6fd88e96de15bac81d6fa8f7e1390e9671d24540c26b94f2a78 f37bb1a8b9ac908defc8f2771297e1702f10542e6d922ad8332ab16455fa4caf f5c6b246ff8fbb378dd966dc436e03ee22e83e073e60feb916c7ef1be6f424e5 d401423a72b7953f7705bfcf569355b20a9fa8ae340738e98bd8a62369774bba c2a47b8f87cb4a0a4f5e82cc6214c17b517f4ccd556f29caeb8c0e11acf8d018 3e44e313335821c3fcf992597181127d8254a2d74a20369fcd51fe2a5f309815 dee9f9a307808d624145b09b45fb8ca4e14f716823ba465f160da727783c454d 0aca565c56226af06bd0634e969bb950d9fb96555bf8814ab28593f2d4b4a945 Prabel, et al. Expires 14 March 2027 [Page 81] Internet-Draft JOSE/COSE Composite Signatures September 2026 4851f7013a4ea7d46d781e219484a43ae4d308c2f546405fd750fa2fb9b187ed 18f9b7d1e52eaa58d78a49a0c0ac390723f975d96277df4a0c0746bc76bf4722 c84ebd11aface18fa9269a7a95a9c6a0667018f78583875d30691d2043437289 c1480a77f6dc55138a9eceadabf7173769c0d1a4e65091244120e51a974238e0 ed3f79eb879f67f6066b3fa40fd9e0f34f55e4aa80edfef9bd8ad073a8e681dd c3cb3b35947549aee8fe3a241ffbfc0cf10cff212c69e7f8d4074ac2fd89bd4b 6111be94c1cf3abd41dbcc414d0956e01a65f7f684abe574dbd4db5fa4afad83 364659577debbcec6fcca437bffe9280a26cae019c01b25d393ddb46e2c09e36 80a3a7bbf4a5908867e761e225a6fb9dc3a9c2226bc68b3849e218b936600a63 34c1586e152e84ad68ac0055ff6142670f2c51a47ffa4dfd8e84d75c289339f0 491f9eb8db2292b4da6ec54c3034e60ad4adceaa7dfcc349ab0964865469a081 3de15284d23d101d02a03b16a1807214b708d79625f86e94f26b234b5640d505 3df76b00b9cb3cc1b46ad08692192f232e1c03dd55d22aa6b3ea3aded2c70a11 c4c8dfc18f4b85ee273d07a9297b5f1c104958927b23733086df4510a1346e34 a01046b12906857f8f789d681c6ccba97526fba5a9e742615484b6a0a32dcc30 7a5215e9d36be0098e4300f29b8601f15e0d0a6facd899304cdc3de814e3ec9c d2f294143c8e5d56780575ba06ec1d34a18df398124397a8d879b59683068a47 07c357f1bede1788569651f2f7ca06beea3096bc5463b4088702c74cf978bee8 96e0d99c2eee8ae2320d4003ccb4903dcf6452baf318df5d9a94f2d9f30ff37b f77a9106d680d73e835b6f23ed8105621e6c8f0e6b02ac5866e439ff3d2ca4fb 32a9398d5a04f507f5f0d5b82a5284492768cdf9a89fbd854c28a459604ddbf6 f6586e23df3cea929a96396cebb03a4321773d23157805edde975290673d8ea5 10f071c04b645009e8b20bafc37324525e550519d17e132253edd3e920b85b71 c877291e36710b5b57933ddf718315c1a230f284b3a1715f858922b37f679508 9ec69874fbf3dd2c544f77fde18775686d85c92a8fa52582fa5f444c5bea0c13 1c593d8ac8b0bd96acde9b9abaa16a05be0bf604c4de1af77ef6b3c9474a5953 2ba10e8d4a05f8d9ec7a6fb545c7b6a30c5a83916603a016977c65e2b8b4583c 24489da237d153c0bbd8ef1009604ecb988cf319de06adf1d24237642373154f 2d6723161b35ecf5d7d1b4ba6bdec9931681cf6dba67c7fe7def2370b7b4f73b 8eb14d2042323843e69761f015940120dc7edea9ea1d6ed4a4a43f4b31e7e692 91cbbbedc615e3e2ef453f65387e180686b08de8cda0a9f761e02c4b76db484f 010908f6f97d73c2154f6083abf12c907415d199ac9df6a157d511f8e2f5d1e2 0c36ce7da69a8457263eada6ab152bc6928b3357eda17314dec890bda5fe33f2 3d0dcc823480bacb02e7b56a68381216f0575cfa2491e68afb88653e349b7574 5b0fa711360762ad8bab39f7e498c65c2ddc796b156dbef72ccfa3bca4789060 ac33f0179c0a925c4697b490523066675bcc40519ac49756832fe73b948af61a f48ea20b775afa4e4880c0cd0001d9ee831e7e0baf5fddf12aba12b5c001108f 16aa342bd1df76ea2f8358e2e5677997c24c1e467906da82c0307dfda6b8c40c 14218c9a98057765bd154b1e6083ed7e9507e67b97d8356cd58c2bf8f68c95e5 b15be7d43577711932f33ae99a99f2329fef451c132651a7aa44a52d0ca8221a a6f8d53779c160b61dcb747863a2a43e96cfea88c1203fbfb1e36a19b2bea394 e9160bd9731ba5ce87509460aefa03396e314de7fc90d5135caba197cd3d991a 5a899d649f9f0335f72cba9885bef04d314ca20740681c0e710cb590494289a9 b331536139b1cb2566bf3f2d3fafbe8016350cb9938ee87e926bfb9b07401d5c 244cd774103fd4a713d7080acd1639158201f17f80244812433e4fcbb69975e8 3c9bc26bd7cc9bdea6fbb29aa52e92177f2cccec409ad1c5d6a3608994c6a8d2 65704ddb492bbf5b580e2c04a8b0ed36b75c8f10569b06b7d0f007ee0f7162b1 f7c3f8d1e7f496568b53d596df98bbd2983337c5b3b37208e1ed4e2f5e9c7e73 Prabel, et al. Expires 14 March 2027 [Page 82] Internet-Draft JOSE/COSE Composite Signatures September 2026 dd498e3a3400b34d32240e491bdff35ef7c2ae9e99f13ca5f7d235eebfc6bcd4 5695b47bdf482a792eeaeae048175d3f7a5d51f0dba4f4dd4fcce2300f7df8c7 6e26ab36686e73d2fd29e2be23d577f7efb01549cd5462e69325db648fc09bbd ec3146f3f80a7d0b958c02ad7276e8326d72806570a85131bd0ac4d4bb7b3c16 6247e2669ea62d3bc24da1175f80dc726f29232e5f2136401bc53556add83245 4b3d1b54e22a944028f1c1d05f1741b519b63ab9d2881508a0ae1be515890fdc f8a3b82cd99565335d3120501ae01115f1c0f266a90fb3498528d67b039b77e1 9f050a1cc1837f00f539f65af7e85c57fccbfa054355b501a9f0529b401c86b5 350561c16628c771a34b86e99d3941bc37beb2119f53020eaf71885220216b47 8a867e6d2c39e5ad1d92d8c629f1e851e9b298f1926ecaebff6b57a7f4789cf1 c8c3b9f87c289ef139997382759d991de9733161169185d546ff288e35584f61 d44940c799e1f9bb8591b49a7f5cef234c454e6d97c8879869ce57a2e30bad36 f93a34183e25f0e60a8b9f6ece0426143c0ce94b9545854a8e7ba93ef5af604f 10204de39608915f1826a42acaa4c2ed5840cac6cbb3d65706ecec946d04f6c1 923e1492a40d7d39a68f38f4c5baa982055b5f6e419167a55ac8c9806fdd90d9 5e0f783ec4d90ecf89bc8a90689fd3116c4102a002714822e2754168c70a3cec 69ee0cda813ae34a0c01d46bf6102dbbbfbccf6b9c50fce710621fe2a330a014 0577eb81dee01567a05356cf7433d68368687b909e54f495382a478abbd95efd 17537dbfcc514c43ec522a7c0d0b4829809215ba6a4b1854ca9aacf312df139b 931a1d1f97ebce2cfc6b0c713ab0c7a3c9b9cb543c9f02f316e0f9e813ebe130 bfd6d4c3c7d6c4c0f03940f07548c63226d4327119670c61fa954e31d0c4b47f 9df65076a6a6a672a0fea7cec3de8fd40f1e3a3ffb83c3882c334408d55e788e 0490b1b49c5ca75e2d154f8c507c2183cc7ceb98864c369f29b116c80e80a14b b0a1374c4258721093f386d6161ed32cbc943776ec1136b2bae812ab3f949aa8 5bac47f1a2001f39acedc313cb8f2f1156a8181aa30d86a80a036b1643e5f18b 51ea5a07ce06d972081cd015a348a6e69f963107f5d166e673d96d7f9d574035 667feef40096e9677f12a0ea9cdbbe99a23beafc33311fe85b58d309de9c77d8 ce1a4b104434db0c7e32719b7fc950b2a4cfad52ce167b6acc8c4a84a532a215 13df7b1b28f6526351de26955a0e01924f4e4fb531f2d28a1c1e6312cedaf8d4 a284a26de3f4ce7dc313f34121f8204a5f627c99c5edf0117998b42f315b95d7 016c95d5d9f20415292a4e4f5f74c0ee042b3b7791be00000000000000000000 00000000000000070b101620263045022100c7a159bf3c820f2b6555d1759c42 51067ca742e30959600a967320a2a750bde0022004ccb16e3f95fa1a1df99883 852423e6f2973227f3929b4a646a70ef1e85f371' ]) Figure 9: ML-DSA-65-ES256 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / Ed25519 seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-65-Ed25519 / 3: -58, Prabel, et al. Expires 14 March 2027 [Page 83] Internet-Draft JOSE/COSE Composite Signatures September 2026 / kid / 2: h'93fe1616a4131f5a', / public key / -1: h'424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f 0942ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c5 0a888e0dfed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264 802b9f49bce42ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bc cffa8a475e5395396674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e 53b3b7fb49c73adfbc2d4f8c54303520c29bf97e26ee57db342d957c89393652 2d0942b41d82ee3772a00570adfb545c1143922b0496f826a0a970064b36ddf5 34b5f8e1c1cd0b5565ea846b45431f0618143ece89777bb3f61179ad20295fe0 a6e062ae6eecbc2ef38f2ac1a22dc93b7b126336223c55b61eb8c0795542bbb2 dc65e722eadc6866ffa9683beb8a999ad7a83e5e6e016c2e4c35f6f7649ad3bd 52ec67ec1c5c6e7b9972771218be9554bba7727f0b84c44b9b0a8bd831fcff2c 9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355180b709c7045c22d33a0 83f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a4636283f4a1cd4924a 2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded796db542971ca2 89b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb1625171db5 554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963c8d7 9f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c4586 0a2dadc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c 9078f62a8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345 081690eb4c562c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a 3329152686f00d4897f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e 5500383956cdf5f6e37cf9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177 d312ee52a6da023c05722a8738274dda8d1b04e99831cf57c87282a256c565c2 96d0524a063a3a41a48a83009978d98d8abf61af68e8013b594fe151d9bec199 902c4c70b49584201743c6b53103d2fd24bdf078dc90b5a188b4f8d772179988 d0416c94d4c57c0860b9d7b53d4cd261f332a1851565d52ac37f008747cafe32 0f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f0367eb3cc971bbe0c301a8e5 2f96094936035c6ee3ca2d13db483a0dd04dc16247de0e0894ad7cb7e1ae7ebd 4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c5283244312158c2e b1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b5eaaf32f31f9 5c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e3299724b463998 6044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec907f25 a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0 aec10318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4 f977b326a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734 a51177bcb089476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a9085 2423e2c85e79d19724461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5 856141028414ddbe71458f0a0b2b589df2e1b051783b8f718676b1defbae98ba 496c2a935e92eeadea0a8393ef59f9e914f0743fe65640ddf9981cea6dbdd957 a534ad4e790efc974ee89938ad99d53c5b680775399326834729bb37b082e795 f8d87f52e6c8a8db68e515c277bbea82a7570d4280896c987a0608903e306c63 2a223c55f0ea3682039c4a3f5440f4b5ac3e6ed2b2dc900cecc72b72f50e49b2 629ad30f0487b2707b86286f8c4f55659b25f9bdd7a6af460cc3c57a3982663b b717461581e196894929d84153d87a7f482d284b5b894ce1a78216b2a011f2b8 Prabel, et al. Expires 14 March 2027 [Page 84] Internet-Draft JOSE/COSE Composite Signatures September 2026 8742cee52d5133e8fe77edae242f5af91637c37ffca32430509b2fe4756303a9 a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df254b92cdaa40 f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a6860284ec3 ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e42f8d b590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4d c3a0428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f44 8886b802e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1 d73caf8496d742ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d 951bd8c35d61f8a678db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a107 0ea61aabbf59294e3f6f974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900 d281b0b49aa00feabb35714af33870edd7ac2393d93177f79ee5606c9df176f0 25ce49a6e5ff51a2a412ebf86ac0f40471c96ad4c119df230be6173df530ed65 6cbd8069214741ecdd0271c603fb6c4a8614ff878d33e726cac6693e938ca3fb a82c4995c14a2d4af9014fe4c4c50b794cac596b52189f66a7106fb325b526ea 3b6a27bcceb6a42d62a3a8d02a6f0d73653215771de243a63ac048a18b59da29', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-65-Ed25519 / 1: -58, / kid / 4: h'93fe1616a4131f5a' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d456432353531392d5348413531320013 bf26c18c38c85eec2ea1676900c4e51f304ab5d26947817f2729d93ee9eac71c c5ba8f35065b5b44b2fe52c4dc3e8b686dd0098edb8775206a386db94e305f' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-Ed25519 / 1: -58, / kid / 4: h'93fe1616a4131f5a' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', Prabel, et al. Expires 14 March 2027 [Page 85] Internet-Draft JOSE/COSE Composite Signatures September 2026 / signature / h'87d1c8ddc4b0604e2ba43597c743bd02ebcd1529c00a57f4064a22258d676130 d05cf245a6cd5f2e85bf8f9baaae3d295e50850618166f07480cd182a0a10c28 7f9dd0dffd6c14a2cf60a89165997d6659ef884d71ac41d83d52a5553002c890 e3edc58e8e828e194c3573fce2dd6044975d8283b13dbb6c7642401ef90a0930 89d7e593ed04b0766e755b3edd23209c80e1998be8accf72584d4a6e33ab0bd8 1fb530b49d24737ab7cbf6b03db261c56163819066ee14a3c7d0371ca742470d c7a33a08a35052eb5d3e4ecdb8d8950b9fbeaa694e5aa0d9b7e45ae09d6d92b9 d51e99e2eac4334ee0c404ecf28f25494411f7e6288594657ee2fcdc4fe54166 f76dbb1f2cef71f430228b161bc850ac43bdcb80379658c3321bcf4a7379fee1 dcaaf46d16693b3a1262d3af45f1c91f80e906fc8124aa269540dbf287261d7d a562a83073a2f2d4160473219c4ba41227a39f480bb08e61ad59300996062735 c9df06fa5eb4e7830e7d7dd3e767f07dcb6fc39ba9a01409520684f406bd2f2e 1421730f547e5d92f8af3b335d70580c6a6f452cee6aa44bd0c440145a7c2b64 cccc8f8f6d3258d17fbd4a1b87fd5ec1bc837ed275a4f6440ab230e996817f25 0bb37a078458ad5c747513ec52dcd015ed64dd03aaa5edca6adeb144336863d4 6f36385099dbf6f1b12dca8241d8819f9499a702f2cb5a7a2d93a2714ee4ad87 161c9d41104888c483c8472cc27ffb5c84fb4fb388ee14de18cd4796c247b676 df4f4d59e489297777d0a9130b3815956d18167f78940b2d355469806ebae845 c4be54c57ec14eab7a0fcdefb6e20a96ffb6d637d8d79412e9dbc892ea89994d 49cb08d6a0fc0f31296f8930bdd74f131eb19a3827bcbe40506dbb2d4327100a 269501325f86303289e4cb0bec2c5024ba23081b6610fc0bfd7605bc63101143 fa9833ad55aaa056164d097eefdaea0f56826051ee9a808d983cb20572da144a 884acba016749c3962d2cbb5b6cde867f7b31b19f78443860f145da2536358b0 4bfa2918283cb278ae401af937c6aba3d9089ecba820e8299935fefc8997969c 6b9be7220a306cf1f7d8cc492b06f94ef7b43a2cc3e1ae3f0d4baf4e558a6769 80dd130d7c44b92dd99804e342d0f6078872badfbf2580dd86a26fc10495a69e cc985ced0b34248558c5400da617ea552f8671379b788e1d09e8e83575cc32cc 8f3ed81a63b4c945dcf2ff54f3266ce28089f5f68bb0e49714ad9ef80bc8aa70 20da6a038e66972fcf335742ad8dddc8b959620ca177717ad498524cd96014dc 15514f514cf17f0433db1127526f25ba17c0938359e373e43998169bc99a07bb bdf1bbd7c363cdfa6249ce1bd207923cd2c286994ec75e9f26fdd0ff752f44bd 011cb3e753fc0717d11f88011a0c84db8d88038c351b91931ad5cd477e02859e 01c4c2bfd9945de2f1fb067bef79e430f00b069dfca02c2533e56c0ebdb47594 83155bb7e45ae86f47eb0fa051cde714833c9a0aef8deeb9fb98ddbfa3d8f7d7 86218d54eb9593c4011d38d5521067bfe03a3859d3606b4b3eb3b2cb1760b7c2 0d0f886810f3656edebf4bdb1c51711aed2f452bd69cc04546da0922b922670d 4d9110ea24986b85bcd6c707146022863ad85556e857f06ed6b0bd585f89c119 59ab1650851b23b773518ed9bbfdce997711940d47f915d0bc11170a0babe85c f6d1c272e5d0573d4aac2e595579c7457e4d6c881443f472cf5e865a69dec3c6 69d8c1775a86b249cd8f3618c9259add0a71a5a82c375137067e0ffe4f8d544d 5a825c1a64ec33707da7e3de4ffee65064711c4e06626e66c85ff13ed50242e2 1917a2647e47b8c158137e716ff308b207e80c95c3c8eba252d00d5d475a130b 931d11995200ed0e2a24a0795c436a997f00b6ee47ce6ab66f53502f64e02180 dcada208f21a584d703a996c378de45964768200cc42c5471f07d9d82652c826 534c6c1a7619231b073171575dee7764a274033f066ba6051a87cc864e2d3033 6ea6a49dcebab9de149ed8b07bfd3264120311b3bd9a1f05bf343e2bc1fd4e85 64e6b8bde25fdc7af3e90db002d0b1b1d98760692dca483af82c337e3595f714 Prabel, et al. Expires 14 March 2027 [Page 86] Internet-Draft JOSE/COSE Composite Signatures September 2026 4668cea652cd0de44ccb9c7e367dd50bd5fe61c03a3d7cd605552a5d439f556d 600b60b6f1e984a6af1ea083cee8dfaec7d1190b99423320fcbd92bc884c4b40 9d776eeae6dbbfe0864237c5748a243eca01c2da9a6c8d7d5a832c2acf1989de da9a75b6218a5074d34e769d62a12a58aa4e7d805b1a44b1fdfb2d4e90890865 5a3b063593d6b9d02ca57eaee51e8ed1dfd424ab35a7ac80ebff839167e33e19 c68249b6a54e9f7016ad111f13a0857249a97231e37a860669bf9a094093c8b2 0d721e06ba200691e7e551112a90905fdc7b083b36cbbf4647aaa2b66c9f9e5d 221fe1ef48a46b35df63898383f90a99eca53840aeb71df47849adbbb449a707 7aae229aec51c3674ffac50ef6a8c7f047b382d2da716b32c381168c2799f650 779bb8532b470fa81091a12fc9ac43499124cea67dba8203b71b203b8ede4105 c91e13d4364cdbc7a7c05c7b5ca38a0d1e55389286b54a51ca5b53b73c785ce7 8a4d854c6f37d5bb2a6a658f1e51a916c9ff573cf23b11def800792cd83fdb64 ed773010ae15f5bc6890b3fc5c2410998d6565427823b200b2390aa9dc209850 b1da9152e97f3b87afb356cb86b95fad6c5eecd1e4184c0f8abf2a8d1b088def 6a973f97d5c6210e8a471f82a246babba14774e1dcbe25da51f0ddbd86d1284d 0a6f1d4b4e8056d098ed7cd66acff2e5cb54217c0a6890f36fb9ec70f08f887a a437395a0efa9be575b05aa37187a4c032468e539d637eebc998b5a026502a68 fccdee1545bb74bbc518e5ac5f49e607ba8c047393160f9f330e2862045694e4 521beee46a6594bbab59802d93377b7158ae7803a56b908e98879ae6f94ba2e5 ce58d7c3367ac216391ab60592b690bf936193cb25cc6ae23d7fda0089b485be 1790a9a3d9198036597e7315507c637de1f890566bb8ba1adc00d4eb2623ebc7 8849d167d5b6a69e8b8b541e252963404c62c16a4476efd04ffd49a65e44a030 c4ed134878a483ff369f5553a695bcb90f31dd0bee1d28a1f240950ba9cbfa4f c53015f98a04ddb3a69ebad552b51604fb864d636fd1c5f5758416cfda17cc33 049b1119cf82706d28900a36e8af5fb6eabb01ae2384237c136aad9142364886 26bc3fe073086a1dbc64f7f39a9fece1719e3a3ab8581c964f6470c71d1008b4 cad337ecf297eeb3978f4a9618073a2ed4b6df84a2994c2dd442d8eb233dbf8f 7aae015d54cae131bb575c5031ad8c909d16c778c95d95ee0605e255d0f1d8ab 2b8f1602865de9132e8f52e667001b1115b4fec4df86b7c9dc02f75ad3f85757 c4202342729e0b0cd986f4918d2f68d607a075237976843b80fbec81bc1592f8 68682ce14bd9afb31c1ffe9baa5b23bbcdbf9dcd3193333f4c600c8c19f53c34 c43c964bed80149c990f9af7b7259a37502d8671a1491c4b3faeea8a8c331fcd 73c3ce7f7c4efb1782f2a78f117e174d498ed5127bb043861cf276330dcf120b e7435ca7d62ae7b7a2ee673931bc891df1f3737ff8b2bba6eb741cf37d279c0c d41e2691a8f4534c02803ea720b50d4339d75ea9998650c8b30db56e95333875 6b8dd7a242c95e92fc8825bd9cb2700af12ab75a17f73935b9f8013ec6f8a6c0 7d2f856d9f7a02ea851b71452d978c7eccc3de248aee679021d4758d12379811 5d6690040a57ce722b0e8bf6b3b63382615c570da0fcd7d75f228878020e7c40 b3cc8b79d2e6e5b0b520b928d1a717f0f4815677d5f3978d309615cb69cb3faa 9b596d4b48c6ce8edbd73b37f0cd002170b4bdaca4d05b82d7f5f41a8c6cd9db cfc0567d709017ec13ffb54a598b52b0d0490c0731eb01554a4909004501aded f7f82d0a282514d03eadbea6cbc3c1bbfe8aa56ce1bb90611730f644debc8976 e064b3d2a380129cda5f290f95bbc47c5420174370a1c2c548ffacc1bd51b0a7 aaf8fcf57c975044b74df7a462dcbb808521e935b7ca4dc663208c0859fcf5cd 3e2be1f29b0cf5df8e5e348d9983889924810d3e4be6f51c365adf3b6c015058 8899f4d782daca9b4231fc35ab5c9445d25adaf773d20ec893959306d6255759 dfdb26b0625cabb2764f00b58afbbee7081cf35165494fba3cf6248da5e24611 0c9288a20bc3047e99374e2e6f70752d707a377d8846806e8626bba3891f6ed0 Prabel, et al. Expires 14 March 2027 [Page 87] Internet-Draft JOSE/COSE Composite Signatures September 2026 884a601fc27c5885aac1b46919dcab0399b60c43cb1b8143b798e1eacd1ab663 e2241d4d228230dd53211bbee783fe6363122a001994f45321b131ffb91ce395 7b6de21342cf456365e59863f90c83ce7bc3a565a885eac0f9b34fa10c52418e 1d70a8a065ec5682c48eacf731354c0e89823e94ed20ed7c50e4ffab56dfb578 04c020649dedf5fad3a764fe3f97901d2e56176facf69ff1b03d2c645707c6f9 165a6136eb1cf0ad6eef6d315c479e3b717fb88b254528230e54769e758fc4d1 ee611e04884c9c2090a23e2900c56a48011a3ab7f3214354676ea0b61c5474ab c9d9fbfd081a30565ba1b0d74e8a8ea7cbe5e90c243e4771ef00000000000000 00000000000000050c141c23296fedf9de10b3aaeba9ab0de9820002613293d2 68425d7a34c3e2aa1cc86d28ef32fc69b2f842ae14de62f70de597c2b16cbe61 67d2629dca0fcc3cfb0b6cbf09' ]) Figure 10: ML-DSA-65-Ed25519 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / ECDSA private key d (48 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000001' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-87-ES384 / 3: -56, / kid / 2: h'10da59a01e274d3d', / public key / -1: h'e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b4 68cfc82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91 fdb643b512f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfc fd12565433c4afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4 318bef5eb6e897e8b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ff a496445967e75217bfbc9048f9956443d8731f833eb30de10dac96fffe7cf65e a0445c3e31e8601e133be6a100764fe3196e267726441f31751fbf9a6f588064 4f4e7275e57de2b0f105e4db055d50dd1c9c934fddf535b8de28b0c74c0449f2 22cd2ed0bb8fbc775ccee8c940665b40f712f4f7e00750e9e1e4cd9cff25d194 5c3e9bca53ccd4f12eee7581856ebd68f26845956e3e7beb761f0fe75bdd31bf e2fa018113397b387bd59d62a68b8af7fa245ab932e69f778e2ceefd21304fbb 8099ea13d8ea57c1813197a2f75ae251075b51dad38f853669e9d5f98a365509 8941993a1594860fba71fe530ee5c29f58f2978af688ccb75a5838a359c112e9 8e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0874e35befcf3 e6119684768f36e008f04712177cebe627607381e56eaaee161c1729b8de51db de474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab5a3a 049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24 feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c24851248 885107b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff 6c3e20a47be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283 Prabel, et al. Expires 14 March 2027 [Page 88] Internet-Draft JOSE/COSE Composite Signatures September 2026 c850d8c58d1e5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c50 1a8ef2ecadd1b677a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24 fd92b7b5b4025feae996d3e48fd4c650d82dbad7eaf936639698512f26253d2e f6847c8518e8565cc9a5495c6fff57cde7323882c54a7db470ab2daf8ffd2bf7 94fa7c692d9e7fbd532eecc1d7880e2ca0b3216128be28b4a9f1d151fac97808 b0bd98b7b43a612a9ac865812bfeac6f47460277840b52a3b087f916ca7cedc0 f768ea2bd19ea21155f84b4a04c4000ad2ae0587154d560bc0a477a4f9329a89 84dd31eb1f2a05e3d918701d630cfca9af61ef088d2c5581acb463e439902e5d 425719e956b8d6df7305b28e0ff27d3ad0de2085d292499b19a3390d4396fb3b ac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe24360f84d14f8e47 2712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186d3b764ad9e9c feee456a73c291d8de3912414ac43911c372173ad7b472af35c6853ced2fe7b5 fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094bad0 7136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ce ecab72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c3004 8bbaa797d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bb fa15acb5cb37d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c5 4d6f87457373a0d6ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bf a336e5bbad14f73640f1b9febe800dbaefe1630c61fae635b074c564eaa9db18 9c9e7302873fc64e6d497bc5c29080987a07a21d4af210703a4fa07f2fd816f1 2fd1e29b4c0f44afe9bd4a1eaa8a7ae6f02a5b4258f52caf6127f62632a67cf4 e8310be56a7c28c86b2e277600c3e92c8d23d42586244c571e90568df202f2f6 d81f860a565f9eb91a3c78372e2a8b1be61c5418cf49bf2d6c8955d4a482a991 9b7660b3f9a4404ffc454ea073e1e4b2689ab2cca4e46bd7004a6c491fa26ee7 a57d60f35edb2b821e6266442c8f335d452d524c772e0353724c23c7dd15b7aa 155e91442022140c5fcb0153147edcf3e8952f6f0399a3c88066a72756c94099 15de63f64fa797841c57c796c6fc550ef745dfe9f179457f94755ae5a2506a76 4f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec0b36e3a6 c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb97b68 5ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd87 9b64f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f 33288e689ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2 d38fdb7a65aa43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05 d447f9f58ebeb84c65b36c8afcb83727a1508994e826957a663b0b9b8a003325 ab6d6d6462ee4e106019c0dffe10323b7bde7d82a38f85fd08786e860ba66c16 1b64b0708c363de5c6af62d8db3c243d1e1b712cb1d59e942b9b6b4295a5a500 b182cbd5fd1bc6ce9376d91b47a2284f1fbe0ad1c048cc2cfbb4afa3a9eb9697 503b69feca990eba7e9441af9ca44cb3ac6b5ed66e591c201fe30efa8a7c471d c613d6254c263a8e132104bec47f1aacb3b2fcd4051b69b5e3fcb1c147a65c2f 90c4b5188bafc521cab03c12a309da50b5a7517727ed41228ed123fe1b152f6a 6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff9b2fa40ba5ed56302425 39e5d96823e89dc818a13d16675ee3079d976f694f5acc9760ae789e9b3391b2 89e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a290810ed35e56bb19 d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67fbe761db 9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a2e6a 152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57 Prabel, et al. Expires 14 March 2027 [Page 89] Internet-Draft JOSE/COSE Composite Signatures September 2026 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6 b9e2b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe9994 1b1e8561d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23 cc3a65601313f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d01 1b01b4154d1b920af003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b6 2124b0861b163a3b91aa4bea28076c3432df3b29b6c4e1ba588def420071fc15 7de90eb2722ecc9ab00df3c669383a61a91bb67bd287ce349b4745ee7a479dbc eef166b9acc412eb579fcd6437307edda253d606b7be7599c38092bc52a85984 80edab8b82b1d21c565d2137ceae0b6642619b16133d91205d6355029e9cdfeb 9a28b373d95916b6b707d4c712c09cf36daf1a511b2bedb1aa70ee58d46a0666 bb287784b0a3840c589a7a04d5d6f2216be90aa4a512d5632f5c9bfe7b8b1338 2f999b95d367c7c46b968074ce315197a5ff3545c7b77a804ade56a95b5c24cd ece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b57b763439686d4a3 04aa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a 385502f25dbf55296c3a545e3872760ab73617de4a96262c6f5d9e98bf9292dc 29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e 5f', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 303e020101043000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000001a00706052b81040022' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-87-ES384 / 1: -56, / kid / 4: h'10da59a01e274d3d' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534138372d45434453412d503338342d5348413531 32003d6fd747cc68677a62997fd4a814d4c52c5e9fb7f705ab768d2208c65329 4e011af85badadf768cc7ec59891d43094aa6b303883e30c1ab7a04b6b831295 559a' / COSE_Sign1 / 18([ << { / alg ML-DSA-87-ES384 / 1: -56, / kid / 4: h'10da59a01e274d3d' } >>, Prabel, et al. Expires 14 March 2027 [Page 90] Internet-Draft JOSE/COSE Composite Signatures September 2026 / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'13c447a1b55ae88b08cbcbea8a4917cbbcaa138a945e4e31103a259e1830f7a3 9368671ff476c2a4d5cf117911438cbc2e9104145283e68b65a9e38a8035a0f7 07640c9c2e2611f5fdb63037cd0d0425dba8bda947d69722e0009cae2c991bec f3194e7fea730c5badf6f9fc51a5450d8189636bd726f0e89c15143244e8a4df 611df494906a5211610bb89a5759c350828a34bd8a34f86c43606714aae095f9 b6f896286cc6ee61765757250ae5c846cc086266c669d8764fb297c98c4b0914 015eaab46027495749ef7e8d70eb5b697e9abd6adbed7db655e606c1173bda1c 760a91f60609aa80487cfd5471c67f1389b61a9bbfa6f3fb07f70492967bbcf9 4c4b054e411331600e080dfa22be3e8fed5e0c6d3b986ee759c661736fba0f1f 92b616265d518622d48d852a06d2509c4e5b11cf2c5b3a580881ac9a848632d9 d9185ca6804045e9b8a15bcf44e2815748c6950edbeef19bd52174927cdbe4c2 e4ccb314708381ff4e08015cbd6887542ddc25cbcb434bb250bd38885b2558bf b014ebb7e4f4d0704a5291abede08c3617e00bf246ad666be941defe5fd783e4 392a1b766947973d50fbd08dbcb92137f0eb5785bc21291bd3ca99e4e12021e0 c28026a421dc5f6ab8f44667a7b387294fbce14ccb64036282c7e44b650d5584 d4c4592458bf3b318461b929f456ef7cb595daed90bea390ee28564c5a27000a 54b58e8ffc0862794743e0ae3f5658b0013bdcaf18f2ca771cb16701686e8626 cbdf90fa43583912934e6d73d77a0d9feb9987d5aefd25d97030f4365aad72e8 b3b3f9efc8d6250ee9e4fe654eea88c98a8d12e04440f4da6d50ec772247c0ef fd3805a5950f0a129b89434b619be3384bdb883a9e66f8ae5bc6457c8fe2c0dd 1f45961489808b2e97faf7b9ee4be66ea9984c74203a90bdaa8dfe5778174ea3 364375a8525224e1a3a88d1f05b4983d7cb1f83de207f3905bf73fd634436352 31895b8abce19a972c335a7688a85d79074ebea392b71ed3f53945052dc141ac 72d3065c38b9bab79f5426d3f8fe20fca713ae4f306cc7e8ad5a04dfd37323f7 2ce849a7bc2c324bbed5165bd4cd79c472668977d595ce046ba25f5629a9d10e 5344b7080cc6ff97e487cbfd0b9ea114744c2c071e43f536bc206a56300a1c09 be8047d797e948ae87eabfc1580328e0cb255a5409b50ea13e79a66ebfe9a9bd 6c61513300bef6d292469bc040c6744a02de2f5cf2086d5564f10df25cdc8ab8 db42d7b7dc6fb95daa3688e361e38e6c379fa043cd3661e40d7493e131276b2d 4592858e44746a4f1fed3f30765996ab0f805674dc15b957e90bf5cd9d0d5f87 bfe6a8860d1b2be8e792d3e81833f61bd1b457c9e051ab01d46b1609211caa47 6d0043b361f738ea0f8d92adc3a65632af0e10f1ba6d97f8095eb481e4206900 89379930f5a3293b0ace579c1fab53b53f47861761f25e47aab427ae1df9e50c 55ae019a81ca6fdeaa3046b72bbec397195d2a70f15afb0c441836efe8142e8b 177ff7d4680c0ed3a658f7d09ca883ea857737db8c88bd3650dbbb10f146ea15 422eeac31209c3b1c3f43bd72459f368e8280930e3b4abadb8b4758d24cedee7 2b8a5cdcbb299bb2c34c460c9f3b8e0831159bdcc2765ef4374175b24c116b8a 52e6beb3dcdf21477220502993c02cc221d65fd85fdbcca14dc17fc63d04e831 a90a9165e6c26f30f4a6ab1f6b011016abaa0f2a98f4de5556da89d4bd6b8855 74efcd862bf8dced571499cf6f9a533b2fae7891c38f8accd98dc0f482c78324 479e37116af557a57166d0d779c35297ecf4b66f89ae991a1968b60cdc294241 2aef5c8736049d631e788511c07060ecf5554eb2be97df9232920b7e8a6d9683 0d9c54d6ade2ecf4725f0013dd92b697094e3df0e57bfa0d0e7fe7b3fc0868ec bc8f187a7a7beae6f752100ebb3a44cdf41627a6710079bbd5ee3274ace2f23b Prabel, et al. Expires 14 March 2027 [Page 91] Internet-Draft JOSE/COSE Composite Signatures September 2026 bad4b26a4e3fa458ac7a062121a1ef4fc1c8d929b012a888bc98bf6a4c39c755 09e63cba46484b2ae5e0cbc3a3d598a9327ca6fa4868e7ea9c3696315c1cdeeb 1b6977dad72806365adfa839645ca9c3fe44cd9903cbdd495f55c793a0908cc5 05759f0fa7e09df9cfa064c0bfb6f5c350125ec025f2c2f0abaa87a568995d04 f99d7a68281d0f60a7a70767e4b6c17ac924851784579008cebd8bed6221ff62 bd59966c0a2d7d313dd9c0416c478c063565a419fe38f42d0437e92b76b41135 ab0f3310753945eaab0dbdb34a76852d515cd96dd8caffaaa7d742d7c89fd0bb acad8f9e60ea13c98b2a23baf737153877c67cb607732cb4e8b15a3e0f07b098 3c874ca4ebecc480e95daa47f364c46b03b26693594094adad9308ab1bd1d562 4fa6f39ccbdfbfa17d8716a1db15d564ea006266ee2d50d2260b9cb869711ce8 0e9864d4e5953cd99ac1ce79f87838679ab469a25bb5b342da0fb5e33044dd4b d70dc68ba41fb8aaae15449ab64f069e9786cc1bc03b58776ff82df3e5a53c32 c0611643a791151b1923a086a62cd9b25b5d2c4692166dba0040f19bdcfc7ec5 f4cf00ac81f382d5789cfef663b39eeefca7e52e80789fa82379bee3328fd8eb 9e636291b8d0d9782da09ae19e6d38079a5d426fdf449ef85bb07a9180eadaa4 4f382a9bb322da3022586ad3a59351b50f5420098c96907098251196687572f4 4ca4a1c3be2c9008f8ebbca1048ff7de47aa659555aa9969a71e6eed2af25920 6511021ae6525802b0bcefb22f3ebdf630456df76168ba2c2ce4519c4ac083da 31ba2ef6a1e3373997eacc9244f230c758ea6ddfcd96413b15f78bc738f9904b 7794b598244dbcca57caa5b15a9b6bd90ea23079f57a21e8f38e0ae90471139a e0570e52d7acae5ba678fdf6f8b9083f8f147849291b1ef0a19622ba90d1ff82 0450e41044a7c6f351adbfe0badda000c103a5cae89986adb299464c51688a9d 7bf1a91b1bfa6a095d0c0dad179a2b507698e6f03c34b4ba54b383d85f6393b2 ec1743a4b29a72c326ea986a6f31a2aa4357774ac7f851a1f8851330dc8b2d82 4ea665d39b9ef6140e33ec8a410086eb5ccbda83eb0c68a71c71aafdb1ff6020 3d377f4c4bda47ad68e62baf794bf0e4ea10b730d5c30dd3822b3b6ce41aefbc 9a5dfeac7860c4b5718fdb24af24305cd0352d6e66d11025e1bb36d4b71b32af b694bbbf1767a71fb067d078aa062ce4f125f7ffbdc601f7a89e47b89594b795 6c70b70a73e728bd14ec949089191dd5d2b94201c26d159c027c7456d6102c8c 3949b5b1adfa054c9ffcdd93917a2f7939a1dffec98903ef4b34068bbc7ef7d6 f7c9d5b294e4b5b464cdc560732de4634d95a6344d99938bbafa030970cb0803 978ee8de792f8f95716b037f03f19e885050af5f189d30ef3cc2ef16f71214c9 ce76fe6fb09d0c7ee862868c0ef1ff2b6df647849bc34c98d73ac0014ebfcd03 fae33e9c50378cae1f17921d8e435902f9fb860d8343a4e75f9e9ce72b710872 e7d8a42a59a44449eb54846a4bd77b6fe251ab2f6047e7686d3c8ab3660ed33d 4eda34123fd0f61c12f5dee53cb94b7ebcc308d114f08208b2c51cce45f318e4 804ccbe60536291e92ed9b50b0ccda61344984bb53742ff5173c26685bef52d8 c6ff752e7316b74e2aff43c436ba0161b427569dba9dbca119242cae0bb34108 574ff95f69a498cb6eb10930bb711642213f88c3dd771728d5625740d5f9f5b9 3ed99f9c329cd8cbcdc3fdbd7f02f25441bd1f4256bd5c7a9307ae4fd1acf24b 248ea5a995aa5b4f7271239f28b387ca3dc081ff2a00d4195c144c9df6794a6e bcf0526077954678f71de2f56eb81db590db52baa1ef7be014e7adecf3ba47ae 6c52e42bcf9c537c5eefbb984aab0c1dfc73ac780e3fb7effba0a4e23242de60 d83f87e1c9167747d09aa3fb83763f351a1de1ac44f1e9637202e9bfaeb27897 66ab31bed390cbf6a33c5210fffa1d01997e5e42b0a81368b1a4e3a16022cef3 21f89ae5d03d5c064a7e8ca3a63817c169ed000d18d4732aa4b37f68e3a47faa 0719e8f800c59b6b878a1be7e2be8807ce343b69dbbaf6c385994b730cbe26e9 170c509e7807caa00c924af7d494803ec9c3e5284eca4fea43ed2645444cb232 Prabel, et al. Expires 14 March 2027 [Page 92] Internet-Draft JOSE/COSE Composite Signatures September 2026 15facc1c9908acf2c6151f84cf384c48094383d910310ad535453bf650650d92 5f93e835fadbfd0d33fed488d3fa0a305ce5e14dd781c9daab36e7a6eccdc912 e2e957eddd40f084f76d1dbdce8506eeb99f958fe53e9ba005acd17ea23860a1 3ffafb777c6fe68b8ec52e4bc7158208e7e3d378eb60d3297fd09c3867fd2abd 276f7e510de3e3cde2be1797b4dfeed04c27b8a3cb270c3e1462229939008ffb 76312353d4f259822d659fb889369c121b90f8b6659e32d73d38ffdc0996e49a 47867ba7c33d29fc545b0812c0e994f4683bfd75e9ab9d80e553520c7c5ec46f c04fb80ed83f08f7b6bd015a659762c9936b1882a79e23ed35fb9d6b1e5882ed 88c5c1413eb8ec30d97b354fc818e660c729b9bafde5f816c0849e0b707f7944 12e5e20bf1ee445d33c8814e5693d32222eae89ca2caf01b909680b6799c4bda f032205ad1e4f01ccbdb6becbd65ef588db141f16effa1be241495f0313661d2 7c58652550a3eae5c349f7218dab91e2fe9635898b0348a67355accbda1a751e 04f55c2d2d2a24c137ac3f305062b2471552a3814ee6087bafb0cec17824a55f ee0aea80cb17dfcb02bc6c1dc625185f17fb48e2fb87aa1c8a5615974b891fa0 22b1877161a288e3c77166fbb4e2cbe3750c24bac80204a9f486f0338b135975 eca3649fd7d552af691afa2af8b8aaed57e2874a82db150cbd905c5208b94af2 2c723f71c4b3fb7428d3cedce5618b13ef9c340a7bc7d8f3085677aad2277dfc 7bf03d99e426a1c312c7950afe192102403c6a56a82f1e6e6651aa7a0d54000c 4d93e9cdc5858978546c2fa6e7f6771a0b1d10c87f88e24c0cc51bd0e6504224 b8a31d7e287189fb89439f204187c3a9b8429baa724451299fc72e3be5364822 da1edc755ae0aec8e9464747c0cf180c8e9ce5dc3ec0ec5b612a743d6cc73de4 192436b3befff69b3a59c676fe7476726ba1c673455a7756852afaf218ed191f 82f8ea94050224abb8c30d0c8e01024cb0de1b7651b261f979333f11170d5d8f db7ecff60c46160ff6b34006f6ace5bfd318180af926b92fcf58e492c06c9f89 86617caed1f0f866c0a4590ad47d503878457e44df4ce50b1187fb53709374f8 f84328ceef83c02314bbea2ba2c0b515919c310f2c86c2cc697b64f09b361330 4f7ebc457e3c80440215fa2758ea903540d61949fecfd323950e66aa0946055f 9eb018f7e39211c6266a2684131f4d4f4e292d9520693dfa2ea312c164bfbb06 3a451cb09e2d41e4eaa1e6ec8cd283cbe0709b2bce2c4a29378500862e846926 2afb6fde831d8eed286bffdaaf576486a102e3a102a3ed7dd087b1bd4519b3b3 2b033d561eb576e2dd995980bd31f67dbb58adb1527d350d50898b13010d44a3 8d90cd8fb7cf093e413817845e7ff38f5ac7a3da0a624946c31d6afd39e0b312 ce1bd21d3d78b561cd270b2a05aa5d12d4d9cad2af32a3e29b90742e3283dc92 535605f37c8bcace9b7a1a4016b651c554dee913348fc89fb40deecd70fb3b4a 34b29182a8cde3e81f2bcf3bf122290713d78b42bd2688e03d4da407903c3726 92b74f40ed113ded0ecf6b190d65eb26315bc6552154d2ec43d59f33aaabf97c 6bf0b1ff29253840d140f7964599467f5442d7a96fab4efd40ed93b2f878e306 2231056946de83a4203bc3a67d4a6cfa12ed5a307722942849e3824e67bc7ce6 ee893ecf76e3dcdaaed187c02fc851e01dcd33950381660bdfa7660dfe759cf9 a4147caab00e794ae150756c4485b9019a505b2f232d2cb23c704e6557aae8d1 f6f0ea38bd3567c708ed410e998b3c9b70a7d8428673a71d2f96dacf1fb71d55 5c6260f65b33fb4e16fedb3423ddf3cbf4c6484f063c984e51831e4d80177026 c67dc9168fea7e43a8b168692dd90a11e273506244784de1d6beae5af3350ac1 9dd6954c8de21fe67e700a019f5346129ea23b8faf4c3e3e70b3ab444fe819cf 966169af0ec7f6e12fd3bbeb65a8fc87a12dc2ff81ac518c9a19c77b3870a602 305cdc096a96fa18a08ecdb45edda76aba3cf6d39fbe0d15521bd367997b8c13 b2e39f54e59f58c6efb5833bbb1400afd2c4ea9c19faf4e94aee05e2a77d8868 a37e0847cb925991462ddc5f806032d5ccd3102422fe03a3ca650635809be994 Prabel, et al. Expires 14 March 2027 [Page 93] Internet-Draft JOSE/COSE Composite Signatures September 2026 ff246b0f3bcd07918efaa6dd6debb0470f30dbc72f8293349225901bc843c0f6 cf1572467986fb055a5c20b3705a7ac51333688c78752eacb06b564f3c196dbd 2386ef181b2b52b2cf090c20222f9a9cd2eefe065997999babc7dfe5e9f40a50 69b7c3c5d6353744919bbbea618e94c0dbe9304e83a0b7b8edf7000000000000 00000000000000000000000309131e252c323a30660231008a2fd552a21df4ce 623dbeef7f6a9385cb7bad3779bb35914fe211fd34d175043348a8efa56680df d45edced21ddc5de023100a3137028126347725829460993410c91bf7bffa939 8e37f6c6e142b89ae7f6775aa6f0847a4dc92cff5aba679125c65d' ]) Figure 11: ML-DSA-87-ES384 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / Ed448 seed (57 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-87-Ed448 / 3: -59, / kid / 2: h'a03b6fee7d98ff7a', / public key / -1: h'e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b4 68cfc82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91 fdb643b512f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfc fd12565433c4afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4 318bef5eb6e897e8b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ff a496445967e75217bfbc9048f9956443d8731f833eb30de10dac96fffe7cf65e a0445c3e31e8601e133be6a100764fe3196e267726441f31751fbf9a6f588064 4f4e7275e57de2b0f105e4db055d50dd1c9c934fddf535b8de28b0c74c0449f2 22cd2ed0bb8fbc775ccee8c940665b40f712f4f7e00750e9e1e4cd9cff25d194 5c3e9bca53ccd4f12eee7581856ebd68f26845956e3e7beb761f0fe75bdd31bf e2fa018113397b387bd59d62a68b8af7fa245ab932e69f778e2ceefd21304fbb 8099ea13d8ea57c1813197a2f75ae251075b51dad38f853669e9d5f98a365509 8941993a1594860fba71fe530ee5c29f58f2978af688ccb75a5838a359c112e9 8e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0874e35befcf3 e6119684768f36e008f04712177cebe627607381e56eaaee161c1729b8de51db de474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab5a3a 049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24 feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c24851248 885107b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff 6c3e20a47be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283 c850d8c58d1e5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c50 1a8ef2ecadd1b677a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24 fd92b7b5b4025feae996d3e48fd4c650d82dbad7eaf936639698512f26253d2e Prabel, et al. Expires 14 March 2027 [Page 94] Internet-Draft JOSE/COSE Composite Signatures September 2026 f6847c8518e8565cc9a5495c6fff57cde7323882c54a7db470ab2daf8ffd2bf7 94fa7c692d9e7fbd532eecc1d7880e2ca0b3216128be28b4a9f1d151fac97808 b0bd98b7b43a612a9ac865812bfeac6f47460277840b52a3b087f916ca7cedc0 f768ea2bd19ea21155f84b4a04c4000ad2ae0587154d560bc0a477a4f9329a89 84dd31eb1f2a05e3d918701d630cfca9af61ef088d2c5581acb463e439902e5d 425719e956b8d6df7305b28e0ff27d3ad0de2085d292499b19a3390d4396fb3b ac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe24360f84d14f8e47 2712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186d3b764ad9e9c feee456a73c291d8de3912414ac43911c372173ad7b472af35c6853ced2fe7b5 fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094bad0 7136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ce ecab72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c3004 8bbaa797d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bb fa15acb5cb37d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c5 4d6f87457373a0d6ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bf a336e5bbad14f73640f1b9febe800dbaefe1630c61fae635b074c564eaa9db18 9c9e7302873fc64e6d497bc5c29080987a07a21d4af210703a4fa07f2fd816f1 2fd1e29b4c0f44afe9bd4a1eaa8a7ae6f02a5b4258f52caf6127f62632a67cf4 e8310be56a7c28c86b2e277600c3e92c8d23d42586244c571e90568df202f2f6 d81f860a565f9eb91a3c78372e2a8b1be61c5418cf49bf2d6c8955d4a482a991 9b7660b3f9a4404ffc454ea073e1e4b2689ab2cca4e46bd7004a6c491fa26ee7 a57d60f35edb2b821e6266442c8f335d452d524c772e0353724c23c7dd15b7aa 155e91442022140c5fcb0153147edcf3e8952f6f0399a3c88066a72756c94099 15de63f64fa797841c57c796c6fc550ef745dfe9f179457f94755ae5a2506a76 4f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec0b36e3a6 c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb97b68 5ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd87 9b64f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f 33288e689ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2 d38fdb7a65aa43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05 d447f9f58ebeb84c65b36c8afcb83727a1508994e826957a663b0b9b8a003325 ab6d6d6462ee4e106019c0dffe10323b7bde7d82a38f85fd08786e860ba66c16 1b64b0708c363de5c6af62d8db3c243d1e1b712cb1d59e942b9b6b4295a5a500 b182cbd5fd1bc6ce9376d91b47a2284f1fbe0ad1c048cc2cfbb4afa3a9eb9697 503b69feca990eba7e9441af9ca44cb3ac6b5ed66e591c201fe30efa8a7c471d c613d6254c263a8e132104bec47f1aacb3b2fcd4051b69b5e3fcb1c147a65c2f 90c4b5188bafc521cab03c12a309da50b5a7517727ed41228ed123fe1b152f6a 6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff9b2fa40ba5ed56302425 39e5d96823e89dc818a13d16675ee3079d976f694f5acc9760ae789e9b3391b2 89e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a290810ed35e56bb19 d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67fbe761db 9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a2e6a 152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6 b9e2b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe9994 1b1e8561d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23 Prabel, et al. Expires 14 March 2027 [Page 95] Internet-Draft JOSE/COSE Composite Signatures September 2026 cc3a65601313f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d01 1b01b4154d1b920af003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b6 2124b0861b163a3b91aa4bea28076c3432df3b29b6c4e1ba588def420071fc15 7de90eb2722ecc9ab00df3c669383a61a91bb67bd287ce349b4745ee7a479dbc eef166b9acc412eb579fcd6437307edda253d606b7be7599c38092bc52a85984 80edab8b82b1d21c565d2137ceae0b6642619b16133d91205d6355029e9cdfeb 9a28b373d95916b6b707d4c712c09cf36daf1a511b2bedb1aa70ee58d46a0666 bb287784b0a3840c589a7a04d5d6f2216be90aa4a512d5632f5c9bfe7b8b1338 2f999b95d367c7c46b968074ce315197a5ff3545c7b77a804ade56a95b5c24cd ece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b57b763439686d4a3 5b3afe03878a49b28232d4f1a442aebde109f807acef7dfd9a7f65b962fe52d6 547312cacecff04337508f9d2529a8f1669169b21c32c48000', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-87-Ed448 / 1: -59, / kid / 4: h'a03b6fee7d98ff7a' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534138372d45643434382d5348414b4532353600eb 80b80e807c0f16622892f1601d0d3490d4bfd302131d01a2d4bf7bdd3a779cfe 9e8f724e18e0c40bbcbc6b765ec6e265d470334456a0ea65eceff85438207d' / COSE_Sign1 / 18([ << { / alg ML-DSA-87-Ed448 / 1: -59, / kid / 4: h'a03b6fee7d98ff7a' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'f0daaff4a8ad5dd198507460ddf682da14042e8b9b959e87f288c0d1ba23988a 74dab4714bf83ce0e08faf21fa583ff32a17aaa82b47c20004b8a1b5268ba2d6 Prabel, et al. Expires 14 March 2027 [Page 96] Internet-Draft JOSE/COSE Composite Signatures September 2026 1090ef4759fb88aae86ca29d64b37892a213ecd7e42f75c2c309d4b600157694 5ad7f4350a44a4f695727ad919d663b6e9c316c00bead18dd9a612ce0dfa30d0 ffb38883b5e078901d6c316ccfc2f68e833b20e344c8f0d76f197061198434f2 60939eafffa4004fe6ba52203cdf38576eb0d0ea0663b4faebdd447aae574fd4 e4b415e81aafeccac2461099679dcc77cd07bcf7eff34267646aa1b603f8b304 783a36c1478ad7e09f545d0f3a9c56f89433d74a410161e98c5f94bb8e0a15af a09e89d2460a7f5cdd28336fb63812dd43f5a58f311e4484ae4e7a543e11b134 124a5f85c3b3c7a46270e2a36c733378d8b94946ca0c84d32c40c60430ef1d1a d34c975e8a919e978eeaa001ecac29f0e26a5a96cbb33686101235ea18f293c1 4c4d1d50e1f8f5e7ca656e216aa363745707549d5ab5e423a3e5449506e56523 15343344da1c07b6c57e2da431583b21a3cf43d03a90ffb7cc58acb5eca7e801 ad18a8aeba1827a799dd44054c65e512da40f00db77ec3757a166147e077bdea 275f64d7e14a0b9c1fc69b58e210450b77a0cb4ea1659a84a42c576681c6cb6b 962d795cf2205fe460f52a7bca3956fb583ccc31a1ef753dd5418e7072f70000 77a57c2c286d6c6d7e04f5d3f71504bb084a88f2fd99138b18cd6d94d0b9835f 920701a26541356d0b2a5cad75e07726d41a5d2cf97ad4634f120800b766ba96 4b905141d163c896a60d24803fe82b8acaf54850e5094d14e3c5b974f6920b27 47b8ee0f83ffaa7e3fd03c83c38cf7f357590e04cc58555ff7c7d30b5d81708b 60719d4c87ba37a02f3b45097b92b62b96010736a6b90d59d9c8dc0113ac6bec 5858e5423b40b9bb5fb6d56065681fcc15ed8662d99448393cfbbbbff3bfbd42 1006b33c73a7dddd825aec52ef8994ae51680989514b36e41901fe2fc6fe9398 63e683d76777a54911776a1243293d3649401742765835acd99ce355d156abcf f04b24d7e0e3b060086abbb44bb1208916712cd78fe969ed00bcd184df271dd3 5f2af483412f77e097de302e8b41503b00ea6c2035c1a6531c426b95946f792e a7613ed9f441d7bcb0a1988e337109f7fc4b6cc2a3d67d36d60b8f3d8e378f61 3e05612ca610ca8ffcd5a87c1dbddef704da1a935e8f58ba0e10613bc321dc6b 0be699755891138b5596da7b3a3ab73fe196808e3cb37e3d7f5c57bccb7d0c0e 859291b87239ee764240f1bcfa75a9d777fda1d15d46d132d4ab77ad990ded3f 148780db9a262a79102023990d863eb6a8d20a267851d704fdd264c989c39038 a339e41ba89e1600869df1c4c5a5be4476af6feac43fd98f3c7c6be37f3d4118 d8555c31933c8bd87c57fc8aa2ee0cf1ce6ccc4bdbfc5eadde807d22e1c4fc4e 8d905f77cba4acb88989384f78b966d8eb511c34c686cbb542172dfc616c5789 950c03c877bfa62729e733c0acb945a4bc75479afd0d3c2ab8dab5947d507322 4500ab781c26a817983bee7fe704c939b49465094957814bfca726354f1ff25d 1c97040803c28cd0b36dfec32b5ce3e0b5d47441a9af3dc63127bde4caecb23d f954ecee58b68292f804e449f672449a2512bd89cc3faccfeffdb288fe434c03 88c6f585d84f02ef489a10cba22639ea252ad9a61e64b2b11672c6b5ebc910ca 045779a2b1de7f5d2587dcf8a22e4651e21cd95f0a190a08fe25da94ed31b1b5 928fbbe746f58ed47d816d9a12d02cf91fc80ca28c48ec7d77a0829965a44f84 5139c845876349a09c4909b5914ebafee567582af2bd26e7b0f9c01d77682085 82b123223dff3dd9cb68a7f74ba7592496aa9ee30c8a32eb0c7d15cb5b3eaf5f 94e5e219300ec93ca5e903d0f1d548d47b1caab71b2b2883625442e138412acd 58487062d5d0f4664381013c0173aa16f6b7344df63be78ee4a4a5133fd8ca76 fba958f56f7fdff3beb271cd309c397c3ba72f67305946661a3ac430c8774704 f7af069591f74c3184f6e3d45f37d89ab9cefa0085d46f231c5c641ff36c1115 4ad82c76f81a59dda5a03446af7b25635ac46ba6912bdc4c1dbe47c263159707 512a7b6d91d28c407610c567bb694ba3e5ddbfe63b4220d1a3438c12bcb82ccc e97ac5052748516ee56b605ecfe5aa5b9572efcc0ea05b327d253ea4bee956cb Prabel, et al. Expires 14 March 2027 [Page 97] Internet-Draft JOSE/COSE Composite Signatures September 2026 ead080ab735e65ba7894f64acbc96eece3f3c47e6d2d8b44167f030652e4a82b 292c3d1f0fc7e9b4aee8686a3fac99fbdbe8c71b9aab0a5b3121c68bfe89c17b 96c67095a6e43b5ae90fa622fcb99adcd91bbce0f08ec073184c245df0664207 adee86fa220e3d7193c262e9a1c2a8cf58badeb48fe97b9db780ea3c904d438a 18eb72489d6e191b78c157049ff733b553fa7ffd4c47547d3a675b40a93378be 1888690e4d661aa42aa63ab14d4fafc0db81b38584d8df1f6aa8cf45eabe33c9 2b7932426267097a5643a1c7b400c2deebb9aadb42e8fe9395666fcb947e4051 0078068f30f8fd8c8c1fb40fa0fa67e1e520afac66cd021addc50ebd9185b4a2 8752dec586c1661d0dac4a387e289cde7dfe216eeea96e165c67ecfd41e7c560 8c0d9092a92584866230419edf5a7db40fe0526831eb2ee658f2398cc93420ed 64f6bd4b3b2873c148d4d9f4722c24992ef9ef5ea04e86ea0109dfdac965355c 6531950cb497e2b95ae7f36e1a80e9b18f7d9cfbdc98f29404e95235a03709f1 54d8496d0a245ceb62d433901dae95001a95df6d16968db01f0e53f61c69183c c4855eaed460c53eef95c9ac59b69f8be5f856caa45ed389ba9a5e9b65ad3d0b 496ea2fb3c23362ae314cb67066fe78838a410a0378b2ace255bf965ef494475 d741c1f25a610733792c071cd067709a3b70e03e6b443de436f890893a00222d 20223618d680efd0090a386855bd80dea02a7a1c7b9a8077dd8b9cea56878202 7b4b9bd549c433746cbdfbeb1c9e877230a2c7f8d24ddde580a8d25bf15b3ec1 08c5a1cc84ff7b263d1cc36663f45b50d53ef8c50c465faa135afdb99d482906 84492198c47c798e650d48022a66a1d2d44df4194c99901be3a23952c1aa7732 e83b3183b42d2386118410ede7ebc8e738cf6580ebc3f7a4d194c9105f94942e 570d853406075c7032f9066d86c774dc0d3eec2eb3ec63f7b433196c51746524 f0808f45be8813a89250e8afd9183754cfa9345749ab897d79104efbc52728cc cfe6d0d06aa74adebacb181d04ba53826de7b676292a32fd0879441b2ff16fd9 19b40a9c09eb77af0c9f14254137b39a70e8e0033aa1bd4b1901d9126ec79ac3 de23f2ed3c6e816b3550485ae00c6ef2e5f3dfbcd9415abcae46a4149ec95351 5e3e072715697613d20fa32d86be4ed734eaa4d8d2341c570e2e51d11b3c5753 8bcb9face76a8afb9dc9b8e862f9974cfb266c5165a83d4b93f2da3d00f23172 ddbcf3424b724175ce69353dfceb73af1c293bb048b31ae71461ae54a144b2ea 09455a909d4d46d666500d1a4f1e5785e27ac1295f2a1ec00b6c4f3a04b451be e912f96ab80cb4c3559419cf307d00de7eca7585645e6443a1a58636085bc63d 50ff0b26aabdafc495874caaa43766198fd652e6949d3a09a35537105a7d6c0c 1eee2ca43c2a830adadb0c4dd1ca17cd4c3f2da0ee114f70237019a222daf1d9 fc68255ce9fca00eaeab2f66c1691d293e272d8a6fc818deca35b169ce875bdd 71e5904d322fbe56e4db2916a4f779ef54d355b2a5690184ad42299da27200e8 6141679886b2a5f3a0cd3b6962f33e502d07c44363c058714d3c792074aaf9dd 26f92fcd2a9bd0850ee30f025826996ff5fa2046f09aa1248349ccda0fea91c6 76dd36e0f84cabe5344d88721ad8cb3ec52e1117e48bb82a92876c2f7617638b 563dbff74d984cb324b927c1e19e9f46f233ff0a8f5ba433521f553e42379912 443731fd82d2b8101501be1f63eab6c5d7648f9028bb2610154e7e45beb4fb5a e66c1d90e9dfdbef6f8f6c27bb939795f06415cea46efc999067327376513997 90aa0486e1241bcce73c0fa5d1f46bc9c203a4156f9bcbb7e46d3d9e7d7e5592 078facf12685ae550fc9806ef2c52cd668b5c5f4de1e3e0ffb6cfd2158b5bc46 29c172f7db81cf077c2e43f5d7722bc6058ee7a64f5fa3ce4f80814e5e168ed2 f69130cdc7a26cda23b9d6b4f3d521b2a03fa83473703d57fb6714c3f40f9b12 e1a2e5df462019d597a42f0bb92161be6e6e2ba64c22542bd4dead5753330751 7807935c062703a05c2d79c51a5e661312d740823ef73fac7170de7b2458399e 49c25304f0c2e889f62892717562981ab274892fd2a663505068149a81b48cbd Prabel, et al. Expires 14 March 2027 [Page 98] Internet-Draft JOSE/COSE Composite Signatures September 2026 069bad6bd0f22d35c4f998264f2fcf600ea500dac7fd86db5015ee6e3e34e23f c246c0d8d3a3abb8d6dcc87d034e98076cadbe2a52f4038e4dea8c50c60641f3 c68e4c7cc34153b2bbb2033464bd26b286c11993d35b13ae6fe001aab44d7abf 4eb933ea0ad64186d0e87d7b3cac21232097655ea4f90dfb9f59e3d936f1e298 256aaa0a9b772ffcf7aada0674276010027c1b5ca9674678e780215986606bd8 9fc47ddd3af77cdfb29efc3828561fea5d786ae556639d8b9058c95972fe9b9d b429a639b96addd1ba31bcbe00d068723450cb3c6169adbd987b040c9dc17259 1ddd61db109027905e30cf6643ba77c34b46f7bec71ef7b868a88d7a6852cb01 e72a099278dd0511073419b829df0d97bb0e73bd83a43a112a27fb7a6032451d 7ac48527fcd93299fa282f9c1d9d89f4c5e22694b906f9de335bc0e958d16077 95f23eb205d4110be165e92964f45865b405005df1f8697260e2dedf788374bb 0350da2d3f655c5a79be0333299293851c8a1671c21d08dace45bbb8da8fa4cd ca88418d0f9e992d188351a500fd7304cc7429d0c237bff6891d4efa5e6e33ce 6cdd3a7ec15a99b010cd4386298ed4a444e8cbd0f9d3e59366596a25306edccc c890ce7772d65f3519f9407f4dda76b509ba2b208ea7a178bb40f6315c70f639 dc1d84abd25628954d78c32509eba5f6652010cad55b2625d418257416e65591 68dd372d3ce79234c417edacc0150a6fc6918360fe4885822d06cded80ed9f5c f4a75305872aec90fdb993a87f5eaf4188a22225713a3c2d5e83880491aeb8f1 12238391935c3af9cf8b744973ae2c629fadd49be904d68f2850144456dfa9b8 f2c3082df42253232a73a54cf815cb399755d2da5ac8a5df6e4ef8fbd32a3dda 41beeb4ca6c39b429bb4e5e2a8870f3dcdd7db96ce39f14023584fdab750f6c0 2cdaa3535734d5d451f032b40058ae10d467d7bd5f09653a46d537ec783b2ae8 2df1a0aa7a2df1c61513a3fe833c35923658670651615f268e0b69e50c5ed08b 24ba21be32c58da5d88462ee2977ed2439f79fdac1ff06e70ab9d4e19556fa14 3b591b31550d89c04da670e51fe61049a1b09f892a41f374f37e3d78acabd0a8 110eb5f01666df2f6cad3041705afe446360388386a7c638a91de78421bd1069 2d428b8b28c45580fe78de631a92d70d415ca7ac09c6ffe402ee9300faf51563 4c143eb1b8f3d4f472baed7e6d677da61ced15d6020ea747e9a60b935c87e21f 90c0bcf61de09d2ce76cb08da76364e0ec48ca5d68843c9a80dff6a5945d1693 64460adb04b1c09b5f468e32c08ae0397a706fade0c491bfa0e51c082543b0f8 15c30c90c5e00bce1d2417abed483ac9464dd7b7b73fe2c108703d8e3735eff8 3c2642aae0c2340cc77cba0dc70637399e27957a90131045f2cbdc41989682a2 d6cd3d72b4d927261957c311fe43e8c217a131df6961c481f32bb52ef4c1d2af 998e18e4443dc41d429b6b70a812a9ffe159c3d374a981ac142a064b1747003b 0c82fcc60e0a3160f9065eb5ed379e5c01fbbc047c936705bc12c9e3c3f948b3 713c2ed01d56a68e87554214a356d024b1630e4ff879fe561a1fb0fdc6834d8c 3dac25519fd45cbf8e91a0fae36010cb2ac565fcb16a36798952842c302ef427 6992db67d4aef58401b36a404e5e0880ee7a016b7156fe2c79d4d1cb90809232 ae8f6cfd56280e4fdd9a228437919096b1bdbf3ced4da0b2fa7bd10c8b277015 766216c20dfe8f5a91a744f22c83d6c0511812b3d44082b609a3c6f506b053c0 46c9eaeab574991928df91d58efd4ce6ae4f26964a51de3a04b69ce1c4444f7b 5606a88a44580f0b179472f3dd5b0ffcda7d05b19b2a6b82ed32fd85143e76e4 0c970ff93c35aac17a60912449e3a25027ae84cae1775ba3a978ec8170384e66 ad73ff7cedee0c841d11e032cb824683d5bb76a0ac954e27ed5d12e927526fe9 0c344368717ccaff171a2b2c477f88a5bacede17263039435188b7f300051a2f 38537a959e42438d8fcfe4e6202935466ea6afd3fc9bcfd3e81424627aa2a5e5 eef400000000000000000008131c252c353942682497c03104f244b9bd4f9a8b 3eb24f760d4823561d23b259698e3efa608a939b09bb5877074deed54c523a38 Prabel, et al. Expires 14 March 2027 [Page 99] Internet-Draft JOSE/COSE Composite Signatures September 2026 c1879f5e484eb27a037b0b0012d40ab02ad6c9e9a2a465b827cb90b9dbf7dd47 2dd37041f2e7729225c7715c8776428b52b67982facd1a706a2a502a5afe1b1d c960f62200' ]) Figure 12: ML-DSA-87-Ed448 Appendix B. Acknowledgments We thank Orie Steele for his valuable comments on this document. Authors' Addresses Lucas Prabel Huawei Email: lucas.prabel@huawei.com Sun Shuzhou Huawei Email: sunshuzhou@huawei.com John Gray Entrust Limited Email: john.gray@entrust.com Tirumaleswar Reddy Nokia Bangalore Karnataka India Email: kondtir@gmail.com Prabel, et al. Expires 14 March 2027 [Page 100]