Javascript Object Signing and Encryption L. Prabel Internet-Draft S. Sun Intended status: Standards Track Huawei Expires: 11 April 2027 J. Gray Entrust T. Reddy Nokia 8 October 2026 PQ/T Hybrid Composite Signatures for JOSE and COSE draft-ietf-jose-pq-composite-sigs-05 Abstract This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for Post- Quantum Traditional (PQ/T) hybrid composite signatures. The composite algorithms described combine the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) as the post-quantum component and either the Elliptic Curve Digital Signature Algorithm (ECDSA) or the Edwards-Curve Digital Signature Algorithm (EdDSA) as the traditional component. About This Document This note is to be removed before publishing as an RFC. The latest revision of this draft can be found at https://ietf-wg- jose.github.io/draft-ietf-jose-pq-composite-sigs/draft-ietf-jose-pq- composite-sigs.html. Status information for this document may be found at https://datatracker.ietf.org/doc/draft-ietf-jose-pq- composite-sigs/. Discussion of this document takes place on the Javascript Object Signing and Encryption Working Group mailing list (mailto:jose@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/jose/. Subscribe at https://www.ietf.org/mailman/listinfo/jose/. Source for this draft and an issue tracker can be found at https://github.com/ietf-wg-jose/draft-ietf-jose-pq-composite-sigs. Status of This Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Prabel, et al. Expires 11 April 2027 [Page 1] Internet-Draft JOSE/COSE Composite Signatures October 2026 Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at https://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on 11 April 2027. Copyright Notice Copyright (c) 2026 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/ license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Revised BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Revised BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Conventions and Definitions . . . . . . . . . . . . . . . . . 4 3. Algorithm Key Pair (AKP) Type . . . . . . . . . . . . . . . . 5 4. Composite ML-DSA in JOSE and COSE . . . . . . . . . . . . . . 5 4.1. Use in JOSE and COSE . . . . . . . . . . . . . . . . . . 5 4.2. ECDSA Encodings . . . . . . . . . . . . . . . . . . . . . 6 4.2.1. Ecdsa-Sig-Value (Signatures) . . . . . . . . . . . . 7 4.2.2. ECPrivateKey (Private Keys) . . . . . . . . . . . . . 9 4.2.3. X9.62 Uncompressed Point (Public Keys) . . . . . . . 10 5. Composite Signature Instantiations . . . . . . . . . . . . . 10 5.1. JOSE algorithms . . . . . . . . . . . . . . . . . . . . . 10 5.2. COSE algorithms . . . . . . . . . . . . . . . . . . . . . 12 5.3. Composite Labels for JOSE and COSE . . . . . . . . . . . 13 6. Security Considerations . . . . . . . . . . . . . . . . . . . 15 6.1. Hybrid Security and Quantum Resistance . . . . . . . . . 15 6.2. Component Key Integrity and Reuse . . . . . . . . . . . . 16 6.3. Domain Separation and Non-Separability . . . . . . . . . 16 6.4. Security Objectives and Limitations . . . . . . . . . . . 17 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 17 7.1. JOSE Algorithms . . . . . . . . . . . . . . . . . . . . . 18 Prabel, et al. Expires 11 April 2027 [Page 2] Internet-Draft JOSE/COSE Composite Signatures October 2026 7.1.1. ML-DSA-44-ES256 . . . . . . . . . . . . . . . . . . . 18 7.1.2. ML-DSA-65-ES256 . . . . . . . . . . . . . . . . . . . 18 7.1.3. ML-DSA-87-ES384 . . . . . . . . . . . . . . . . . . . 18 7.1.4. ML-DSA-44-Ed25519 . . . . . . . . . . . . . . . . . . 19 7.1.5. ML-DSA-65-Ed25519 . . . . . . . . . . . . . . . . . . 19 7.1.6. ML-DSA-87-Ed448 . . . . . . . . . . . . . . . . . . . 20 7.2. COSE Algorithms . . . . . . . . . . . . . . . . . . . . . 20 7.2.1. ML-DSA-44-ES256 . . . . . . . . . . . . . . . . . . . 20 7.2.2. ML-DSA-65-ES256 . . . . . . . . . . . . . . . . . . . 20 7.2.3. ML-DSA-87-ES384 . . . . . . . . . . . . . . . . . . . 21 7.2.4. ML-DSA-44-Ed25519 . . . . . . . . . . . . . . . . . . 21 7.2.5. ML-DSA-65-Ed25519 . . . . . . . . . . . . . . . . . . 22 7.2.6. ML-DSA-87-Ed448 . . . . . . . . . . . . . . . . . . . 22 8. References . . . . . . . . . . . . . . . . . . . . . . . . . 22 8.1. Normative References . . . . . . . . . . . . . . . . . . 22 8.2. Informative References . . . . . . . . . . . . . . . . . 24 Appendix A. Examples . . . . . . . . . . . . . . . . . . . . . . 25 A.1. JOSE . . . . . . . . . . . . . . . . . . . . . . . . . . 25 A.2. COSE . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Appendix B. Acknowledgments . . . . . . . . . . . . . . . . . . 96 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 96 1. Introduction The impact of a potential Cryptographically Relevant Quantum Computer (CRQC) on algorithms whose security is based on mathematical problems such as integer factorisation or discrete logarithms over finite fields or elliptic curves raises the need for new algorithms that are perceived to be secure against CRQC as well as classical computers. Such algorithms are called post-quantum, while algorithms based on integer factorisation or discrete logarithms are called traditional. While switching from a traditional algorithm to a post-quantum one intends to strengthen the security against an adversary possessing a quantum computer, the lack of maturing time of post-quantum algorithms compared to traditional algorithms raises uncertainty about their security. Thus, the joint use of a traditional algorithm and a post-quantum algorithm in protocols represents a solution to this problem by providing security as long as at least one of the traditional or post-quantum components remains secure. This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for hybrid composite signatures. The composite algorithms described combine ML- DSA as the post-quantum component and either ECDSA or EdDSA as the traditional component. Prabel, et al. Expires 11 April 2027 [Page 3] Internet-Draft JOSE/COSE Composite Signatures October 2026 2. Conventions and Definitions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here. This document follows the terminology for post-quantum hybrid schemes defined in [RFC9794]. This section recalls some of this terminology, but also adds other definitions used throughout the whole document: "Asymmetric Traditional Cryptographic Algorithm": An asymmetric cryptographic algorithm based on integer factorisation, finite field discrete logarithms, elliptic curve discrete logarithms, or related mathematical problems. A related mathematical problem is one that can be solved by solving the integer factorisation, finite field discrete logarithm or elliptic curve discrete logarithm problem. Where there is little risk of confusion asymmetric traditional cryptographic algorithms can also be referred to as traditional algorithms for brevity. "Post-Quantum Algorithm": An asymmetric cryptographic algorithm that is intended to be secure against attacks using quantum computers as well as classical computers. As with all cryptography, it always remains the case that attacks, either quantum or classical, may be found against post-quantum algorithms. Therefore it should not be assumed that just because an algorithm is designed to provide post- quantum security it will not be compromised. "Post-Quantum Traditional (PQ/T) Hybrid Scheme": A multi-algorithm scheme where at least one component algorithm is a post-quantum algorithm and at least one is a traditional algorithm. "PQ/T Hybrid Digital Signature": A multi-algorithm digital signature scheme made up of two or more component digital signature algorithms where at least one is a post-quantum algorithm and at least one is a traditional algorithm. "Composite Algorithm": An algorithm which is a sequence of two component algorithms, as defined in [I-D.draft-ietf-lamps-pq-composite-sigs]. "Component Algorithm": Each cryptographic algorithm that forms part of a cryptographic scheme. Prabel, et al. Expires 11 April 2027 [Page 4] Internet-Draft JOSE/COSE Composite Signatures October 2026 3. Algorithm Key Pair (AKP) Type This document makes use of the Algorithm Key Pair (AKP) type which is defined in [RFC9964]. As a reminder, the AKP type is used to express public and private keys for use with algorithms. The parameters for public and private keys contain byte strings. This document makes use of the serialization routines defined in [I-D.draft-ietf-lamps-pq-composite-sigs] to obtain the byte string encodings of the composite public and private keys. The process to compute JWK Thumbprint and COSE Key Thumbprint as described in [RFC7638] and [RFC9679] is detailed in [RFC9964]. 4. Composite ML-DSA in JOSE and COSE The composite algorithms registered in this document are the Composite ML-DSA algorithms defined in [I-D.draft-ietf-lamps-pq-composite-sigs]. Key generation, signature generation, signature verification, and the serialization of composite keys and signatures are performed exactly as specified in [I-D.draft-ietf-lamps-pq-composite-sigs], and are not repeated here. In particular, composite keys and signatures are encoded using the SerializePublicKey, SerializePrivateKey and SerializeSignatureValue routines of [I-D.draft-ietf-lamps-pq-composite-sigs], and decoded using the corresponding DeserializePublicKey, DeserializePrivateKey and DeserializeSignatureValue routines. 4.1. Use in JOSE and COSE The Composite ML-DSA algorithms are used in JOSE and COSE as follows: * Signatures are produced as described in Section 5.1 of [RFC7515] for JOSE and in Section 4 of [RFC9052] for COSE, using the Composite ML-DSA algorithm as the signature algorithm. The signature value is the output of SerializeSignatureValue. * The application context string ctx passed to the Composite ML-DSA signature generation and verification algorithms MUST be the empty string, similarly to [RFC9964]. As a consequence, the context length byte in the message representative M' defined in [I-D.draft-ietf-lamps-pq-composite-sigs] is always 0x00. * The prefix, as well as the label and the pre-hash algorithm of each composite algorithm, are those defined in [I-D.draft-ietf-lamps-pq-composite-sigs]. The prefix is the ASCII Prabel, et al. Expires 11 April 2027 [Page 5] Internet-Draft JOSE/COSE Composite Signatures October 2026 encoding of the string "CompositeAlgorithmSignatures2025", which in hex is 43 6F 6D 70 6F 73 69 74 65 41 6C 67 6F 72 69 74 68 6D 53 69 67 6E 61 74 75 72 65 73 32 30 32 35. The labels are recalled in Table 6, and the pre-hash algorithms in Table 4 (for JOSE) and Table 5 (for COSE). * Composite keys are expressed using the AKP key type (see Section 3). The pub parameter contains the output of SerializePublicKey, and the priv parameter contains the output of SerializePrivateKey. As in [RFC9964], the ML-DSA component of the private key MUST be the 32-byte seed. For the ECDSA component, the signature, private key and public key are encoded as in [I-D.draft-ietf-lamps-pq-composite-sigs]: the signature as an Ecdsa-Sig-Value [RFC3279], the private key as an ECPrivateKey [RFC5915], and the public key as an uncompressed X9.62 [X9.62-2005] point. Section 4.2 gives guidance on how to produce and parse these encodings. For the EdDSA component, keys and signatures are encoded as defined in [RFC8032]. 4.2. ECDSA Encodings This section describes how to construct and parse the three ECDSA encodings required by this document: the DER-encoded Ecdsa-Sig-Value [RFC3279] and ECPrivateKey [RFC5915] structures, and the X9.62 [X9.62-2005] uncompressed point encoding used for public keys. None of it requires implementers to write a general-purpose ASN.1 encoder or decoder, but implementers who already have access to a standard ASN.1/DER library MAY use it instead for the two DER structures. When such a library is used to encode, its output has to be exactly the encoding described in this section. When it is used to decode, any other encoding has to be rejected. In particular, some libraries include the optional publicKey field of ECPrivateKey by default, which is not permitted here (see Section 4.2.2). Prabel, et al. Expires 11 April 2027 [Page 6] Internet-Draft JOSE/COSE Composite Signatures October 2026 +=============+================================+=======+=======+ | Field | Encoding used in this document | P-256 | P-384 | +=============+================================+=======+=======+ | Private key | ECPrivateKey (Section 4.2.2) | 51 | 64 | +-------------+--------------------------------+-------+-------+ | Public key | X9.62 uncompressed point | 65 | 97 | | | (Section 4.2.3) | | | +-------------+--------------------------------+-------+-------+ | Signature | Ecdsa-Sig-Value | <= 72 | <= | | | (Section 4.2.1) | | 104 | +-------------+--------------------------------+-------+-------+ Table 1: Sizes (in bytes) of ECDSA keys and signatures as encoded in this document 4.2.1. Ecdsa-Sig-Value (Signatures) Ecdsa-Sig-Value is defined in Section 2.2.3 of [RFC3279] as: Ecdsa-Sig-Value ::= SEQUENCE { r INTEGER, s INTEGER } r and s are the same big-endian integer values used by [RFC7518] and [RFC9053], where they are zero-padded to a fixed length for a given curve (32 bytes each for P-256, 48 bytes each for P-384). As integers, however, r and s can have fewer significant bytes than this fixed length whenever their leading bytes are zero; Step 1 below removes this padding before re-encoding them as DER INTEGERs. Building an Ecdsa-Sig-Value from r and s takes two steps: * first, r and s are each turned independently into a DER INTEGER (Step 1); * then the two results are wrapped in a DER SEQUENCE (Step 2). Decoding reverses these two steps. No prior ASN.1 knowledge is assumed below. *Step 1: encode r and s as DER INTEGERs.* A DER INTEGER is written as a 0x02 tag byte, a length byte, and the value's bytes. Because a DER INTEGER is signed, an extra 0x00 byte is prepended whenever the value would otherwise be misread as negative, i.e. whenever its first byte is 0x80 or greater. Prabel, et al. Expires 11 April 2027 [Page 7] Internet-Draft JOSE/COSE Composite Signatures October 2026 Table 2 explains how to turn a raw value (r or s) into its DER encoding. +=============================+===================================+ | First byte after removing | DER encoding | | leading 0x00 bytes (keeping | | | at least one byte) | | +=============================+===================================+ | less than 0x80 | 0x02, then the length in bytes of | | | the trimmed value, then the | | | trimmed value | +-----------------------------+-----------------------------------+ | 0x80 or greater | 0x02, then the length in bytes of | | | the trimmed value plus 1, then | | | 0x00, then the trimmed value | +-----------------------------+-----------------------------------+ Table 2: Turning a raw value (r or s) into its DER encoding The length is always written as a single byte in this document: r, s, and their DER encodings are always well under 128 bytes, so DER's multi-byte "long form" length encoding is never needed here. For example, for P-256 (32-byte r and s): * if r starts with 4F ... (no leading zero byte, and 0x4F is less than 0x80), its DER encoding is 02 20 (0x20 = 32); * if r starts with F3 ... (no leading zero byte, and 0xF3 is greater than 0x80), its DER encoding is 02 21 00 (0x21 = 33); * if r starts with 00 07 ... (one leading zero byte to remove, and 0x07 is less than 0x80), its DER encoding is 02 1F (0x1F = 31). *Step 2: wrap r's and s's DER encodings in a SEQUENCE.* Using the two encodings produced in Step 1, the full Ecdsa-Sig-Value is simply the concatenation Ecdsa-Sig-Value <- 0x30 || length || r's DER encoding || s's DER encoding where length is a single byte equal to the combined length, in bytes, of r's and s's DER encodings from Step 1, and r's encoding always comes before s's. Prabel, et al. Expires 11 April 2027 [Page 8] Internet-Draft JOSE/COSE Composite Signatures October 2026 Continuing the example above: taking r's DER encoding from the third case (02 1F <31 bytes>, 33 bytes total) and an s whose DER encoding corresponds to the first case (02 20 <32 bytes>, 34 bytes total), the combined length is 33 + 34 = 67 = 0x43, and the full Ecdsa-Sig-Value is 30 43 (69 bytes total). *Decoding* reverses Steps 2 and 1, in that order. An Ecdsa-Sig-Value that is not encoded as described above MUST be rejected. 4.2.2. ECPrivateKey (Private Keys) ECPrivateKey is defined in [RFC5915] as: ECPrivateKey ::= SEQUENCE { version INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1), privateKey OCTET STRING, parameters [0] ECParameters {{ NamedCurve }} OPTIONAL, publicKey [1] BIT STRING OPTIONAL } Given the raw, fixed-length ECDSA private key d (curve size n: 32 bytes for P-256, 48 bytes for P-384), the ECPrivateKey is d inserted between two fixed byte sequences that depend only on the curve (the publicKey field is never included): ECPrivateKey <- bytes before d || d || bytes after d The fixed byte sequences are given in Table 3: +=======+======================+===============+===================+ | Curve | Bytes before d | d | Bytes after d | +=======+======================+===============+===================+ | P-256 | 30 31 02 01 01 04 20 | | A0 0A 06 08 2A 86 | | | | | 48 CE 3D 03 01 07 | +-------+----------------------+---------------+-------------------+ | P-384 | 30 3E 02 01 01 04 30 | | A0 07 06 05 2B 81 | | | | | 04 00 22 | +-------+----------------------+---------------+-------------------+ Table 3: Construction of an ECPrivateKey, by curve For example, for P-256 (n = 32), with d = D1 D2 ...D32: 30 31 SEQUENCE (length 0x31 = 49) 02 01 01 version (INTEGER, value 1) 04 20 D1 D2 ... D32 private key (OCTET STRING) A0 0A parameters (A0: explicit tag 0) 06 08 2A 86 48 CE 3D 03 01 07 OID (OBJECT IDENTIFIER, P-256) Prabel, et al. Expires 11 April 2027 [Page 9] Internet-Draft JOSE/COSE Composite Signatures October 2026 An ECPrivateKey used in this document MUST have exactly this form: the parameters field MUST be present and contain the OID of the curve, and the publicKey field MUST NOT be present. *Decoding* reverses the same construction. The decoder checks that the ECPrivateKey has the length given in Table 1 and that the bytes before and after d are those of Table 3, and then reads d between them. An ECPrivateKey that fails this check MUST be rejected, even if it is valid according to [RFC5915]. This is the case, for example, when the publicKey field is present. 4.2.3. X9.62 Uncompressed Point (Public Keys) The ECDSA public key in this document is encoded as the X9.62 [X9.62-2005] uncompressed point: ECDSA public key <- 0x04 || x || y where x and y are the same raw, fixed-length, big-endian coordinate values already used by [RFC7518] and [RFC9053] (32 bytes each for P-256, 48 bytes each for P-384). 5. Composite Signature Instantiations The ML-DSA signature scheme supports three possible parameter sets, each of which corresponding to a specific security strength. See [FIPS.204] for more considerations on that matter. The combinations in Table 4 and Table 5 are a subset of those defined in [I-D.draft-ietf-lamps-pq-composite-sigs]. As explained there, each ML-DSA parameter set is paired with commonly deployed traditional algorithms, rather than with a traditional algorithm of exactly the same security level, as such an exact match is difficult to define, since there is no consensus on how to compare security against classical adversaries with security against quantum adversaries. The [FIPS.204] specification defines both pure and pre-hash modes for ML-DSA, referred to as "ML-DSA" and "HashML-DSA" respectively. This document only specifies a single mode which is similar in construction to HashML-DSA. However, because the pre-hashing is done at the composite level, only the pure ML-DSA algorithm is used as the underlying ML-DSA primitive. 5.1. JOSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in [IANA.JOSE]. Prabel, et al. Expires 11 April 2027 [Page 10] Internet-Draft JOSE/COSE Composite Signatures October 2026 +=================+=========+=================+========+===========+ |Name |First |Second Algorithm |Pre-Hash|Description| | |Algorithm| | | | +=================+=========+=================+========+===========+ |ML-DSA-44-ES256 |ML-DSA-44|ecdsa-with-SHA256|SHA256 |Composite | | | |with P-256 | |Signature | | | | | |with ML- | | | | | |DSA-44 and | | | | | |ECDSA using| | | | | |P-256 curve| | | | | |and SHA256 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-65-ES256 |ML-DSA-65|ecdsa-with-SHA256|SHA512 |Composite | | | |with P-256 | |Signature | | | | | |with ML- | | | | | |DSA-65 and | | | | | |ECDSA using| | | | | |P-256 curve| | | | | |and SHA256 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-87-ES384 |ML-DSA-87|ecdsa-with-SHA384|SHA512 |Composite | | | |with P-384 | |Signature | | | | | |with ML- | | | | | |DSA-87 and | | | | | |ECDSA using| | | | | |P-384 curve| | | | | |and SHA384 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-44-Ed25519|ML-DSA-44|Ed25519 |SHA512 |Composite | | | | | |Signature | | | | | |with ML- | | | | | |DSA-44 and | | | | | |Ed25519 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-65-Ed25519|ML-DSA-65|Ed25519 |SHA512 |Composite | | | | | |Signature | | | | | |with ML- | | | | | |DSA-65 and | | | | | |Ed25519 | +-----------------+---------+-----------------+--------+-----------+ |ML-DSA-87-Ed448 |ML-DSA-87|Ed448 |SHAKE256|Composite | | | | | |Signature | | | | | |with ML- | | | | | |DSA-87 and | | | | | |Ed448 | +-----------------+---------+-----------------+--------+-----------+ Table 4: JOSE Composite Signature Algorithms for ML-DSA Prabel, et al. Expires 11 April 2027 [Page 11] Internet-Draft JOSE/COSE Composite Signatures October 2026 Examples can be found in Appendix A.1. 5.2. COSE algorithms The following table defines a list of algorithms associated with specific PQ/T combinations to be registered in [IANA.COSE]. +==========+============+=========+=========+========+=============+ |Name | COSE Value |First |Second |Pre-Hash| Description | | | |Algorithm|Algorithm| | | +==========+============+=========+=========+========+=============+ |ML-DSA- | TBD |ML-DSA-44|ecdsa- |SHA256 | Composite | |44-ES256 | (request | |with- | | Signature | | | assignment | |SHA256 | | with ML- | | | -54) | |with | | DSA-44 and | | | | |P-256 | | ECDSA using | | | | | | | P-256 curve | | | | | | | and SHA256 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-65|ecdsa- |SHA512 | Composite | |65-ES256 | (request | |with- | | Signature | | | assignment | |SHA256 | | with ML- | | | -55) | |with | | DSA-65 and | | | | |P-256 | | ECDSA using | | | | | | | P-256 curve | | | | | | | and SHA256 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-87|ecdsa- |SHA512 | Composite | |87-ES384 | (request | |with- | | Signature | | | assignment | |SHA384 | | with ML- | | | -56) | |with | | DSA-87 and | | | | |P-384 | | ECDSA using | | | | | | | P-384 curve | | | | | | | and SHA384 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-44|Ed25519 |SHA512 | Composite | |44-Ed25519| (request | | | | Signature | | | assignment | | | | with ML- | | | -57) | | | | DSA-44 and | | | | | | | Ed25519 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-65|Ed25519 |SHA512 | Composite | |65-Ed25519| (request | | | | Signature | | | assignment | | | | with ML- | | | -58) | | | | DSA-65 and | | | | | | | Ed25519 | +----------+------------+---------+---------+--------+-------------+ |ML-DSA- | TBD |ML-DSA-87|Ed448 |SHAKE256| Composite | Prabel, et al. Expires 11 April 2027 [Page 12] Internet-Draft JOSE/COSE Composite Signatures October 2026 |87-Ed448 | (request | | | | Signature | | | assignment | | | | with ML- | | | -59) | | | | DSA-87 and | | | | | | | Ed448 | +----------+------------+---------+---------+--------+-------------+ Table 5: COSE Composite Signature Algorithms for ML-DSA Examples can be found in Appendix A.2. 5.3. Composite Labels for JOSE and COSE The JOSE and COSE composite label values are listed in Table 6. They are represented here as ASCII strings, but implementers MUST convert them to byte strings using the obvious ASCII conversions prior to concatenating them with other byte values, as in [I-D.draft-ietf-lamps-pq-composite-sigs]. +===================+===================================+===========+ | "alg" Header | Label (in ASCII) | Label (in | | Parameter | | Hex | | | | encoding) | +===================+===================================+===========+ | ML-DSA-44-ES256 | COMPSIG-MLDSA44-ECDSA-P256-SHA256 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 34 34 | | | | 2D 45 43 | | | | 44 53 41 | | | | 2D 50 32 | | | | 35 36 2D | | | | 53 48 41 | | | | 32 35 36 | +-------------------+-----------------------------------+-----------+ | ML-DSA-65-ES256 | COMPSIG-MLDSA65-ECDSA-P256-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 36 35 | | | | 2D 45 43 | | | | 44 53 41 | | | | 2D 50 32 | | | | 35 36 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ Prabel, et al. Expires 11 April 2027 [Page 13] Internet-Draft JOSE/COSE Composite Signatures October 2026 | ML-DSA-87-ES384 | COMPSIG-MLDSA87-ECDSA-P384-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 38 37 | | | | 2D 45 43 | | | | 44 53 41 | | | | 2D 50 33 | | | | 38 34 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-44-Ed25519 | COMPSIG-MLDSA44-Ed25519-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 34 34 | | | | 2D 45 64 | | | | 32 35 35 | | | | 31 39 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-65-Ed25519 | COMPSIG-MLDSA65-Ed25519-SHA512 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 36 35 | | | | 2D 45 64 | | | | 32 35 35 | | | | 31 39 2D | | | | 53 48 41 | | | | 35 31 32 | +-------------------+-----------------------------------+-----------+ | ML-DSA-87-Ed448 | COMPSIG-MLDSA87-Ed448-SHAKE256 | 43 4F 4D | | | | 50 53 49 | | | | 47 2D 4D | | | | 4C 44 53 | | | | 41 38 37 | | | | 2D 45 64 | | | | 34 34 38 | | | | 2D 53 48 | | | | 41 4B 45 | | | | 32 35 36 | +-------------------+-----------------------------------+-----------+ Table 6: JOSE/COSE Composite Label Values Prabel, et al. Expires 11 April 2027 [Page 14] Internet-Draft JOSE/COSE Composite Signatures October 2026 6. Security Considerations The security considerations of the component algorithms (ML-DSA, ECDSA, and EdDSA) as described in [FIPS.204], [RFC6090], and [RFC8032] apply to this document. Similarly, the security considerations relative to the JWS, JWK, AKP and COSE structures [RFC7515], [RFC7517], [RFC9964] and [RFC9052] apply to this document. The security considerations of [I-D.draft-ietf-lamps-pq-composite-sigs] also apply to the composite algorithms used in this document. In addition, the following considerations specific to the composite design and its use in JOSE/COSE must be taken into account. 6.1. Hybrid Security and Quantum Resistance An important objective of Composite ML-DSA is to provide protection against CRQCs. Under a CRQC, traditional signature algorithms (ECDSA, EdDSA) are vulnerable to private-key recovery, enabling attackers to forge arbitrary JWS objects or COSE_Sign/COSE_Sign1 structures and fully impersonate the signer. By requiring the successful verification of both the ML-DSA component and the traditional component, this construction ensures: * An adversary that compromises only one of the component algorithms cannot produce cryptographically protected JOSE/COSE objects as long as the other component remains secure. In particular, this prevents JOSE/COSE signature spoofing and impersonation attacks even if the traditional signature component is compromised. * The scheme provides existential unforgeability under chosen- message attack (EUF-CMA) provided that at least one component algorithm is EUF-CMA secure and the pre-hash function PH is collision-resistant. This is the case for all combinations present in this document: ML-DSA, ECDSA and EdDSA are designed to be EUF-CMA secure (the latter two against classical adversaries only), and the pre-hash functions used (SHA-256, SHA-512, and SHAKE256 with 64-byte output) are collision-resistant. Prabel, et al. Expires 11 April 2027 [Page 15] Internet-Draft JOSE/COSE Composite Signatures October 2026 6.2. Component Key Integrity and Reuse The security analysis of Composite ML-DSA in [I-D.draft-ietf-lamps-pq-composite-sigs] assumes that the two component keys of a composite key are freshly generated together and are not used anywhere else. The considerations below apply to composite keys used with JOSE and COSE. * To avoid key reuse, when generating a new composite key, the key generation functions for both component algorithms MUST be executed. Moreover, compliant parties MUST NOT use, import, or export component keys that are used in other contexts, combinations, or as standalone keys. In particular, existing key material, such as an ECDSA, EdDSA or ML-DSA key already published as a JWK or COSE_Key, MUST NOT be reused as a component of a composite key. If a component key is also used on its own, a component signature taken out of a composite signature verifies under that key as a signature over the message representative M'. The prefix and label leave evidence that the signature comes from a composite, but they do not prevent this. Key reuse MUST therefore be avoided despite the weak non-separability of the combiner. * A composite public key can be conveyed in an X.509 certificate, using the x5c header parameter in JOSE (Section 4.1.6 of [RFC7515]) or the x5chain header parameter in COSE [RFC9360]. Such a certificate carries the composite key as specified in [I-D.draft-ietf-lamps-pq-composite-sigs], with the same serialized public key as the pub parameter. In that case, the binding between the composite key and the signer is only as strong as the signatures on the certificates of the chain. A quantum adversary cannot forge a certificate signed with Composite ML-DSA as long as ML-DSA remains secure. If a certificate of the chain is signed with a traditional algorithm only, such an adversary can obtain a certificate for a composite key of its choice, and the composite signature on the JWS or COSE object no longer provides protection against a CRQC. The same holds for any other mechanism used to distribute composite public keys. 6.3. Domain Separation and Non-Separability The Composite ML-DSA signature combiner defined in [I-D.draft-ietf-lamps-pq-composite-sigs] prepends a fixed Prefix and an algorithm-specific Label to the pre-hashed message before signing. * By binding the two component signatures to the specific composite algorithm, the composite scheme achieves "weak non-separability" as defined in [RFC9955]. Prabel, et al. Expires 11 April 2027 [Page 16] Internet-Draft JOSE/COSE Composite Signatures October 2026 * The label, specific to each composite algorithm, helps protect against component signatures being removed from the composite and used in another context. However, it does not fully prevent it as the traditional component still verifies under the traditional algorithm as a signature over M', which is why key reuse is forbidden. For more information about the security properties relative to the signature combiner, the user can read [I-D.draft-ietf-lamps-pq-composite-sigs]. 6.4. Security Objectives and Limitations In JOSE/COSE, the security objective of digital signatures is to ensure that only an authorized signer can produce a valid signature over a given protected header and payload. Therefore, users should be aware of specific scenarios where Composite ML-DSA may not be appropriate: * The ECDSA combinations are not SUF-CMA secure against classical or quantum adversaries, since ECDSA signatures are malleable. The Ed25519 and Ed448 combinations are SUF-CMA secure against classical adversaries, but are not SUF-CMA secure against quantum adversaries, who can break the traditional component. Consequently, applications for which SUF-CMA security is a strict requirement SHOULD NOT use Composite ML-DSA. An application can still use it, after carefully weighing the security implications, if it only needs strong unforgeability against classical adversaries and uses an Ed25519 or Ed448 combination, or if it needs strong unforgeability only to obtain a unique identifier for an object and identifies the object by a signed identifier such as jti [RFC7519] or cti [RFC8392] rather than by the signature value. * Composite ML-DSA does not guarantee that a message has a single valid signature. Applications therefore cannot use the signature value, or a hash of the complete JWS or COSE object, as a unique identifier. * Replay protection is not handled by the signature itself but must be addressed through claims such as exp, nbf, and jti in JOSE (Section 4.1 of [RFC7519]) or the equivalent claims in COSE (Section 3 of [RFC8392]). 7. IANA Considerations Prabel, et al. Expires 11 April 2027 [Page 17] Internet-Draft JOSE/COSE Composite Signatures October 2026 7.1. JOSE Algorithms The following values of the JWS "alg" (algorithm) are requested to be added to the "JSON Web Signature and Encryption Algorithms" registry. They are represented following the registration template provided in [RFC7518]. 7.1.1. ML-DSA-44-ES256 * Algorithm Name: ML-DSA-44-ES256 * Algorithm Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): RFC XXXX * Algorithm Analysis Documents(s): [I-D.draft-ietf-lamps-pq-composite-sigs] 7.1.2. ML-DSA-65-ES256 * Algorithm Name: ML-DSA-65-ES256 * Algorithm Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): RFC XXXX * Algorithm Analysis Documents(s): [I-D.draft-ietf-lamps-pq-composite-sigs] 7.1.3. ML-DSA-87-ES384 * Algorithm Name: ML-DSA-87-ES384 Prabel, et al. Expires 11 April 2027 [Page 18] Internet-Draft JOSE/COSE Composite Signatures October 2026 * Algorithm Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): RFC XXXX * Algorithm Analysis Documents(s): [I-D.draft-ietf-lamps-pq-composite-sigs] 7.1.4. ML-DSA-44-Ed25519 * Algorithm Name: ML-DSA-44-Ed25519 * Algorithm Description: Composite Signature with ML-DSA-44 and Ed25519 using SHA-512 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): RFC XXXX * Algorithm Analysis Document(s): [I-D.draft-ietf-lamps-pq-composite-sigs] 7.1.5. ML-DSA-65-Ed25519 * Algorithm Name: ML-DSA-65-Ed25519 * Algorithm Description: Composite Signature with ML-DSA-65 and Ed25519 using SHA-512 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): RFC XXXX Prabel, et al. Expires 11 April 2027 [Page 19] Internet-Draft JOSE/COSE Composite Signatures October 2026 * Algorithm Analysis Document(s): [I-D.draft-ietf-lamps-pq-composite-sigs] 7.1.6. ML-DSA-87-Ed448 * Algorithm Name: ML-DSA-87-Ed448 * Algorithm Description: Composite Signature with ML-DSA-87 and Ed448 using SHAKE-256 * Algorithm Usage Location(s): alg * JOSE Implementation Requirements: Optional * Change Controller: IETF * Specification Document(s): RFC XXXX * Algorithm Analysis Document(s): [I-D.draft-ietf-lamps-pq-composite-sigs] 7.2. COSE Algorithms The following values are requested to be added to the "COSE Algorithms" registry. They are represented following the registration template provided in [RFC9053], [RFC9054]. 7.2.1. ML-DSA-44-ES256 * Name: ML-DSA-44-ES256 * Value: TBD (request assignment -54) * Description: Composite Signature with ML-DSA-44 and ECDSA using P-256 curve and SHA-256 * Capabilities: [kty] * Change Controller: IETF * Reference: RFC XXXX * Recommended: No 7.2.2. ML-DSA-65-ES256 * Name: ML-DSA-65-ES256 Prabel, et al. Expires 11 April 2027 [Page 20] Internet-Draft JOSE/COSE Composite Signatures October 2026 * Value: TBD (request assignment -55) * Description: Composite Signature with ML-DSA-65 and ECDSA using P-256 curve and SHA-256 * Capabilities: [kty] * Change Controller: IETF * Reference: RFC XXXX * Recommended: No 7.2.3. ML-DSA-87-ES384 * Name: ML-DSA-87-ES384 * Value: TBD (request assignment -56) * Description: Composite Signature with ML-DSA-87 and ECDSA using P-384 curve and SHA-384 * Capabilities: [kty] * Change Controller: IETF * Reference: RFC XXXX * Recommended: No 7.2.4. ML-DSA-44-Ed25519 * Name: ML-DSA-44-Ed25519 * Value: TBD (request assignment -57) * Description: Composite Signature with ML-DSA-44 and Ed25519 using SHA-512 * Capabilities: [kty] * Change Controller: IETF * Reference: RFC XXXX * Recommended: No Prabel, et al. Expires 11 April 2027 [Page 21] Internet-Draft JOSE/COSE Composite Signatures October 2026 7.2.5. ML-DSA-65-Ed25519 * Name: ML-DSA-65-Ed25519 * Value: TBD (request assignment -58) * Description: Composite Signature with ML-DSA-65 and Ed25519 using SHA-512 * Capabilities: [kty] * Change Controller: IETF * Reference: RFC XXXX * Recommended: No 7.2.6. ML-DSA-87-Ed448 * Name: ML-DSA-87-Ed448 * Value: TBD (request assignment -59) * Description: Composite Signature with ML-DSA-87 and Ed448 using SHAKE-256 * Capabilities: [kty] * Change Controller: IETF * Reference: RFC XXXX * Recommended: No 8. References 8.1. Normative References [FIPS.204] National Institute of Standards and Technology (NIST), "Module-Lattice-Based Digital Signature Standard", August 2024, . [I-D.draft-ietf-lamps-pq-composite-sigs] Ounsworth, M., Gray, J., Pala, M., Klaußner, J., and S. Fluhrer, "Composite Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure", Work in Progress, Internet-Draft, draft- Prabel, et al. Expires 11 April 2027 [Page 22] Internet-Draft JOSE/COSE Composite Signatures October 2026 ietf-lamps-pq-composite-sigs-19, 21 April 2026, . [IANA.COSE] IANA, "CBOR Object Signing and Encryption (COSE)", n.d., . [IANA.JOSE] IANA, "JSON Object Signing and Encryption (JOSE)", n.d., . [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997, . [RFC3279] Bassham, L., Polk, W., and R. Housley, "Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 3279, DOI 10.17487/RFC3279, May 2002, . [RFC5915] Turner, S. and D. Brown, "Elliptic Curve Private Key Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010, . [RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic Curve Cryptography Algorithms", RFC 6090, DOI 10.17487/RFC6090, February 2011, . [RFC7515] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Signature (JWS)", RFC 7515, DOI 10.17487/RFC7515, May 2015, . [RFC7517] Jones, M., "JSON Web Key (JWK)", RFC 7517, DOI 10.17487/RFC7517, May 2015, . [RFC7518] Jones, M., "JSON Web Algorithms (JWA)", RFC 7518, DOI 10.17487/RFC7518, May 2015, . [RFC7638] Jones, M. and N. Sakimura, "JSON Web Key (JWK) Thumbprint", RFC 7638, DOI 10.17487/RFC7638, September 2015, . Prabel, et al. Expires 11 April 2027 [Page 23] Internet-Draft JOSE/COSE Composite Signatures October 2026 [RFC8032] Josefsson, S. and I. Liusvaara, "Edwards-Curve Digital Signature Algorithm (EdDSA)", RFC 8032, DOI 10.17487/RFC8032, January 2017, . [RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017, . [RFC9052] Schaad, J., "CBOR Object Signing and Encryption (COSE): Structures and Process", STD 96, RFC 9052, DOI 10.17487/RFC9052, August 2022, . [RFC9679] Isobe, K., Tschofenig, H., and O. Steele, "CBOR Object Signing and Encryption (COSE) Key Thumbprint", RFC 9679, DOI 10.17487/RFC9679, December 2024, . [RFC9964] Prorock, M. and O. Steele, "ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)", RFC 9964, DOI 10.17487/RFC9964, May 2026, . [X9.62-2005] American National Standards Institute, "Public Key Cryptography for the Financial Services Industry: the Elliptic Curve Digital Signature Algorithm (ECDSA)", ANSI X9.62-2005, November 2005. 8.2. Informative References [RFC7519] Jones, M., Bradley, J., and N. Sakimura, "JSON Web Token (JWT)", RFC 7519, DOI 10.17487/RFC7519, May 2015, . [RFC8392] Jones, M., Wahlstroem, E., Erdtman, S., and H. Tschofenig, "CBOR Web Token (CWT)", RFC 8392, DOI 10.17487/RFC8392, May 2018, . [RFC9053] Schaad, J., "CBOR Object Signing and Encryption (COSE): Initial Algorithms", RFC 9053, DOI 10.17487/RFC9053, August 2022, . [RFC9054] Schaad, J., "CBOR Object Signing and Encryption (COSE): Hash Algorithms", RFC 9054, DOI 10.17487/RFC9054, August 2022, . Prabel, et al. Expires 11 April 2027 [Page 24] Internet-Draft JOSE/COSE Composite Signatures October 2026 [RFC9360] Schaad, J., "CBOR Object Signing and Encryption (COSE): Header Parameters for Carrying and Referencing X.509 Certificates", RFC 9360, DOI 10.17487/RFC9360, February 2023, . [RFC9794] Driscoll, F., Parsons, M., and B. Hale, "Terminology for Post-Quantum Traditional Hybrid Schemes", RFC 9794, DOI 10.17487/RFC9794, June 2025, . [RFC9955] Bindel, N., Hale, B., Connolly, D., and F. Driscoll, "Hybrid Signature Spectrums", RFC 9955, DOI 10.17487/RFC9955, July 2026, . Appendix A. Examples A.1. JOSE =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "ecdsa_d": "\ 0000000000000000000000000000000000000000000000000000000000000001", "jwk": { "kid": "bJ8aA7ZIsHYNGb4GVaIxupyHLmFNuU1jThxqAXK0Sio", "kty": "AKP", "alg": "ML-DSA-44-ES256", "pub": "unH59k4RuutY-\ pxvu24U5h8YZD2rSVtHU5qRZsoBmBMcRPgmu9VuNOVdteXi1zNIXjnqJg_GAAxepLqA0\ 0Vc3lO0bzRIKu39VFD8Lhuk8l0V-cFEJC-\ zm7UihxiQMMUEmOFxe3x1ixkKZ0jqmqP3rKryx8tSbtcXyfea64QhT6XNje2SoMP6FVi\ BDxLHBQo2dwjRls0k5a-\ XSQSu2OTOiHLoaWsLe8pQ5FLNfTDqmkrawDEdZyxr3oSWJAsHQxRjcIiVzZuvwxYy1zl\ 2STiP2vy_fTBaPemkleynQzqPg7oPCyXEE8bjnJbrfWkbNNN8438e6tHPIX4l7zTuzz9\ 8YPhLjt_d6EBdT4MldsYe-\ Y4KLyjaGHcAlTkk9oa5RhRwW89T0z_t1DSO3dvfKLUGXh8gd1BD6Fz5MfgpF5NjoafnQ\ EqDjsAAhrCXY4b-\ Y3yYJEdX4_dp3dRGdHG_rWcPmgX4JG7lCnser4f8QGnDriqiAzJYEXeS8LzUngg_0bx0\ lqv_KcyU5IaLISFO0xZSU5mmEPvdSoDnyAcV8pV44qhLtAvd29n0ehG259oRihtljTWe\ iu9V60a1N2tbZVl5mEqSK-\ 6_xZvNYA1TCdzNctvweH24unV7U3wer9XA9Q6kvJWDVJ4oKaQsKMrCSMlteBJMRxWbGK\ 7ddUq6F7GdQw-3j2M-qdJvVKm9UPjY9rc1lPgol25-oJxTu7nxGlbJUH-\ 4m5pevAN6NyZ6lfhbjWTKlxkrEKZvQXs_Yf6cpXEwpI_ZJeriq1UC1XHIpRkDwdOY9MH\ 3an4RdDl2r9vGl_IwlKPNdh_5aF3jLgn7PCit1FNJAwC8fIncAXgAlgcXIpRXdfJk4bB\ iO89GGccSyDh2EgXYdpG3XvNgGWy7npuSoNTE7WIyblAk13UQuO4sdCbMIuriCdyfE73\ Prabel, et al. Expires 11 April 2027 [Page 25] Internet-Draft JOSE/COSE Composite Signatures October 2026 mvwj15xgb07RZRQtFGlFTmnFcIdZ90zDrWXDbANntv7KCKwNvoTuv64bY3HiGbj-NQ-\ U9eMylWVpvr4hrXcES8c9K3PqHWADZC0iIOvlzFv4VBoc_wVflcOrL_SIoaNFCNBAZZq\ -2v5lAgpJTqVOtqJ_HVraoSfcKy5g45p-\ qULunXj6Jwq21fobQiKubBKKOZwcJFyJD7F4ACKXOrz-\ HIvSHMCWW_9dVrRuCpJw0s0aVFbRqopDNhu446nqb4_EDYQM1tTHMozPd_jKxRRD0sH7\ 5X8ZoToxFSpLBDbtdWcenxj-\ zBf6IGWfZnmaetjKEBYJWC7QDQx1A91pJVJCEgieCkoIfTqkeQuePpIyu48g2FG3P1zj\ RF-\ kumhUTfSjo5qS0YiZQy0E1BMs6M11EvuxXRsHClLHoy5nLYI2Sj4zjVjYyxSHyPRPGGo\ 9hwB34yWxzYNtPPGiqXS_dNCpi_zRZwRY4lCGrQ-\ hYTEWIK1Dm5OlttvC4_eiQ1dv63NiGkLRJ5kJA3bICN0fzCDY-\ MBqnd1cWn8YVBijVkgtaoascjL9EywDgJdeHnXK0eeOvUxHHhXJVkNqcibn8O4RQdpVU\ 60TSA-uiu675ytIjcBHC6kTv8A8pmkj_4oypPd-F92YIJC741swkYQoeIHj8rE-\ ThcMUkF7KqC5VORbZTRp8HsZSqgiJcIPaouuxd1-\ 8Rxrid3fXkE6p8bkrysPYoxWEJgh7ZFsRCPDWX-yTeJwFN0PKFP1j0F6YtlLfK5wv-\ c4F8ZQHA_-\ yc_gODicy7KmWDZgbTP07e7gEWzw4MFRrndjbDQRrF9Hy4SxCR_i85uVjpEDydwN9gS3\ rM6D0oTlF2JjClk_jQuL-Gn-bjufrSnwPnhYrzjNXazFezsu2QGg3v1H1", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMQIBAQQgAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAGgCgYIKoZIzj0DAQc" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNDQtRVMyNTYiLCJraWQiOiJiSjhhQTdaSXNIWU5HYjRHVmFJ\ eHVweUhMbUZOdVUxalRoeHFBWEswU2lvIn0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.\ n4lG9qkiRMktRpBwUO2U_G5mP7tk1Vf7nNX_0OX398PDkz0wmqHgqLodXrVEmErocDkA\ tSusGOEK-MRIdP7mV_6vy4sjXf_U3cbyDiTu8f9j12jPxjFD7tsx--\ Ld5jLiaCcE17uiacS_w0jQaOhA68nz9Et5U16QfDNLlP9k1pKLuwMFEMoJ8yeNOIzvmu\ 3A3aZtD63-\ 8gVX3jNGngxoDcSxkrDdeIM1r6Nmvvbe_ZJaIhcYPAmyObtmF9UbSm1SqL7lYBh7kOnK\ 268DOj4cG950nKjbS84fRfymZf-yb1Slc24DOJj54PGe6KH5wdckUi-\ o2M3WjmA9VywIkMOpKIziqPC0hHe6Rc2V6uQ9c5XgdBptTxDqk8R_u5lk51hdIHk2C5p\ d_VnZEIE9kWym4MevcLcQkD6KLA-KkDmqoIOiLQA9wzy-\ C2EVTwXFKkWC7IBNKGBXHXNVA9XmNdcTNroM7RRVve2MjM9M5uECQl8l6G5Rc9zsck9P\ uicRRc097_2L6fPQ_CoHZ-MK9iu0f0-\ 5spAI60ZikKqp68pVixDFhQ8k59Mby7MTNfkEGLWzAE0XQJrpzJ8_f0IRtWCTyktvqwo\ Ptf81OrKz-MQvV2ii-\ xviKmGqOBnqcAglK_l1OQGbwBa2e1ZlCqJpo2wwtaWzO80KOnKjssuHhidEyjwJArr5a\ 8QppITZvKyVrbIWydFhznpD-\ KeqPKQUM8NhlkqI02PE9TCTmBGa_lYkLbLc5GPUJ1WooDYzG21_Okbg9kJDAnK6BqFeG\ IGEmsqVDBPO4zc9tNVm61HCycG9qTgjqN7z-\ 8rzB6pqCJT0hygSfCPi6LmHswsiOt9gWPxTgtTQGvQWir-\ htv7LRMC7aM0QDhyJVfM4z3mpx1aJn7cfPgpV1Zx3SEycfHaXYHrIsQjgKA6nFTgtBD-\ iA26967TUHKCL6RyJ_nV6Uw60eMRK1GX8YTtqst6WjGN6m9imXQL3fHwER7hg-\ 9m6yyWGojunqmlYe758kC4WrkfGjigR486-GFGwIeZ-\ NaZ39cqAn0tRHySn_P6vtTLRTDwz6y_qARuEERKOIAQx340FDzRXlAqezRjW_7AUOlex\ Prabel, et al. Expires 11 April 2027 [Page 26] Internet-Draft JOSE/COSE Composite Signatures October 2026 OpJCzMDiimM3ChDKKUvf3WHejoDCNKdkxwyawOlg__4Lyy_pS4e_mIhMmHL2ALslYYAc\ IWDk2cb_XLy8KsX9nLU3Wa2swYwUJRsUlHaTBFtOL95xBVUJ-\ jMnO0oBKGTlCX1EZ6Hr90cGOJtGj0ngAbuZWJ89vCfyu14o7XbyJMJnbwsRDyJcVTVRk\ HamSdARqd5O-\ S6dNzEICSYxmBCkypBxpM4Mrv_sE4ZWwhNb8a8SOL5vr4MssTRJF_g8fwOj2rK_gLjUs\ h1Ui9qd9si5UIMaXkBvmijGMbu07cVPjsCfyV52uc5wiOCWPvKGiSnf9_jj0d7fY4m2P\ 9S1C5sPc4PC2UueRHgv-H00ZJay3Pt7az1MY6B3uMMFiUc78-\ k2pl4y1lVJNciEhwhQdm_dN2uU-\ WwNmfR_XhxiAk4zib_PIA6JhrzUb5zoSapcVUymMP4a8QUp3vb455rHvWV_V0wMY2-\ wni1rgscMTQsxrEEI3p_pAx1nojzuwc8ixkf7xBcGo3Rqrwxf6NwLa8ZTEl1KA2NMLUM\ UIN_yRAqBZ5OUKqu139qHTROOw48Eu6cBouWLAkkaVVECS7VvnyS259OYMxc4Ut0HHRa\ tE16BTIg6dFbKEiZE4kHtvm-bWNut6M7jRAF9NP-\ i50JBT5e9Rx0wxU5OFfS9lEqMvwdzdrrUdyC9M3ZLgDxK46gFbauphmSnW5pUUzN3gSD\ IJntpwO52G6QB06JJZQHwzwu2AFyLXlc4c3Be10eLVuV_oe02r5I9Zwc3SswMwPce3XT\ OzBq9P6TQYzSYc8LUQEyNPaeNrvMshZYTrYuABUOWXuWGdXQ3AA-\ hu8VeeRmBg07qA7_PZJ1l3IFS3V1CMfAPtRIdn0YG-\ JmbtKATdKb_766CdX7ccs8uOyTQSZQGDDWJGMeiRpUOOLP2bntTww3b_3xhbn77cj957\ -\ Dh95Uv_Y74MOslxI4rrEnt1R4RHOU79GTPkeV7UVRx0_5_uDad8BkFselvogGuPHLa2G\ OBRhv90OeXM6ePJ9wFBZQiLu9KEhvpR9ojGelrbhTCIAxalJ-\ eRmIvH6M5th5mSRvG8WkS5nGk0rlwYwM6ery-\ ULL3im_iBYcu9gHf1V4DcoPZ97oDcyWpxd9n9daaL0uYsCZt29AZu1rmATwUKMtQlr2J\ BETA-XKA4zHg03m7LP4bqciXiv4rQW-vvbtVUVE4o9-6qQEHn-\ tyUhxeruOzsFnRhRu0KzX77d1ywqnZ8FEwUkcr2mb6USXnYKwttkkGTpmJ-\ 07etU35rw30hlUK8pAwh-\ 3irDBvv7gBxt_P8Xw63NJimclQdhHMkaHOOU4ZtSsJ4A3x1cgLjR-0RhcdTpow8-\ pHSl5n81IgEwZc8kDcVtKKmjONh5Sjc05MErnZkSHUlVc0KewUo53ZbVmX2YW0CfQwRc\ a9dyz0zEuGa4WXIPma_QXlpQrumFJsfpYBsyUsXzOs4ZThy-yv1UZQyHNPB_Jtk-\ 2vKMyoyzxEczjXMBcb2mPGXX2UxNEsTuTyO5EB9EMaZoReodXPQ33BXXZRwFlCsEmTt7\ BXglUgnGgx4IdTE-\ ZMnohGnh7IRrwdj1vsU8z8Gf7pcucxuLgb6gCtNa9Ou93VipHkMtP2cbQaUlvDuekzTq\ a4Ha2ddDz4Ce-\ QlJw2sKZolnDKWeHnCOiLrXhKX4VXfaJyx5Lnz5_KKpZf4Aumf4cC_Dz2FW9OfuWLne6\ 2vllyet4obwlwZzQrCIPzoMMxBBkRbk7Q8H2omROIdNGSG8HPLoVaP1mCwQtOrv8yjE4\ RpoYZp0rt3zjahuDDsDbZioak8iv0kX8Z5PlObuNW3eaoTR6BsGdoV5IYW7EbNIlqteS\ 3jNqykFa4qoEXUuIH_PqFvugULnlmZfe9bkP_9wKC1T_8Cxt_2iHG-CSKgKM1pmnX1Ty\ -fgcvuu1-\ bHYv34WoBwftT5lPqZoxTY5hdfmuZLv1kbjIu1qtvDHhfvwIce3nmmb5i6ShvFWWGEoE\ FyUmNTc8P1BVdH-\ Wq7PO8PT3Fxs6Wn6Akaexsr7J3PAPPFZjeJShprLX5foCDyY6O0ZWWGhpb3SMk7LS2d3\ r7_EAAAAAAAAAAAAAAAAAABMhLUIwRQIhAOjAr07oPDkapBoyd9oaab3piy4o218uQ8H\ SFCgo51RLAiATGS0lTRzTYsDhvErZz-OVmCZRkqM126jeC_-17Mywrg", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e44517452564d794e5459694c43\ 4a72615751694f694a69536a68685154646153584e4957553548596a5248566d464a\ 654856776555684d62555a4f64565578616c526f654846425745737755326c76496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ Prabel, et al. Expires 11 April 2027 [Page 27] Internet-Draft JOSE/COSE Composite Signatures October 2026 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534134342d45434453412d503235362d53484132353600ba96\ 70882b8315b4c583eafaeb079e0488fc557aba239ba5f9f562fea63fee52", "raw_composite_signature": "\ 9f8946f6a92244c92d46907050ed94fc6e663fbb64d557fb9cd5ffd0e5f7f7c3c393\ 3d309aa1e0a8ba1d5eb544984ae8703900b52bac18e10af8c44874fee657feafcb8b\ 235dffd4ddc6f20e24eef1ff63d768cfc63143eedb31fbe2dde632e2682704d7bba2\ 69c4bfc348d068e840ebc9f3f44b79535e907c334b94ff64d6928bbb030510ca09f3\ 278d388cef9aedc0dda66d0fadfef20557de33469e0c680dc4b192b0dd788335afa3\ 66bef6defd925a2217183c09b239bb6617d51b4a6d52a8bee560187b90e9cadbaf03\ 3a3e1c1bde749ca8db4bce1f45fca665ffb26f54a5736e033898f9e0f19ee8a1f9c1\ d724522fa8d8cdd68e603d572c0890c3a9288ce2a8f0b48477ba45cd95eae43d7395\ e0741a6d4f10ea93c47fbb9964e7585d2079360b9a5dfd59d910813d916ca6e0c7af\ 70b710903e8a2c0f8a9039aaa083a22d003dc33cbe0b61154f05c52a4582ec804d28\ 60571d735503d5e635d71336ba0ced1455bded8c8ccf4ce6e102425f25e86e5173dc\ ec724f4fba271145cd3deffd8be9f3d0fc2a0767e30af62bb47f4fb9b29008eb4662\ 90aaa9ebca558b10c5850f24e7d31bcbb31335f90418b5b3004d17409ae9cc9f3f7f\ 4211b56093ca4b6fab0a0fb5ff353ab2b3f8c42f5768a2fb1be22a61aa3819ea7008\ 252bf97539019bc016b67b56650aa269a36c30b5a5b33bcd0a3a72a3b2cb87862744\ ca3c0902baf96bc429a484d9bcac95adb216c9d161ce7a43f8a7aa3ca41433c36196\ 4a88d363c4f5309398119afe56242db2dce463d42755a8a036331b6d7f3a46e0f642\ 430272ba06a15e1881849aca950c13cee3373db4d566eb51c2c9c1bda93823a8def3\ fbcaf307aa6a0894f48728127c23e2e8b987b30b223adf6058fc5382d4d01af4168a\ bfa1b6fecb44c0bb68cd100e1c8955f338cf79a9c756899fb71f3e0a55d59c77484c\ 9c7c7697607ac8b108e0280ea715382d043fa2036ebdebb4d41ca08be91c89fe757a\ 530eb478c44ad465fc613b6ab2de968c637a9bd8a65d02f77c7c0447b860fbd9bacb\ 2586a23ba7aa69587bbe7c902e16ae47c68e2811e3cebe1851b021e67e35a677f5ca\ 809f4b511f24a7fcfeafb532d14c3c33eb2fea011b8411128e200431df8d050f3457\ 940a9ecd18d6ffb0143a57b13a9242ccc0e28a63370a10ca294bdfdd61de8e80c234\ a764c70c9ac0e960fffe0bcb2fe94b87bf98884c9872f600bb2561801c2160e4d9c6\ ff5cbcbc2ac5fd9cb53759adacc18c14251b14947693045b4e2fde71055509fa3327\ 3b4a012864e5097d4467a1ebf74706389b468f49e001bb99589f3dbc27f2bb5e28ed\ 76f224c2676f0b110f225c5535519076a649d011a9de4ef92e9d3731080926319810\ a4ca9071a4ce0caeffec138656c2135bf1af1238be6faf832cb1344917f83c7f03a3\ dab2bf80b8d4b21d548bda9df6c8b950831a5e406f9a28c631bbb4edc54f8ec09fc9\ 5e76b9ce7088e0963ef2868929dff7f8e3d1dedf6389b63fd4b50b9b0f7383c2d94b\ 9e44782ff87d346496b2dcfb7b6b3d4c63a077b8c30589473bf3e936a65e32d65549\ 35c884870850766fdd376b94f96c0d99f47f5e1c62024e3389bfcf200e8986bcd46f\ 9ce849aa5c554ca630fe1af10529def6f8e79ac7bd657f574c0c636fb09e2d6b82c7\ 0c4d0b31ac4108de9fe9031d67a23ceec1cf22c647fbc41706a3746aaf0c5fe8dc0b\ 6bc653125d4a03634c2d431420dff2440a816793942aabb5dfda874d138ec38f04bb\ a701a2e58b02491a5551024bb56f9f24b6e7d39833173852dd071d16ad135e814c88\ 3a7456ca122644e241edbe6f9b58dbade8cee344017d34ffa2e742414f97bd471d30\ c54e4e15f4bd944a8cbf077376bad47720bd33764b803c4ae3a8056daba98664a75b\ 9a545333778120c8267b69c0ee761ba401d3a2496501f0cf0bb6005c8b5e57387370\ 5ed7478b56e57fa1ed36af923d6707374acc0cc0f71edd74cecc1abd3fa4d0633498\ Prabel, et al. Expires 11 April 2027 [Page 28] Internet-Draft JOSE/COSE Composite Signatures October 2026 73c2d4404c8d3da78daef32c859613ad8b800543965ee586757437000fa1bbc55e79\ 1981834eea03bfcf649d65dc8152dd5d4231f00fb5121d9f4606f8999bb4a01374a6\ ffefae82757edc72cf2e3b24d04994060c358918c7a246950e38b3f66e7b53c30ddb\ ff7c616e7efb723f79efe0e1f7952ffd8ef830eb25c48e2bac49edd51e111ce53bf4\ 64cf91e57b515471d3fe7fb8369df01905b1e96fa201ae3c72dad86381461bfdd0e7\ 9733a78f27dc050594222eef4a121be947da2319e96b6e14c2200c5a949f9e46622f\ 1fa339b61e66491bc6f16912e671a4d2b97063033a7abcbe50b2f78a6fe205872ef6\ 01dfd55e037283d9f7ba037325a9c5df67f5d69a2f4b98b0266ddbd019bb5ae6013c\ 1428cb5096bd890444c0f97280e331e0d379bb2cfe1ba9c8978afe2b416fafbdbb55\ 515138a3dfbaa901079feb72521c5eaee3b3b059d1851bb42b35fbeddd72c2a9d9f0\ 513052472bda66fa5125e760ac2db649064e9989fb4edeb54df9af0df486550af290\ 3087ede2ac306fbfb801c6dfcff17c3adcd26299c9507611cc91a1ce394e19b52b09\ e00df1d5c80b8d1fb446171d4e9a30f3ea474a5e67f3522013065cf240dc56d28a9a\ 338d8794a3734e4c12b9d99121d495573429ec14a39dd96d5997d985b409f43045c6\ bd772cf4cc4b866b859720f99afd05e5a50aee98526c7e9601b3252c5f33ace194e1\ cbecafd54650c8734f07f26d93edaf28cca8cb3c447338d730171bda63c65d7d94c4\ d12c4ee4f23b9101f4431a66845ea1d5cf437dc15d7651c05942b04993b7b0578255\ 209c6831e0875313e64c9e88469e1ec846bc1d8f5bec53ccfc19fee972e731b8b81b\ ea00ad35af4ebbddd58a91e432d3f671b41a525bc3b9e9334ea6b81dad9d743cf809\ ef90949c36b0a6689670ca59e1e708e88bad784a5f85577da272c792e7cf9fca2a96\ 5fe00ba67f8702fc3cf6156f4e7ee58b9deeb6be59727ade286f097067342b0883f3\ a0c3310419116e4ed0f07da899138874d1921bc1cf2e855a3f5982c10b4eaeff328c\ 4e11a68619a74aeddf38da86e0c3b036d98a86a4f22bf4917f19e4f94e6ee356dde6\ a84d1e81b067685792185bb11b34896ab5e4b78cdab29056b8aa811752e207fcfa85\ bee8142e796665f7bd6e43fff70282d53ffc0b1b7fda21c6f8248a80a335a669d7d5\ 3cbe7e072fbaed7e6c762fdf85a80707ed4f994fa99a314d8e6175f9ae64bbf591b8\ c8bb5aadbc31e17efc0871ede79a66f98ba4a1bc5596184a0417252635373c3f5055\ 747f96abb3cef0f4f7171b3a5a7e8091a7b1b2bec9dcf00f3c56637894a1a6b2d7e5\ fa020f263a3b46565868696f748c93b2d2d9ddebeff1000000000000000000000000\ 000013212d423045022100e8c0af4ee83c391aa41a3277da1a69bde98b2e28db5f2e\ 43c1d2142828e7544b022013192d254d1cd362c0e1bc4ad9cfe39598265192a335db\ a8de0bffb5ecccb0ae", "raw_composite_public_key": "\ ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca0198131c44\ f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde53b46f34\ 482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c50498e1717b7c75\ 8b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5cd8ded92a0c3fa15\ 58810f12c7050a367708d196cd24e5af974904aed8e4ce8872e8696b0b7bca50e452\ cd7d30ea9a4adac0311d672c6bde8496240b07431463708895cd9bafc31632d73976\ 49388fdafcbf7d305a3de9a495eca7433a8f83ba0f0b25c413c6e39c96eb7d691b34\ d37ce37f1eead1cf217e25ef34eecf3f7c60f84b8edfdde8405d4f832576c61ef98e\ 0a2f28da187700953924f686b94614705bcf53d33fedd4348edddbdf28b5065e1f20\ 775043e85cf931f829179363a1a7e7404a838ec00086b0976386fe637c98244757e3\ f769ddd4467471bfad670f9a05f8246ee50a7b1eaf87fc4069c3ae2aa20332581177\ 92f0bcd49e083fd1bc7496abff29cc94e4868b21214ed316525399a610fbdd4a80e7\ c80715f29578e2a84bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b537\ 6b5b655979984a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5\ c0f50ea4bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d\ Prabel, et al. Expires 11 April 2027 [Page 29] Internet-Draft JOSE/COSE Composite Signatures October 2026 430fb78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950\ 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130a48f\ d925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f23094a3cd\ 761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722945775f264e1\ b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92a0d4c4ed62326e50\ 24d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e7181bd3b459450b451a5153\ 9a715c21d67dd330eb5970db00d9edbfb2822b036fa13bafeb86d8dc78866e3f8d43\ e53d78cca5595a6faf886b5dc112f1cf4adcfa875800d90b48883af97316fe150687\ 3fc157e570eacbfd222868d14234101966afb6bf9940829253a953ada89fc756b6a8\ 49f70acb9838e69faa50bba75e3e89c2adb57e86d088ab9b04a28e670709172243ec\ 5e0008a5ceaf3f8722f487302596ffd755ad1b82a49c34b3469515b46aa290cd86ee\ 38ea7a9be3f103610335b531cca333ddfe32b14510f4b07ef95fc6684e8c454a92c1\ 0dbb5d59c7a7c63fb305fe881967d99e669eb632840582560bb403431d40f75a4954\ 908482278292821f4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28\ e8e6a4b4622650cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3\ 563632c521f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c1\ 16389421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642\ 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb00e0\ 25d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d203eba2bb\ aef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242ef8d6cc24610a\ 1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa08897083daa2ebb1\ 775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b645b1108f0d65fec9378\ 9c053743ca14fd63d05e98b652df2b9c2ff9ce05f1940703ffb273f80e0e2732eca9\ 960d981b4cfd3b7bb8045b3c3830546b9dd8db0d046b17d1f2e12c4247f8bce6e563\ a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e\ 162bce33576b315ececbb6406837bf51f5" } Figure 1: ML-DSA-44-ES256 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "eddsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "5ETztyaAQkvflhmjJ6mtdwlWEb3Nr4ymcDpN8eXQ8h4", "kty": "AKP", "alg": "ML-DSA-44-Ed25519", "pub": "unH59k4RuutY-\ pxvu24U5h8YZD2rSVtHU5qRZsoBmBMcRPgmu9VuNOVdteXi1zNIXjnqJg_GAAxepLqA0\ 0Vc3lO0bzRIKu39VFD8Lhuk8l0V-cFEJC-\ zm7UihxiQMMUEmOFxe3x1ixkKZ0jqmqP3rKryx8tSbtcXyfea64QhT6XNje2SoMP6FVi\ BDxLHBQo2dwjRls0k5a-\ XSQSu2OTOiHLoaWsLe8pQ5FLNfTDqmkrawDEdZyxr3oSWJAsHQxRjcIiVzZuvwxYy1zl\ 2STiP2vy_fTBaPemkleynQzqPg7oPCyXEE8bjnJbrfWkbNNN8438e6tHPIX4l7zTuzz9\ Prabel, et al. Expires 11 April 2027 [Page 30] Internet-Draft JOSE/COSE Composite Signatures October 2026 8YPhLjt_d6EBdT4MldsYe-\ Y4KLyjaGHcAlTkk9oa5RhRwW89T0z_t1DSO3dvfKLUGXh8gd1BD6Fz5MfgpF5NjoafnQ\ EqDjsAAhrCXY4b-\ Y3yYJEdX4_dp3dRGdHG_rWcPmgX4JG7lCnser4f8QGnDriqiAzJYEXeS8LzUngg_0bx0\ lqv_KcyU5IaLISFO0xZSU5mmEPvdSoDnyAcV8pV44qhLtAvd29n0ehG259oRihtljTWe\ iu9V60a1N2tbZVl5mEqSK-\ 6_xZvNYA1TCdzNctvweH24unV7U3wer9XA9Q6kvJWDVJ4oKaQsKMrCSMlteBJMRxWbGK\ 7ddUq6F7GdQw-3j2M-qdJvVKm9UPjY9rc1lPgol25-oJxTu7nxGlbJUH-\ 4m5pevAN6NyZ6lfhbjWTKlxkrEKZvQXs_Yf6cpXEwpI_ZJeriq1UC1XHIpRkDwdOY9MH\ 3an4RdDl2r9vGl_IwlKPNdh_5aF3jLgn7PCit1FNJAwC8fIncAXgAlgcXIpRXdfJk4bB\ iO89GGccSyDh2EgXYdpG3XvNgGWy7npuSoNTE7WIyblAk13UQuO4sdCbMIuriCdyfE73\ mvwj15xgb07RZRQtFGlFTmnFcIdZ90zDrWXDbANntv7KCKwNvoTuv64bY3HiGbj-NQ-\ U9eMylWVpvr4hrXcES8c9K3PqHWADZC0iIOvlzFv4VBoc_wVflcOrL_SIoaNFCNBAZZq\ -2v5lAgpJTqVOtqJ_HVraoSfcKy5g45p-\ qULunXj6Jwq21fobQiKubBKKOZwcJFyJD7F4ACKXOrz-\ HIvSHMCWW_9dVrRuCpJw0s0aVFbRqopDNhu446nqb4_EDYQM1tTHMozPd_jKxRRD0sH7\ 5X8ZoToxFSpLBDbtdWcenxj-\ zBf6IGWfZnmaetjKEBYJWC7QDQx1A91pJVJCEgieCkoIfTqkeQuePpIyu48g2FG3P1zj\ RF-\ kumhUTfSjo5qS0YiZQy0E1BMs6M11EvuxXRsHClLHoy5nLYI2Sj4zjVjYyxSHyPRPGGo\ 9hwB34yWxzYNtPPGiqXS_dNCpi_zRZwRY4lCGrQ-\ hYTEWIK1Dm5OlttvC4_eiQ1dv63NiGkLRJ5kJA3bICN0fzCDY-\ MBqnd1cWn8YVBijVkgtaoascjL9EywDgJdeHnXK0eeOvUxHHhXJVkNqcibn8O4RQdpVU\ 60TSA-uiu675ytIjcBHC6kTv8A8pmkj_4oypPd-F92YIJC741swkYQoeIHj8rE-\ ThcMUkF7KqC5VORbZTRp8HsZSqgiJcIPaouuxd1-\ 8Rxrid3fXkE6p8bkrysPYoxWEJgh7ZFsRCPDWX-yTeJwFN0PKFP1j0F6YtlLfK5wv-\ c4F8ZQHA_-\ yc_gODicy7KmWDZgbTP07e7gEWzw4MFRrndjbDTtqJ7zOtqQtYqOo0CpvDXNlMhV3HeJ\ DpjrASKGLWdop", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAA" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNDQtRWQyNTUxOSIsImtpZCI6IjVFVHp0eWFBUWt2ZmxobWpK\ Nm10ZHdsV0ViM05yNHltY0RwTjhlWFE4aDQifQ.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.L3S6eNjOhnuAx2SP0Zp8r6E8X2VNKS0iD_IZ_-nD7xpyZWiEg8-\ JLmJZuTwzTyporvUbesjsOSuKfDnquFsv0sDYoOmUSdUtz-\ pS3FrwndyWR_DPZRUODOixq0APbdE4oZPNn3Sw75KOR2wxF9MZHpZ1xkeoJvXJxpdgvW\ AQf06pUuqDbLHRH1OYXZ1qzs2X0QoPl0wlLUhDybARURIycC509igSoMaXdDig8SB0HO\ 6bKWgH0Fjz4MKRm5d18JAwi2BHh5QuRV1QN2V_sNl-lJGvS49x8b-\ 5DKEpsUa26gUSd72i7QbIBKclIFHyEtgvZjo-\ 4Ik3Rehdb5rYgNxtR6s4nVmgm2c_LaQKHPWQvI29NAijhS41djZ0LCslJ6-iMyu-\ rv0bIUiLyYEH8y_huCyx7U3AHSkp4bqk-6xsaQhZSjeiUaEo-Ub22M4x8vCUE-e-\ h3THiPGKhzRdBbHqKIOR1bdNhcNLbJL42ueUEJhjonVhC4k9Z0a65t782nrSEePAvVBE\ K25ouKOW9vCH_mZTUGEJ8708RvzlxZ_8Zi5bhTrecEB5cnWxdCNTBYQTkPzOoCJpq4xg\ Z_Z2Qa5rQIBDFArHIFvtijsu-\ Prabel, et al. Expires 11 April 2027 [Page 31] Internet-Draft JOSE/COSE Composite Signatures October 2026 yGCEbD6BPV8ThNDrslzDeVyDsYDANdUfJZ6NPPqn_5jUwKhqz1L0EtdPz9FMDPktVnQ_\ TxGsBLjawGNLzP64-gqC8A9CBsCsx9znJ1x_GNRjnRFwAVK4ZBA3U-\ FvE_SPiqX0MjeFbCpQwAH4GFef3pk6gO74AfRK_h0ZFXmEWGwv6FIIpfGL4yJC28ocQW\ 0dGNrC0EAldUGNkU6HeKvxwiG5nXxRwAghr_QO-\ YfoLHDQNTR1FOzCk6xTnW26muqFJJef0Y3nLd08uHcoWkNaaDkGWM0FHXJGJCVvLIy04\ WbUR1kV_id5rArx6u1M8L9-yFJEo77SDNo8ba4txgfxd-kvRje5a3HUhAJInOvvbUfMR\ -gW-\ 80wuTaZKjYqRY3l2Cq1mAFbTWdRJTwm04gpfRwkKldnrvOxPwf8w3r2ATolVEZ7vZGcw\ 6BJAlgC0s3vTDY9gUXZi4O8fLptafKbqE8a4Oa5a3Td-\ A0n7h5LKOEI44ZqEXI8zEtADENoFVivJvxGnEHoXKulxEagQH5R2Z4b79oG4B0HCMpT3\ GLEFCzuVlviHOXncKclnftHBJuXbm9Sn8UVgltcdn8-\ iYaYFuBBUubtC8D0uIGPu48_2BTtHZxU8A-ovZHw6itQZpt-\ X_AM8swuqOHsHr4c4TiMhfDXjA-\ sVqJLmlJ86KwB1TgooAwjTyMFXD0kKuaIK57pz3GEZ8VS5jBY_4GvXEbdGM9JOMBbaP7\ yg1sIKqb7XsKvww9_IIGWS-i3rTR4SKpuXMHWeSDYrqvyy5Onr0LZ7e2ocl-\ CWyj7hXl0wWMLU8lo4n5P7wi8mYy5MjKM_W0mqiVvh4rVipeIyfRXaBJxf3hJCUPMBDP\ BUHDvWHl1FiXjbD-N-\ srP7ZXwArDe8elbnayfcGly_y4IkeWIfD_2a5QWerOG7JNfmT5KKw3XjT_2c3Ye6EUOH\ voGMijyGivsDyo7tp_Z73G4fQRpZmkkJtDrZpbdnF94oZ_ugfMniDPNmXQdXFw3Um3ZZ\ KbRsAbu-q393lbspBIfRWcsYHAc0HCd87EI8ujLH-PmMJHq4N-\ NOCjrVDthqvFg4Kp3v6p9kay0yDbqOfGqCrHR3Q681d3e5iL9JjXf2IkfauUxEyWRKSR\ ia0E0-\ KlFZxu8_jZlb8mo5UfjmqHVFEpLa8RQwCa6qTPz5XeXSs08SsyuSRbV8Kn7oiJ7Dbs8s\ swxjWoLVpSXJH3GH_byRe28-\ nJpKffDEEnP_qH2hr0wZ08sEFg1Xv6FBQXnEfP0Zv4HlnkMYFbPh1vQuJ7Bd_IMCfn1H\ DdUNj8CLpBA10R4fnaQvNB4y0ZAYuIhddbXGP2aEd_38LrsQEI-\ MfQ7CYa6wZHGW0pBcWYdT7CWRTe-nYl5iIaWUY1oZdNa5W-\ xvdTlFjonUKLpvY0TzgViSP3asHH034y4jrg0CCxRJ-\ OMleumOrYpHCV_i0gdvQtjX8PWr2D9XChVmS6_tBjwU5Zfoivw-\ pzhtWoWa8VtIrJxd3gTNjPzdbMj9Pp2mJ11xz0HBNTOnooHePSDzccLU3VhV9mvQv-\ NnM5tuKQRK4DYat3p9YalUvcDbkQ_XQygC9pUUPq9Qq24ULiwNgT4U_WewYOUYT-\ oQzJJ5RRV6DFK8cjIxHZ0yXEKgPHxg14RGdM9miAtRuGRSdgClMTWdPWI2VIJ5U4I0ae\ NxefyIn2D2nI1__0sZs3UZCc2SIR-JrrslZGTIGrRfuskvTsfSRU-\ proiOHEOUAf0vneok67e3zXTdfimw7vBeeHPQ4aKmwB8s57_Z6yVnsP1mbEzBvixIEIB\ T2UZiKr-nLiWYR1zeMqXm8QSuT_PX7y5sce7QQD1m9cBCZbDh2GEeje3NiZ2-\ Zx_gbn_zAnPrYF-GDGhxyHd3nlDk63CPo5hsKC-gBC2t_fQTHkEmHu2EqtUlF_d3-\ N_eqoIhlf03pKTElx0rM8t6vqLoQQIbKu0Xr1ud2CqhCqZHmkddccuxlpVLh0XksjNfj\ T1shuan5Nm9zEgMgaEgOGEZTvsiRts8NLfG0k07GO3yVLZgJkVd-\ LhCkw0b9Q13nAcUvh_nAYaO-1-eb2u-Z3btPzEuMBKmcxgnnXgPY5o4YRo-\ DvpyD1vCBOwuq7aM9pCMrccav-4dXPLbq-nllTg1Seb7J-Tu-\ UEtXYVjAg8wkCHlO69amvH6EU_vYgUguMwgtvSKqLrclROnyX1H9yUXStrcJbgVHOSGX\ NIqd813Pr6topyt70Q5NQidZeNtlMxmGBOKk-zzxcI8rRy9r97kZfARqvRwa5tWcj-\ QETqlMs9v7qunVT52beMbhwUc9e_2DYsi_pecqA7edI5px-\ 1oEdCG4acAr8zNrmF1sl5Wlf-\ 3qqyrJtZJay3OhB18JfPm8HFduLiMIbeaQuZkekC6jP3fKtAzGvoUrulFiJH3Rso2Kad\ PAa4_Oyq9dgpT68xpdGxt9DIOh9NVVecTCeKVgdUoTD4IlhgBi9X3o-\ jwVm3G0eJV58lpmxyt_sAQojNzo8PVNVV2aKjLjA0dvnGBseISc2Um90jJGSpKbG09_m\ 5_8DDxAfMDRMXXSEio-t0dLn6u37AAAAAAAAAAAAAAAAAAocMEPWJ-\ Prabel, et al. Expires 11 April 2027 [Page 32] Internet-Draft JOSE/COSE Composite Signatures October 2026 y89hTR1K6ThF8y_33BiCQVCbFU3yyxLkHDq10EPu7QkZOBEDgWuExsrjwdsxRkrUhMym\ G3qs6uCiUjItUP", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e445174525751794e5455784f53\ 4973496d74705a434936496a56465648703065574642555774325a6d786f6257704b\ 4e6d31305a486473563056694d3035794e486c7459305277546a686c574645346144\ 516966512e5358516e6379426849475268626d646c636d39316379426964584e7062\ 6d567a63797767526e4a765a473873494764766157356e4947393164434235623356\ 794947527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534134342d456432353531392d53484135313200d23794746d\ 85892c086d70a49905c7e9e4012755204e01da3af1d4d17743a448ec42685a47c891\ 3bde2cf7eb4deb3e41aee03802d6bb889ebf61177aff41cbab", "raw_composite_signature": "\ 2f74ba78d8ce867b80c7648fd19a7cafa13c5f654d292d220ff219ffe9c3ef1a7265\ 688483cf892e6259b93c334f2a68aef51b7ac8ec392b8a7c39eab85b2fd2c0d8a0e9\ 9449d52dcfea52dc5af09ddc9647f0cf65150e0ce8b1ab400f6dd138a193cd9f74b0\ ef928e476c3117d3191e9675c647a826f5c9c69760bd60107f4ea952ea836cb1d11f\ 53985d9d6acecd97d10a0f974c252d4843c9b011511232702e74f62812a0c6977438\ a0f120741cee9b296807d058f3e0c2919b9775f090308b604787942e455d5037657f\ b0d97e9491af4b8f71f1bfb90ca129b146b6ea051277bda2ed06c804a7252051f212\ d82f663a3ee0893745e85d6f9ad880dc6d47ab389d59a09b673f2da40a1cf590bc8d\ bd3408a3852e357636742c2b2527afa2332bbeaefd1b21488bc98107f32fe1b82cb1\ ed4dc01d2929e1baa4fbac6c6908594a37a251a128f946f6d8ce31f2f09413e7be87\ 74c788f18a87345d05b1ea288391d5b74d85c34b6c92f8dae794109863a275610b89\ 3d6746bae6defcda7ad211e3c0bd50442b6e68b8a396f6f087fe6653506109f3bd3c\ 46fce5c59ffc662e5b853ade7040797275b174235305841390fccea02269ab8c6067\ f67641ae6b408043140ac7205bed8a3b2efb218211b0fa04f57c4e1343aec9730de5\ 720ec60300d7547c967a34f3ea9ffe635302a1ab3d4bd04b5d3f3f453033e4b559d0\ fd3c46b012e36b018d2f33fae3e82a0bc03d081b02b31f739c9d71fc63518e7445c0\ 054ae19040dd4f85bc4fd23e2a97d0c8de15b0a9430007e0615e7f7a64ea03bbe007\ d12bf8746455e61161b0bfa1482297c62f8c890b6f287105b474636b0b410095d506\ 36453a1de2afc70886e675f147002086bfd03be61fa0b1c340d4d1d453b30a4eb14e\ 75b6ea6baa14925e7f46379cb774f2e1dca1690d69a0e41963341475c9189095bcb2\ 32d3859b511d6457f89de6b02bc7abb533c2fdfb2149128efb483368f1b6b8b7181f\ c5dfa4bd18dee5adc75210092273afbdb51f311fa05bef34c2e4da64a8d8a9163797\ 60aad660056d359d4494f09b4e20a5f47090a95d9ebbcec4fc1ff30debd804e89551\ 19eef646730e812409600b4b37bd30d8f60517662e0ef1f2e9b5a7ca6ea13c6b839a\ e5add377e0349fb8792ca384238e19a845c8f3312d00310da05562bc9bf11a7107a1\ 72ae97111a8101f94766786fbf681b80741c23294f718b1050b3b9596f8873979dc2\ 9c9677ed1c126e5db9bd4a7f1456096d71d9fcfa261a605b81054b9bb42f03d2e206\ 3eee3cff6053b4767153c03ea2f647c3a8ad419a6df97fc033cb30baa387b07af873\ 84e23217c35e303eb15a892e6949f3a2b00754e0a280308d3c8c1570f490ab9a20ae\ 7ba73dc6119f154b98c163fe06bd711b74633d24e3016da3fbca0d6c20aa9bed7b0a\ bf0c3dfc8206592fa2deb4d1e122a9b9730759e48362baafcb2e4e9ebd0b67b7b6a1\ c97e096ca3ee15e5d3058c2d4f25a389f93fbc22f26632e4c8ca33f5b49aa895be1e\ 2b562a5e2327d15da049c5fde124250f3010cf0541c3bd61e5d458978db0fe37eb2b\ Prabel, et al. Expires 11 April 2027 [Page 33] Internet-Draft JOSE/COSE Composite Signatures October 2026 3fb657c00ac37bc7a56e76b27dc1a5cbfcb822479621f0ffd9ae5059eace1bb24d7e\ 64f928ac375e34ffd9cdd87ba114387be818c8a3c868afb03ca8eeda7f67bdc6e1f4\ 11a599a4909b43ad9a5b76717de2867fba07cc9e20cf3665d0757170dd49b765929b\ 46c01bbbeab7f7795bb290487d159cb181c07341c277cec423cba32c7f8f98c247ab\ 837e34e0a3ad50ed86abc58382a9defea9f646b2d320dba8e7c6a82ac747743af357\ 777b988bf498d77f62247dab94c44c9644a49189ad04d3e2a5159c6ef3f8d995bf26\ a3951f8e6a875451292daf1143009aeaa4cfcf95de5d2b34f12b32b9245b57c2a7ee\ 8889ec36ecf2cb30c635a82d5a525c91f7187fdbc917b6f3e9c9a4a7df0c41273ffa\ 87da1af4c19d3cb04160d57bfa1414179c47cfd19bf81e59e431815b3e1d6f42e27b\ 05dfc83027e7d470dd50d8fc08ba41035d11e1f9da42f341e32d19018b8885d75b5c\ 63f668477fdfc2ebb10108f8c7d0ec261aeb0647196d2905c598753ec25914defa76\ 25e6221a594635a1974d6b95bec6f7539458e89d428ba6f6344f38158923f76ac1c7\ d37e32e23ae0d020b1449f8e3257ae98ead8a47095fe2d2076f42d8d7f0f5abd83f5\ 70a15664bafed063c14e597e88afc3ea7386d5a859af15b48ac9c5dde04cd8cfcdd6\ cc8fd3e9da6275d71cf41c13533a7a281de3d20f371c2d4dd5855f66bd0bfe367339\ b6e29044ae0361ab77a7d61a954bdc0db910fd7432802f695143eaf50ab6e142e2c0\ d813e14fd67b060e5184fea10cc927945157a0c52bc7232311d9d325c42a03c7c60d\ 7844674cf66880b51b864527600a531359d3d623654827953823469e37179fc889f6\ 0f69c8d7fff4b19b3751909cd92211f89aebb256464c81ab45fbac92f4ec7d2454fa\ 9ae888e1c439401fd2f9dea24ebb7b7cd74dd7e29b0eef05e7873d0e1a2a6c01f2ce\ 7bfd9eb2567b0fd666c4cc1be2c48108053d946622abfa72e2598475cde32a5e6f10\ 4ae4ff3d7ef2e6c71eed0403d66f5c04265b0e1d8611e8dedcd899dbe671fe06e7ff\ 30273eb605f860c6871c877779e50e4eb708fa3986c282fa0042dadfdf4131e41261\ eed84aad52517f777f8dfdeaa822195fd37a4a4c4971d2b33cb7abea2e841021b2ae\ d17af5b9dd82aa10aa6479a475d71cbb196954b8745e4b2335f8d3d6c86e6a7e4d9b\ dcc480c81a1203861194efb2246db3c34b7c6d24d3b18edf254b66026455df8b8429\ 30d1bf50d779c0714be1fe701868efb5f9e6f6bbe6776ed3f312e3012a67318279d7\ 80f639a38611a3e0efa720f5bc204ec2eabb68cf6908cadc71abfee1d5cf2dbabe9e\ 595383549e6fb27e4eef9412d5d8563020f309021e53baf5a9af1fa114fef620520b\ 8cc20b6f48aa8badc9513a7c97d47f725174adadc25b8151ce4865cd22a77cd773eb\ eada29cadef443935089d65e36d94cc6618138a93ecf3c5c23cad1cbdafdee465f01\ 1aaf4706b9b56723f90113aa532cf6feeaba7553e766de31b87051cf5eff60d8b22f\ e979ca80ede748e69c7ed6811d086e1a700afcccdae6175b25e5695ffb7aaacab26d\ 6496b2dce841d7c25f3e6f0715db8b88c21b79a42e6647a40ba8cfddf2ad0331afa1\ 4aee9458891f746ca3629a74f01ae3f3b2abd760a53ebcc69746c6df4320e87d3555\ 5e71309e29581d5284c3e089618018bd5f7a3e8f0566dc6d1e255e7c9699b1cadfec\ 010a23373a3c3d535557668a8cb8c0d1dbe7181b1e212736526f748c9192a4a6c6d3\ dfe6e7ff030f101f30344c5d74848a8fadd1d2e7eaedfb0000000000000000000000\ 00000a1c3043d627ecbcf614d1d4ae93845f32ff7dc188241509b154df2cb12e41c3\ ab5d043eeed0919381103816b84c6cae3c1db31464ad484cca61b7aaceae0a252322\ d50f", "raw_composite_public_key": "\ ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca0198131c44\ f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde53b46f34\ 482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c50498e1717b7c75\ 8b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5cd8ded92a0c3fa15\ 58810f12c7050a367708d196cd24e5af974904aed8e4ce8872e8696b0b7bca50e452\ cd7d30ea9a4adac0311d672c6bde8496240b07431463708895cd9bafc31632d73976\ Prabel, et al. Expires 11 April 2027 [Page 34] Internet-Draft JOSE/COSE Composite Signatures October 2026 49388fdafcbf7d305a3de9a495eca7433a8f83ba0f0b25c413c6e39c96eb7d691b34\ d37ce37f1eead1cf217e25ef34eecf3f7c60f84b8edfdde8405d4f832576c61ef98e\ 0a2f28da187700953924f686b94614705bcf53d33fedd4348edddbdf28b5065e1f20\ 775043e85cf931f829179363a1a7e7404a838ec00086b0976386fe637c98244757e3\ f769ddd4467471bfad670f9a05f8246ee50a7b1eaf87fc4069c3ae2aa20332581177\ 92f0bcd49e083fd1bc7496abff29cc94e4868b21214ed316525399a610fbdd4a80e7\ c80715f29578e2a84bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b537\ 6b5b655979984a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5\ c0f50ea4bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d\ 430fb78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950\ 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130a48f\ d925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f23094a3cd\ 761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722945775f264e1\ b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92a0d4c4ed62326e50\ 24d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e7181bd3b459450b451a5153\ 9a715c21d67dd330eb5970db00d9edbfb2822b036fa13bafeb86d8dc78866e3f8d43\ e53d78cca5595a6faf886b5dc112f1cf4adcfa875800d90b48883af97316fe150687\ 3fc157e570eacbfd222868d14234101966afb6bf9940829253a953ada89fc756b6a8\ 49f70acb9838e69faa50bba75e3e89c2adb57e86d088ab9b04a28e670709172243ec\ 5e0008a5ceaf3f8722f487302596ffd755ad1b82a49c34b3469515b46aa290cd86ee\ 38ea7a9be3f103610335b531cca333ddfe32b14510f4b07ef95fc6684e8c454a92c1\ 0dbb5d59c7a7c63fb305fe881967d99e669eb632840582560bb403431d40f75a4954\ 908482278292821f4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28\ e8e6a4b4622650cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3\ 563632c521f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c1\ 16389421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642\ 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb00e0\ 25d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d203eba2bb\ aef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242ef8d6cc24610a\ 1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa08897083daa2ebb1\ 775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b645b1108f0d65fec9378\ 9c053743ca14fd63d05e98b652df2b9c2ff9ce05f1940703ffb273f80e0e2732eca9\ 960d981b4cfd3b7bb8045b3c3830546b9dd8db0d3b6a27bcceb6a42d62a3a8d02a6f\ 0d73653215771de243a63ac048a18b59da29" } Figure 2: ML-DSA-44-Ed25519 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "ecdsa_d": "\ 0000000000000000000000000000000000000000000000000000000000000001", "jwk": { "kid": "RKckYpZD-Fj494Q4vaeNmq6c3mqg_EhLkiUOo5mhNYE", "kty": "AKP", Prabel, et al. Expires 11 April 2027 [Page 35] Internet-Draft JOSE/COSE Composite Signatures October 2026 "alg": "ML-DSA-65-ES256", "pub": "\ QksvJn5Y1bO0TXGs_Gpla7JpUNV8YdsciAvPof6rRD8JQquL2619cIq7w1YHj22ZolIn\ H-YsdAkeuUr7m5JkxQqIjg3-2AzV-\ yy9NmfmDVOevkSTAhnNT67RXbs0VaJkgCufSbzkLudVD-_91GQqVa3mk4aKRgy-\ wD9PyZpOMLzP-\ opHXlOVOWZ067galJN1h4gPbb0nvxxPWp7kPN2LDlOzt_tJxzrfvC1PjFQwNSDCm_l-\ Ju5X2zQtlXyJOTZSLQlCtB2C7jdyoAVwrftUXBFDkisElvgmoKlwBks23fU0tfjhwc0L\ VWXqhGtFQx8GGBQ-\ zol3e7P2EXmtIClf4KbgYq5u7Lwu848qwaItyTt7EmM2IjxVth64wHlVQruy3GXnIurc\ aGb_qWg764qZmteoPl5uAWwuTDX292Sa071S7GfsHFxue5lydxIYvpVUu6dyfwuExEub\ CovYMfz_LJd5zNTKMMatdbBJg-Qd6JPuXznqc1UYC3CccEXCLTOgg_auB6EUdG0b_cy-\ 5bkEOHm7Wi4SDipGNig_ShzUkkot5qSqPZnd2I9IqqToi_0ep2nYLBB3ny3teW21Qpcc\ oom3aGPt5Zl7fpzhg7Q8zsJ4sQ2SuHRCzgQ1uxYlFx21VUtHAjnFDSoMOkGyo4gH2wcL\ R7-z59EPPNl51pljyNefgCnMSkjrBPyz1wiET-\ uqi23f8Bq2TVk1jmUFxOwdfLsU7SIS30WOzvwD_gMDexUFpMlEQyL1-\ Y36kaTLjEWGCi2tx1FTULttQx5JpryPW6lW5oKw5RMyGpfRliYCiRyQePYqipZGoxOHp\ vCWhCZIN4meDY7H0RxWWQEpiyCzRQgWkOtMViwao6Jb7wZWbLNMebwLJeQJXWunk-\ gTEeQaMykVJobwDUiX-E_E7fSybVRTZXherY1jrvZKh8C5Gi5VADg5Vs319uN8-\ dVILRyOOlvjjxclmsRcn6HEvTvxd9MS7lKm2gI8BXIqhzgnTdqNGwTpmDHPV8hygqJWx\ WXCltBSSgY6OkGkioMAmXjZjYq_Ya9o6AE7WU_hUdm-\ wZmQLExwtJWEIBdDxrUxA9L9JL3weNyQtaGItPjXcheZiNBBbJTUxXwIYLnXtT1M0mHz\ MqGFFWXVKsN_AIdHyv4yDzY9m-tuQRfbQ_2K7r5eDOL1Tj8DZ-\ s8yXG74MMBqOUvlglJNgNcbuPKLRPbSDoN0E3BYkfeDgiUrXy34a5-vU-\ PkAWCsgAh539wJUUBxqw90V1Du7eTHFKDJEMSFYwusbPhEX4ZTwoeTHg--\ 8Ysn4HCFWLQ00pfBCteqvMvMflcWwVfTnogcPsJb1bEFVSc3nTzhk6Ln8J-\ MplyS0Y5mGBEtVko_WlyeFsoDCWj4hqrgU7L-\ ww8vsCRSQfskH8lodiLzj0xmugiKjWUXbYq98x1zSnB9dmPy5P3UNwwMQdpebtR38N9I\ -jup4Bzok0-JsaOe7EORZ8ld7kAgDWa4K7BAxjc2eD540Apwxs-\ VLGFVkXbQgYYeDNG2tW1Xt20-XezJqZVUl6-\ IZXsqc7DijwNInO3fT5o8ZAcLKUUlzSlEXe8sIlHaxjLoJ-\ oubRtlKKUbzWOHeyxmYZSxYqQhSQj4sheedGXJEYWJ-Y5DRqB-xpy-\ cftxL10fdXIUhe1hWFBAoQU3b5xRY8KCytYnfLhsFF4O49xhnax3vuumLpJbCqTXpLur\ eoKg5PvWfnpFPB0P-\ ZWQN35mBzqbb3ZV6U0rU55DvyXTuiZOK2Z1TxbaAd1OZMmg0cpuzewgueV-\ Nh_UubIqNto5RXCd7vqgqdXDUKAiWyYegYIkD4wbGMqIjxV8Oo2ggOcSj9UQPS1rD5u0\ rLckAzsxyty9Q5JsmKa0w8Eh7Jwe4Yob4xPVWWbJfm916avRgzDxXo5gmY7txdGFYHhl\ olJKdhBU9h6f0gtKEtbiUzhp4IWsqAR8riHQs7lLVEz6P537a4kL1r5FjfDf_yjJDBQm\ y_kdWMDqaNln-MlKK8eENjUO-qZGy0Ql4bMZtNbHXjfJUuSzapA-\ RqYfkqSLKgQUOW8NTDKhUk73yqCU3TQqDEKaGAoTsPscyMm7u_8QrvUK8kbc-\ XnxrWZ0BZJBjdinzh2w-QvjbWQ5mqFp4OMgY94__tIU8vvCUNJiYA1RdyodlfPfH5-\ avpxOCvBD6C7ZIDyQ-\ 6huGEQEAb6DP8ydWIZQ8xY603DoEKKXkJWcP6CJo3nHFEdj_vcEbDQ-\ WESDpcQFa1fRIiGuALj-\ sEWcjGdSHyE8QATOcuWl4TLVzRPKAf4tCXx1zyvhJbXQu0jf0yfzVpOhPun4n-\ xqK4SxPBCeuJOkQ2VG9jDXWH4pnjbAcrqjveJqVti7huMXTLGuqU2uoihBw6mGqu_WSl\ OP2-XTEyRyvxbv2t-z9V6GPt1V9ceBukA0oGwtJqgD-\ q7NXFK8zhw7desI5PZMXf3nuVgbJ3xdvAlzkmm5f9RoqQS6_hqwPQEcclq1MEZ3yML5h\ Prabel, et al. Expires 11 April 2027 [Page 36] Internet-Draft JOSE/COSE Composite Signatures October 2026 c99TDtZWy9gGkhR0Hs3QJxxgP7bEqGFP-\ HjTPnJsrGaT6TjKP7qCxJlcFKLUr5AU_kxMULeUysWWtSGJ9mpxBvsyW1JuoEaxfR8uE\ sQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpZP40Li_hp_m47n60p8D54WK84zV2sxXs7\ LtkBoN79R9Q", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMQIBAQQgAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAGgCgYIKoZIzj0DAQc" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNjUtRVMyNTYiLCJraWQiOiJSS2NrWXBaRC1GajQ5NFE0dmFl\ Tm1xNmMzbXFnX0VoTGtpVU9vNW1oTllFIn0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.\ GzphtwRHY9KgNF0UqxtQAOwpz2g9EAzf469GH_RPhCcHtYVOjmAAiGh_KvWorExxhXNC\ acrIjS_YSNGpMJuabMMDDCLDD2AHcRkcrdr65_KohNi_RZYlVZa5K-\ 620DyWmPdtGGrM9q8QZyv_Jxtujzl5RRjMZgk3JPEVn1gw5Ep21WYYiw84LQ-\ ZAJWkfNTaz8pRFDHN0vOtg8vuuqpsjXuB5qdXlxZRn_O4QAReU374i2LqjYttYqomSMX\ hqz-\ VuHS2ua5XMvtdCRB13O3ag_gglbMDqfSINcHrRB65SjzGHv9LdOzvlTlAVQoLLKh3tCa\ vaJxnrLLtbY9SjCAp24IlaciluqM3g5k6NAW6s-XAhXwBKa5jAILcNqq3z9pSG3ZaT9-\ RtixIdJ6E4BVNdaow4MKUvIytQ4xwlWJkZXZOolHcOYbXrRzAEou63CyfUyDljKdlhms\ I4_i3UhelYr-0AmdNcWXfC1LPMMfS1tH4laI8p9XI1ZAL4ZX05Wdki8TyJzBc9-\ 7Mo7eCt-\ XCRvrwqIS_FI4Lmp0OL62XwIftpYnrqgCoV3_EwxfbGGgtutO88lczZDHm7vwwnDvMEx\ klPsHSBP_hY9IGELelTEe_yIboAQKNeuPfPJeR4WEqEyhk_qf2AlYYbAVwenVZqKUTmz\ gcIi4aWQGyISsZuSMGkYryNGf7l6SjbiQzY83l4V49zcKZ-\ ZwPafmsiSG3_Te7Cyyg9nuJmBSohvm7YyibTkHypjHVzyJPXbxDeWnm71xEEk7ulwv_m\ 7r9c7yBJ4M2b9sElnppTZ5buMpmW0ViR7Rd7b7F2xComMbzB1Df2V9klY31qd-\ 6OB1lvlRXVLnBfD0N997-Hxbz6Z2iTK9RxJFwYnR-\ oV_UsPUY0AmWduGCSbTe2NUtMNjFyLI2bsNaS9z5nJJrlysuwa2uFnCT65eUx2yi8yIQ\ qUGh_lg4cz5h9s3Dc_mdcTdGqCKqy0YHYMNqDP6eVCUjJ88QZnUzH56xdNdRUPgJyX0R\ 1fEEW2CK-\ S3pL3cJptHF8Q1KJBBhfJZz7npHw1A1p1mGwcxTvJgnK0hPpQHT5RQD8jXmwcbrHVNtO\ bH5WWHAx0llzLy1VKpjPEkDXTQqcAgCyL2HNDQNdl3h9F9yc9EGkXzu_wvDJif661o-\ JD2f3O8W8BYZvLMP3GO9zCusvtgSSF4ycc78gCLnKuTQJ41P0XeF-lGxM_k-\ lGEDI8JmFBPFYOmz2t62Q1FtKUX9QFZTnOf7G-WAuWDrIyFq-\ ie3FnBDIyH3LuV1_dBJ0OUNyz1eh_OMjTnkl8j6XI0_Kqhw2G3ysOIRjAraGaXWLcAJH\ e4xCeG_96z8faM18k0flmiM39aqoKByPoKGGg5MFjqn--\ MDFp3j8p3aEHh6EGs8ZV1AzuRT_xlE9urzByHPOTU4dzaXZtNmXuYtP-NvKZsRnG36-\ RP3vzvaK7vE4qm6YwvMxuRlZqX-\ zFnjfeN7V5HSsXRvkAvN9xjhiX1vzZHOLCzfCIR7NCz4SdAI9zmjukYMZ4RlTYRYfUbz\ o5Hya1v_5-\ C2z9Vb5ozCoMNcArckv64mEsd1E4_8bgniCZf2ryZVKKhkDUqnPPHom1YfBlf20TcLp-\ qYZRcO1Q3ebjRt_gp44TGfSlJrL_cfutXnSJ6Td5ID8noFrCC1BagB1TAOwhZamVrtHX\ L9otOpv5hc9pCdG4y-\ zoCpCRKAoir2t3lqI8muetAU1b3uicceAZHfX2ISij2_nfp1dmahBkbqO8UuYJW50K2w\ JS7DPxBg2Ms8iLAsI-JOolzDKafq-Mru79jRJIGHqlyhb9tTskKix-\ EpMsDuD3UwBFhqf-\ Prabel, et al. Expires 11 April 2027 [Page 37] Internet-Draft JOSE/COSE Composite Signatures October 2026 pnlQaHpVaMdawhhsYbwyXcgS2ckxBODmeXsUG1jvNZ_CHVI71fgG_bzUHDVJDmqQeoNU\ 6V0HY4Upx6uNHL7sY_fpt9LX4i2hfOrLjUJSXSxRMiDP31rbdHae2Fr0Z80o-\ tlcqA0JRLT1PO4l94CGDn1E3L2YJzjRBi1A6Ihy7XaAfpZPGIE_HJkXfjW_bXe1cJ1Ba\ a1h5lBz9ASyKSxxy9P0gaqa4qAz6-\ KSPwaKlGoxQpVklPj7C0eli7ohcmqe_vjodFSHG8feXbOWYki-\ n9lJyAoIj_0eCihoz1K9dr34Uj7Edb7gHXhN-tQyLQik328d_jSZJ5XsLFuIe-\ YGifdFpm39DPtWTVPh7LtM_3tGh-SiF1qVFSzXknQa82s5EEn2168-\ yxWmxgZzvUTN_TQ1CWLgjTVriQ9EiGFAcKd1Adzb7sJBzlsXgShYYzn_APQUaHtAJUC2\ OUe7W91Ub4hfmiNRy5-VOmSPiocsDS30mpeZUPxYjDJg1Jk-\ 1ZpyKLoj0dNNVSVRboKuuMUM-RXBXzJGiQJnPlucNxiZfxl_-\ HmgEM7fh3wrQztg1dM969BaG2GjDgdyyzSGXO9-0xY4TvoEMLJ1vb283LYkDVL_C0-\ nUpcSxRlkLvmW05urVhxqG_Sr162fty-\ lxrxaVfGTHrroyHkv9frx2_ultrAne75SwoLJ0tgdf4iVOQwbMaukK8LVRdxU6stYHiG\ cusUPYu-I5m6NS69kYRU4huHMUnFMZX3WoMhN-\ smzZOgPPDzS9CBK1o5st7_f9hkJcWNYHKNsXgqwq4djqqOR9nxMFap0uCntQSOYyO5dC\ qyP_osNnrkSTEEjuoa8N4xyTvZQKDVZDzLGbcWx099ZHyC--\ SauSsf26Ix6k6OkyowtXn-qoq-xLSjBoaZs_MnZTRvTJiHMmJkvMcNeDDRkhbvwzd-\ EsoVlMxP5iqYXPzo0X5wFmwOGif6gEoZdAAfsw9eP1LccOM69d18c4-\ Wh39dkwOzxXBiMwCwukKuJRDSyu0WHu_tJqjhjSs5PwF7HAiJu2o3WhtX3L_mCC9WIq_\ 6GE6__O0dXYELoye5-\ 7zmNQFSTrm6GPFb430ertDPVuvg7CZpNdysY9HnX2BrmKbZQNx5plDmitBrhmAt7xsAs\ nujR6TqPaCnxoMv8d8PYUjPRFSxEqZz8iP7vOaN_fDSkLytGowJZfmabm5DaF1wl14Zb\ PHFZWvzsLjanGlk6mNJUuLNPDKSuKvPdwua83NSR1_Xy4psMK6-\ _6AJP_vofuZ0Ctgj3KYCyxzxOKgaDU1nIL_VfzgkrOVU_VyoqTmE1HIk7qNQiJO1fJhM\ ql70IiiF9yl4O5ohA0_XMASMMpeU0jNHDNXHs8V-\ 3vlefLzu3KeiMLm7u7krWEoK8GU1rVnVhXgSqbQcCjroN3dR80wGsXL-\ m24GMFJsW4GBXw92RyPUsUTXgPgq6EMsPqJ8axYTWvyajar2S-D5fhFeYsZg-1VdXZl-\ cIBGZwBc-\ Az9LyKfdmgGM9knMWzfhoCxdJZNhMp3_1DPENeNXdmOIqvqUs83UwWyq9MQGoE91W8ef\ eR9-kyPEJ4q8R8g_HJ_QSomij6W7nsFLWYMA1xyIpy5v8H3-\ YVSgbKKoY7oGcyQClQ6HTE7RxnywFG1mPJab2IPyQuxHTe3TSe4Xbwx83dwfohnF1DyS\ NJ-m4cjRyRdcbFac0ypQ-DX5vlEn2G6ktOOMuwgm3dMr2lD_uv_1RTCgqMJkT-\ HGwVpU91DcI4y9z2X8LWrpJCbTdbtgxoWEwlRecW13rUXhc6iYEzRu8cbRpuA43LD-\ BoU-RpGpzoZ-E4OG8wy9l9VSBvYFxEk2bTVdCpAJdz4JFWWqAqsBKKF-\ ZPhsQU2RKjtIwKxfTi_ruP5y9OUUiIb7uE1B_85m6OVieMurDiaFwytN7Yx3bfzXHQ-\ ZkBM1LWJTzOoWJ7I-\ KMmCIggnxvOSezvUXYQzJxKrPCqYXGlB21MG9XzJl37BjWGgCEUl8XIZHGRYTorJukBo\ AyoyofUnS5q1zglvnkhuZQKyJxCYa-p0CNNHaLTHisD3Qpq0-\ yTp0_hBMgFp2sPgBK7CkiECoQCckqxt4gTnZOCAhAhGjTSBrubxuqZj79hB9G_8eTjed\ KiHSPUxIzBkYkqFeUbo5NNG3leRd9wOtaH4BmYXsNLFKdLJeQ16839y70dy9Gqwzj9ya\ XJVCkG2i92ChfM0GYr2RJi9XXlsypMkLKC1sUeab0vXQShOBS4To9OIRxjAfA0V7O3VY\ ziCgMrl3vLbWMT71tx_uk0QJUKqHddCj0CW8pMsd8nI63if6KQ1_Q77YK8exeMJTDMd4\ kG7S8wSgFIOW0QmICQqnfE8nzYtxllu0baGM4Nl4mQ5Rx_1WjE1JHJQt3Tg5kTjcgjXN\ 6sUMuEBbxy5sk5p34AtQyX8BidJ1YG4Kb2cmJakW85dkpwF6Gjqmq5O7-\ kIMbgpGtvs7pCCc7ZZiys9LyE1u5yA0aMThMaI2p0OMECjBKU4nf_P4PFjhAUVxqoqkA\ AAAAAAAABxAUHicwMEYCIQDy7mwJZP7YTHhQZZ5CZUjR-\ Bw5RT6ZEsYkJHKFHEJPcQIhAJgT0iHolAsEaWlheBcvYLIC6WHf1mID_ntuZlcHexAp", "raw_to_be_signed": "\ Prabel, et al. Expires 11 April 2027 [Page 38] Internet-Draft JOSE/COSE Composite Signatures October 2026 65794a68624763694f694a4e54433145553045744e6a557452564d794e5459694c43\ 4a72615751694f694a5353324e725758426152433147616a51354e464530646d466c\ 546d31784e6d4d7a6258466e5830566f54477470565539764e57316f546c6c46496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534136352d45434453412d503235362d534841353132003c08\ 60140c9827362bea6ce409bad08c87f67b85daf9ed683ef2e6af2bc559a92ccaff26\ d3da9ee6b7cad46d1332f08ec2ca4b817ca5c27d3f260b73cf4325b4", "raw_composite_signature": "\ 1b3a61b7044763d2a0345d14ab1b5000ec29cf683d100cdfe3af461ff44f842707b5\ 854e8e600088687f2af5a8ac4c7185734269cac88d2fd848d1a9309b9a6cc3030c22\ c30f600771191caddafae7f2a884d8bf4596255596b92beeb6d03c9698f76d186acc\ f6af10672bff271b6e8f39794518cc66093724f1159f5830e44a76d566188b0f382d\ 0f990095a47cd4dacfca511431cdd2f3ad83cbeebaaa6c8d7b81e6a7579716519ff3\ b840045e537ef88b62ea8d8b6d62aa2648c5e1ab3f95b874b6b9ae5732fb5d091075\ dcedda83f82095b303a9f48835c1eb441eb94a3cc61eff4b74ecef953940550a0b2c\ a877b426af689c67acb2ed6d8f528c2029db822569c8a5baa33783993a3405bab3e5\ c0857c0129ae630082dc36aab7cfda521b765a4fdf91b62c48749e84e0154d75aa30\ e0c294bc8cad438c7095626465764ea251dc3986d7ad1cc0128bbadc2c9f5320e58c\ a765866b08e3f8b75217a562bfb402674d7165df0b52cf30c7d2d6d1f895a23ca7d5\ c8d5900be195f4e567648bc4f227305cf7eecca3b782b7e5c246faf0a884bf148e0b\ 9a9d0e2fad97c087eda589ebaa00a8577fc4c317db18682dbad3bcf257336431e6ee\ fc309c3bcc1319253ec1d204ffe163d20610b7a54c47bfc886e801028d7ae3df3c97\ 91e1612a132864fea7f60256186c05707a7559a8a5139b381c222e1a5901b2212b19\ b92306918af23467fb97a4a36e243363cde5e15e3dcdc299f99c0f69f9ac8921b7fd\ 37bb0b2ca0f67b899814a886f9bb63289b4e41f2a631d5cf224f5dbc437969e6ef5c\ 44124eee970bff9bbafd73bc812783366fdb04967a694d9e5bb8ca665b456247b45d\ edbec5db10a898c6f30750dfd95f64958df5a9dfba381d65be545754b9c17c3d0df7\ defe1f16f3e99da24caf51c4917062747ea15fd4b0f518d0099676e18249b4ded8d5\ 2d30d8c5c8b2366ec35a4bdcf99c926b972b2ec1adae167093eb9794c76ca2f32210\ a941a1fe5838733e61f6cdc373f99d713746a822aacb460760c36a0cfe9e54252327\ cf106675331f9eb174d75150f809c97d11d5f1045b608af92de92f7709a6d1c5f10d\ 4a2410617c9673ee7a47c35035a75986c1cc53bc98272b484fa501d3e51403f235e6\ c1c6eb1d536d39b1f95961c0c74965ccbcb554aa633c49035d342a700802c8bd8734\ 340d765de1f45f7273d106917ceeff0bc32627faeb5a3e243d9fdcef16f01619bcb3\ 0fdc63bdcc2bacbed812485e3271cefc8022e72ae4d0278d4fd17785fa51b133f93e\ 94610323c2661413c560e9b3dadeb643516d2945fd4056539ce7fb1be580b960eb23\ 216afa27b71670432321f72ee575fdd049d0e50dcb3d5e87f38c8d39e497c8fa5c8d\ 3f2aa870d86df2b0e2118c0ada19a5d62dc0091dee3109e1bff7acfc7da335f24d1f\ 96688cdfd6aaa0a0723e82861a0e4c163aa7fbe303169de3f29dda10787a106b3c65\ 5d40cee453ff1944f6eaf30721cf39353877369766d3665ee62d3fe36f299b119c6d\ faf913f7bf3bda2bbbc4e2a9ba630bccc6e46566a5fecc59e37de37b5791d2b1746f\ 900bcdf718e1897d6fcd91ce2c2cdf08847b342cf849d008f739a3ba460c6784654d\ 84587d46f3a391f26b5bffe7e0b6cfd55be68cc2a0c35c02b724bfae2612c775138f\ fc6e09e20997f6af265528a8640d4aa73cf1e89b561f0657f6d1370ba7ea9865170e\ Prabel, et al. Expires 11 April 2027 [Page 39] Internet-Draft JOSE/COSE Composite Signatures October 2026 d50dde6e346dfe0a78e1319f4a526b2ff71fbad5e7489e93779203f27a05ac20b505\ a801d5300ec2165a995aed1d72fda2d3a9bf985cf6909d1b8cbece80a9091280a22a\ f6b7796a23c9ae7ad014d5bdee89c71e0191df5f62128a3dbf9dfa757666a10646ea\ 3bc52e6095b9d0adb0252ec33f1060d8cb3c88b02c23e24ea25cc329a7eaf8caeeef\ d8d1248187aa5ca16fdb53b242a2c7e12932c0ee0f753004586a7fea67950687a556\ 8c75ac2186c61bc325dc812d9c93104e0e6797b141b58ef359fc21d523bd5f806fdb\ cd41c35490e6a907a8354e95d07638529c7ab8d1cbeec63f7e9b7d2d7e22da17ceac\ b8d42525d2c513220cfdf5adb74769ed85af467cd28fad95ca80d0944b4f53cee25f\ 780860e7d44dcbd982738d1062d40e88872ed76807e964f18813f1c99177e35bf6d7\ 7b5709d4169ad61e65073f404b2292c71cbd3f481aa9ae2a033ebe2923f068a946a3\ 142956494f8fb0b47a58bba21726a9efef8e87454871bc7de5db3966248be9fd949c\ 80a088ffd1e0a2868cf52bd76bdf8523ec475bee01d784dfad4322d08a4df6f1dfe3\ 4992795ec2c5b887be60689f745a66dfd0cfb564d53e1ecbb4cff7b4687e4a2175a9\ 5152cd792741af36b391049f6d7af3ecb15a6c60673bd44cdfd34350962e08d356b8\ 90f4488614070a77501dcdbeec241ce5b178128586339ff00f414687b402540b6394\ 7bb5bdd546f885f9a2351cb9f953a648f8a872c0d2df49a979950fc588c3260d4993\ ed59a7228ba23d1d34d5525516e82aeb8c50cf915c15f32468902673e5b9c3718997\ f197ff879a010cedf877c2b433b60d5d33debd05a1b61a30e0772cb34865cef7ed31\ 6384efa0430b275bdbdbcdcb6240d52ff0b4fa7529712c519642ef996d39bab561c6\ a1bf4abd7ad9fb72fa5c6bc5a55f1931ebae8c8792ff5faf1dbfba5b6b0277bbe52c\ 282c9d2d81d7f8895390c1b31aba42bc2d545dc54eacb581e219cbac50f62ef88e66\ e8d4baf6461153886e1cc52714c657dd6a0c84dfac9b364e80f3c3cd2f4204ad68e6\ cb7bfdff619097163581ca36c5e0ab0ab8763aaa391f67c4c15aa74b829ed412398c\ 8ee5d0aac8ffe8b0d9eb9124c4123ba86bc378c724ef6502835590f32c66dc5b1d3d\ f591f20bef926ae4ac7f6e88c7a93a3a4ca8c2d5e7faaa2afb12d28c1a1a66cfcc9d\ 94d1bd32621cc98992f31c35e0c346485bbf0cddf84b285653313f98aa6173f3a345\ f9c059b038689fea012865d0007ecc3d78fd4b71c38cebd775f1ce3e5a1dfd764c0e\ cf15c188cc02c2e90ab894434b2bb4587bbfb49aa38634ace4fc05ec702226eda8dd\ 686d5f72ff9820bd588abfe8613afff3b47576042e8c9ee7eef398d405493ae6e863\ c56f8df47abb433d5baf83b099a4d772b18f479d7d81ae629b650371e699439a2b41\ ae1980b7bc6c02c9ee8d1e93a8f6829f1a0cbfc77c3d85233d1152c44a99cfc88fee\ f39a37f7c34a42f2b46a302597e669b9b90da175c25d7865b3c71595afcec2e36a71\ a593a98d254b8b34f0ca4ae2af3ddc2e6bcdcd491d7f5f2e29b0c2bafbfe8024ffef\ a1fb99d02b608f72980b2c73c4e2a06835359c82ff55fce092b39553f572a2a4e613\ 51c893ba8d42224ed5f26132a97bd088a217dca5e0ee68840d3f5cc01230ca5e5348\ cd1c33571ecf15fb7be579f2f3bb729e88c2e6eeeee4ad61282bc194d6b5675615e0\ 4aa6d07028eba0dddd47cd301ac5cbfa6db818c149b16e06057c3dd91c8f52c5135e\ 03e0aba10cb0fa89f1ac584d6bf26a36abd92f83e5f845798b1983ed55757665f9c2\ 01199c0173e033f4bc8a7dd9a018cf649cc5b37e1a02c5d259361329dffd433c435e\ 357766388aafa94b3cdd4c16caaf4c406a04f755bc79f791f7e9323c4278abc47c83\ f1c9fd04a89a28fa5bb9ec14b598300d71c88a72e6ff07dfe6154a06ca2a863ba067\ 32402950e874c4ed1c67cb0146d663c969bd883f242ec474dedd349ee176f0c7cddd\ c1fa219c5d43c92349fa6e1c8d1c9175c6c569cd32a50f835f9be5127d86ea4b4e38\ cbb0826ddd32bda50ffbafff54530a0a8c2644fe1c6c15a54f750dc238cbdcf65fc2\ d6ae92426d375bb60c68584c2545e716d77ad45e173a89813346ef1c6d1a6e038dcb\ 0fe06853e4691a9ce867e138386f30cbd97d55206f605c449366d355d0a9009773e0\ 91565aa02ab0128a17e64f86c414d912a3b48c0ac5f4e2febb8fe72f4e5148886fbb\ 84d41ffce66e8e56278cbab0e2685c32b4ded8c776dfcd71d0f999013352d6253cce\ Prabel, et al. Expires 11 April 2027 [Page 40] Internet-Draft JOSE/COSE Composite Signatures October 2026 a1627b23e28c982220827c6f3927b3bd45d84332712ab3c2a985c6941db5306f57cc\ 9977ec18d61a0084525f172191c64584e8ac9ba4068032a32a1f5274b9ab5ce096f9\ e486e6502b22710986bea7408d34768b4c78ac0f7429ab4fb24e9d3f841320169dac\ 3e004aec2922102a1009c92ac6de204e764e0808408468d3481aee6f1baa663efd84\ 1f46ffc7938de74a88748f531233064624a857946e8e4d346de579177dc0eb5a1f80\ 66617b0d2c529d2c9790d7af37f72ef4772f46ab0ce3f726972550a41b68bdd8285f\ 334198af64498bd5d796cca93242ca0b5b1479a6f4bd741284e052e13a3d3884718c\ 07c0d15ecedd563388280cae5def2db58c4fbd6dc7fba4d102542aa1dd7428f4096f\ 2932c77c9c8eb789fe8a435fd0efb60af1ec5e3094c331de241bb4bcc1280520e5b4\ 42620242a9df13c9f362dc6596ed1b686338365e26439471ff55a3135247250b774e\ 0e644e37208d737ab1432e1016f1cb9b24e69df802d4325fc062749d581b829bd9c9\ 896a45bce5d929c05e868ea9aae4eefe90831b8291adbecee908273b6598b2b3d2f2\ 135bb9c80d1a31384c688da9d0e3040a304a5389dffcfe0f163840515c6aa2a90000\ 00000000000710141e27303046022100f2ee6c0964fed84c7850659e426548d1f81c\ 39453e9912c6242472851c424f710221009813d221e8940b0469696178172f60b202\ e961dfd66203fe7b6e6657077b1029", "raw_composite_public_key": "\ 424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f0942\ ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c50a888e0d\ fed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264802b9f49bce4\ 2ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bccffa8a475e539539\ 6674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e53b3b7fb49c73adfbc2d\ 4f8c54303520c29bf97e26ee57db342d957c893936522d0942b41d82ee3772a00570\ adfb545c1143922b0496f826a0a970064b36ddf534b5f8e1c1cd0b5565ea846b4543\ 1f0618143ece89777bb3f61179ad20295fe0a6e062ae6eecbc2ef38f2ac1a22dc93b\ 7b126336223c55b61eb8c0795542bbb2dc65e722eadc6866ffa9683beb8a999ad7a8\ 3e5e6e016c2e4c35f6f7649ad3bd52ec67ec1c5c6e7b9972771218be9554bba7727f\ 0b84c44b9b0a8bd831fcff2c9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355\ 180b709c7045c22d33a083f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a46\ 36283f4a1cd4924a2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded79\ 6db542971ca289b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb16\ 25171db5554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963\ c8d79f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c\ bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c45860a2d\ adc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c9078f62a\ 8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345081690eb4c56\ 2c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a3329152686f00d48\ 97f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e5500383956cdf5f6e37c\ f9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177d312ee52a6da023c05722a87\ 38274dda8d1b04e99831cf57c87282a256c565c296d0524a063a3a41a48a83009978\ d98d8abf61af68e8013b594fe151d9bec199902c4c70b49584201743c6b53103d2fd\ 24bdf078dc90b5a188b4f8d772179988d0416c94d4c57c0860b9d7b53d4cd261f332\ a1851565d52ac37f008747cafe320f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f\ 0367eb3cc971bbe0c301a8e52f96094936035c6ee3ca2d13db483a0dd04dc16247de\ 0e0894ad7cb7e1ae7ebd4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c\ 5283244312158c2eb1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b\ 5eaaf32f31f95c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e329972\ 4b4639986044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec90\ Prabel, et al. Expires 11 April 2027 [Page 41] Internet-Draft JOSE/COSE Composite Signatures October 2026 7f25a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107\ 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0aec1\ 0318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4f977b326\ a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734a51177bcb089\ 476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a90852423e2c85e79d197\ 24461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5856141028414ddbe7145\ 8f0a0b2b589df2e1b051783b8f718676b1defbae98ba496c2a935e92eeadea0a8393\ ef59f9e914f0743fe65640ddf9981cea6dbdd957a534ad4e790efc974ee89938ad99\ d53c5b680775399326834729bb37b082e795f8d87f52e6c8a8db68e515c277bbea82\ a7570d4280896c987a0608903e306c632a223c55f0ea3682039c4a3f5440f4b5ac3e\ 6ed2b2dc900cecc72b72f50e49b2629ad30f0487b2707b86286f8c4f55659b25f9bd\ d7a6af460cc3c57a3982663bb717461581e196894929d84153d87a7f482d284b5b89\ 4ce1a78216b2a011f2b88742cee52d5133e8fe77edae242f5af91637c37ffca32430\ 509b2fe4756303a9a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df\ 254b92cdaa40f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a68\ 60284ec3ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e4\ 2f8db590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e\ 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4dc3a0\ 428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f448886b802\ e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1d73caf8496d7\ 42ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d951bd8c35d61f8a6\ 78db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a1070ea61aabbf59294e3f6f\ 974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900d281b0b49aa00feabb35714a\ f33870edd7ac2393d93177f79ee5606c9df176f025ce49a6e5ff51a2a412ebf86ac0\ f40471c96ad4c119df230be6173df530ed656cbd8069214741ecdd0271c603fb6c4a\ 8614ff878d33e726cac6693e938ca3fba82c4995c14a2d4af9014fe4c4c50b794cac\ 596b52189f66a7106fb325b526ea046b17d1f2e12c4247f8bce6e563a440f277037d\ 812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b\ 315ececbb6406837bf51f5" } Figure 3: ML-DSA-65-ES256 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "eddsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "jwk": { "kid": "87Vn3JTmvTdxvpetv0rA5GwfoLnCkMxBDCJvYgFVuh4", "kty": "AKP", "alg": "ML-DSA-65-Ed25519", "pub": "\ QksvJn5Y1bO0TXGs_Gpla7JpUNV8YdsciAvPof6rRD8JQquL2619cIq7w1YHj22ZolIn\ H-YsdAkeuUr7m5JkxQqIjg3-2AzV-\ yy9NmfmDVOevkSTAhnNT67RXbs0VaJkgCufSbzkLudVD-_91GQqVa3mk4aKRgy-\ Prabel, et al. Expires 11 April 2027 [Page 42] Internet-Draft JOSE/COSE Composite Signatures October 2026 wD9PyZpOMLzP-\ opHXlOVOWZ067galJN1h4gPbb0nvxxPWp7kPN2LDlOzt_tJxzrfvC1PjFQwNSDCm_l-\ Ju5X2zQtlXyJOTZSLQlCtB2C7jdyoAVwrftUXBFDkisElvgmoKlwBks23fU0tfjhwc0L\ VWXqhGtFQx8GGBQ-\ zol3e7P2EXmtIClf4KbgYq5u7Lwu848qwaItyTt7EmM2IjxVth64wHlVQruy3GXnIurc\ aGb_qWg764qZmteoPl5uAWwuTDX292Sa071S7GfsHFxue5lydxIYvpVUu6dyfwuExEub\ CovYMfz_LJd5zNTKMMatdbBJg-Qd6JPuXznqc1UYC3CccEXCLTOgg_auB6EUdG0b_cy-\ 5bkEOHm7Wi4SDipGNig_ShzUkkot5qSqPZnd2I9IqqToi_0ep2nYLBB3ny3teW21Qpcc\ oom3aGPt5Zl7fpzhg7Q8zsJ4sQ2SuHRCzgQ1uxYlFx21VUtHAjnFDSoMOkGyo4gH2wcL\ R7-z59EPPNl51pljyNefgCnMSkjrBPyz1wiET-\ uqi23f8Bq2TVk1jmUFxOwdfLsU7SIS30WOzvwD_gMDexUFpMlEQyL1-\ Y36kaTLjEWGCi2tx1FTULttQx5JpryPW6lW5oKw5RMyGpfRliYCiRyQePYqipZGoxOHp\ vCWhCZIN4meDY7H0RxWWQEpiyCzRQgWkOtMViwao6Jb7wZWbLNMebwLJeQJXWunk-\ gTEeQaMykVJobwDUiX-E_E7fSybVRTZXherY1jrvZKh8C5Gi5VADg5Vs319uN8-\ dVILRyOOlvjjxclmsRcn6HEvTvxd9MS7lKm2gI8BXIqhzgnTdqNGwTpmDHPV8hygqJWx\ WXCltBSSgY6OkGkioMAmXjZjYq_Ya9o6AE7WU_hUdm-\ wZmQLExwtJWEIBdDxrUxA9L9JL3weNyQtaGItPjXcheZiNBBbJTUxXwIYLnXtT1M0mHz\ MqGFFWXVKsN_AIdHyv4yDzY9m-tuQRfbQ_2K7r5eDOL1Tj8DZ-\ s8yXG74MMBqOUvlglJNgNcbuPKLRPbSDoN0E3BYkfeDgiUrXy34a5-vU-\ PkAWCsgAh539wJUUBxqw90V1Du7eTHFKDJEMSFYwusbPhEX4ZTwoeTHg--\ 8Ysn4HCFWLQ00pfBCteqvMvMflcWwVfTnogcPsJb1bEFVSc3nTzhk6Ln8J-\ MplyS0Y5mGBEtVko_WlyeFsoDCWj4hqrgU7L-\ ww8vsCRSQfskH8lodiLzj0xmugiKjWUXbYq98x1zSnB9dmPy5P3UNwwMQdpebtR38N9I\ -jup4Bzok0-JsaOe7EORZ8ld7kAgDWa4K7BAxjc2eD540Apwxs-\ VLGFVkXbQgYYeDNG2tW1Xt20-XezJqZVUl6-\ IZXsqc7DijwNInO3fT5o8ZAcLKUUlzSlEXe8sIlHaxjLoJ-\ oubRtlKKUbzWOHeyxmYZSxYqQhSQj4sheedGXJEYWJ-Y5DRqB-xpy-\ cftxL10fdXIUhe1hWFBAoQU3b5xRY8KCytYnfLhsFF4O49xhnax3vuumLpJbCqTXpLur\ eoKg5PvWfnpFPB0P-\ ZWQN35mBzqbb3ZV6U0rU55DvyXTuiZOK2Z1TxbaAd1OZMmg0cpuzewgueV-\ Nh_UubIqNto5RXCd7vqgqdXDUKAiWyYegYIkD4wbGMqIjxV8Oo2ggOcSj9UQPS1rD5u0\ rLckAzsxyty9Q5JsmKa0w8Eh7Jwe4Yob4xPVWWbJfm916avRgzDxXo5gmY7txdGFYHhl\ olJKdhBU9h6f0gtKEtbiUzhp4IWsqAR8riHQs7lLVEz6P537a4kL1r5FjfDf_yjJDBQm\ y_kdWMDqaNln-MlKK8eENjUO-qZGy0Ql4bMZtNbHXjfJUuSzapA-\ RqYfkqSLKgQUOW8NTDKhUk73yqCU3TQqDEKaGAoTsPscyMm7u_8QrvUK8kbc-\ XnxrWZ0BZJBjdinzh2w-QvjbWQ5mqFp4OMgY94__tIU8vvCUNJiYA1RdyodlfPfH5-\ avpxOCvBD6C7ZIDyQ-\ 6huGEQEAb6DP8ydWIZQ8xY603DoEKKXkJWcP6CJo3nHFEdj_vcEbDQ-\ WESDpcQFa1fRIiGuALj-\ sEWcjGdSHyE8QATOcuWl4TLVzRPKAf4tCXx1zyvhJbXQu0jf0yfzVpOhPun4n-\ xqK4SxPBCeuJOkQ2VG9jDXWH4pnjbAcrqjveJqVti7huMXTLGuqU2uoihBw6mGqu_WSl\ OP2-XTEyRyvxbv2t-z9V6GPt1V9ceBukA0oGwtJqgD-\ q7NXFK8zhw7desI5PZMXf3nuVgbJ3xdvAlzkmm5f9RoqQS6_hqwPQEcclq1MEZ3yML5h\ c99TDtZWy9gGkhR0Hs3QJxxgP7bEqGFP-\ HjTPnJsrGaT6TjKP7qCxJlcFKLUr5AU_kxMULeUysWWtSGJ9mpxBvsyW1Juo7aie8zra\ kLWKjqNAqbw1zZTIVdx3iQ6Y6wEihi1naKQ", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\ Prabel, et al. Expires 11 April 2027 [Page 43] Internet-Draft JOSE/COSE Composite Signatures October 2026 AAAAAAAAAAAAAAAAAA" }, "jws": "\ eyJhbGciOiJNTC1EU0EtNjUtRWQyNTUxOSIsImtpZCI6Ijg3Vm4zSlRtdlRkeHZwZXR2\ MHJBNUd3Zm9MbkNrTXhCRENKdllnRlZ1aDQifQ.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.\ HQzXDOt_0U5JbfGg3fySZbFMUN0oMYioizVn8LMY6gR22JZBDsl2jQDdo05OHipwSzh0\ MtL_LLfARhpLiy1NpHOKAY2vCkVRQZEnInlxVDPWy2j2qLhLj6R11Hy6DVATfFM8flaj\ 8h4J5dwbATjxcnkmx7lTzkUU8iqucFiM3QTJAOkh9zd4-\ P8pWMPCqZezcGEPZvGwAf0nYY4bETkluouEt7xZ6HitQUSl_csj1PaI0lT0bu9sjI8Kl\ 4QGMa46ZpYvAaHI2dEGrI-\ h96rVSYICli2SfvoQixGXucAJBpcJV9Zgw7QWz2XrIV45TyFBzp_DrSF7Q9_ojQN9Mh2\ TN9gx52-\ K6ZEsvxckX6Dh_nxieeCE5YJBzjowB2rL5SBa9nCAHOjQTuahHriWMoscQT9mQeqUOM1\ aOjkGwJYIM_hyeWX2ILIm1ViO951S52iI-v7Po-0sSK_P7GlOYELHwjWrbbHX7rSyPL-\ ZEOVMwVp1TDIsdcLJhVyjQnyxphtRJGAqEjjaIFkGj5pZPVl0IoWOC0TdSE3rfUuXjmo\ 5seD6HrX7s2sCUUVftMepSD9mow1x3W9gIQEcqn8xIwqMYFlDsbRrGncCJGZ3xR4VktO\ Alv4fAK2JvSf15ooh58WOi1ACNDWQXZQxGOITCWXjQjwQ-8Rs78KkRuHrunNwS-\ KpAXaRTzvd14zbdX87zaT2itx7PEfaQZ6zvEalW-GlGJnAqyE4Ncmd9-\ vmg4ZNaWexCM7WaZ0is0z0nptLkRkzcQVbfzNfhkhcL1EfQp-\ iSOjuZlDl3zsWW66b8Z2WXTs1ANLuRmWNdEhkefHsT7RbmsZqoXieBQSy4etk7LWxEUo\ 7QwyRUttj0npRH4B0_jAY5RUJxcoUySom4f2KRGeDnk3ACyxEwsqzSoImiDEXL93rbjT\ iKacerNOe-ET-\ vekzUytuS5Rwp5PpFEhRaGDtYkUXoF39vrHg6KXEbcZIdMTfVERKrrskoZRDs32kT--\ e1a-\ L5lVJAHQDkEr7zr_icNZUp2vagN2wxsn016962jDdYn6VxtxqatsPO7ZAV3ekNYgzxyc\ u0I4VzctooEFh7l5rcU4zakCPrJhPu2F2nzozPhJH1MQwIQvy479C3MBn9-\ IsilRjh01ZEkWmwzl_lzIDLR005tMRfQr2hOewbpI6ZbDvuTf3ycXJ2Acy-\ VsJ1BOVDJt_HP4axvNMWGPqQWuWYN6la4Ok1HQBxAHRr5b-AArfsVepUFUyZyPA1Ej8c\ -ldaXWFChWJYK98aLLIPl2k0ZPaen8aq8NQCrP1OQZ7BC1yI-eJ4F-\ fCPU0II1f4QycmTQAyq8eHpmz6Zsafrz_H4aueQrs5zaPErqrsQJGvGDdUtphYkedwkA\ fUE7Uj6UZ4rHDcRm6uzBBtLkQGgA0ELyCRs6E71X7RsOC4_ztcngVGlsPymedNIM0pZy\ hM8lElHQz-\ OySh5Q5Ewdjck0TC6pA72yM3gf7xFgH3bzItSy3_REB7L89dbPD1fg1t56wMDTkuZXgx\ YH2CeDjkrHbUeP1MsJ8srg0E8k1A226op9l3DpSZAS4baPGdEXHKTDD4yylZuq-\ az9QSPQJUjSn1mYHFzJRLXtUwiGOmTtpZ-\ 6xocxGybFAx71qCJs_swcpthX9H7vaIXjUKLtYQwesZ8ak8Csofg8vCHcNRarh_bP8Ef\ zILJtHqTkHAwNwYNPUyUzxUdDG_qB2PeGxREzgAKG1dA_GeKLoEY4Z2mGxoBiatmdOKJ\ VIsoRH7lfiUe9urawNcdZ9NZxCYZKK9gvgxCzQC8tuSLp8H-\ 6hv65Oec4WFibfOhUjval_o4iN4gOvV2mGQT4giswbBAXAI7JyGf-\ W2Hgaw2mTlcz1MHOZhoPH7ZH9D4FLM1pteD8vyUwwF2Nri8OWQxkFk5o6CkujbmQYveR\ CEV5GiNFEtH53JSgi6SbXHTVN4UBUn6V6fz6jNICJZ6J3qw3qFQ6bVa0n4ge61gQFRPX\ 4enSdoaTZNtIbfkU1m89CEqUASlcUZeVpXjU8vhn3vbW-kToThYxd_D-\ yQCY8GWzrisBW4ejt3cnVKTNjDQJp7J5-\ 7u2OoBMcu4536PylI4ZeWSU_au0DuBYQuXzgmowQMwzVpJrmmaOJTOYxg1T2zKxhXbv4\ 0CXzM7DqNv11Rrgxa7Fu0NDMGyWqpVAF7lJx-\ oS28r04F7WP3XcHVcF9NjtfbeVOnneN7IjnKL0uLhuSgDU-\ Prabel, et al. Expires 11 April 2027 [Page 44] Internet-Draft JOSE/COSE Composite Signatures October 2026 tOTu0OF9TyPZUKrPAKZEa9e-\ FmNIwxKFIPwa_kzOOgu1ce8IlFyoyxYQDcILKIdDX8rrPTR0TvN8yKSA44TYaQsyr9Ys\ rY0Kwq3LANKfn1LLSq45nRzLyuKbHX0QR0omUVV3nRrs8IEW8aPqWUzzqFME-\ MFPWuNG3OqwFrVswNZANvcBJikQWien3Ni8bFrRJr_RVp9RL1n_Q8f5IZeMAxtQ7lwsi\ v4nhbw2r5i1DXWuDhkkoHTZ4jP8SNYFYDkWRx44NPwaCASSnCmE5zGqTVKKpUIylEUyj\ 6IXV6J0lHAnJcy93z4div-q8RADTS46UF4j_Ob7Ds3AXjfXty-\ LNeia7ITk5DZl1fA4WOXTp94NAh8Vn-3ZkERATOtN5rtKxqz33-93y5LPpxiuGhy-\ pCOQU0int-\ d9fO6F3uIPuFhNATn0RnvkXn5wV25BNqRRg25d44OZ56cZ831yfHL32dYfs6XX2iYSZ7\ Djgw2sMnGd6IhNrZzuqWw68CfSgLoFGf-\ uH95HtykcI6ZCikeviHQyB464jzh1cvE0XIj2b-YktNr7LJPn-Gho2faAHWlIqYivB0-\ Qwi1tz3PvWCazKNK1q88lmfVbrhf8OsmjkmH46gcUB3vfteDysfRphYhn5jNOnuPQW6A\ 2l53VCiEHnD8l1zL8cF1vhNvBHQR_V57VDyxafqs7IdGcZ0C3hVMtxoiy6Shujl7LKR5\ 1IcyaIGcBZdBS8Up4VPTMNps0I4JEP7CJysYf6HEUID6HGcNmX1T61yK6QLFtza73VB7\ oFgUOB6G4Jd8dNRbgR1FliDxdQmThMNisLL64m2_6BjTtCNDOarlcVi7UmZynleQ0ZaN\ _epx5JdPWB9EjtHBeN4kv_VrAj75jxLz-\ Qqrlvt_bWijsAkxWC0vxk8xYw2D52pbMORdXIaO-\ mGB8Wt0wj9KtTWDTrCZO1bqkWyA2Bx1Fh2boYjagrUOCnVCTW_J27RsJ6HLZ5ixUfeeV\ BH_j4C-hZCYDq-\ 8kju6hjXACjfUzpDzc_XpMdzIxZcsQCx6ORB7lgWZgH3brq5aCD0s2kLHjCaRLfl0Owi\ 4hyYIx7AjMZMEpf3HWztxawZcR_8aBL-\ IKwxZcVJ4H7D8OLcYvhxOUxeWVtoKTQIhyh4qfeSyciZQnTjdyZ42FxfiTJzVYvTqC9O\ MGUqX8Y6uPvI9rojCzp_CMzd6ne0ANdwvJzfHn0RZlixAuHYWkUm2MlAOaSjJzsYMxAc\ NeLC1GqNFivCH-k1ToLh3A_ELOWL05ny7eB-\ sTbtUQ4M3jsATs3zJ9jE1OVugrJUA297bHyoDhSV3UUnIcLUuVaVkLSejniMKTK1RFuA\ 3qHdh8vLVkmwhHcEeNYClc6uac8X4-GP3nmoO7aOlhzKleNSAAZ3pX-\ za5KLJzRfpoK3K77EdVXqSOF3_LMMFdrQOZll8B_BRCAKqPg-\ yqcR3_3pTmd2eiKSQ58JGDRex9EE3WD6u2ia8H9G-OG0Hi0GR8XEpYa41LOfJcPVw-\ 3mnXjoVCI7SAf_oOLvKTPO8k6qef9vGS6MjNVUF9jOfkONI8RDibJm0aEKqK6EUB6cgQ\ mZhv5ZuK3Pig4dmQjSS8EovSQt-\ e0IQepxh9U4b28sBA_1wz5jzHqUPQRteUyrebuHuYV6qffcSnEs23uZYvXL7xWY6RfB3\ nzm6p4p7G6sVhKUR66sSHoFzjCkYG97HEOZRb-\ C6CtQ_s9eX5FpQftzmuxaKvfnjnmoxlkzbQja7iv_WLmIWC74aEpnp0Qkz5nUVklGA5p\ bnShMc1MTQdpyzZfOt1v2gf8TTOx_HBw-\ p4CRM61kiKWSJ8fo3pRAWmAVVvDb0PQj08VkAKqgCybPRbDM4gapiQR7S9FTjLpH5Atg\ NR1M_QRRgrN6AKwYob_mHpCTADljG97h1T_hTy6gfp2c_hWxRK2rpSQVmyOhOfJwU744\ fpwh9wK1RCRL_Gg5rF9jHiH7Kda_HbM3DFGclLlYz5VV7a18i5r-\ BzsstYrNzQSd9T0oyeQewOU9tJxzPhXFxXoNKaezF-\ q4qWG8qN2BrTE_FlcuUkSNXh4KS3l-\ gDIJdVe_4bSaz5IVaio9Y3VGR_g7a3xQVGmJvu8fsGUrXfIFN6qa3CzwAAAAAAAAAAAA\ AAAAAAAAAAAAAABAkRGBwjNUYAqgGJg3NQcfHhBVBj2oVBjTkJ-\ s_G7cw3fKwZThZbntTjBar8kdYMKJ093EIMqQcN9wICjPVuEdzV3hHZDg", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744e6a5574525751794e5455784f53\ 4973496d74705a434936496a6733566d347a536c5274646c526b65485a775a585232\ 4d484a424e5564335a6d394d626b4e725458684352454e4b646c6c6e526c5a316144\ 516966512e5358516e6379426849475268626d646c636d39316379426964584e7062\ 6d567a63797767526e4a765a473873494764766157356e4947393164434235623356\ Prabel, et al. Expires 11 April 2027 [Page 45] Internet-Draft JOSE/COSE Composite Signatures October 2026 794947527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534136352d456432353531392d534841353132009baf580467\ 49538103f9d14500c2e6a53857983cee47d2a8b6f6170ecee7ba4f854c69a342305f\ aeb17563aa5269250d7be5c3ec63a4e9429e1f5399f014a7f1", "raw_composite_signature": "\ 1d0cd70ceb7fd14e496df1a0ddfc9265b14c50dd283188a88b3567f0b318ea0476d8\ 96410ec9768d00dda34e4e1e2a704b387432d2ff2cb7c0461a4b8b2d4da4738a018d\ af0a45514191272279715433d6cb68f6a8b84b8fa475d47cba0d50137c533c7e56a3\ f21e09e5dc1b0138f1727926c7b953ce4514f22aae70588cdd04c900e921f73778f8\ ff2958c3c2a997b370610f66f1b001fd27618e1b113925ba8b84b7bc59e878ad4144\ a5fdcb23d4f688d254f46eef6c8c8f0a97840631ae3a66962f01a1c8d9d106ac8fa1\ f7aad5498202962d927efa108b1197b9c00906970957d660c3b416cf65eb215e394f\ 2141ce9fc3ad217b43dfe88d037d321d9337d831e76f8ae9912cbf17245fa0e1fe7c\ 6279e084e58241ce3a30076acbe5205af670801ce8d04ee6a11eb896328b1c413f66\ 41ea9438cd5a3a3906c0960833f8727965f620b226d5588ef79d52e76888fafecfa3\ ed2c48afcfec694e6042c7c235ab6db1d7eeb4b23cbf9910e54cc15a754c322c75c2\ c9855ca3427cb1a61b5124602a1238da2059068f9a593d597422858e0b44dd484deb\ 7d4b978e6a39b1e0fa1eb5fbb36b0251455fb4c7a9483f66a30d71dd6f6021011caa\ 7f31230a8c605943b1b46b1a7702246677c51e1592d38096fe1f00ad89bd27f5e68a\ 21e7c58e8b50023435905d943118e2130965e3423c10fbc46cefc2a446e1ebba7370\ 4be2a90176914f3bddd78cdb757f3bcda4f68adc7b3c47da419eb3bc46a55be1a518\ 99c0ab213835c99df7ebe683864d6967b108ced6699d22b34cf49e9b4b9119337105\ 5b7f335f86485c2f511f429fa248e8ee6650e5df3b165bae9bf19d965d3b3500d2ee\ 46658d74486479f1ec4fb45b9ac66aa1789e0504b2e1eb64ecb5b1114a3b430c9152\ db63d27a511f8074fe3018e51509c5ca14c92a26e1fd8a4467839e4dc00b2c44c2ca\ b34a82268831172fddeb6e34e229a71eacd39ef844febde933532b6e4b9470a793e9\ 1448516860ed624517a05dfdbeb1e0e8a5c46dc64874c4df54444aaebb24a19443b3\ 7da44fef9ed5af8be65549007403904afbcebfe270d654a76bda80ddb0c6c9f4d7af\ 7ada30dd627e95c6dc6a6adb0f3bb6405777a4358833c7272ed08e15cdcb68a04161\ ee5e6b714e336a408fac984fbb61769f3a333e1247d4c430210bf2e3bf42dcc067f7\ e22c8a5463874d591245a6c3397f9732032d1d34e6d3117d0af684e7b06e923a65b0\ efb937f7c9c5c9d80732f95b09d413950c9b7f1cfe1ac6f34c5863ea416b9660dea5\ 6b83a4d47401c401d1af96fe000adfb157a95055326723c0d448fc73e95d6975850a\ 158960af7c68b2c83e5da4d193da7a7f1aabc3500ab3f539067b042d7223e789e05f\ 9f08f534208d5fe10c9c993400caaf1e1e99b3e99b1a7ebcff1f86ae790aece7368f\ 12baabb10246bc60dd52da6162479dc2401f504ed48fa519e2b1c37119babb3041b4\ b9101a003410bc8246ce84ef55fb46c382e3fced7278151a5b0fca679d348334a59c\ a133c944947433f8ec92879439130763724d130baa40ef6c8cde07fbc45807ddbcc8\ b52cb7fd1101ecbf3d75b3c3d5f835b79eb03034e4b995e0c581f609e0e392b1db51\ e3f532c27cb2b83413c935036dbaa29f65dc3a526404b86da3c67445c72930c3e32c\ a566eabe6b3f5048f4095234a7d666071732512d7b54c2218e993b6967eeb1a1cc46\ c9b140c7bd6a089b3fb30729b615fd1fbbda2178d428bb584307ac67c6a4f02b287e\ 0f2f08770d45aae1fdb3fc11fcc82c9b47a9390703037060d3d4c94cf151d0c6fea0\ 763de1b1444ce000a1b5740fc678a2e8118e19da61b1a0189ab6674e289548b28447\ ee57e251ef6eadac0d71d67d359c4261928af60be0c42cd00bcb6e48ba7c1feea1bf\ ae4e79ce161626df3a1523bda97fa3888de203af576986413e208acc1b0405c023b2\ Prabel, et al. Expires 11 April 2027 [Page 46] Internet-Draft JOSE/COSE Composite Signatures October 2026 7219ff96d8781ac3699395ccf53073998683c7ed91fd0f814b335a6d783f2fc94c30\ 17636b8bc396431905939a3a0a4ba36e6418bde442115e4688d144b47e77252822e9\ 26d71d354de140549fa57a7f3ea334808967a277ab0dea150e9b55ad27e207bad604\ 0544f5f87a749da1a4d936d21b7e45359bcf4212a5004a571465e5695e353cbe19f7\ bdb5be913a13858c5dfc3fb240263c196ceb8ac056e1e8edddc9d52933630d0269ec\ 9e7eeeed8ea0131cbb8e77e8fca523865e59253f6aed03b81610b97ce09a8c10330c\ d5a49ae699a3894ce6318354f6ccac615dbbf8d025f333b0ea36fd7546b8316bb16e\ d0d0cc1b25aaa55005ee5271fa84b6f2bd3817b58fdd770755c17d363b5f6de54e9e\ 778dec88e728bd2e2e1b9280353eb4e4eed0e17d4f23d950aacf00a6446bd7be1663\ 48c3128520fc1afe4cce3a0bb571ef08945ca8cb16100dc20b2887435fcaeb3d3474\ 4ef37cc8a480e384d8690b32afd62cad8d0ac2adcb00d29f9f52cb4aae399d1ccbca\ e29b1d7d10474a265155779d1aecf08116f1a3ea594cf3a85304f8c14f5ae346dcea\ b016b56cc0d64036f7012629105a27a7dcd8bc6c5ad126bfd1569f512f59ff43c7f9\ 21978c031b50ee5c2c8afe2785bc36af98b50d75ae0e1924a074d9e233fc48d60560\ 3916471e3834fc1a0804929c2984e731aa4d528aa542329445328fa21757a2749470\ 2725ccbddf3e1d8affaaf110034d2e3a505e23fce6fb0ecdc05e37d7b72f8b35e89a\ ec84e4e43665d5f03858e5d3a7de0d021f159fedd99044404ceb4de6bb4ac6acf7df\ ef77cb92cfa718ae1a1cbea423905348a7b7e77d7cee85dee20fb8584d0139f4467b\ e45e7e70576e4136a451836e5de38399e7a719f37d727c72f7d9d61fb3a5d7da2612\ 67b0e3830dac32719de8884dad9ceea96c3af027d280ba0519ffae1fde47b7291c23\ a6428a47af887432078eb88f387572f1345c88f66fe624b4dafb2c93e7f86868d9f6\ 801d6948a988af074f90c22d6dcf73ef5826b328d2b5abcf2599f55bae17fc3ac9a3\ 9261f8ea0714077bdfb5e0f2b1f469858867e6334e9ee3d05ba036979dd50a21079c\ 3f25d732fc705d6f84dbc11d047f579ed50f2c5a7eab3b21d19c6740b785532dc688\ b2e9286e8e5ecb291e7521cc9a20670165d052f14a7854f4cc369b342382443fb089\ cac61fe87114203e8719c3665f54fad722ba40b16dcdaef7541ee816050e07a1b825\ df1d3516e0475165883c5d4264e130d8ac2cbeb89b6ffa0634ed08d0ce6ab95c562e\ d4999ca795e43465a37f7a9c7925d3d607d123b4705e37892ffd5ac08fbe63c4bcfe\ 42aae5bedfdb5a28ec024c560b4bf193cc58c360f9da96cc39175721a3be98607c5a\ dd308fd2ad4d60d3ac264ed5baa45b2036071d458766e86236a0ad43829d50935bf2\ 76ed1b09e872d9e62c547de795047fe3e02fa1642603abef248eeea18d70028df533\ a43cdcfd7a4c77323165cb100b1e8e441ee58166601f76ebab96820f4b3690b1e309\ a44b7e5d0ec22e21c98231ec08cc64c1297f71d6cedc5ac19711ffc6812fe20ac316\ 5c549e07ec3f0e2dc62f871394c5e595b68293408872878a9f792c9c8994274e3772\ 678d85c5f893273558bd3a82f4e30652a5fc63ab8fbc8f6ba230b3a7f08ccddea77b\ 400d770bc9cdf1e7d116658b102e1d85a4526d8c94039a4a3273b1833101c35e2c2d\ 46a8d162bc21fe9354e82e1dc0fc42ce58bd399f2ede07eb136ed510e0cde3b004ec\ df327d8c4d4e56e82b254036f7b6c7ca80e1495dd452721c2d4b9569590b49e8e788\ c2932b5445b80dea1dd87cbcb5649b084770478d60295ceae69cf17e3e18fde79a83\ bb68e961cca95e352000677a57fb36b928b27345fa682b72bbec47555ea48e177fcb\ 30c15dad0399965f01fc144200aa8f83ecaa711dffde94e67767a2292439f0918345\ ec7d104dd60fabb689af07f46f8e1b41e2d0647c5c4a586b8d4b39f25c3d5c3ede69\ d78e854223b4807ffa0e2ef2933cef24eaa79ff6f192e8c8cd55417d8ce7e438d23c\ 44389b266d1a10aa8ae84501e9c81099986fe59b8adcf8a0e1d9908d24bc128bd242\ df9ed0841ea7187d5386f6f2c040ff5c33e63cc7a943d046d794cab79bb87b9857aa\ 9f7dc4a712cdb7b9962f5cbef1598e917c1de7ce6ea9e29ec6eac56129447aeac487\ a05ce30a4606f7b1c439945bf82e82b50fecf5e5f916941fb739aec5a2af7e78e79a\ 8c659336d08daee2bff58b988582ef8684a67a74424cf99d4564946039a5b9d284c7\ Prabel, et al. Expires 11 April 2027 [Page 47] Internet-Draft JOSE/COSE Composite Signatures October 2026 3531341da72cd97ceb75bf681ff134cec7f1c1c3ea7809133ad6488a59227c7e8de9\ 4405a601556f0dbd0f423d3c56400aaa00b26cf45b0cce206a989047b4bd1538cba4\ 7e40b60351d4cfd045182b37a00ac18a1bfe61e90930039631bdee1d53fe14f2ea07\ e9d9cfe15b144adaba524159b23a139f27053be387e9c21f702b544244bfc6839ac5\ f631e21fb29d6bf1db3370c519c94b958cf9555edad7c8b9afe073b2cb58acdcd049\ df53d28c9e41ec0e53db49c733e15c5c57a0d29a7b317eab8a961bca8dd81ad313f1\ 6572e52448d5e1e0a4b797e8032097557bfe1b49acf92156a2a3d63754647f83b6b7\ c50546989beef1fb0652b5df20537aa9adc2cf000000000000000000000000000000\ 0000000000040911181c23354600aa018983735071f1e1055063da85418d3909facf\ c6edcc377cac194e165b9ed4e305aafc91d60c289d3ddc420ca9070df702028cf56e\ 11dcd5de11d90e", "raw_composite_public_key": "\ 424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f0942\ ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c50a888e0d\ fed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264802b9f49bce4\ 2ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bccffa8a475e539539\ 6674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e53b3b7fb49c73adfbc2d\ 4f8c54303520c29bf97e26ee57db342d957c893936522d0942b41d82ee3772a00570\ adfb545c1143922b0496f826a0a970064b36ddf534b5f8e1c1cd0b5565ea846b4543\ 1f0618143ece89777bb3f61179ad20295fe0a6e062ae6eecbc2ef38f2ac1a22dc93b\ 7b126336223c55b61eb8c0795542bbb2dc65e722eadc6866ffa9683beb8a999ad7a8\ 3e5e6e016c2e4c35f6f7649ad3bd52ec67ec1c5c6e7b9972771218be9554bba7727f\ 0b84c44b9b0a8bd831fcff2c9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355\ 180b709c7045c22d33a083f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a46\ 36283f4a1cd4924a2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded79\ 6db542971ca289b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb16\ 25171db5554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963\ c8d79f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c\ bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c45860a2d\ adc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c9078f62a\ 8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345081690eb4c56\ 2c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a3329152686f00d48\ 97f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e5500383956cdf5f6e37c\ f9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177d312ee52a6da023c05722a87\ 38274dda8d1b04e99831cf57c87282a256c565c296d0524a063a3a41a48a83009978\ d98d8abf61af68e8013b594fe151d9bec199902c4c70b49584201743c6b53103d2fd\ 24bdf078dc90b5a188b4f8d772179988d0416c94d4c57c0860b9d7b53d4cd261f332\ a1851565d52ac37f008747cafe320f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f\ 0367eb3cc971bbe0c301a8e52f96094936035c6ee3ca2d13db483a0dd04dc16247de\ 0e0894ad7cb7e1ae7ebd4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c\ 5283244312158c2eb1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b\ 5eaaf32f31f95c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e329972\ 4b4639986044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec90\ 7f25a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107\ 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0aec1\ 0318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4f977b326\ a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734a51177bcb089\ 476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a90852423e2c85e79d197\ Prabel, et al. Expires 11 April 2027 [Page 48] Internet-Draft JOSE/COSE Composite Signatures October 2026 24461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5856141028414ddbe7145\ 8f0a0b2b589df2e1b051783b8f718676b1defbae98ba496c2a935e92eeadea0a8393\ ef59f9e914f0743fe65640ddf9981cea6dbdd957a534ad4e790efc974ee89938ad99\ d53c5b680775399326834729bb37b082e795f8d87f52e6c8a8db68e515c277bbea82\ a7570d4280896c987a0608903e306c632a223c55f0ea3682039c4a3f5440f4b5ac3e\ 6ed2b2dc900cecc72b72f50e49b2629ad30f0487b2707b86286f8c4f55659b25f9bd\ d7a6af460cc3c57a3982663bb717461581e196894929d84153d87a7f482d284b5b89\ 4ce1a78216b2a011f2b88742cee52d5133e8fe77edae242f5af91637c37ffca32430\ 509b2fe4756303a9a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df\ 254b92cdaa40f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a68\ 60284ec3ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e4\ 2f8db590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e\ 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4dc3a0\ 428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f448886b802\ e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1d73caf8496d7\ 42ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d951bd8c35d61f8a6\ 78db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a1070ea61aabbf59294e3f6f\ 974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900d281b0b49aa00feabb35714a\ f33870edd7ac2393d93177f79ee5606c9df176f025ce49a6e5ff51a2a412ebf86ac0\ f40471c96ad4c119df230be6173df530ed656cbd8069214741ecdd0271c603fb6c4a\ 8614ff878d33e726cac6693e938ca3fba82c4995c14a2d4af9014fe4c4c50b794cac\ 596b52189f66a7106fb325b526ea3b6a27bcceb6a42d62a3a8d02a6f0d7365321577\ 1de243a63ac048a18b59da29" } Figure 4: ML-DSA-65-Ed25519 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "ecdsa_d": "\ 00000000000000000000000000000000000000000000000000000000000000000000\ 0000000000000000000000000001", "jwk": { "kid": "yH7Hzh-v4jQOca8n6vLtFOG31o0pT2MDZD5FtvQ7Reg", "kty": "AKP", "alg": "ML-DSA-87-ES384", "pub": "\ 5F_8jMc9uIXcZi5ioYzY44AylxF_pWWIFKmFtf8dt7Roz8gruSnx2Gt37RT1rhamU2h3\ LOUZEkEBBeBFaXWukf22Q7US8STV5gvWi4x-\ Mf4Bx7DcZa5HBQHMVlpuHfz8_RJWVDPEr-3VEYIeLpYQxFJ14oNt7jXO1p1--\ mcv0eQxi-\ 9etuiX6LRRqiAt7QQrKq73envj9pkUbaIpqL2z_6SWRFln51IXv7yQSPmVZEPYcx-\ DPrMN4Q2slv_-fPZeoERcPjHoYB4TO-ahAHZP4xluJncmRB8xdR-\ _mm9YgGRPTnJ15X3isPEF5NsFXVDdHJyTT931NbjeKLDHTARJ8iLNLtC7j7x3XM7oyUB\ mW0D3EvT34AdQ6eHkzZz_JdGUXD6bylPM1PEu7nWBhW69aPJoRZVuPnvrdh8P51vdMb_\ Prabel, et al. Expires 11 April 2027 [Page 49] Internet-Draft JOSE/COSE Composite Signatures October 2026 i-gGBEzl7OHvVnWKmi4r3-\ iRauTLmn3eOLO79ITBPu4CZ6hPY6lfBgTGXovda4lEHW1Ha04-\ FNmnp1fmKNlUJiUGZOhWUhg-\ 6cf5TDuXCn1jyl4r2iMy3Wlg4o1nBEumOJahYOsjawfhh_Vjir7pd5aUuAgkE9bQrwId\ ONb788-YRloR2jzbgCPBHEhd86-\ YnYHOB5W6q7hYcFym43lHb3kdNSMxoJJ6icWK4eZPmDITtbMZCPLNnbZ61CyyrWjoEnv\ ExOB1iP6b7y8nbHnzAJeoEGLna0sxszU6V-izsJP7spwMYp1Fxa3IT9j7b9lpjM4NX-\ Dj5TsBxgiwkhRJIiFEHs9HE6SRnjHYU6hrwOBBGGfKuNylAvs-mninLtf9sPiCke-\ Sk90usNMEzwApqcGrMxv_T2OT71pqZcE4Sg8hQ2MWNHldTzZWHuDxMNGy5pYE3IT7BCD\ TGat_iu1xQGo7y7K3Rtnej3xpt64br8HIsT1Aw4g-QGN1bb8U-6iT9kre1tAJf6umW0-\ SP1MZQ2C261-r5NmOWmFEvJiU9LvaEfIUY6FZcyaVJXG__V83nMjiCxUp9tHCrLa-\ P_Sv3lPp8aS2ef71TLuzB14gOLKCzIWEovii0qfHRUfrJeAiwvZi3tDphKprIZYEr_qx\ vR0YCd4QLUqOwh_kWynztwPdo6ivRnqIRVfhLSgTEAArSrgWHFU1WC8Ckd6T5MpqJhN0\ x6x8qBePZGHAdYwz8qa9h7wiNLFWBrLRj5DmQLl1CVxnpVrjW33MFso4P8n060N4ghdK\ SSZsZozkNQ5b7O6yajYy-\ rSp6QpD8msb8oEX5imFKRaOcviQ2D4TRT45HJxKs63Tb9FtT1JoORzfkdv_E1bL3zSR6\ oYbTt2Stnpz-\ 7kVqc8KR2N45EkFKxDkRw3IXOte0cq81xoU87S_ntf4KiVZaszuqb2XN2SgxnXBl4EDn\ pehPmqkD92SAlLrQcTaxaSe47G28K-\ 8MwoVt4eeVkj4UEsSfJN7rbCH2yKl2XJx5huDaS0xn2ODQyNRmgk-\ 5I9hXMUiZDNLvEzx4zuyrcu2d0oXFo3ZoUtVFNCB__TQCf2x27ej9GjLXLDAEi7qnl9X\ fb94n0IfeVyGte3-j6NP3DWv8OrLiUjNTaLv6Fay1yzfUaU6LI86-\ Jd6ckloiGhg7kE0_hd-ZKakZxU1vh0Vzc6DW7MFAPky75iCZlDXoBpZjTNGo5HR-\ mCW_ozblu60U9zZA8bn-voANuu_hYwxh-\ uY1sHTFZOqp2xicnnMChz_GTm1Je8XCkICYegeiHUryEHA6T6B_L9gW8S_R4ptMD0Sv6\ b1KHqqKeubwKltCWPUsr2En9iYypnz06DEL5Wp8KMhrLid2AMPpLI0j1CWGJExXHpBWj\ fIC8vbYH4YKVl-\ euRo8eDcuKosb5hxUGM9Jvy1siVXUpIKpkZt2YLP5pEBP_EVOoHPh5LJomrLMpORr1wB\ KbEkfom7npX1g817bK4IeYmZELI8zXUUtUkx3LgNTckwjx90Vt6oVXpFEICIUDF_LAVM\ Uftzz6JUvbwOZo8iAZqcnVslAmRXeY_ZPp5eEHFfHlsb8VQ73Rd_p8XlFf5R1WuWiUGp\ 2TzJ-\ VQvj3BTdQfOwSxR9RUk4xjqNabLqTFcQ7As246bHJXH6XVnd4DbEIDPfNa8FaWb_DNEg\ QAiXGqa6n7l7aFq5_6Kp0XeBBM0sOzJt4fy8JC6U0DEcMnWxKFDtMM7q06LubQYFCEEd\ Q5b1Qh2LbQZ898tegmeF--\ EZ4F4hvYebZPV8sM0ZcsKBXyCr585qs00PRxr0S6rReekGRBIvXzMojmid3dxc6DPpdV\ 3x5zxlxaIBxO3i_6axknSSdxnS04_bemWqQ3CLf6mpSqfTIQJT1407GB4QINAAC9Ch3A\ XUR_n1jr64TGWzbIr8uDcnoVCJlOgmlXpmOwubigAzJattbWRi7k4QYBnA3_4QMjt73n\ 2Co4-\ F_Qh4boYLpmwWG2SwcIw2PeXGr2LY2zwkPR4bcSyx1Z6UK5trQpWlpQCxgsvV_RvGzpN\ 22RtHoihPH74K0cBIzCz7tK-\ jqeuWl1A7af7KmQ66fpRBr5ykTLOsa17WblkcIB_jDvqKfEcdxhPWJUwmOo4TIQS-\ xH8arLOy_NQFG2m14_yxwUemXC-QxLUYi6_FIcqwPBKjCdpQtadRdyftQSKO0SP-\ GxUvamMZzWI780rXuOBkq5kyYLy9QF9bf_-\ bL6QLpe1WMCQlOeXZaCPoncgYoT0WZ17jB52Xb2lPWsyXYK54npszkbKJ4OIqfvF8xqR\ XcVe22VwJuqT9Uy4-\ 4KKQgQ7TXla7Gdm2H7mKl8YXQlsGCT2Ypc8O4t0Sfw7qYAuaDGf752Hbm3fl1bupcB2h\ uIPlIaDP6IRR9XvTYIW2flbwYfhKLmoVKnG85uUi2qtqCjPOIuU3-\ peT0othfmwKQXaoOqO-\ Prabel, et al. Expires 11 April 2027 [Page 50] Internet-Draft JOSE/COSE Composite Signatures October 2026 V4r6wPL1VHxVFtIYmEdVt0RccUOvpOVR_OAHG9uHOzTmueK5557Qxp0ojtZCHyN-\ hgoMZJLrvdKkTCxPNo2-\ mZQbHoVh2FnThZ9JbO49dB8lKXP4_MU5xAnjXMgKXtbfI8w6ZWATE_XWgf2VQMUpGp4w\ py44yWQTxHxh_4T9540BGwG0FU0bkgrwA_erseGZnepqdmz5_ScCs84O5Xr5MbYhJLCG\ GxY6O5GqS-\ ooB2w0Mt87KbbE4bpYje9CAHH8FX3pDrJyLsyasA3zxmk4OmGpG7Z70ofONJtHRe56R5\ 287vFmuazEEutXn81kNzB-\ 3aJT1ga3vnWZw4CSvFKoWYSA7auLgrHSHFZdITfOrgtmQmGbFhM9kSBdY1UCnpzf65oo\ s3PZWRa2twfUxxLAnPNtrxpRGyvtsapw7ljUagZmuyh3hLCjhAxYmnoE1dbyIWvpCqSl\ EtVjL1yb_nuLEzgvmZuV02fHxGuWgHTOMVGXpf81Rce3eoBK3lapW1wkzezlk3tcA2bZ\ OtA9qbxdsbVR37kemzQ9K1e3Y0OWhtSjBKqHyiK-\ iwU3jrHHHvMgrXRuHTtii6ebmFn3QeCCVCo4VQLyXb9VKWw6VF44cnYKtzYX3kqWJixv\ XZ6Yv5KS3Cn49B29KJoUfOnaMRO18LjACmCxzh1-gZ16Qx18kOoOXw", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPgIBAQQwAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoAcGBSuBBAAi" }, "jws": "\ eyJhbGciOiJNTC1EU0EtODctRVMzODQiLCJraWQiOiJ5SDdIemgtdjRqUU9jYThuNnZM\ dEZPRzMxbzBwVDJNRFpENUZ0dlE3UmVnIn0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.Gr-\ m2mj44blFE8GI2xxWdoJ3_AwG4ysPNVVh0ganXkQDpvSiPubgG07DOVB0Nk4g-\ vasqvTbuAvknKvQaeSMwR0D6o3noXBtQT2oR-XjWKe30pgMzPQLf-\ NkQqKGZv3AoJ4GqUVx22ZWn3E0Mzb6XvNrRTzf7GC0tJTb786wx-\ dYRjJd0axkjTxD_xV8JZ-\ lMmUia2ATU3fIv2LBX0YWDOmSF31h86dh3g8Q3dbY7XDnwf_cWlGtfDfqDB0NDlsj_rq\ J-rhd7iH-0gtrrnEkHt5X_qK_0XgS-\ ro6eXvXpW7WMYcUbAMC0dfz6z98LaPwJ1_lxoYFHEAgAZvm4_M-\ fqgpgMbM_qgGzqnZFoOZC_E2hKpL7wpn-C5NFamV3M-\ WCSvSuX8txLlK7gf2RS7zjdnpX1QYQhXHJuydua-\ 51ekczClU2Y3wab_GnXGP5NWnzDrcpIuZnCBqB_o2EY_SCQ_Pdup9QTTdNVvTM-kqIN-\ 0DzCNYU8KHmZ3N_y1M9rZBZNjpPhYUSYqE2VWTWFhxL7Gr12XshR1pZs_rxpQtCkwSoA\ 7CY8eQ6NtDUAWIO87QeAtHNfpf0L2H_i85mZItDirJUHnBKkbvGl10qiCbqitjIfQLdB\ H2XawWDzz2J94uNztAbsp9GfYeALOD7uMiAd47GTiXV26F33-vdD-\ FmZoY6VJMCb7huk3AKhwbtOXkCP4BVmlGDYGaIXBUeQ4EenylcvBAXixejfken1r-\ 0XQ6TNWi_F14v7v_HMKPz0n_S38oNMIc7SfIEoVLQpwhg27EVwvHv94vPBmKNC8WGhtQ\ TeiimIouGp9mFF4ASlh2Vq6c0RX3rKnMjFtwQg-\ TPfK_rHSvIogm6ZZP8tKf_qfpvmC6tPSA8M-sNKSz-\ 16clacLOrLLPafq7Daxh_vNGpVm3xnFl5wKosOzJNARGbE0hNdjpxxKyTuOFm8iN1yUD\ OYwyQdVziY_5ym4UGoUe4UbeMrQQB_foumtu-\ D4fzmDMR4hrbAFDrxfUckHcBHJwAHSA13YtxY6UmOtN8mkOaC4XYUdOK_DnkcOSW-\ T_SMiPbFf245GtaztWMscWr4W_WOz4qY99HE3sVEcEw-Vu70VDy3dw3u1cKHC68koKQ-\ 8l-\ 6YHxpUkfJCa1f0vkD2gLMERWwMCZw7878TMxo0Q2SAclyfvNavTUbMgoeNxEnEBbV_xd\ 75FV9flUX6NxZtA8XCL97iKmx9yOISh9wbsF7CGgjDP7r_4z0vTTk_2zONWeQ7dY9ra3\ 9ldrmNAmgN0YOLil8b2Cd1STS_4VQbFGTsTIEstGTF2maKjHe_hRK58_eECvEPub2VyM\ SCvffBxDUWQIJfxosGofP_MejtSfx4Nk0MoLjiI23wz4V0K_j12Olx0VSnoqFY8nntoc\ Prabel, et al. Expires 11 April 2027 [Page 51] Internet-Draft JOSE/COSE Composite Signatures October 2026 JLbT-kwWjkksKXd8Soq3uYk-r-\ gjHilxuGauA6CoIG6vHLv3ymgVdIuJvKEcLjXvYaYDVgjWStwbaqub6jCv1KHcygnmww\ U3_fcs63u_OhtH3miLGh_qBSRcsHmL5he8142tGECHJa0rKMH1ICcUSz02I6m_VdfHqO\ V6IJBpzelgA-\ 16arD16a5KDjhv3ndODnU21JLIm8QMTnqmSiWwfif6dz9UVrXoZ7Us0DAmlBoX70vPQm\ zQ7nzTlRhhSlO5BO8u_8wB7OOlcankVoA3mZyf-\ vo2ZEmkSDrlpD_EiGKrQs98hUM2yjYV1VKPkkW-\ Sb9e_6NgFHM6JutpbGA53r79WL0Qfg9M0xXLSaxgc7Xmdw9beWX4RUyFBGGXeCQEmpeh\ k5OEj9usFZUhIsbkTjMzIjkT_BQsQYwpX55AhleVmORkNcpVX8Yobu6-\ JTslTxafiooHiO02WVTMoGSMBF8wCftUy_t2AzDbKkQoYclrbkI-\ uZaz_3XvbIVKg0ErPzvV1aLMFgTTDvS07lc9MVV11aixngaqaZxVsIxPzgAOGbhP2rf4\ KWUwvgphfaYondjSGwKgbwlRZIXQHI2o-6bXr-\ g3YLgfFarJkZFGgb8VWi3nBM_3Ng3QI7NUOcnx6gaAR7aZHjI5hNv-\ nUknUU2yzpGAgIpJHZubv__5YL2CB877x6AAWiJF47u3zC9JYXV9POGKuQbhnT_Nfi__\ Ri20aZFMalkqCeqaCkvYpm-Bz-\ A55NWhfZsjXnkcxSTRsTglDwa0lr24TO2gwrShqn9bWiH0NfuCXxEJZFwdW0Cj3IgyfG\ ZIjKdf54X0Hdp1Q3Viy8-EsGxIWHM1-\ Vc27lp9W4MfSlESsa_bYcAmWOdVwkLbtXeaySC7a7uVS-\ 92f6Z6_Vj0lVq3FQAhmHJAlMYJtvPGWKvzlCT1RmCgQl5pBOLQDB_ZxGQQYPWjSBALvB\ sVeG75UgrVnToWktKRtm0YXgVsr0TfUW4qe5GlQV28uKpL-\ imeNOGGT7yk3TN7rkU3iJ5Cj6PSb4grsxLEAno6jLYCoDv_IRYB1xfpMMrlScXwdcvlv\ p0-6FFnpJ9q3PZel0xUz3yMv524Gxka0CmtWmT9-\ Y1xyoPosBIgao_Fv7eRmOvUYSCHFwFeRdTzezb-\ SxtmhCPXmw3Diig08gWv7eOymA7DEYCOdNAkk8KpdyifIVnLNg8GkKOQpEQ5vUf_SjN3\ FPwZQxhtoFU0PnrCq1SLg6y8oa1eTZgMB33abAqtzRLSJGyPSZdoqsHWOh9OLEFuNG-\ a889JWIuWN2hAFOYgWRwI1GWrrfh0abH_lgw4NoXyE19wjft18Ll4mz2RihSBdIntA29\ nR_IAkYjk8ZCUUaw3l8cL-y4-\ qdKgWUc4dXE3GmM1bXQO3kgq87SwedK_tydHo2AN86ZMXByz1Q2jlWRtLIOnBlbENlx_\ X0POlOjDT8DSWZ9t29hFOCvpAWFSUVYkRxKLD4tm7MWxNZqBcpx5byJrwITpW_QkjiLH\ B0UMhK3zIfQnYKQpvA2HQd4macntYFlns5Owy6ZFRaVolROCLv-dDudBEMO1hBax-\ 60EHkGZObx44KZP7yu0d3uNjI190Pt-UIC4l07fTh8QSOzD89FaGV0MhBjKFCJlJw-\ v99lI5AZ5dfDqe5-h8Budkn4lr_7OVgtFsmwjZiyFvazIDktDzt5Fe1-\ u8uBaWyVtNZMh_wcpQQMdu-N45LEba5lt-d3jqQgcB1YPFkwdok3if1qaIuSDhJbsnQ2\ -iZuAMyeOT9TvJTXirVoiF9buVN-\ 51YgryXjOWgRqb1fs0MvWB3eHQAXv3hcXQ6PbuCRm7_j6Me8QsN54OnAGlBB30HfLaHu\ rELKJ5EMjEEUyadwfQoNUPH2kp_YlVX_G0ck7Qx17fqSode93Wbgfz9lQqsy0FdABwVL\ EYqzvufAYEMEBf8n7FpW6V-Qnpe-\ Sa094aV47CNcznuSYviTKdxvEyGLI8_mEcVoUtl2vvQR9xViaC0q0YuH-\ LjuEE9VgS3MXKGAxVqtVYiVE6UyhU1kWMDVNA3_PFjCt4-hN-\ G5qnJuM2SqA8oKGsoBW9NPMy_fe6tA1p_l3Q7mhkoeC9MMBRPpNwO3toWB013X03LF6H\ P-xd5JU-TFIlV0_-6vAcNov8mNt_TMwj5IiXuN-\ flZrgCMiI2wjCtKI_UDLWSZK9p4DwQPwPWu7BjlidTJd6yk8D-\ V4iP3acZ8YMFMzywWwx1MbarkQQ7N5uKT1G5Di5n8uMCPTFxfcdZq1QuE1jRG_MDGSab\ PpyhW5tKD2TJrZLQM2DbJ9Cuvb7uUF1bqT72bYM4IAnnoWopI4BssMp0MCBPM_go7WS1\ S6d9qJyWK69-zmT0xP-fhOz3x9NV12R7KVG2bmszWLNih2t58OdSKdwnQFw8kv-\ 81zfNlj2XGntyUBA6ewP79ltIfEC5XwC_sc1EuNtkhUn_AeJQRhV67LMu1JCf7IkBZht\ -fbc6zoXBaULXwhP_5GHdHg9wteIWRD9WppWpnRdaQSVrpO0so1UiXx28PqtQ1DEi-\ 47xl1W1fZ8O-VywfHMZPSnhvVjR-\ Prabel, et al. Expires 11 April 2027 [Page 52] Internet-Draft JOSE/COSE Composite Signatures October 2026 mKWb0k35PUHAVp4rOt8P4hlicEGcAXeE3sFWd3cteCrv9Y23YzVnSKrafiXhMUVAex23\ qKtDZSMmAaUtVbFFOIdNfrTnEe5yvHz-7ThoN-ppL509m3Dpl1Soq2UacNMvguK1u-\ niQ46YgEKARHKyYIf3SnlZM8ao1YLCGDSeIlOekrn2tY5abeuEMPSQZpErhNX-\ 3XvHnGLAXNMi3d7se0H9SatG2Cf17eGrzlInYpxYZHCgzMmxx-\ wHXJIGnSGGpwPKq1urbRoLgFvKOVEMGf9JGClaacag7QuyHD0umOuXjSNxkbkIOxrMu6\ xr1iBfTyU-vrEfSv-W_i615Re0gZhxXOhlM1_I5YXm6xKzG1POZO5eCfA_Phyv1-\ UMHSLO3LhOea8oaNhkNroi9SndW5ZJ8esaucaRCVnXelFI8PcGANS41W2AUjENoXPlMD\ l3SSPcMdeLZ9wzO6FtuH81xQwk8cplcooLLleGYZDuJRkIneNeT_udx38D_iDg8SwwQe\ 98u3HwPwUYKtlpLgHcoZ3p_ppvZh5D0lGzriJ5DhidSJ8x--\ oj4HJrTjpzN3EwNblVdJecTLZ_EefzqewU9hGZI0YQpU06xSt81NPqVjOPsDlf38VkOx\ Iqe5HK5-\ Mjlse5lHrCP2oHVxb4YWDrrydL28ooO8RYMpbQFeivzW0eOPlKVXd5I100UU82sQ8siF\ 0vYci90HqDWds8_Ihj1chmQ_s8ZL7KaR3ja8b6bmUhK0a5G0BMS6Fn0lHshuW93hUZMp\ H-m9MaJj98K9XqsUtBYa5jzn4NNw5oKOfRWV2Krt4v-\ HYjt8ryKymqS_63uIrfKaztMMO09albvSzojHHU5DHnVhh3mgo6-\ kxCqa3wmuRBuAhFx6nRod5M0vITWTPEjSgrhnK85fpaeF8GAzgDJSwDcRjDKwgK3fUk8\ MJfkfUXAf7VxveUhJyW6ehyNttaV2NWTnHnCy5UZdd8xwqSyx119ldyPTRTret2ysDgD\ V7VbUPdT9kKzqNjoBH9mfZjQtCNfgmLjYR5_2AEypcEuAGIFFDGMTtEJBtvl-\ M9uOxNv4RXXQocknqChXJV2UjMNlzE3IvLzXnING2TN2zYRImY_9FMvlKL7j19qOL7IQ\ Ed2-gBhw8B0a3TfYVsXlOR2zv2BPftntzlepEbnogDqhHzwhnYnf-\ ug5Aq_Dvz4GSyV9JM4WhURCFbA8lFD_XTXgVt2iwcZ_iZYdOgfBJpC0uTX-\ d5Jjd1vWiY93HUKo6GfH5YggrZ7bVRmvjNgs2CuzYgEmSLwa4az5mogKCI-lR7-\ BeVsNLCkFrZsRny77hC6UdJwMGxoLg5hnHFtd-q-\ BhOzrOsPDO1UGCdueZJVpJBmzLEXpYRm4QOfDGzoXa6p_wsvtwcsLZ_4sNUNnSji-\ CyjWVXEreoWC8Uh5aM4Uu1-XVpyOoWt54D9292PZyp1c7pw-\ rBethi6Cx4RwwOg3lpqeNU-XYs3gaBXUrGOXF6vbmQrx7VXfcyDIs-U6d-v-cj6z7_jb\ -\ q82PbCPOMhnfzMyZrSUNJ6WQjP8dHMWIbqLv7w4WLjblEzf5eVwka7uTCJw2yIaUY2E4\ hmzi_egTlGrRtmmq56pZJ6JIadCS1_WLbPG4SkunsZESVofRjrIM2E9iEgAJ2zSgLP3f\ CDX9nKGxgR0XIBpDkwn7q58mCN6Res_n5dkunuKAoxRYG8W9s9WARjEp1BARhjS3_fGM\ ScSUrs6gz4nV7eaHpgLYNgjVRNiTHLRL9oYRyZcLO39fmAtR4j9AaA-\ F4zCbhPngfloWUK-Ln8mJhGj6L-\ 38dGsYmY3J09jvLJD8eR0suGP_1cnog6hr2sUKN10vOTTZBF5Vg6mvP4feX2Nz5j_qxl\ AxgFGWvPd7Pn79KZYfqt6i7g1OZm3v6h09QVnGjnTfNKXA9nUSI8UdIzrd_XPtiq7SZd\ vUf-mAWZ-EPJFXvsEejuYSGmAMq9tF5pE7h8kmVypHXedh6JIwkWAzxb_z-\ Eg_V7mcRYI2g6pvnZDz_VAvY2jG1KEi64Qv3dC-1sqvqig_Y0CKEFyMD0-\ owMkqa7xDSc3OViEmgoiQmB0eoCDoKrEy9rl9QwTFW6vt7_K1vSpyszZBiU_T1zhAAAA\ AAAAAAAAAAAAAAAAAAAAAAAECA0UIy0xNzBlAjAQsZsAdWJwbgbLsFb50mLC4qcOyAWw\ CwByc7cJNUrOkx8ifQwYSGIprc2wYhZ9fvACMQDQS7GcWIO_KPTM-qUvF7eIRA-\ muI56ohc6SaefM0dh6PE63Tx4HmFqWq4SnNqzYY0", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744f44637452564d7a4f4451694c43\ 4a72615751694f694a3553446449656d6774646a52715555396a595468754e6e5a4d\ 64455a50527a4d78627a427756444a4e524670454e555a30646c4533556d566e496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ 527662334975", "raw_message_representative": "\ Prabel, et al. Expires 11 April 2027 [Page 53] Internet-Draft JOSE/COSE Composite Signatures October 2026 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534138372d45434453412d503338342d53484135313200c6e7\ 4eec87cc66427e79b59b94d43773c7e5f186967e8be973ed9d3f56fdab8cc6037c00\ 3b066915d54565074e83ab2e4f2ef6a1921ca96231fe6a6b6b63b109", "raw_composite_signature": "\ 1abfa6da68f8e1b94513c188db1c56768277fc0c06e32b0f355561d206a75e4403a6\ f4a23ee6e01b4ec3395074364e20faf6acaaf4dbb80be49cabd069e48cc11d03ea8d\ e7a1706d413da847e5e358a7b7d2980cccf40b7fe36442a28666fdc0a09e06a94571\ db66569f71343336fa5ef36b453cdfec60b4b494dbefceb0c7e75846325dd1ac648d\ 3c43ff157c259fa53265226b60135377c8bf62c15f46160ce992177d61f3a761de0f\ 10ddd6d8ed70e7c1ffdc5a51ad7c37ea0c1d0d0e5b23feba89fab85dee21fed20b6b\ ae71241ede57fea2bfd17812faba3a797bd7a56ed63187146c0302d1d7f3eb3f7c2d\ a3f0275fe5c686051c4020019be6e3f33e7ea82980c6ccfea806cea9d91683990bf1\ 3684aa4bef0a67f82e4d15a995dccf96092bd2b97f2dc4b94aee07f6452ef38dd9e9\ 5f54184215c726ec9db9afb9d5e91ccc2954d98df069bfc69d718fe4d5a7cc3adca4\ 8b999c206a07fa36118fd2090fcf76ea7d4134dd355bd333e92a20dfb40f308d614f\ 0a1e667737fcb533dad9059363a4f85851262a1365564d6161c4bec6af5d97b21475\ a59b3faf1a50b429304a803b098f1e43a36d0d401620ef3b41e02d1cd7e97f42f61f\ f8bce66648b438ab2541e704a91bbc6975d2a8826ea8ad8c87d02dd047d976b0583c\ f3d89f78b8dced01bb29f467d87802ce0fbb8c880778ec64e25d5dba177dfebdd0fe\ 16666863a5493026fb86e93700a8706ed3979023f80559a51836066885c151e43811\ e9f295cbc10178b17a37e47a7d6bfb45d0e933568bf175e2feeffc730a3f3d27fd2d\ fca0d30873b49f204a152d0a70860dbb115c2f1eff78bcf06628d0bc58686d4137a2\ 8a6228b86a7d985178012961d95aba734457deb2a732316dc1083e4cf7cafeb1d2bc\ 8a209ba6593fcb4a7ffa9fa6f982ead3d203c33eb0d292cfed7a72569c2ceacb2cf6\ 9fabb0dac61fef346a559b7c67165e702a8b0ecc93404466c4d2135d8e9c712b24ee\ 3859bc88dd72503398c3241d573898ff9ca6e141a851ee146de32b41007f7e8ba6b6\ ef83e1fce60cc47886b6c0143af17d47241dc047270007480d7762dc58e9498eb4df\ 2690e682e1761474e2bf0e791c3925be4ff48c88f6c57f6e391ad6b3b5632c716af8\ 5bf58ecf8a98f7d1c4dec544704c3e56eef4543cb7770deed5c2870baf24a0a43ef2\ 5fba607c695247c909ad5fd2f903da02cc1115b0302670efcefc4ccc68d10d9201c9\ 727ef35abd351b320a1e3711271016d5ff177be4557d7e5517e8dc59b40f1708bf7b\ 88a9b1f723884a1f706ec17b0868230cfeebff8cf4bd34e4ff6cce356790edd63dad\ adfd95dae63409a037460e2e297c6f609dd524d2ff85506c5193b13204b2d1931769\ 9a2a31defe144ae7cfde102bc43ee6f65723120af7df0710d45902097f1a2c1a87cf\ fcc7a3b527f1e0d9343282e3888db7c33e15d0afe3d763a5c745529e8a8563c9e7b6\ 87092db4fe9305a3924b0a5ddf12a2adee624fabfa08c78a5c6e19ab80e82a081bab\ c72efdf29a055d22e26f28470b8d7bd86980d5823592b706daaae6fa8c2bf5287732\ 8279b0c14dff7dcb3adeefce86d1f79a22c687fa8149172c1e62f985ef35e36b4610\ 21c96b4aca307d4809c512cf4d88ea6fd575f1ea395e88241a737a5800fb5e9aac3d\ 7a6b92838e1bf79dd3839d4db524b226f103139ea992896c1f89fe9dcfd515ad7a19\ ed4b340c09a50685fbd2f3d09b343b9f34e546185294ee413bcbbff3007b38e95c6a\ 7915a00de66727febe8d991269120eb9690ff12218aad0b3df2150cdb28d857554a3\ e4916f926fd7bfe8d8051cce89bada5b180e77afbf562f441f83d334c572d26b181c\ ed799dc3d6de597e115321411865de090126a5e864e4e123f6eb05654848b1b9138c\ ccc88e44ff050b10630a57e7902195e56639190d729557f18a1bbbaf894ec953c5a7\ e2a281e23b4d9655332819230117cc027ed532fedd80cc36ca910a18725adb908fae\ 65acffdd7bdb2152a0d04acfcef57568b3058134c3bd2d3b95cf4c555d756a2c6781\ Prabel, et al. Expires 11 April 2027 [Page 54] Internet-Draft JOSE/COSE Composite Signatures October 2026 aa9a67156c2313f38003866e13f6adfe0a594c2f82985f698a27763486c0a81bc254\ 59217407236a3ee9b5ebfa0dd82e07c56ab2646451a06fc5568b79c133fdcd837408\ ecd50e727c7a81a011eda6478c8e6136ffa75249d4536cb3a4602022924766e6efff\ fe582f6081f3bef1e80016889178eeedf30bd2585d5f4f3862ae41b8674ff35f8bff\ d18b6d1a64531a964a827aa68292f6299be073f80e7935685f66c8d79e473149346c\ 4e0943c1ad25af6e133b6830ad286a9fd6d6887d0d7ee097c44259170756d028f722\ 0c9f19922329d7f9e17d07769d50dd58b2f3e12c1b12161ccd7e55cdbb969f56e0c7\ d29444ac6bf6d870099639d57090b6ed5de6b2482edaeee552fbdd9fe99ebf563d25\ 56adc54008661c902531826dbcf1962afce5093d51982810979a4138b40307f67119\ 04183d68d20402ef06c55e1bbe5482b5674e85a4b4a46d9b4617815b2bd137d45b8a\ 9ee46950576f2e2a92fe8a678d386193ef29374cdeeb914de22790a3e8f49be20aec\ c4b1009e8ea32d80a80effc8458075c5fa4c32b952717c1d72f96fa74fba1459e927\ dab73d97a5d31533df232fe76e06c646b40a6b56993f7e635c72a0fa2c04881aa3f1\ 6fede4663af5184821c5c05791753cdecdbf92c6d9a108f5e6c370e28a0d3c816bfb\ 78eca603b0c460239d340924f0aa5dca27c85672cd83c1a428e429110e6f51ffd28c\ ddc53f0650c61b68154d0f9eb0aad522e0eb2f286b5793660301df769b02ab7344b4\ 891b23d265da2ab0758e87d38b105b8d1be6bcf3d25622e58dda1005398816470235\ 196aeb7e1d1a6c7fe5830e0da17c84d7dc237edd7c2e5e26cf646285205d227b40db\ d9d1fc802462393c6425146b0de5f1c2fecb8faa74a81651ce1d5c4dc698cd5b5d03\ b7920abced2c1e74afedc9d1e8d8037ce99317072cf54368e5591b4b20e9c195b10d\ 971fd7d0f3a53a30d3f0349667db76f6114e0afa40585494558911c4a2c3e2d9bb31\ 6c4d66a05ca71e5bc89af0213a56fd092388b1c1d143212b7cc87d09d8290a6f0361\ d077899a727b581659ece4ec32e99151695a2544e08bbfe743b9d04430ed6105ac7e\ eb410790664e6f1e382993fbcaed1ddee363235f743edf94202e25d3b7d387c4123b\ 30fcf45686574321063285089949c3ebfdf65239019e5d7c3a9ee7e87c06e7649f89\ 6bffb39582d16c9b08d98b216f6b320392d0f3b7915ed7ebbcb81696c95b4d64c87f\ c1ca5040c76ef8de392c46dae65b7e7778ea420701d583c593076893789fd6a688b9\ 20e125bb27436fa266e00cc9e393f53bc94d78ab568885f5bb9537ee75620af25e33\ 96811a9bd5fb3432f581dde1d0017bf785c5d0e8f6ee0919bbfe3e8c7bc42c379e0e\ 9c01a5041df41df2da1eeac42ca27910c8c4114c9a7707d0a0d50f1f6929fd89555f\ f1b4724ed0c75edfa92a1d7bddd66e07f3f6542ab32d0574007054b118ab3bee7c06\ 0430405ff27ec5a56e95f909e97be49ad3de1a578ec235cce7b9262f89329dc6f132\ 18b23cfe611c56852d976bef411f71562682d2ad18b87f8b8ee104f55812dcc5ca18\ 0c55aad55889513a532854d6458c0d5340dff3c58c2b78fa137e1b9aa726e3364aa0\ 3ca0a1aca015bd34f332fdf7bab40d69fe5dd0ee6864a1e0bd30c0513e93703b7b68\ 581d35dd7d372c5e873fec5de4953e4c5225574ffeeaf01c368bfc98db7f4ccc23e4\ 8897b8df9f959ae008c888db08c2b4a23f5032d64992bda780f040fc0f5aeec18e58\ 9d4c977aca4f03f95e223f769c67c60c14ccf2c16c31d4c6daae4410ecde6e293d46\ e438b99fcb8c08f4c5c5f71d66ad50b84d63446fcc0c649a6cfa72856e6d283d9326\ b64b40cd836c9f42baf6fbb941756ea4fbd9b60ce080279e85a8a48e01b2c329d0c0\ 813ccfe0a3b592d52e9df6a27258aebdfb3993d313fe7e13b3df1f4d575d91eca546\ d9b9accd62cd8a1dade7c39d48a7709d0170f24bfef35cdf3658f65c69edc94040e9\ ec0fefd96d21f102e57c02fec73512e36d921527fc0789411855ebb2ccbb52427fb2\ 2405986df9f6dceb3a1705a50b5f084fff918774783dc2d7885910fd5a9a56a6745d\ 690495ae93b4b28d54897c76f0faad4350c48bee3bc65d56d5f67c3be572c1f1cc64\ f4a786f56347e98a59bd24df93d41c0569e2b3adf0fe2196270419c017784dec1567\ 7772d782aeff58db763356748aada7e25e13145407b1db7a8ab4365232601a52d55b\ 14538874d7eb4e711ee72bc7cfeed386837ea692f9d3d9b70e99754a8ab651a70d32\ Prabel, et al. Expires 11 April 2027 [Page 55] Internet-Draft JOSE/COSE Composite Signatures October 2026 f82e2b5bbe9e2438e988042804472b26087f74a795933c6a8d582c218349e22539e9\ 2b9f6b58e5a6deb8430f49066912b84d5fedd7bc79c62c05cd322dddeec7b41fd49a\ b46d827f5ede1abce5227629c586470a0ccc9b1c7ec075c92069d2186a703caab5ba\ b6d1a0b805bca39510c19ff4918295a69c6a0ed0bb21c3d2e98eb978d237191b9083\ b1accbbac6bd6205f4f253ebeb11f4aff96fe2eb5e517b48198715ce865335fc8e58\ 5e6eb12b31b53ce64ee5e09f03f3e1cafd7e50c1d22cedcb84e79af2868d86436ba2\ 2f529dd5b9649f1eb1ab9c6910959d77a5148f0f70600d4b8d56d8052310da173e53\ 039774923dc31d78b67dc333ba16db87f35c50c24f1ca65728a0b2e57866190ee251\ 9089de35e4ffb9dc77f03fe20e0f12c3041ef7cbb71f03f05182ad9692e01dca19de\ 9fe9a6f661e43d251b3ae22790e189d489f31fbea23e0726b4e3a7337713035b9557\ 4979c4cb67f11e7f3a9ec14f61199234610a54d3ac52b7cd4d3ea56338fb0395fdfc\ 5643b122a7b91cae7e32396c7b9947ac23f6a075716f86160ebaf274bdbca283bc45\ 83296d015e8afcd6d1e38f94a557779235d34514f36b10f2c885d2f61c8bdd07a835\ 9db3cfc8863d5c86643fb3c64beca691de36bc6fa6e65212b46b91b404c4ba167d25\ 1ec86e5bdde15193291fe9bd31a263f7c2bd5eab14b4161ae63ce7e0d370e6828e7d\ 1595d8aaede2ff87623b7caf22b29aa4bfeb7b88adf29aced30c3b4f5a95bbd2ce88\ c71d4e431e75618779a0a3afa4c42a9adf09ae441b80845c7a9d1a1de4cd2f213593\ 3c48d282b8672bce5fa5a785f06033803252c037118c32b080addf524f0c25f91f51\ 701fed5c6f794849c96e9e87236db5a5763564e71e70b2e5465d77cc70a92cb1d75f\ 657723d3453adeb76cac0e00d5ed56d43dd4fd90acea363a011fd99f66342d08d7e0\ 98b8d8479ff6004ca9704b801881450c6313b44241b6f97e33db8ec4dbf84575d0a1\ c927a82857255d948cc365cc4dc8bcbcd79c8346d93376cd8448998ffd14cbe528be\ e3d7da8e2fb21011ddbe801870f01d1add37d856c5e5391db3bf604f7ed9edce57a9\ 11b9e8803aa11f3c219d89dffae83902afc3bf3e064b257d24ce1685444215b03c94\ 50ff5d35e056dda2c1c67f89961d3a07c12690b4b935fe779263775bd6898f771d42\ a8e867c7e58820ad9edb5519af8cd82cd82bb362012648bc1ae1acf99a880a088fa5\ 47bf81795b0d2c2905ad9b119f2efb842e94749c0c1b1a0b8398671c5b5dfaaf8184\ eceb3ac3c33b550609db9e6495692419b32c45e96119b840e7c31b3a176baa7fc2cb\ edc1cb0b67fe2c3543674a38be0b28d655712b7a8582f1487968ce14bb5f97569c8e\ a16b79e03f76f763d9ca9d5cee9c3eac17ad862e82c78470c0e837969a9e354f9762\ cde06815d4ac639717abdb990af1ed55df7320c8b3e53a77ebfe723eb3eff8dbfaaf\ 363db08f38c8677f333266b494349e964233fc74731621ba8bbfbc3858b8db944cdf\ e5e57091aeee4c2270db221a518d84e219b38bf7a04e51ab46d9a6ab9ea9649e8921\ a7424b5fd62db3c6e1292e9ec644495a1f463ac833613d884800276cd280b3f77c20\ d7f67286c604745c80690e4c27eeae7c98237a45eb3f9f9764ba7b8a028c51606f16\ f6cf560118c4a750404618d2dff7c631271252bb3a833e2757b79a1e980b60d82355\ 13624c72d12fda1847265c2cedfd7e602d4788fd01a03e178cc26e13e781f9685942\ be2e7f262611a3e8bfb7f1d1ac626637274f63bcb243f1e474b2e18fff5727a20ea1\ af6b1428dd74bce4d3641179560ea6bcfe1f797d8dcf98ffab1940c601465af3ddec\ f9fbf4a6587eab7a8bb8353999b7bfa874f505671a39d37cd29703d9d4488f14748c\ eb77f5cfb62abb49976f51ffa601667e10f2455efb047a3b9848698032af6d179a44\ ee1f24995ca91d779d87a248c24580cf16ffcfe120fd5ee6711608da0ea9be7643cf\ f540bd8da31b52848bae10bf7742fb5b2abea8a0fd8d02284172303d3ea30324a9ae\ f10d27373958849a0a224260747a8083a0aac4cbdae5f50c13156eafb7bfcad6f4a9\ caccd906253f4f5ce1000000000000000000000000000000000000000004080d1423\ 2d31373065023010b19b007562706e06cbb056f9d262c2e2a70ec805b00b007273b7\ 09354ace931f227d0c18486229adcdb062167d7ef0023100d04bb19c5883bf28f4cc\ faa52f17b788440fa6b88e7aa2173a49a79f334761e8f13add3c781e616a5aae129c\ Prabel, et al. Expires 11 April 2027 [Page 56] Internet-Draft JOSE/COSE Composite Signatures October 2026 dab3618d", "raw_composite_public_key": "\ e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b468cf\ c82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91fdb643b5\ 12f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfcfd12565433c4\ afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4318bef5eb6e897e8\ b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ffa496445967e75217bfbc\ 9048f9956443d8731f833eb30de10dac96fffe7cf65ea0445c3e31e8601e133be6a1\ 00764fe3196e267726441f31751fbf9a6f5880644f4e7275e57de2b0f105e4db055d\ 50dd1c9c934fddf535b8de28b0c74c0449f222cd2ed0bb8fbc775ccee8c940665b40\ f712f4f7e00750e9e1e4cd9cff25d1945c3e9bca53ccd4f12eee7581856ebd68f268\ 45956e3e7beb761f0fe75bdd31bfe2fa018113397b387bd59d62a68b8af7fa245ab9\ 32e69f778e2ceefd21304fbb8099ea13d8ea57c1813197a2f75ae251075b51dad38f\ 853669e9d5f98a3655098941993a1594860fba71fe530ee5c29f58f2978af688ccb7\ 5a5838a359c112e98e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0\ 874e35befcf3e6119684768f36e008f04712177cebe627607381e56eaaee161c1729\ b8de51dbde474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab\ 5a3a049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24\ feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c248512488851\ 07b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff6c3e20a4\ 7be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283c850d8c58d1e\ 5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c501a8ef2ecadd1b677\ a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24fd92b7b5b4025feae996\ d3e48fd4c650d82dbad7eaf936639698512f26253d2ef6847c8518e8565cc9a5495c\ 6fff57cde7323882c54a7db470ab2daf8ffd2bf794fa7c692d9e7fbd532eecc1d788\ 0e2ca0b3216128be28b4a9f1d151fac97808b0bd98b7b43a612a9ac865812bfeac6f\ 47460277840b52a3b087f916ca7cedc0f768ea2bd19ea21155f84b4a04c4000ad2ae\ 0587154d560bc0a477a4f9329a8984dd31eb1f2a05e3d918701d630cfca9af61ef08\ 8d2c5581acb463e439902e5d425719e956b8d6df7305b28e0ff27d3ad0de2085d292\ 499b19a3390d4396fb3bac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe\ 24360f84d14f8e472712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186\ d3b764ad9e9cfeee456a73c291d8de3912414ac43911c372173ad7b472af35c6853c\ ed2fe7b5fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094\ bad07136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9\ 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ceecab\ 72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c30048bbaa797\ d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bbfa15acb5cb37\ d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c54d6f87457373a0d6\ ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bfa336e5bbad14f73640f1\ b9febe800dbaefe1630c61fae635b074c564eaa9db189c9e7302873fc64e6d497bc5\ c29080987a07a21d4af210703a4fa07f2fd816f12fd1e29b4c0f44afe9bd4a1eaa8a\ 7ae6f02a5b4258f52caf6127f62632a67cf4e8310be56a7c28c86b2e277600c3e92c\ 8d23d42586244c571e90568df202f2f6d81f860a565f9eb91a3c78372e2a8b1be61c\ 5418cf49bf2d6c8955d4a482a9919b7660b3f9a4404ffc454ea073e1e4b2689ab2cc\ a4e46bd7004a6c491fa26ee7a57d60f35edb2b821e6266442c8f335d452d524c772e\ 0353724c23c7dd15b7aa155e91442022140c5fcb0153147edcf3e8952f6f0399a3c8\ 8066a72756c9409915de63f64fa797841c57c796c6fc550ef745dfe9f179457f9475\ 5ae5a2506a764f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec\ Prabel, et al. Expires 11 April 2027 [Page 57] Internet-Draft JOSE/COSE Composite Signatures October 2026 0b36e3a6c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb9\ 7b685ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea\ d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd879b64\ f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f33288e68\ 9ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2d38fdb7a65aa\ 43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05d447f9f58ebeb84c\ 65b36c8afcb83727a1508994e826957a663b0b9b8a003325ab6d6d6462ee4e106019\ c0dffe10323b7bde7d82a38f85fd08786e860ba66c161b64b0708c363de5c6af62d8\ db3c243d1e1b712cb1d59e942b9b6b4295a5a500b182cbd5fd1bc6ce9376d91b47a2\ 284f1fbe0ad1c048cc2cfbb4afa3a9eb9697503b69feca990eba7e9441af9ca44cb3\ ac6b5ed66e591c201fe30efa8a7c471dc613d6254c263a8e132104bec47f1aacb3b2\ fcd4051b69b5e3fcb1c147a65c2f90c4b5188bafc521cab03c12a309da50b5a75177\ 27ed41228ed123fe1b152f6a6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff\ 9b2fa40ba5ed5630242539e5d96823e89dc818a13d16675ee3079d976f694f5acc97\ 60ae789e9b3391b289e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a29081\ 0ed35e56bb19d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67\ fbe761db9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a\ 2e6a152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57\ 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6b9e2\ b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe99941b1e8561\ d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23cc3a65601313\ f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d011b01b4154d1b920a\ f003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b62124b0861b163a3b91aa\ 4bea28076c3432df3b29b6c4e1ba588def420071fc157de90eb2722ecc9ab00df3c6\ 69383a61a91bb67bd287ce349b4745ee7a479dbceef166b9acc412eb579fcd643730\ 7edda253d606b7be7599c38092bc52a8598480edab8b82b1d21c565d2137ceae0b66\ 42619b16133d91205d6355029e9cdfeb9a28b373d95916b6b707d4c712c09cf36daf\ 1a511b2bedb1aa70ee58d46a0666bb287784b0a3840c589a7a04d5d6f2216be90aa4\ a512d5632f5c9bfe7b8b13382f999b95d367c7c46b968074ce315197a5ff3545c7b7\ 7a804ade56a95b5c24cdece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b\ 57b763439686d4a304aa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859\ f741e082542a385502f25dbf55296c3a545e3872760ab73617de4a96262c6f5d9e98\ bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90\ ea0e5f" } Figure 5: ML-DSA-87-ES384 =============== NOTE: '\' line wrapping per RFC 8792 ================ { "mldsa_seed": "\ 0000000000000000000000000000000000000000000000000000000000000000", "eddsa_seed": "\ 00000000000000000000000000000000000000000000000000000000000000000000\ 0000000000000000000000000000000000000000000000", "jwk": { "kid": "qVsShuAUuE5EUbqI481LsrarR_kKdrix0rnVJ226Ko4", Prabel, et al. Expires 11 April 2027 [Page 58] Internet-Draft JOSE/COSE Composite Signatures October 2026 "kty": "AKP", "alg": "ML-DSA-87-Ed448", "pub": "\ 5F_8jMc9uIXcZi5ioYzY44AylxF_pWWIFKmFtf8dt7Roz8gruSnx2Gt37RT1rhamU2h3\ LOUZEkEBBeBFaXWukf22Q7US8STV5gvWi4x-\ Mf4Bx7DcZa5HBQHMVlpuHfz8_RJWVDPEr-3VEYIeLpYQxFJ14oNt7jXO1p1--\ mcv0eQxi-\ 9etuiX6LRRqiAt7QQrKq73envj9pkUbaIpqL2z_6SWRFln51IXv7yQSPmVZEPYcx-\ DPrMN4Q2slv_-fPZeoERcPjHoYB4TO-ahAHZP4xluJncmRB8xdR-\ _mm9YgGRPTnJ15X3isPEF5NsFXVDdHJyTT931NbjeKLDHTARJ8iLNLtC7j7x3XM7oyUB\ mW0D3EvT34AdQ6eHkzZz_JdGUXD6bylPM1PEu7nWBhW69aPJoRZVuPnvrdh8P51vdMb_\ i-gGBEzl7OHvVnWKmi4r3-\ iRauTLmn3eOLO79ITBPu4CZ6hPY6lfBgTGXovda4lEHW1Ha04-\ FNmnp1fmKNlUJiUGZOhWUhg-\ 6cf5TDuXCn1jyl4r2iMy3Wlg4o1nBEumOJahYOsjawfhh_Vjir7pd5aUuAgkE9bQrwId\ ONb788-YRloR2jzbgCPBHEhd86-\ YnYHOB5W6q7hYcFym43lHb3kdNSMxoJJ6icWK4eZPmDITtbMZCPLNnbZ61CyyrWjoEnv\ ExOB1iP6b7y8nbHnzAJeoEGLna0sxszU6V-izsJP7spwMYp1Fxa3IT9j7b9lpjM4NX-\ Dj5TsBxgiwkhRJIiFEHs9HE6SRnjHYU6hrwOBBGGfKuNylAvs-mninLtf9sPiCke-\ Sk90usNMEzwApqcGrMxv_T2OT71pqZcE4Sg8hQ2MWNHldTzZWHuDxMNGy5pYE3IT7BCD\ TGat_iu1xQGo7y7K3Rtnej3xpt64br8HIsT1Aw4g-QGN1bb8U-6iT9kre1tAJf6umW0-\ SP1MZQ2C261-r5NmOWmFEvJiU9LvaEfIUY6FZcyaVJXG__V83nMjiCxUp9tHCrLa-\ P_Sv3lPp8aS2ef71TLuzB14gOLKCzIWEovii0qfHRUfrJeAiwvZi3tDphKprIZYEr_qx\ vR0YCd4QLUqOwh_kWynztwPdo6ivRnqIRVfhLSgTEAArSrgWHFU1WC8Ckd6T5MpqJhN0\ x6x8qBePZGHAdYwz8qa9h7wiNLFWBrLRj5DmQLl1CVxnpVrjW33MFso4P8n060N4ghdK\ SSZsZozkNQ5b7O6yajYy-\ rSp6QpD8msb8oEX5imFKRaOcviQ2D4TRT45HJxKs63Tb9FtT1JoORzfkdv_E1bL3zSR6\ oYbTt2Stnpz-\ 7kVqc8KR2N45EkFKxDkRw3IXOte0cq81xoU87S_ntf4KiVZaszuqb2XN2SgxnXBl4EDn\ pehPmqkD92SAlLrQcTaxaSe47G28K-\ 8MwoVt4eeVkj4UEsSfJN7rbCH2yKl2XJx5huDaS0xn2ODQyNRmgk-\ 5I9hXMUiZDNLvEzx4zuyrcu2d0oXFo3ZoUtVFNCB__TQCf2x27ej9GjLXLDAEi7qnl9X\ fb94n0IfeVyGte3-j6NP3DWv8OrLiUjNTaLv6Fay1yzfUaU6LI86-\ Jd6ckloiGhg7kE0_hd-ZKakZxU1vh0Vzc6DW7MFAPky75iCZlDXoBpZjTNGo5HR-\ mCW_ozblu60U9zZA8bn-voANuu_hYwxh-\ uY1sHTFZOqp2xicnnMChz_GTm1Je8XCkICYegeiHUryEHA6T6B_L9gW8S_R4ptMD0Sv6\ b1KHqqKeubwKltCWPUsr2En9iYypnz06DEL5Wp8KMhrLid2AMPpLI0j1CWGJExXHpBWj\ fIC8vbYH4YKVl-\ euRo8eDcuKosb5hxUGM9Jvy1siVXUpIKpkZt2YLP5pEBP_EVOoHPh5LJomrLMpORr1wB\ KbEkfom7npX1g817bK4IeYmZELI8zXUUtUkx3LgNTckwjx90Vt6oVXpFEICIUDF_LAVM\ Uftzz6JUvbwOZo8iAZqcnVslAmRXeY_ZPp5eEHFfHlsb8VQ73Rd_p8XlFf5R1WuWiUGp\ 2TzJ-\ VQvj3BTdQfOwSxR9RUk4xjqNabLqTFcQ7As246bHJXH6XVnd4DbEIDPfNa8FaWb_DNEg\ QAiXGqa6n7l7aFq5_6Kp0XeBBM0sOzJt4fy8JC6U0DEcMnWxKFDtMM7q06LubQYFCEEd\ Q5b1Qh2LbQZ898tegmeF--\ EZ4F4hvYebZPV8sM0ZcsKBXyCr585qs00PRxr0S6rReekGRBIvXzMojmid3dxc6DPpdV\ 3x5zxlxaIBxO3i_6axknSSdxnS04_bemWqQ3CLf6mpSqfTIQJT1407GB4QINAAC9Ch3A\ XUR_n1jr64TGWzbIr8uDcnoVCJlOgmlXpmOwubigAzJattbWRi7k4QYBnA3_4QMjt73n\ Prabel, et al. Expires 11 April 2027 [Page 59] Internet-Draft JOSE/COSE Composite Signatures October 2026 2Co4-\ F_Qh4boYLpmwWG2SwcIw2PeXGr2LY2zwkPR4bcSyx1Z6UK5trQpWlpQCxgsvV_RvGzpN\ 22RtHoihPH74K0cBIzCz7tK-\ jqeuWl1A7af7KmQ66fpRBr5ykTLOsa17WblkcIB_jDvqKfEcdxhPWJUwmOo4TIQS-\ xH8arLOy_NQFG2m14_yxwUemXC-QxLUYi6_FIcqwPBKjCdpQtadRdyftQSKO0SP-\ GxUvamMZzWI780rXuOBkq5kyYLy9QF9bf_-\ bL6QLpe1WMCQlOeXZaCPoncgYoT0WZ17jB52Xb2lPWsyXYK54npszkbKJ4OIqfvF8xqR\ XcVe22VwJuqT9Uy4-\ 4KKQgQ7TXla7Gdm2H7mKl8YXQlsGCT2Ypc8O4t0Sfw7qYAuaDGf752Hbm3fl1bupcB2h\ uIPlIaDP6IRR9XvTYIW2flbwYfhKLmoVKnG85uUi2qtqCjPOIuU3-\ peT0othfmwKQXaoOqO-\ V4r6wPL1VHxVFtIYmEdVt0RccUOvpOVR_OAHG9uHOzTmueK5557Qxp0ojtZCHyN-\ hgoMZJLrvdKkTCxPNo2-\ mZQbHoVh2FnThZ9JbO49dB8lKXP4_MU5xAnjXMgKXtbfI8w6ZWATE_XWgf2VQMUpGp4w\ py44yWQTxHxh_4T9540BGwG0FU0bkgrwA_erseGZnepqdmz5_ScCs84O5Xr5MbYhJLCG\ GxY6O5GqS-\ ooB2w0Mt87KbbE4bpYje9CAHH8FX3pDrJyLsyasA3zxmk4OmGpG7Z70ofONJtHRe56R5\ 287vFmuazEEutXn81kNzB-\ 3aJT1ga3vnWZw4CSvFKoWYSA7auLgrHSHFZdITfOrgtmQmGbFhM9kSBdY1UCnpzf65oo\ s3PZWRa2twfUxxLAnPNtrxpRGyvtsapw7ljUagZmuyh3hLCjhAxYmnoE1dbyIWvpCqSl\ EtVjL1yb_nuLEzgvmZuV02fHxGuWgHTOMVGXpf81Rce3eoBK3lapW1wkzezlk3tcA2bZ\ OtA9qbxdsbVR37kemzQ9K1e3Y0OWhtSjWzr-A4eKSbKCMtTxpEKuveEJ-\ Aes7339mn9luWL-UtZUcxLKzs_wQzdQj50lKajxZpFpshwyxIAA", "priv": "\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\ AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" }, "jws": "\ eyJhbGciOiJNTC1EU0EtODctRWQ0NDgiLCJraWQiOiJxVnNTaHVBVXVFNUVVYnFJNDgx\ THNyYXJSX2tLZHJpeDByblZKMjI2S280In0.\ SXQncyBhIGRhbmdlcm91cyBidXNpbmVzcywgRnJvZG8sIGdvaW5nIG91dCB5b3VyIGRv\ b3Iu.6mlv0vprz3_C3jIdjEy5TjdnZJWfwglag-\ piJ1yINZZh5cNJ9WbU_D7KPjyIrLp9I6atROfKb4_g4kiimLnfhOs3J0ZoOgxGMQ1gaa\ -GpPmKieV3cxq-\ AaTe11cbkDMfk68jGpZsXb86JM4ZUgC4QyOIphaf9DQZxIdaJRTEFnlDzFxIu8FyK6Bn\ m0b8eF16xO9OtZMtn1dDVfxZnIgleuMTFl-028pULw-ChPRhBkJ8NeKa4uuMm_u-\ N5ySqopXXD5rRr9QDnbIONHzQy8C4nZDe3DVaeykmh1D8OXU9AJJ2Dw4ipW3xpE3_oJD\ 4nyHEVnIxLhhnQa-\ NpSGB_OOBqPrQwiKobx2abjWZP7y11bzgnvQPzkZZt8k9MsNNjwuurN_qvcBGwX6pYd7\ iU1-A0_qYQQnCI1CB2l74-\ Z9VosbZlSOZH2vdtB9waEI0QSaQxeYYR2eo3IFEFxtmm2g5Pod2Co8VQbL9nJO2SdLqQ\ my7aQMbq9VwSAB5iV9NDXIJXzVLoEISVPXmdnvxF09Hcxp0oAMiuEJcPKvwSzfy_xe-\ eLhVCGlKQ8ad3ByZ4jON0vv1ISldy1_1LGIRR8EWWzkavAknxdA_-\ 1XeyPfADSZPipS2k1iWIj_jiG6QtUnHthlhzmSzVbTjWg7_C1J_jWEFxems6fu4TAa1Y\ DD8aCVoapfSnAmtIYSZVjn3oDuZ_VSd_3E1ScVtkbQXiUQPuz0Mo6RY-\ YnDUfUBfTCz8Meyo_G8igMtwvUOZgXqft8h2xp_3Y1Ang6AJL2nduPSyWG-\ qmAZYvk_Ub6Dsw2TCshCAJmdqYIFXYHrSku-\ SxrKW2nwLrOvMNUjVmRpFiO8GhyaQ65Ytos0GM_QrHgtXKtYrJpQoj6jo6MgSrWEQ7kA\ Prabel, et al. Expires 11 April 2027 [Page 60] Internet-Draft JOSE/COSE Composite Signatures October 2026 XZsho8Hv-1yf2MZj7ZNBlaSCqlWc6GXChdvXILrKppWM-\ uZalbgt2duSZY3LGg2dqN_1YwPSwqNuGIpsD8GFwwsOQ2UfYDcAUaoNoT7bwdMwyPrq8\ yLIhRG37uMkLwMCyuNOPN1lZ2hKKo4uP1tkhlggKKyrKAOaSPXy3t0fk3apLKqpTweMn\ LzGTAixYGAlpDXW72fdxED8cVK1LzpDTZaIg7bLs3Ox0lfWAfBmQWv9WOpWmCWBvXEuN\ 41SyAim_PxqUPH8o5HWAXuBx9fAb7WpcgtquIJv2x-\ cPP7NncmIWabdA3HfVRBMAjVAgAHDRjRrwADMtRJodwGMNi3b9tyeuZjy4Vt_ciQeR9A\ Sd2QTyhc3MQKgIrwqZsJDNzQBWrz7HnWaWhQ61M16gySlh3S6isJD8vzwgB7VANiQDw1\ pYekUn_JlzQpC_o33wjjgUrIyXwQHDmEGL3XyaOeHDdlCJcTMWbvGcuvDE_Svt87uiHv\ GdkUtFVhWcI2Nqwr54QWD5sYvnzNQ83UdNXFMUhxQ1SPupBJOmQCZks-\ n8qOr5b2YoknwU_07YkIZUhrNuupuq23DeEWa9vCV9Ab00K2opUrhexdcAIif-\ n_6ZwJ8kb0ykFgvR3GfK3lAkqbTaSeSYzdUvBrRNA34L_XRFGryciaP87MYTh4k8OdfK\ 5j8-OXKRuzpbpIneXqh60s_6W2KGQqmXsU3rK10c2J0JD5aSeGoWVUj3LqHJLA-\ BlgBerdTlwSo3V2JA-\ H5e9Lf60OdhNieNbEgztjdcq5jlzIXrgcZQcMt4bjI_Hs3l9NNt2SBsxTEA2DQ06NVv9\ mLwE4lHqMCYQpXSqBA2lPOT3P_d03YVVneBrIh04IjsTnMvLY9iHtDPBFfLBy2ovLNYN\ XcZT-WeCNM9UcH7p8MHscuxsY8LCh0sihZsZ4QDVEBdFgV8s_IUV6Xk-\ yT6zd0M_g6DNi46UqZyU7kofd1NuDNzgA_C1jdkPQz4FavXifAMrstfly2--\ jrcjN5Y_qjFrAIDHm2ohXSH8kzwiGE4a_L3BcfMEp14ixNJaL26apMPtAFCzqcD3R_5a\ qOdp2mE8mIAX4YwXTLckIwad6Kxi_ZPa3VRwjRo1uYfeoUczgJ4t1tpVps15luUYfWQI\ Eo4NXPKuUKKbFbbp7dTaIsDKNloBbCJrL1FiSAZIBxBSjyE6GMf59AXjZL0o920In5YE\ vLk5moeSm__KMHUPQbK44ipMKSMQjxCefN3ph3b44LvgnAOe8il1M_MvJfKuQOufAD8q\ 5pZNIpMsYFiE7iUzV9BkTwapfo-GB_WfPZMN7Qe-\ T4of1wo5SMNDCoDggFJaDGQvsAqUGJXqgYAASG_YaMwoHGpvnfGoMUvQRbOrioMqrmN9\ 9J88JlqSPt2aEk7L47zf_0aWmcRrL2S4LZyPPaXrgjhuP76jhjasqngVlahIzOfU8cs9\ AclI9h5HakP0jOCaooAW2tAmd1zqj7rXwln2sQr5CaLhkTXJt6XllqDUaX42rxhXCuuY\ LXLflsBrtsoXmru7hEw5SF4jlvprg8L-syKm0ebvbJPoQR1MzrEwP-\ kfr4q2Iv0c8pEnW-\ 8UyYiOIoPv4r1xHRWtcGmPK5utPaUU56SJ6iGjtETDbiXvT5ZySjtgAjOWvIoRoL-X3-\ ubkUgR3AS_1KBOt8JaLWAHJVgbocCh_qFbsZS36sSVKDaxPu0SHH0J2bFXGpjJxs6VSS\ jkCsvv2RUtW502YCrNycmj_4Wl5NGqgb-\ 1WNdcspPgv8Sb5LV5rJhj_R0CEmvE0MeI4Nh97lqa4IvqsrPHcMymfBsBoI8nayArDWy\ 2wm5m85aLIdj0ON8srD9ikYD2TO-\ xBTb9gaSONJPq1UTzbvSdrq0rkoEbbMf69UmSiu34us-\ _tvQpaS1BjjPHpD3pBmsiaXT5rY_Oq_S11C3OYXe4ZIYmhdqMBR-\ Qjk0DQLkGy45QJSaULViZx4m2P2ziTdd_M-\ TH2GCzke5Ks8ONnJ3TI2bC_RKQaK9AqHmjETbC_ydtTvLwhT6E2xy3WKb_E0UCFqYd91\ 40-UNYVxcXBhP9lBsI3QHALWRXEU9nI3TgYYVdWpfgrc9DV996c6Dc-3iSGNMW-\ bwbPzM_et5TJEDpCgYq2aMDammYUwnknTPp7m8qI05aT5wwnZuBQWWXdy8zGYUW-\ fPxUgr7UGuYQLjQOY53BAkhbni-Z1s-bsIjTKup3kRgI1oOY-\ JVQPeNnK1QGuZnxMRcoPJ3Q96S2YfNNMSjo2rYebmt_9jnlsvhLN0O5niL1_1bcK-\ mPu_PKMxmTBswKj8ZI-DJFf5YwDDj6RsrKv629MeJ7Iad-2LSs006DLxBBN-\ nOpsRDtra47X7cjle3LDq2l_lN8f3fTjlfh-\ B1ps6TZ6u4GRReH21COwk7H_vdG5G9Hq4UNczV_r6AzIK32EgBwF5HNA5yVrS915a4IU\ -oKDo1gL_tZUKrZJmL0m0K8Nu-C1M0EP-6WTQMxppc5-\ CxAAnIvHNTVO3EhNj76ObDPjRdDAm94ayRjMosvCDaUGdBEu31d-\ qmHl4aqhkn0y7MivNdrvamxPQPlN4E7GV8xQrIJXRz_KaoM0MypOUUHRPrVNMiWlrxOC\ Nhbf7xHAKdXmX-\ vxmnDbG4qwSUSyE03xVwQS0Beoutrqy2N0zs2cbUhnW5RhGHyr17GWgf1qtEBzaaIkRx\ Prabel, et al. Expires 11 April 2027 [Page 61] Internet-Draft JOSE/COSE Composite Signatures October 2026 6HlPOFvNncSVDvxsY--\ FBRiNcxvopEaJvBCuI83T60o9EDQHAVb8SK_VVsFbph4NifyHNUZUZ_ppoTJBOO00Bzo\ mR0glpomirfGlMoqoiG_2huhHxRX0Q4F-\ ugWFLRpC0eil2we1okPFUqpPyEpfk6DHVC_jmKEv8-\ ZtjJLHWPb6V0zo6X5jnHJeKg_etsM4YbgFbqxcjVya7ZE09zlJd9hHlmefg6sB8SGl21\ 4yOM6_sbWFsC4uVb7Zb0gEHwuqsxaCDNicugM41NkAmZltBCi6eKgGlAb1TAnKl8Vlz3\ xSO803BNvsawTG1ZpJQEDAIEWfYPumlxgBxGmOEaoKX6PXwt7ufxRArrkUpZ-\ 3Q2lOXqKZTd8hf-oXD3sB0M6bVf-\ uFfe7GyeUbC1_lcuQn6ZlRi87MHCRoVWOFVOaE3znF_HgG3GQFPgNZ1rp7l2ezWc6eRY\ u5ub77HPAyFt_9qyv0jctN9JPszVxa9gRD8vPtiifYOzsZH9t7CgGbBPgtGZW6KYLhRu\ AqFQ0cGD6EifApAgEgqFdzDb1O8RweQcYHGM7NJGZi2k5wM-\ 1XBSM7LpoATzgOoXAuvx22shY-\ jvUNzXo0YnvTzwnMr_YlJur8hmW6A3K1gS2RNAZnSAVhtxCgTeO1p6ritfBsvgtikoGI\ qQZrGkGdGsbtEXlGowtt1q4lQA6ac-\ 1RSpb3wD8HjdrbGmvtihNrIHT31rVkQE01fSk0m4R9QiOB7HqpE98f3HbWDi-\ Vc3uL6mbAVzM-4yh0AkacA6kRi5FbttCkyl0l3zcgydyh2tYNGna1AUGC-l2Mpc-\ mIao5cCXPWrcH1J0rRAz4ro9yf695jjk6KD-hHxn7rPoJFrhD--\ sUEERcPlkV_ev4we2ZFtB91UNlymMVclpU2R5c4AiMe9Bm4hxpEwxDWGCAPoZJr0qTyK\ f2f0Un_Lxtcr5Re0XjKi1xOAm6tJPgXl3KUXlxJGcsFOEUKnDqY9JrkmC4aG52dMC72k\ 1z17AMC6XqX__j7lnx4-qkWFzbLo2ET6DN-x10bItq9OcrgisUaatfJikssUlLwxwLc0\ -\ faty46lWgmSsx5FO4L7RdlXTaMb0wn2B8lTCzOa3KOwVJk83RmZJcqajxeSHdgwpMwfz\ 7v3PQvzeus5CN_H-ZT2iQT9-\ ni09WSPaRNQeypf1ZRFtdmSdY58zAN0cQwcKflY4Qe0Y4SaMEaBSd1mGh7Zo8XkLeBKV\ XhpEwBCQR1j5lL7rfq2fZ7skCnBo0vxl-awrtw7wn92z1D0LHpPt7pG-\ mpaxhuEpQnuXlcFLO75wdGeosDp5gSKkhysP6NF3ALNKmHwPggQKs1RCgRyx2vC8jzi-\ OStU4Q-ZM-\ _vKxCkbVPegEXCfmcqHGBZWEAjhk15bnE35rmvfJZhPxuJukKm9KK5E9NF98oqQw2kbW\ cADq9oXf3XhoFsE7HkJH2-\ BzM2eyVas9AyMCjTzhf6DAcMJ9SKYFVpE2e2cF8C3SzFag0qTRB2TzL5ANpkvlPgeSV5\ 0ejqBW3jLWWCsNNqN0XaVIj6QlQje4BU5-Rt7u1tGc4mHQu4mlT-\ 8LaxCzvmANSL2_nk9TcHDt2dk4KCjrwTWvl7s8HpSZz6ZWSxfZIWmu3G4lAxNfjgDrPx\ ZsiHXUy_X5rK9H2dJrJz7b--ZlMj0RVOQxK-\ Gy89E2FxuINuJEUQ9m0PBKkDYKYcDNPQ5KctARHWs7JEjHGd09A86doqk5J6t-\ 9bWSliiNq-\ dRESLX25HF_36YrwycT1lVEIXiAfPci8rUDYXbhJR6yqiAvHpqce9gktVgft5zxgdh2D\ o-MadmAAqg6xG-jBYt0FiYkRhJ_6V-\ c0zt_sPhUstyOa0IGBS6tp_ITbkwhQfRhVPQLzbOwjYmFvqEc_JQjpFDpH-\ 8g93aFoPh8BQWvBkLjtDVqN8UX-\ 1MSJv8tNgbfdxW1ugUljHDTgtGci0TWzIZQgZVOHiJaIRvH1frkwaCslsXhlcesq04mp\ TnqTDONc8aqFKlNITedv52VX3UYfl-\ EfxiTYz05sMdYDMJ_iPtJMXH5LMMT3D5j5YNItz5PtKKwQI9xdLk3et2-\ dZzAsavRxyb0gg4s1oEQN2ChD7ttQgYNflZEulS45Q8o7xzCDTwe1w1bet-\ YGpPZacfoqFpVULeqISBaVAxCK3dXdH-g4qIPipupJb0Wl6oan-\ 2M8xO9cfTi6vSbtCF9dFooEQFJyMQLqBSWDO9RdW3tF5-\ FqjQqIYiOxiXVEqafbfOLuXf2YO_ltvD4e5rGgigpPeYcH8GUanFPhKQ-\ J9t3OE3NMmZzg3QzoQVG6WEbYO8OlMLYnAW3ImcayLMlW-kCVL-u8U5ojHIbGorPP-\ d5PGykGKYe0q9OlXofimQ4OsGBCdekc7ZPNNVJhnib6Ab-6aI-\ Prabel, et al. Expires 11 April 2027 [Page 62] Internet-Draft JOSE/COSE Composite Signatures October 2026 ApxdJT5LEb4Oqam0ZAjHrJk87U3Ohttzi6gILEBQmX3F6s-\ Ht9RssLz1ASVCUuL_HztrbLDVGXmRto7K83_t-\ wAIIOj53wve20AAAAAAAAAAAAAAAAAAAAAAAAAAACBQiLS82ODQ__MolBYkpUE97bImu\ HSfUSIYTkZmwTA5iomXOc4Y7j8WJfFGNI7lMtiXzokkpteDeXAyirf9JgEfP8fEbBssP\ pTy45VBP1FGecxR_8UdCoVSAExR6T7PpNKis4POoP_0-Y3K0Ta5-yZ8J1z7iwTEnAA", "raw_to_be_signed": "\ 65794a68624763694f694a4e54433145553045744f446374525751304e4467694c43\ 4a72615751694f694a78566e4e5461485642565856464e555656596e464a4e446778\ 54484e7959584a535832744c5a484a7065444279626c5a4b4d6a493253323830496e\ 302e5358516e6379426849475268626d646c636d39316379426964584e70626d567a\ 63797767526e4a765a473873494764766157356e4947393164434235623356794947\ 527662334975", "raw_message_representative": "\ 436f6d706f73697465416c676f726974686d5369676e61747572657332303235434f\ 4d505349472d4d4c44534138372d45643434382d5348414b4532353600c86e106632\ b46f3f7ada053b838a8cbf21f8773ee7b1f1f2bb80d108008c2378d18bf1a314a40f\ aefed6bbd88bbda4cbae01e4d335b9097c7862e3750b4c7414", "raw_composite_signature": "\ ea696fd2fa6bcf7fc2de321d8c4cb94e376764959fc2095a83ea62275c88359661e5\ c349f566d4fc3eca3e3c88acba7d23a6ad44e7ca6f8fe0e248a298b9df84eb372746\ 683a0c46310d6069af86a4f98a89e577731abe01a4ded7571b90331f93af231a966c\ 5dbf3a24ce195200b8432388a6169ff43419c4875a2514c4167943cc5c48bbc1722b\ a0679b46fc785d7ac4ef4eb5932d9f574355fc599c88257ae313165fb4dbca542f0f\ 8284f46106427c35e29ae2eb8c9bfbbe379c92aa8a575c3e6b46bf500e76c838d1f3\ 432f02e276437b70d569eca49a1d43f0e5d4f40249d83c388a95b7c69137fe8243e2\ 7c871159c8c4b8619d06be36948607f38e06a3eb43088aa1bc7669b8d664fef2d756\ f3827bd03f391966df24f4cb0d363c2ebab37faaf7011b05faa5877b894d7e034fea\ 610427088d4207697be3e67d568b1b66548e647daf76d07dc1a108d1049a43179861\ 1d9ea37205105c6d9a6da0e4fa1dd82a3c5506cbf6724ed9274ba909b2eda40c6eaf\ 55c12001e6257d3435c8257cd52e81084953d799d9efc45d3d1dcc69d2800c8ae109\ 70f2afc12cdfcbfc5ef9e2e15421a5290f1a7770726788ce374befd484a5772d7fd4\ b188451f04596ce46af0249f1740ffed577b23df0034993e2a52da4d625888ff8e21\ ba42d5271ed865873992cd56d38d683bfc2d49fe35841717a6b3a7eee1301ad580c3\ f1a095a1aa5f4a7026b486126558e7de80ee67f55277fdc4d52715b646d05e25103e\ ecf4328e9163e6270d47d405f4c2cfc31eca8fc6f2280cb70bd4399817a9fb7c876c\ 69ff763502783a0092f69ddb8f4b2586faa980658be4fd46fa0ecc364c2b21080266\ 76a608157607ad292ef92c6b296da7c0bacebcc3548d5991a4588ef06872690eb962\ da2cd0633f42b1e0b572ad62b2694288fa8e8e8c812ad6110ee401766c868f07bfed\ 727f63198fb64d0656920aa95673a1970a176f5c82eb2a9a5633eb996a56e0b7676e\ 4996372c683676a37fd58c0f4b0a8db86229b03f06170c2c390d947d80dc0146a836\ 84fb6f074cc323ebabcc8b221446dfbb8c90bc0c0b2b8d38f375959da128aa38b8fd\ 6d92196080a2b2aca00e6923d7cb7b747e4ddaa4b2aaa53c1e3272f3193022c58180\ 9690d75bbd9f771103f1c54ad4bce90d365a220edb2ecdcec7495f5807c19905aff5\ 63a95a609606f5c4b8de354b20229bf3f1a943c7f28e475805ee071f5f01bed6a5c8\ 2daae209bf6c7e70f3fb36772621669b740dc77d54413008d50200070d18d1af0003\ 32d449a1dc0630d8b76fdb727ae663cb856dfdc890791f4049dd904f285cdcc40a80\ 8af0a99b090cdcd0056af3ec79d6696850eb5335ea0c92961dd2ea2b090fcbf3c200\ 7b540362403c35a587a4527fc99734290bfa37df08e3814ac8c97c101c398418bdd7\ Prabel, et al. Expires 11 April 2027 [Page 63] Internet-Draft JOSE/COSE Composite Signatures October 2026 c9a39e1c37650897133166ef19cbaf0c4fd2bedf3bba21ef19d914b4556159c23636\ ac2be784160f9b18be7ccd43cdd474d5c531487143548fba90493a6402664b3e9fca\ 8eaf96f6628927c14ff4ed890865486b36eba9baadb70de1166bdbc257d01bd342b6\ a2952b85ec5d7002227fe9ffe99c09f246f4ca4160bd1dc67cade5024a9b4da49e49\ 8cdd52f06b44d037e0bfd74451abc9c89a3fcecc61387893c39d7cae63f3e397291b\ b3a5ba489de5ea87ad2cffa5b628642a997b14deb2b5d1cd89d090f9692786a16554\ 8f72ea1c92c0f8196005eadd4e5c12a37576240f87e5ef4b7fad0e76136278d6c483\ 3b6375cab98e5cc85eb81c65070cb786e323f1ecde5f4d36dd9206cc53100d83434e\ 8d56ff662f0138947a8c0984295d2a8103694f393dcffddd37615567781ac8874e08\ 8ec4e732f2d8f621ed0cf0457cb072da8bcb3583577194fe59e08d33d51c1fba7c30\ 7b1cbb1b18f0b0a1d2c8a166c67840354405d16057cb3f21457a5e4fb24facddd0cf\ e0e83362e3a52a67253b9287ddd4db83373800fc2d637643d0cf815abd789f00caec\ b5f972dbefa3adc8cde58fea8c5ac02031e6da8857487f24cf08861386bf2f705c7c\ c129d788b134968bdba6a930fb40142cea703dd1ff96aa39da76984f262005f86305\ d32dc908c1a77a2b18bf64f6b7551c23468d6e61f7a851cce0278b75b69569b35e65\ b9461f590204a383573cab9428a6c56dba7b753688b0328d96805b089acbd4589201\ 9201c414a3c84e8631fe7d0178d92f4a3ddb4227e5812f2e4e66a1e4a6fff28c1d43\ d06cae388a930a48c423c4279f377a61ddbe382ef82700e7bc8a5d4cfccbc97cab90\ 3ae7c00fcab9a59348a4cb1816213b894cd5f41913c1aa5fa3e181fd67cf64c37b41\ ef93e287f5c28e5230d0c2a03820149683190bec02a506257aa06000121bf61a330a\ 071a9be77c6a0c52f4116ceae2a0caab98df7d27cf0996a48fb7668493b2f8ef37ff\ d1a5a6711acbd92e0b6723cf697ae08e1b8fefa8e18dab2a9e05656a123339f53c72\ cf4072523d8791da90fd233826a8a005b6b4099dd73aa3eeb5f0967dac42be4268b8\ 644d726de97965a8351a5f8dabc615c2bae60b5cb7e5b01aedb285e6aeeee1130e52\ 1788e5be9ae0f0bfacc8a9b479bbdb24fa10475333ac4c0ffa47ebe2ad88bf473ca4\ 49d6fbc532622388a0fbf8af5c47456b5c1a63cae6eb4f694539e9227a8868ed1130\ db897bd3e59c928ed8008ce5af2284682fe5f7fae6e4520477012ff52813adf0968b\ 5801c95606e870287fa856ec652dfab1254a0dac4fbb44871f42766c55c6a63271b3\ a5524a3902b2fbf6454b56e74d980ab3727268ffe16979346aa06fed5635d72ca4f8\ 2ff126f92d5e6b2618ff4740849af13431e238361f7b96a6b822faacacf1dc33299f\ 06c06823c9dac80ac35b2db09b99bce5a2c8763d0e37cb2b0fd8a4603d933bec414d\ bf6069238d24fab5513cdbbd276bab4ae4a046db31febd5264a2bb7e2eb3efedbd0a\ 5a4b50638cf1e90f7a419ac89a5d3e6b63f3aafd2d750b73985dee192189a176a301\ 47e4239340d02e41b2e3940949a50b562671e26d8fdb389375dfccf931f6182ce47b\ 92acf0e3672774c8d9b0bf44a41a2bd02a1e68c44db0bfc9db53bcbc214fa136c72d\ d629bfc4d14085a9877dd78d3e50d615c5c5c184ff6506c23740700b5915c453d9c8\ dd3818615756a5f82b73d0d5f7de9ce8373ede248634c5be6f06cfcccfdeb794c910\ 3a42818ab668c0da9a6614c279274cfa7b9bca88d39693e70c2766e0505965ddcbcc\ c66145be7cfc5482bed41ae6102e340e639dc102485b9e2f99d6cf9bb088d32aea77\ 911808d68398f895503de3672b5406b999f13117283c9dd0f7a4b661f34d3128e8da\ b61e6e6b7ff639e5b2f84b3743b99e22f5ff56dc2be98fbbf3ca33199306cc0a8fc6\ 48f832457f96300c38fa46cacabfadbd31e27b21a77ed8b4acd34e832f104137e9ce\ a6c443b6b6b8ed7edc8e57b72c3ab697f94df1fddf4e395f87e075a6ce9367abb819\ 145e1f6d423b093b1ffbdd1b91bd1eae1435ccd5febe80cc82b7d84801c05e47340e\ 7256b4bdd796b8214fa8283a3580bfed6542ab64998bd26d0af0dbbe0b533410ffba\ 59340cc69a5ce7e0b10009c8bc735354edc484d8fbe8e6c33e345d0c09bde1ac918c\ ca2cbc20da50674112edf577eaa61e5e1aaa1927d32ecc8af35daef6a6c4f40f94de\ 04ec657cc50ac8257473fca6a8334332a4e5141d13eb54d3225a5af13823616dfef1\ Prabel, et al. Expires 11 April 2027 [Page 64] Internet-Draft JOSE/COSE Composite Signatures October 2026 1c029d5e65febf19a70db1b8ab04944b2134df1570412d017a8badaeacb6374cecd9\ c6d48675b9461187cabd7b19681fd6ab4407369a224471e8794f385bcd9dc4950efc\ 6c63ef8505188d731be8a44689bc10ae23cdd3eb4a3d1034070156fc48afd556c15b\ a61e0d89fc8735465467fa69a1324138ed34073a26474825a689a2adf1a5328aa888\ 6ff686e847c515f443817eba05852d1a42d1e8a5db07b5a243c552aa4fc84a5f93a0\ c7542fe398a12ff3e66d8c92c758f6fa574ce8e97e639c725e2a0fdeb6c33861b805\ 6eac5c8d5c9aed9134f7394977d84796679f83ab01f121a5db5e3238cebfb1b585b0\ 2e2e55bed96f48041f0baab316820cd89cba0338d4d90099996d0428ba78a8069406\ f54c09ca97c565cf7c523bcd3704dbec6b04c6d59a494040c020459f60fba6971801\ c4698e11aa0a5fa3d7c2deee7f1440aeb914a59fb743694e5ea2994ddf217fea170f\ 7b01d0ce9b55ffae15f7bb1b27946c2d7f95cb909fa665462f3b307091a1558e1553\ 9a137ce717f1e01b719014f80d675ae9ee5d9ecd673a79162ee6e6fbec73c0c85b7f\ f6acafd2372d37d24fb335716bd8110fcbcfb6289f60ecec647f6dec28066c13e0b4\ 6656e8a60b851b80a854347060fa1227c0a4080482a15dcc36f53bc4707907181c63\ 3b3491998b6939c0cfb55c148cecba68013ce03a85c0bafc76dac858fa3bd43735e8\ d189ef4f3c2732bfd8949babf21996e80dcad604b644d0199d201586dc4281378ed6\ 9eab8ad7c1b2f82d8a4a0622a419ac6906746b1bb445e51a8c2db75ab895003a69cf\ b5452a5bdf00fc1e376b6c69afb6284dac81d3df5ad5910134d5f4a4d26e11f5088e\ 07b1eaa44f7c7f71db5838be55cdee2fa99b015cccfb8ca1d0091a700ea4462e456e\ db42932974977cdc832772876b583469dad405060be97632973e9886a8e5c0973d6a\ dc1f5274ad1033e2ba3dc9febde638e4e8a0fe847c67eeb3e8245ae10fefac504111\ 70f96457f7afe307b6645b41f7550d97298c55c96953647973802231ef419b8871a4\ 4c310d618200fa1926bd2a4f229fd9fd149ff2f1b5caf945ed178ca8b5c4e026ead2\ 4f8179772945e5c4919cb0538450a9c3a98f49ae4982e1a1b9d9d302ef6935cf5ec0\ 302e97a97fff8fb967c78faa9161736cba36113e8337ec75d1b22dabd39cae08ac51\ a6ad7c98a4b2c5252f0c702dcd3e7dab72e3a9568264acc7914ee0bed17655d368c6\ f4c27d81f254c2cce6b728ec15264f3746664972a6a3c5e487760c293307f3eefdcf\ 42fcdebace4237f1fe653da2413f7e9e2d3d5923da44d41eca97f565116d76649d63\ 9f3300dd1c43070a7e563841ed18e1268c11a05277598687b668f1790b7812955e1a\ 44c010904758f994beeb7ead9f67bb240a7068d2fc65f9ac2bb70ef09fddb3d43d0b\ 1e93edee91be9a96b186e129427b9795c14b3bbe707467a8b03a798122a4872b0fe8\ d17700b34a987c0f82040ab35442811cb1daf0bc8f38be392b54e10f9933efef2b10\ a46d53de8045c27e672a1c6059584023864d796e7137e6b9af7c96613f1b89ba42a6\ f4a2b913d345f7ca2a430da46d67000eaf685dfdd786816c13b1e4247dbe0733367b\ 255ab3d0323028d3ce17fa0c070c27d48a6055691367b6705f02dd2cc56a0d2a4d10\ 764f32f900da64be53e0792579d1e8ea056de32d6582b0d36a3745da5488fa425423\ 7b8054e7e46deeed6d19ce261d0bb89a54fef0b6b10b3be600d48bdbf9e4f537070e\ dd9d9382828ebc135af97bb3c1e9499cfa6564b17d92169aedc6e2503135f8e00eb3\ f166c8875d4cbf5f9acaf47d9d26b273edbfbe665323d1154e4312be1b2f3d136171\ b8836e244510f66d0f04a90360a61c0cd3d0e4a72d0111d6b3b2448c719dd3d03ce9\ da2a93927ab7ef5b59296288dabe7511122d7db91c5ff7e98af0c9c4f59551085e20\ 1f3dc8bcad40d85db84947acaa880bc7a6a71ef6092d5607ede73c60761d83a3e31a\ 766000aa0eb11be8c162dd05898911849ffa57e734cedfec3e152cb7239ad081814b\ ab69fc84db9308507d18553d02f36cec2362616fa8473f2508e9143a47fbc83ddda1\ 683e1f01416bc190b8ed0d5a8df145fed4c489bfcb4d81b7ddc56d6e8149631c34e0\ b46722d135b321942065538788968846f1f57eb930682b25b1786571eb2ad389a94e\ 7a930ce35cf1aa852a53484de76fe76557dd461f97e11fc624d8cf4e6c31d603309f\ e23ed24c5c7e4b30c4f70f98f960d22dcf93ed28ac1023dc5d2e4ddeb76f9d67302c\ Prabel, et al. Expires 11 April 2027 [Page 65] Internet-Draft JOSE/COSE Composite Signatures October 2026 6af471c9bd20838b35a0440dd82843eedb5081835f95912e952e3943ca3bc730834f\ 07b5c356deb7e606a4f65a71fa2a1695542dea8848169503108addd5dd1fe838a883\ e2a6ea496f45a5ea86a7fb633cc4ef5c7d38babd26ed085f5d168a044052723102ea\ 0525833bd45d5b7b45e7e16a8d0a886223b1897544a9a7db7ce2ee5dfd983bf96dbc\ 3e1ee6b1a08a0a4f798707f0651a9c53e1290f89f6ddce13734c999ce0dd0ce84151\ ba5846d83bc3a530b627016dc899c6b22cc956fa40952febbc539a231c86c6a2b3cf\ f9de4f1b29062987b4abd3a55e87e2990e0eb0604275e91ced93cd3552619e26fa01\ bfba688f80a717494f92c46f83aa6a6d190231eb264f3b5373a1b6dce2ea020b1014\ 265f717ab3e1edf51b2c2f3d40495094b8bfc7cedadb2c35465e646da3b2bcdffb7e\ c002083a3e77c2f7b6d000000000000000000000000000000000000000000814222d\ 2f3638343ffcca25058929504f7b6c89ae1d27d44886139199b04c0e62a265ce7386\ 3b8fc5897c518d23b94cb625f3a24929b5e0de5c0ca2adff498047cff1f11b06cb0f\ a53cb8e5504fd4519e73147ff14742a1548013147a4fb3e934a8ace0f3a83ffd3e63\ 72b44dae7ec99f09d73ee2c1312700", "raw_composite_public_key": "\ e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b468cf\ c82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91fdb643b5\ 12f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfcfd12565433c4\ afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4318bef5eb6e897e8\ b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ffa496445967e75217bfbc\ 9048f9956443d8731f833eb30de10dac96fffe7cf65ea0445c3e31e8601e133be6a1\ 00764fe3196e267726441f31751fbf9a6f5880644f4e7275e57de2b0f105e4db055d\ 50dd1c9c934fddf535b8de28b0c74c0449f222cd2ed0bb8fbc775ccee8c940665b40\ f712f4f7e00750e9e1e4cd9cff25d1945c3e9bca53ccd4f12eee7581856ebd68f268\ 45956e3e7beb761f0fe75bdd31bfe2fa018113397b387bd59d62a68b8af7fa245ab9\ 32e69f778e2ceefd21304fbb8099ea13d8ea57c1813197a2f75ae251075b51dad38f\ 853669e9d5f98a3655098941993a1594860fba71fe530ee5c29f58f2978af688ccb7\ 5a5838a359c112e98e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0\ 874e35befcf3e6119684768f36e008f04712177cebe627607381e56eaaee161c1729\ b8de51dbde474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab\ 5a3a049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24\ feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c248512488851\ 07b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff6c3e20a4\ 7be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283c850d8c58d1e\ 5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c501a8ef2ecadd1b677\ a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24fd92b7b5b4025feae996\ d3e48fd4c650d82dbad7eaf936639698512f26253d2ef6847c8518e8565cc9a5495c\ 6fff57cde7323882c54a7db470ab2daf8ffd2bf794fa7c692d9e7fbd532eecc1d788\ 0e2ca0b3216128be28b4a9f1d151fac97808b0bd98b7b43a612a9ac865812bfeac6f\ 47460277840b52a3b087f916ca7cedc0f768ea2bd19ea21155f84b4a04c4000ad2ae\ 0587154d560bc0a477a4f9329a8984dd31eb1f2a05e3d918701d630cfca9af61ef08\ 8d2c5581acb463e439902e5d425719e956b8d6df7305b28e0ff27d3ad0de2085d292\ 499b19a3390d4396fb3bac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe\ 24360f84d14f8e472712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186\ d3b764ad9e9cfeee456a73c291d8de3912414ac43911c372173ad7b472af35c6853c\ ed2fe7b5fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094\ bad07136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9\ 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ceecab\ Prabel, et al. Expires 11 April 2027 [Page 66] Internet-Draft JOSE/COSE Composite Signatures October 2026 72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c30048bbaa797\ d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bbfa15acb5cb37\ d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c54d6f87457373a0d6\ ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bfa336e5bbad14f73640f1\ b9febe800dbaefe1630c61fae635b074c564eaa9db189c9e7302873fc64e6d497bc5\ c29080987a07a21d4af210703a4fa07f2fd816f12fd1e29b4c0f44afe9bd4a1eaa8a\ 7ae6f02a5b4258f52caf6127f62632a67cf4e8310be56a7c28c86b2e277600c3e92c\ 8d23d42586244c571e90568df202f2f6d81f860a565f9eb91a3c78372e2a8b1be61c\ 5418cf49bf2d6c8955d4a482a9919b7660b3f9a4404ffc454ea073e1e4b2689ab2cc\ a4e46bd7004a6c491fa26ee7a57d60f35edb2b821e6266442c8f335d452d524c772e\ 0353724c23c7dd15b7aa155e91442022140c5fcb0153147edcf3e8952f6f0399a3c8\ 8066a72756c9409915de63f64fa797841c57c796c6fc550ef745dfe9f179457f9475\ 5ae5a2506a764f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec\ 0b36e3a6c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb9\ 7b685ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea\ d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd879b64\ f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f33288e68\ 9ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2d38fdb7a65aa\ 43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05d447f9f58ebeb84c\ 65b36c8afcb83727a1508994e826957a663b0b9b8a003325ab6d6d6462ee4e106019\ c0dffe10323b7bde7d82a38f85fd08786e860ba66c161b64b0708c363de5c6af62d8\ db3c243d1e1b712cb1d59e942b9b6b4295a5a500b182cbd5fd1bc6ce9376d91b47a2\ 284f1fbe0ad1c048cc2cfbb4afa3a9eb9697503b69feca990eba7e9441af9ca44cb3\ ac6b5ed66e591c201fe30efa8a7c471dc613d6254c263a8e132104bec47f1aacb3b2\ fcd4051b69b5e3fcb1c147a65c2f90c4b5188bafc521cab03c12a309da50b5a75177\ 27ed41228ed123fe1b152f6a6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff\ 9b2fa40ba5ed5630242539e5d96823e89dc818a13d16675ee3079d976f694f5acc97\ 60ae789e9b3391b289e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a29081\ 0ed35e56bb19d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67\ fbe761db9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a\ 2e6a152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57\ 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6b9e2\ b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe99941b1e8561\ d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23cc3a65601313\ f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d011b01b4154d1b920a\ f003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b62124b0861b163a3b91aa\ 4bea28076c3432df3b29b6c4e1ba588def420071fc157de90eb2722ecc9ab00df3c6\ 69383a61a91bb67bd287ce349b4745ee7a479dbceef166b9acc412eb579fcd643730\ 7edda253d606b7be7599c38092bc52a8598480edab8b82b1d21c565d2137ceae0b66\ 42619b16133d91205d6355029e9cdfeb9a28b373d95916b6b707d4c712c09cf36daf\ 1a511b2bedb1aa70ee58d46a0666bb287784b0a3840c589a7a04d5d6f2216be90aa4\ a512d5632f5c9bfe7b8b13382f999b95d367c7c46b968074ce315197a5ff3545c7b7\ 7a804ade56a95b5c24cdece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b\ 57b763439686d4a35b3afe03878a49b28232d4f1a442aebde109f807acef7dfd9a7f\ 65b962fe52d6547312cacecff04337508f9d2529a8f1669169b21c32c48000" } Figure 6: ML-DSA-87-Ed448 Prabel, et al. Expires 11 April 2027 [Page 67] Internet-Draft JOSE/COSE Composite Signatures October 2026 A.2. COSE / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / ECDSA private key d (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000001' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-44-ES256 / 3: -54, / kid / 2: h'08e7acdb81ec1e3e', / public key / -1: h'ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca019813 1c44f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde 53b46f34482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c504 98e1717b7c758b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5 cd8ded92a0c3fa1558810f12c7050a367708d196cd24e5af974904aed8e4ce88 72e8696b0b7bca50e452cd7d30ea9a4adac0311d672c6bde8496240b07431463 708895cd9bafc31632d7397649388fdafcbf7d305a3de9a495eca7433a8f83ba 0f0b25c413c6e39c96eb7d691b34d37ce37f1eead1cf217e25ef34eecf3f7c60 f84b8edfdde8405d4f832576c61ef98e0a2f28da187700953924f686b9461470 5bcf53d33fedd4348edddbdf28b5065e1f20775043e85cf931f829179363a1a7 e7404a838ec00086b0976386fe637c98244757e3f769ddd4467471bfad670f9a 05f8246ee50a7b1eaf87fc4069c3ae2aa2033258117792f0bcd49e083fd1bc74 96abff29cc94e4868b21214ed316525399a610fbdd4a80e7c80715f29578e2a8 4bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b5376b5b65597998 4a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5c0f50ea4 bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d430f b78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130 a48fd925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f2 3094a3cd761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722 945775f264e1b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92 a0d4c4ed62326e5024d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e718 1bd3b459450b451a51539a715c21d67dd330eb5970db00d9edbfb2822b036fa1 3bafeb86d8dc78866e3f8d43e53d78cca5595a6faf886b5dc112f1cf4adcfa87 5800d90b48883af97316fe1506873fc157e570eacbfd222868d14234101966af b6bf9940829253a953ada89fc756b6a849f70acb9838e69faa50bba75e3e89c2 adb57e86d088ab9b04a28e670709172243ec5e0008a5ceaf3f8722f487302596 ffd755ad1b82a49c34b3469515b46aa290cd86ee38ea7a9be3f103610335b531 cca333ddfe32b14510f4b07ef95fc6684e8c454a92c10dbb5d59c7a7c63fb305 fe881967d99e669eb632840582560bb403431d40f75a4954908482278292821f 4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28e8e6a4b46226 50cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3563632c5 21f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c11638 9421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642 Prabel, et al. Expires 11 April 2027 [Page 68] Internet-Draft JOSE/COSE Composite Signatures October 2026 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb 00e025d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d2 03eba2bbaef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242e f8d6cc24610a1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa 08897083daa2ebb1775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b 645b1108f0d65fec93789c053743ca14fd63d05e98b652df2b9c2ff9ce05f194 0703ffb273f80e0e2732eca9960d981b4cfd3b7bb8045b3c3830546b9dd8db0d 046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2 964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51 f5', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 3031020101042000000000000000000000000000000000000000000000000000 00000000000001a00a06082a8648ce3d030107' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-44-ES256 / 1: -54, / kid / 4: h'08e7acdb81ec1e3e' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534134342d45434453412d503235362d5348413235 3600ad9c56542caaef74ac6ad7cbf62386c2f4aac8c329e4a6a614fd272572cc bead' / COSE_Sign1 / 18([ << { / alg ML-DSA-44-ES256 / 1: -54, / kid / 4: h'08e7acdb81ec1e3e' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'2a2fa6272a8cabd04670e6adce8f462c9c905742f528d59012cb6ad1aabe8734 1df45c39c840a5c2007febfbeb0f755becb8d1bfa4bde4b16656cea016f42f8a 5cbdc37ff388b419a91ffc31680c14744c3e4d6263f7db6a6d1ab6a983bb6ff3 5ad62e388b59508913a786ce0fb39d8badbca771021afd7df255002a5ba3dd9c Prabel, et al. Expires 11 April 2027 [Page 69] Internet-Draft JOSE/COSE Composite Signatures October 2026 0da9b2850a816913c3ef3b353fb24e6294287b7d0799d01056e4ef23aaffb68e 10a3df96b90ab38d2d4b5e6373d8f321f8c2ffd0a9fc672f8d0bdb677e39ce5d c1a3ae817cc1b6bc033bc0fdfea2dba7cd24558bddd594f96c8b21f206b7f2bf 64b094f829f54f57be1357c3c610e406250f4a689cf00b23f4107b1c07062e55 b18a73c9ec282abccee312f05a4c057e517647f13593ce6455f1ee721ac7099f 6bb42f61b8cef0d8faebfa2924a48f2210b25ea1b9daeb698d7d96a3348e921b 84b98d9fb78111c174aa8f234eb06f02e78a662c2f76302022be516f9012edbf 26b07b9ee6086d8e5b549d2a953cd35f9a27ad89bbc2747471d38383e4e53c2b cddb293fa2807b9baa18d37f8729dad3ee86ff0efa8fe7750eda6d48e838b70a 94e6b062f402afdb7089bbe24ebd81cfdf0bd73b38c188a9e66bafc3dbe62288 3d4427c276fd3b101add92294fbee3cf4891022e0899446d76e1c6b20f848965 f7fa8bfff642c75a3975b8f4317f528ca46d3c08bef2d586be15bf684619017c 411dcbbefa7333c834f25a137dba319e24b89479a84357765be4be74063d9172 a1cf2891594b5de34aed7a387ca6928d538e0daf4cfda698545f7ec2a71635a7 f086e7e342950000a6ce46cf8c52f8139bddb9288cd0e4130b3e90422bc9f464 fe0453795156f0cd62721e9cc831cc2a9ec0558feb4fa79c1b2b8442b55d9d82 7e085119afef0c8a6706fba58117c4e5c77f1fe1f766c54f0cd789e383479418 c5968230d5f86d319d97a009c35c6288c6ac6b7846b3dcc3b9daae92c7759017 2b77e0ff9258faec938c9996a10d82cbaec999c08a05ee0244002c2383bd110b 8ad7218cada06646455de2afc247b723961961523b5633fb00bc46aac1bb2a26 70ac0cb5e79e4335728535c78374dfbafbced9c8a65d01f20435d0500d3622dc 74ff528cbae4926080c83e4879a0887e168db95c59e85489b0a0146399231f40 fe9d965908d9f685827d0393a74edf8bf6bc015ab4071dbdfa9e1157db6b63d9 35144c481966037a464875fff90555c3d055ac8b39b996d3794fc264dd2a334e 7a0ec253986e283e36c4346e93f97b4f7e62015d72be5352dcc03771c4b4b485 81367f26296645dd1c886b166b7d91bb8ece9e50a42d86bf22855cdd8c190042 b502c5d22c7f1f473b25d2c1b5412efaaf5c195c37846bd455c783f9083e46a2 8a2fcbaeb39a792675ff31431d51a13871091a0c35844904aff57288f076636c a826142943837c0ebe5ad0c3210a89d88655c1792c0704dca97bce5b144d3e94 6100c626d352a1e17e24717fe4478bd9901b0df9fd5eda7eefb1a582732f3a33 cfa7df15234b59cacf868e1141cb22442e8ccbe970d842b7d1dfe2d6ca1e4ed8 ccd0f4fbd8d1799177b6c2ef210602b1dd9033ae899c52137937d1538875b152 dd05357842dd0087325ec0b5343335174968b5b2f15b76db936b6db29bd79e35 ed9eb0575375a884a3efd57bac1449699b93fe186e0cc6e43b3d0d3e2973033b feaf2e1803798b087b049ce8a2c7a2156d1b3a16dde288a158bc740afa154835 ef7d1b5e6dddbcaafbaf2c490a0bf08a14b69c871576aa370d43cdcb9a0e346a 4b79f740a8f0168d95c9e2d684ec6759d0302d5346803252bda5bee8d64dee39 e1686c90a293fb8c2bfedfdc00778141b362e522827a26f3c095ccce0680d7b8 6b7650cd40f94b272dec01e58da108b0312de29b738b04f26034515a35e4235f 92b877c5fb64494b54c9e1f8005140ae73b0d60d8ca0f234ae6de7deec60867e d3eb04b08602b313c99f69a9497e9a65fb574e1a2e749724fbdea47f58192e96 17e90afb5a88681042591aa092acbaaf68424287651bca7b1a35fab63936c85c 440be4aa5a5b86425d7117c6f3a51d499dbf42148cec7dd877733adf30e1c23b e878715e58b3538295b02138144b70398bff8124fe2d4931339769e24e563c89 d75870ffccedb1fd1d5b2eaa2adac94fdf1660dd272513b28b7a2aa8266117e0 58800dafc46fb20de541d275804933e9e30f5beb5bffa36f4665ba334bf88214 672a95a104b1877f74ca9b0a18ec2c0769c67871eae04b5b9820fa4e6742c37e 1ad126a323e28c6c83c2182390297aa304fe8c0b21c85713fbf94f19a2094816 Prabel, et al. Expires 11 April 2027 [Page 70] Internet-Draft JOSE/COSE Composite Signatures October 2026 6c1b5fe68371b509e693fbcfc750aa84eff2608a4d1083647eab2af2a074f475 732e5fc667c97f1d7374fab7b54897204d61e4f6de7b949a4a8580407f877056 cb6eee57c95e566fb8f8eb25387f52beacd85813ab6dc779f9b92b278ee414ff 643ae3bf4c4c449ff35392d5b9e9cd914d1eabfa043ac33d9312ce5b9a82dd04 eb0491c4584a711c386b78d8e86705c1c07db3cd5a53a3e4ce340f9a178a6107 eadf883d2ee481ee3c84b73d37d85332b344d235a0ab1cdeb513875949a5948f 918b1243f43c90b135bc8c4867f53348f563f660efb44401f0aa72e90ddefe65 7521a382adb5b6100feea242349b70ceff91391e2ad922fb50842a8fdb8a276e 9f3e5601b8fe27979afd40b1039eaa6b580d672d0a7424162f4a50bd517fe4d3 3a9cf6d6889895c92aea189b18f6505dd72b9434d2a819e5dd62eae2a3fa26e3 211e26c7d8751d4fec2304e13839ead9e006d9ba3bbf4a2789339eb2fd974742 acfecdd9420d3eb68ee031e9d7ad0ca8ab508d9776f2a60e804d0aacad590f60 bc864b042b0b1e1d90e653bb5171d9637b551b0a04b257866ce2a9830f6822c6 f56ba8ee1705e527cd5536a09e71acde5faf65e8ce9d3660cd5d4a6e6554c742 12b01b4baaae32392dc91be9fd764844b7509f7b81c5a54c8ffaba91bc8a9f9a db85f46f15a85662adbabf3320164640e5df7d3e1388fd9503ad5f5b43f2945c 5cdca8cf7f25299ca5b661042fef8a9d3abe25c52003676df0ecda149810dc0f eb0e815027994bd1d7b61d80af71b48f22fa709ae8fc80fbc0ead415303d830b ea2b10d2f2df077635f7bb9d31ab14e1286e1b4fd20016b869c7fef906d6c257 148f6bf73d32952b66267b90723e4252d49aadeed1ef89149b684f9747474b8d 8224afaca962a94c76ead84b91c21fb10c4c3b125c1915978390b525c7010547 2333393d4e5a6d76777da1a8c7d3d7dee3e9ebf609115584868a979fd4effb01 1d232931437f929aa9b6bde8020a12172f344b516e7e9fa5b1b6000000000000 00000000000000000000000000000000141f2c3a3045022100c397b4122fc219 aa149bf555c3afbd27109b56ee9a02fb12f05ea582b22b7e5f022009ff09b243 991efe4477811876b9f0bc5e80d98e923804340a9b13a5b73c1fd6' ]) Figure 7: ML-DSA-44-ES256 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / Ed25519 seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-44-Ed25519 / 3: -57, / kid / 2: h'b930f85dd9be4a04', / public key / -1: h'ba71f9f64e11baeb58fa9c6fbb6e14e61f18643dab495b47539a9166ca019813 1c44f826bbd56e34e55db5e5e2d733485e39ea260fc6000c5ea4ba80d3455cde 53b46f34482aedfd5450fc2e1ba4f25d15f9c144242fb39bb52287189030c504 98e1717b7c758b190a6748ea9aa3f7acaaf2c7cb526ed717c9f79aeb84214fa5 cd8ded92a0c3fa1558810f12c7050a367708d196cd24e5af974904aed8e4ce88 72e8696b0b7bca50e452cd7d30ea9a4adac0311d672c6bde8496240b07431463 Prabel, et al. Expires 11 April 2027 [Page 71] Internet-Draft JOSE/COSE Composite Signatures October 2026 708895cd9bafc31632d7397649388fdafcbf7d305a3de9a495eca7433a8f83ba 0f0b25c413c6e39c96eb7d691b34d37ce37f1eead1cf217e25ef34eecf3f7c60 f84b8edfdde8405d4f832576c61ef98e0a2f28da187700953924f686b9461470 5bcf53d33fedd4348edddbdf28b5065e1f20775043e85cf931f829179363a1a7 e7404a838ec00086b0976386fe637c98244757e3f769ddd4467471bfad670f9a 05f8246ee50a7b1eaf87fc4069c3ae2aa2033258117792f0bcd49e083fd1bc74 96abff29cc94e4868b21214ed316525399a610fbdd4a80e7c80715f29578e2a8 4bb40bdddbd9f47a11b6e7da118a1b658d359e8aef55eb46b5376b5b65597998 4a922beebfc59bcd600d5309dccd72dbf0787db8ba757b537c1eafd5c0f50ea4 bc9583549e2829a42c28cac248c96d78124c47159b18aedd754aba17b19d430f b78f633ea9d26f54a9bd50f8d8f6b73594f828976e7ea09c53bbb9f11a56c950 7fb89b9a5ebc037a37267a95f85b8d64ca97192b10a66f417b3f61fe9ca57130 a48fd925eae2ab5502d571c8a51903c1d398f4c1f76a7e11743976afdbc697f2 3094a3cd761ff9685de32e09fb3c28add453490300bc7c89dc01780096071722 945775f264e1b0623bcf4619c712c838761205d87691b75ef360196cbb9e9b92 a0d4c4ed62326e5024d77510b8ee2c7426cc22eae209dc9f13bde6bf08f5e718 1bd3b459450b451a51539a715c21d67dd330eb5970db00d9edbfb2822b036fa1 3bafeb86d8dc78866e3f8d43e53d78cca5595a6faf886b5dc112f1cf4adcfa87 5800d90b48883af97316fe1506873fc157e570eacbfd222868d14234101966af b6bf9940829253a953ada89fc756b6a849f70acb9838e69faa50bba75e3e89c2 adb57e86d088ab9b04a28e670709172243ec5e0008a5ceaf3f8722f487302596 ffd755ad1b82a49c34b3469515b46aa290cd86ee38ea7a9be3f103610335b531 cca333ddfe32b14510f4b07ef95fc6684e8c454a92c10dbb5d59c7a7c63fb305 fe881967d99e669eb632840582560bb403431d40f75a4954908482278292821f 4ea91e42e78fa48caee3c836146dcfd738d117e92e9a15137d28e8e6a4b46226 50cb413504cb3a335d44beec5746c1c294b1e8cb99cb608d928f8ce3563632c5 21f23d13c61a8f61c01df8c96c7360db4f3c68aa5d2fdd342a62ff3459c11638 9421ab43e8584c45882b50e6e4e96db6f0b8fde890d5dbfadcd88690b449e642 40ddb2023747f308363e301aa77757169fc6150628d5920b5aa1ab1c8cbf44cb 00e025d7879d72b479e3af5311c785725590da9c89b9fc3b8450769554eb44d2 03eba2bbaef9cad2237011c2ea44eff00f299a48ffe28ca93ddf85f76608242e f8d6cc24610a1e2078fcac4f9385c314905ecaa82e553916d94d1a7c1ec652aa 08897083daa2ebb1775fbc471ae27777d7904ea9f1b92bcac3d8a3158426087b 645b1108f0d65fec93789c053743ca14fd63d05e98b652df2b9c2ff9ce05f194 0703ffb273f80e0e2732eca9960d981b4cfd3b7bb8045b3c3830546b9dd8db0d 3b6a27bcceb6a42d62a3a8d02a6f0d73653215771de243a63ac048a18b59da29', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-44-Ed25519 / 1: -57, / kid / 4: h'b930f85dd9be4a04' } >>, Prabel, et al. Expires 11 April 2027 [Page 72] Internet-Draft JOSE/COSE Composite Signatures October 2026 / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534134342d456432353531392d53484135313200e1 3c73e6534f34e69f9e2dfa19e812f1f92e308c477bf2eb351a47fa69e68af55e dea2a595419d44082ea6d38d0908d59ea3e97aac61ae9391dbe56c0e5b85eb' / COSE_Sign1 / 18([ << { / alg ML-DSA-44-Ed25519 / 1: -57, / kid / 4: h'b930f85dd9be4a04' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'b90b8fd47a1c28cb219c3cfc816935c875de6c45578c2f0188e3be659eee9003 d58f029bf5a0abb8af014c0b56bbb3b79ffeb188b7c55cd3111c0fdf6ae109d6 231225b426f2cc014885306e3286416c3f3bf6d76f93745c15bb47e413356a0a db194d5434f542e63a9ad3d6dd9cf79df2c525ba2b7a4e584bbc6ce189dea259 557f6edf772d2eeb0deedb703e4af723290ac5703394ddea72f9b12597cd52f9 619df061b0cbf81f428e24fcbc4938caa118201e620a514993b393b3e339f6a6 7e292f443c72502a4901b6578b8444d76e5a55ed379bd2553b476d522a78bb0e 18ea01bc09bb89ecc53e606d1082f1010add7c92301b5f8167fde54215fd28ef d0aa4e7704312e4d081375917e5697826b1eab14f37765ab1ff1ae9804ebcc1b ce26f3a109b563ecf293106536a5623578ae851e35f3431f8a963a1f5186bf1c e61612984a06659e1bf49dcbf5dcba6c811b079a03749aebaa56125ecf8f3c9f 608e2c12993885641dbc97b8ab171ada3f7f0fb29a4280aceacb5b2e7709efe9 0a1fdf0eea4bb2b702914da3be3d553bb632d4b90fb1c5269121b15d81d4d859 6cbc60898eb0f0c6acc12fbf28bd0a49d5ee7b666b92ce92712a77f80de223d1 63e4e6ce002375c4a299d7f1113332ad0d9c04a2ec29090ea57c6f2ae37e3c65 97f93951a4de89e0cd585a6c24341d67f9f30a576c8d231e8084278d02fe7895 6df4eb22bfe3ef8a62e18d865f03890551e79626540e7d83c213d3f5f01d6093 eeab5741dbfed50b3af9511821726325b7f56783cb7bef0ba5db19277a27d05b 794fc5918e19ef40404f50bcefe8ec06c672b0289ff514d47bedbe8bee7185c1 20289b3ad26550116189bb7f789c2b73fcc257f3f96fd6d398277934dc224beb 7f3ee5282e8798203c563045aa0d722c7c4b7b0d0a70a69306cee51d506de71a dc8f5b2d2cd9bb77d89f2b2a87914bb9c4d0cf8a32688ed9388ae6e6306f91c0 c5bb10c6f28bb2d4ac53863c2cec9dd18b4f68dccca8006ed0f2f0675fbd7439 5c47f4d7e6242f5a8273c406e7bc01181cc12a87cc23c967e2e4731a6eb43c5c 775b4b1a74658bc38d184d2b5f9fe1a781e57fb9151b45b50e7c959cf73810a9 ec4bc2ab6bcfda35f92ce53b8e5147fec4a41cc626d1fcce2bcd0b2e8d701694 bf2b99a895163149ece20b4ed17eb6046ac0eeb7f595b1c85836b246813ac414 Prabel, et al. Expires 11 April 2027 [Page 73] Internet-Draft JOSE/COSE Composite Signatures October 2026 f993ce346bc98ea56fe2e60e4225f22d338d5e6db71c9de0fb83162159eab381 b1961680d8a87b59bb29096653f27a92eeac28eeb1df6c6c78e4f67288887a23 bd2294431942cfc3f3deb3d053aace6cf813cb4326ce1004aeba4835f3bd48c8 ae2b4a9e964d4b24eef0cec84193910c2d0a971dc055cd3f4f248f24a9216e79 209f73868ea79f692b4cd1e7d262a657566130ff0433459931d309c00f304a31 5f2fcf7ab89f3206e0a13e0d9e8ef7e1e968b48d071e146d4af01c5fad74f6e1 2a531018c52113621b9b71252c4dfb11a0674b7d485d791eeee21dc6b86f3c1e e8557fee3077c055b7194221a365bcf71898dfed6b9d870d29a63a199b1dae83 309356a457d660218f53d65e973d2d68eaf43cef0c2990fbc322b76269032f2d d5e54dff349d81ec9be3de4d20c101752bc0cb7ff519240a9da5e74b0accdfff 797c116e338adee136e955d2be61440a23e2b0d05eee023ed777bbf7f32bb4f8 363f5887aa5e69f456f4865aadbeb450eddc25736466bfa71ec8cbe0a48c6bed 5fe28ff3d61c5f955318e8fbaa8bb4390ac152ae84fa043b1be624238b4bf1b0 629bfbb341222fb186d36f2f2349b185fc9f52933433ac02d8430142dc93783d 9a0324e044e0f0cb7b5881baaa06898dc78c856f0e0884c8c174d82437755e88 d2717a893a63812b71313248620ed519b2031c6466a16d4fe448df3313e8702a 8c55485aa7219fb2d178464a5cb044420b135c650905205683fdc0b31c225808 bbf689310aaa7333e87e7b5e45d85a8c987d14cc65a9f41d7ea3c24fa44aab90 cf87519ea9b1d61940dfe99d3a84966e1429955ecb9207087268aef699282100 10096815f3a88a967f595009f7cd778aeb28daec5c6e3be09b1a32f4580517e3 6253d4942cb160300a60cc8c02df6fdb8db861dbbee60a537a738f9225266c22 471a20acd4049c9c32334fc216765e51b56da9ec3cfbdb816a05d1615635b51e f41ab87cab6687a8d7935d1dc3e74a2daa5e122149c0d1679b0ea2ea912fd9da ac610e9fc591f9544d893d1dcc58187b9149e9a66d7a7c3408fdf5ea79bd962d e72b5c3e2f741f5185bcb12fa3e58c96d6c7bcabcfb87b2862194feb09660693 f3d5aa9eb4b717724ba78f13cee6ba9a60894971dbf266f986a003225e0e20c0 0d3dbe577d27274d4123595fd4fd8223edab6268dc0bab3501c2249a3a6a6531 fa571482562894994fd661c1718d7e0295417fb917dd5feb8dbeb3233cab2b37 be26833f29142113bfef92eac50327639312a33db9947892916a0d2245b49551 1e6f9d4ae25b79763295dae1dc33f4df38394c4a85c192370c002670d20271cf 8db0cfeb8ab5c1bace322c7dc9df3a6131c797f4cccb4afe12b46a2aad3b713c 69632f4e82c665a1c42292ec4c6dff66e881cc283d7d1c4923cf2a827255d616 7a578ab43b315a574488f95dac92c0e4196559bfc5977f83da68a8f7ec6ff7a8 256df71a071950d3cbfd84f7ed706b7d358eb200f2e92ce2d79e9f3d6adfd834 5691fbea66ce1099d55520f635b47ad32a3d158cada5253fba8ce2c7a5042fa0 d20f3402f06d7bcbcb9c8e8a5c6fec6f00d88c131f3e8f17c3389668ac3bd971 1a982f24c36cd6d56108556e98227313199aed7a79ce9cc661569f482c4a228f 8c85b3ac65cde8477dd16e3197629c6ec2836ef6ffd032c732f17d420aeb4cc8 0f41608716d87a9e77a5fece9d38dc99108ff09910c925ad7e82a1bc84bd45de 4057f64539ca1c63e46d0247ab8dac08d28fe430aebd9aa97cc53322303aa791 173633a253856d5b956ad23d9d14827040eccbefb5950332493b90fb1763dea2 7031a146362da86f0b6c750adea1b0386a3e50d072c56b882feabaf7e07898a9 85152a603468e0d41b8ffb941c343a7255781f5c608f98cbfedb01565f355f84 cefc32b4562239e42ed0387a1a59d2d68f730288d608cd4385e4b01b2e135b6e b11b6c39767675878858236595bed7d7fda32472ad50dbb033cbf94925f8f8ea b7e349a300cc2c1ada46f8f59c1f052e06dddd3a5bb8ca455b9a2e1b673675f9 0b1318252b313a3e445d7077808c979aa1b5bdc1cbd8e7effd03202c3b436f8a 91a0a6bcdcdde5e9f6f7f8154c5983b7c2cbd0dde1e5f4f7181b5a5d6265a0ae Prabel, et al. Expires 11 April 2027 [Page 74] Internet-Draft JOSE/COSE Composite Signatures October 2026 b5b7bbd5dbe8f5000000000000000000192b3847c9961e24ac6f9ffe772eeb6a c83bccfd7c09891a34e65475b990a446c6dfe19c88afee71cf55978a927cc021 127ec31626c3284c31c05eb64cc58fcec24c9d06' ]) Figure 8: ML-DSA-44-Ed25519 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / ECDSA private key d (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000001' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-65-ES256 / 3: -55, / kid / 2: h'65c28ec7cdef33cd', / public key / -1: h'424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f 0942ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c5 0a888e0dfed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264 802b9f49bce42ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bc cffa8a475e5395396674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e 53b3b7fb49c73adfbc2d4f8c54303520c29bf97e26ee57db342d957c89393652 2d0942b41d82ee3772a00570adfb545c1143922b0496f826a0a970064b36ddf5 34b5f8e1c1cd0b5565ea846b45431f0618143ece89777bb3f61179ad20295fe0 a6e062ae6eecbc2ef38f2ac1a22dc93b7b126336223c55b61eb8c0795542bbb2 dc65e722eadc6866ffa9683beb8a999ad7a83e5e6e016c2e4c35f6f7649ad3bd 52ec67ec1c5c6e7b9972771218be9554bba7727f0b84c44b9b0a8bd831fcff2c 9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355180b709c7045c22d33a0 83f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a4636283f4a1cd4924a 2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded796db542971ca2 89b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb1625171db5 554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963c8d7 9f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c4586 0a2dadc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c 9078f62a8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345 081690eb4c562c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a 3329152686f00d4897f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e 5500383956cdf5f6e37cf9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177 d312ee52a6da023c05722a8738274dda8d1b04e99831cf57c87282a256c565c2 96d0524a063a3a41a48a83009978d98d8abf61af68e8013b594fe151d9bec199 902c4c70b49584201743c6b53103d2fd24bdf078dc90b5a188b4f8d772179988 d0416c94d4c57c0860b9d7b53d4cd261f332a1851565d52ac37f008747cafe32 0f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f0367eb3cc971bbe0c301a8e5 2f96094936035c6ee3ca2d13db483a0dd04dc16247de0e0894ad7cb7e1ae7ebd Prabel, et al. Expires 11 April 2027 [Page 75] Internet-Draft JOSE/COSE Composite Signatures October 2026 4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c5283244312158c2e b1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b5eaaf32f31f9 5c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e3299724b463998 6044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec907f25 a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0 aec10318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4 f977b326a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734 a51177bcb089476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a9085 2423e2c85e79d19724461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5 856141028414ddbe71458f0a0b2b589df2e1b051783b8f718676b1defbae98ba 496c2a935e92eeadea0a8393ef59f9e914f0743fe65640ddf9981cea6dbdd957 a534ad4e790efc974ee89938ad99d53c5b680775399326834729bb37b082e795 f8d87f52e6c8a8db68e515c277bbea82a7570d4280896c987a0608903e306c63 2a223c55f0ea3682039c4a3f5440f4b5ac3e6ed2b2dc900cecc72b72f50e49b2 629ad30f0487b2707b86286f8c4f55659b25f9bdd7a6af460cc3c57a3982663b b717461581e196894929d84153d87a7f482d284b5b894ce1a78216b2a011f2b8 8742cee52d5133e8fe77edae242f5af91637c37ffca32430509b2fe4756303a9 a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df254b92cdaa40 f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a6860284ec3 ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e42f8d b590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4d c3a0428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f44 8886b802e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1 d73caf8496d742ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d 951bd8c35d61f8a678db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a107 0ea61aabbf59294e3f6f974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900 d281b0b49aa00feabb35714af33870edd7ac2393d93177f79ee5606c9df176f0 25ce49a6e5ff51a2a412ebf86ac0f40471c96ad4c119df230be6173df530ed65 6cbd8069214741ecdd0271c603fb6c4a8614ff878d33e726cac6693e938ca3fb a82c4995c14a2d4af9014fe4c4c50b794cac596b52189f66a7106fb325b526ea 046b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2 964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51 f5', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 3031020101042000000000000000000000000000000000000000000000000000 00000000000001a00a06082a8648ce3d030107' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-65-ES256 / 1: -55, / kid / 4: h'65c28ec7cdef33cd' } >>, Prabel, et al. Expires 11 April 2027 [Page 76] Internet-Draft JOSE/COSE Composite Signatures October 2026 / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d45434453412d503235362d5348413531 3200ca2b702903acf278f47a0ca5abb69b13a60605a055f7334ed9c6de25e1ca 63ae2bc4995cc7f9279eaf70c25a1f46a77b90756657e2b1fc623ea4bd79c384 6935' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-ES256 / 1: -55, / kid / 4: h'65c28ec7cdef33cd' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'eb31a839b3b9a2de6740077573d34b0f8536f7bc480f42a07e44eaf3b5efa783 6fb96ee559f841693beb99ac8c458343f233640f6f54243cb93840a13959e0e6 b0dd1b34891b56cc126ee9ac4ebac54ba28a8c0b676266a4543abfa9f00d403f ae8323e28b11d3e0017274bad65ff2a322bd36b86e8108cd9704e47d70d7cc92 8065cfe0c5c18ddcae6debdbd90e1aa08b2101adbd648399987aa2aeee602873 97beb5c3e83b1ad102a31ada5c7a32b265ae5a7dc6643f6591d4b3b6109c7b8f 311d8de6c53efe6100110227106de0475d202de65a6d5cad520909f50cf0d117 fed2b65242014940de066e9d02ae4d56d3b462c7500035911c96164db7b101d6 b68e73babfaa68cc435af83f98d2284c99831e1d1811059153cf25c6300bfd73 a6549bd512f095f3a220530c41090ec52f6b76e29b3e6efa5f016ebb5e351ce2 4f78144d306fd947b921fa14afc10b107e5a801412a5d2332a1eaf2cf7e993c8 baa74a75a26f118ca44da3ffef9c1ecd9d5cedc29cab177a1f0ec58acf6e54d3 4e57177c63fb74e34a15acbaf1cdec9902054f749492c798543384de2195bc56 5002551b52c6d5c5069a7d3c8e4fd9cd4b7d32ee579171952712109efdc2ef4f 1929a69bc40c976d6af90fb956af77b891718dc491845193c14549782f207d70 baa59d9ad3fe201d753e28eb8756a0572500d74cecd1fe5503428e5a925fe09a b42dfa11421be6fd88e96de15bac81d6fa8f7e1390e9671d24540c26b94f2a78 f37bb1a8b9ac908defc8f2771297e1702f10542e6d922ad8332ab16455fa4caf f5c6b246ff8fbb378dd966dc436e03ee22e83e073e60feb916c7ef1be6f424e5 d401423a72b7953f7705bfcf569355b20a9fa8ae340738e98bd8a62369774bba c2a47b8f87cb4a0a4f5e82cc6214c17b517f4ccd556f29caeb8c0e11acf8d018 3e44e313335821c3fcf992597181127d8254a2d74a20369fcd51fe2a5f309815 dee9f9a307808d624145b09b45fb8ca4e14f716823ba465f160da727783c454d 0aca565c56226af06bd0634e969bb950d9fb96555bf8814ab28593f2d4b4a945 4851f7013a4ea7d46d781e219484a43ae4d308c2f546405fd750fa2fb9b187ed 18f9b7d1e52eaa58d78a49a0c0ac390723f975d96277df4a0c0746bc76bf4722 Prabel, et al. Expires 11 April 2027 [Page 77] Internet-Draft JOSE/COSE Composite Signatures October 2026 c84ebd11aface18fa9269a7a95a9c6a0667018f78583875d30691d2043437289 c1480a77f6dc55138a9eceadabf7173769c0d1a4e65091244120e51a974238e0 ed3f79eb879f67f6066b3fa40fd9e0f34f55e4aa80edfef9bd8ad073a8e681dd c3cb3b35947549aee8fe3a241ffbfc0cf10cff212c69e7f8d4074ac2fd89bd4b 6111be94c1cf3abd41dbcc414d0956e01a65f7f684abe574dbd4db5fa4afad83 364659577debbcec6fcca437bffe9280a26cae019c01b25d393ddb46e2c09e36 80a3a7bbf4a5908867e761e225a6fb9dc3a9c2226bc68b3849e218b936600a63 34c1586e152e84ad68ac0055ff6142670f2c51a47ffa4dfd8e84d75c289339f0 491f9eb8db2292b4da6ec54c3034e60ad4adceaa7dfcc349ab0964865469a081 3de15284d23d101d02a03b16a1807214b708d79625f86e94f26b234b5640d505 3df76b00b9cb3cc1b46ad08692192f232e1c03dd55d22aa6b3ea3aded2c70a11 c4c8dfc18f4b85ee273d07a9297b5f1c104958927b23733086df4510a1346e34 a01046b12906857f8f789d681c6ccba97526fba5a9e742615484b6a0a32dcc30 7a5215e9d36be0098e4300f29b8601f15e0d0a6facd899304cdc3de814e3ec9c d2f294143c8e5d56780575ba06ec1d34a18df398124397a8d879b59683068a47 07c357f1bede1788569651f2f7ca06beea3096bc5463b4088702c74cf978bee8 96e0d99c2eee8ae2320d4003ccb4903dcf6452baf318df5d9a94f2d9f30ff37b f77a9106d680d73e835b6f23ed8105621e6c8f0e6b02ac5866e439ff3d2ca4fb 32a9398d5a04f507f5f0d5b82a5284492768cdf9a89fbd854c28a459604ddbf6 f6586e23df3cea929a96396cebb03a4321773d23157805edde975290673d8ea5 10f071c04b645009e8b20bafc37324525e550519d17e132253edd3e920b85b71 c877291e36710b5b57933ddf718315c1a230f284b3a1715f858922b37f679508 9ec69874fbf3dd2c544f77fde18775686d85c92a8fa52582fa5f444c5bea0c13 1c593d8ac8b0bd96acde9b9abaa16a05be0bf604c4de1af77ef6b3c9474a5953 2ba10e8d4a05f8d9ec7a6fb545c7b6a30c5a83916603a016977c65e2b8b4583c 24489da237d153c0bbd8ef1009604ecb988cf319de06adf1d24237642373154f 2d6723161b35ecf5d7d1b4ba6bdec9931681cf6dba67c7fe7def2370b7b4f73b 8eb14d2042323843e69761f015940120dc7edea9ea1d6ed4a4a43f4b31e7e692 91cbbbedc615e3e2ef453f65387e180686b08de8cda0a9f761e02c4b76db484f 010908f6f97d73c2154f6083abf12c907415d199ac9df6a157d511f8e2f5d1e2 0c36ce7da69a8457263eada6ab152bc6928b3357eda17314dec890bda5fe33f2 3d0dcc823480bacb02e7b56a68381216f0575cfa2491e68afb88653e349b7574 5b0fa711360762ad8bab39f7e498c65c2ddc796b156dbef72ccfa3bca4789060 ac33f0179c0a925c4697b490523066675bcc40519ac49756832fe73b948af61a f48ea20b775afa4e4880c0cd0001d9ee831e7e0baf5fddf12aba12b5c001108f 16aa342bd1df76ea2f8358e2e5677997c24c1e467906da82c0307dfda6b8c40c 14218c9a98057765bd154b1e6083ed7e9507e67b97d8356cd58c2bf8f68c95e5 b15be7d43577711932f33ae99a99f2329fef451c132651a7aa44a52d0ca8221a a6f8d53779c160b61dcb747863a2a43e96cfea88c1203fbfb1e36a19b2bea394 e9160bd9731ba5ce87509460aefa03396e314de7fc90d5135caba197cd3d991a 5a899d649f9f0335f72cba9885bef04d314ca20740681c0e710cb590494289a9 b331536139b1cb2566bf3f2d3fafbe8016350cb9938ee87e926bfb9b07401d5c 244cd774103fd4a713d7080acd1639158201f17f80244812433e4fcbb69975e8 3c9bc26bd7cc9bdea6fbb29aa52e92177f2cccec409ad1c5d6a3608994c6a8d2 65704ddb492bbf5b580e2c04a8b0ed36b75c8f10569b06b7d0f007ee0f7162b1 f7c3f8d1e7f496568b53d596df98bbd2983337c5b3b37208e1ed4e2f5e9c7e73 dd498e3a3400b34d32240e491bdff35ef7c2ae9e99f13ca5f7d235eebfc6bcd4 5695b47bdf482a792eeaeae048175d3f7a5d51f0dba4f4dd4fcce2300f7df8c7 Prabel, et al. Expires 11 April 2027 [Page 78] Internet-Draft JOSE/COSE Composite Signatures October 2026 6e26ab36686e73d2fd29e2be23d577f7efb01549cd5462e69325db648fc09bbd ec3146f3f80a7d0b958c02ad7276e8326d72806570a85131bd0ac4d4bb7b3c16 6247e2669ea62d3bc24da1175f80dc726f29232e5f2136401bc53556add83245 4b3d1b54e22a944028f1c1d05f1741b519b63ab9d2881508a0ae1be515890fdc f8a3b82cd99565335d3120501ae01115f1c0f266a90fb3498528d67b039b77e1 9f050a1cc1837f00f539f65af7e85c57fccbfa054355b501a9f0529b401c86b5 350561c16628c771a34b86e99d3941bc37beb2119f53020eaf71885220216b47 8a867e6d2c39e5ad1d92d8c629f1e851e9b298f1926ecaebff6b57a7f4789cf1 c8c3b9f87c289ef139997382759d991de9733161169185d546ff288e35584f61 d44940c799e1f9bb8591b49a7f5cef234c454e6d97c8879869ce57a2e30bad36 f93a34183e25f0e60a8b9f6ece0426143c0ce94b9545854a8e7ba93ef5af604f 10204de39608915f1826a42acaa4c2ed5840cac6cbb3d65706ecec946d04f6c1 923e1492a40d7d39a68f38f4c5baa982055b5f6e419167a55ac8c9806fdd90d9 5e0f783ec4d90ecf89bc8a90689fd3116c4102a002714822e2754168c70a3cec 69ee0cda813ae34a0c01d46bf6102dbbbfbccf6b9c50fce710621fe2a330a014 0577eb81dee01567a05356cf7433d68368687b909e54f495382a478abbd95efd 17537dbfcc514c43ec522a7c0d0b4829809215ba6a4b1854ca9aacf312df139b 931a1d1f97ebce2cfc6b0c713ab0c7a3c9b9cb543c9f02f316e0f9e813ebe130 bfd6d4c3c7d6c4c0f03940f07548c63226d4327119670c61fa954e31d0c4b47f 9df65076a6a6a672a0fea7cec3de8fd40f1e3a3ffb83c3882c334408d55e788e 0490b1b49c5ca75e2d154f8c507c2183cc7ceb98864c369f29b116c80e80a14b b0a1374c4258721093f386d6161ed32cbc943776ec1136b2bae812ab3f949aa8 5bac47f1a2001f39acedc313cb8f2f1156a8181aa30d86a80a036b1643e5f18b 51ea5a07ce06d972081cd015a348a6e69f963107f5d166e673d96d7f9d574035 667feef40096e9677f12a0ea9cdbbe99a23beafc33311fe85b58d309de9c77d8 ce1a4b104434db0c7e32719b7fc950b2a4cfad52ce167b6acc8c4a84a532a215 13df7b1b28f6526351de26955a0e01924f4e4fb531f2d28a1c1e6312cedaf8d4 a284a26de3f4ce7dc313f34121f8204a5f627c99c5edf0117998b42f315b95d7 016c95d5d9f20415292a4e4f5f74c0ee042b3b7791be00000000000000000000 00000000000000070b10162026304402203cac4b8b860ea4fcc49913a5c28ced 206f89ce54b8fcafdc7c3351afeea6f8ac02201791ae5d55c6ef09d95be88a1c 14fd4816ffea3d3b4c9f70ea9651ab9066fcd3' ]) Figure 9: ML-DSA-65-ES256 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / Ed25519 seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-65-Ed25519 / 3: -58, / kid / 2: h'93fe1616a4131f5a', / public key / -1: Prabel, et al. Expires 11 April 2027 [Page 79] Internet-Draft JOSE/COSE Composite Signatures October 2026 h'424b2f267e58d5b3b44d71acfc6a656bb26950d57c61db1c880bcfa1feab443f 0942ab8bdbad7d708abbc356078f6d99a252271fe62c74091eb94afb9b9264c5 0a888e0dfed80cd5fb2cbd3667e60d539ebe44930219cd4faed15dbb3455a264 802b9f49bce42ee7550feffdd4642a55ade693868a460cbec03f4fc99a4e30bc cffa8a475e5395396674ebb81a94937587880f6dbd27bf1c4f5a9ee43cdd8b0e 53b3b7fb49c73adfbc2d4f8c54303520c29bf97e26ee57db342d957c89393652 2d0942b41d82ee3772a00570adfb545c1143922b0496f826a0a970064b36ddf5 34b5f8e1c1cd0b5565ea846b45431f0618143ece89777bb3f61179ad20295fe0 a6e062ae6eecbc2ef38f2ac1a22dc93b7b126336223c55b61eb8c0795542bbb2 dc65e722eadc6866ffa9683beb8a999ad7a83e5e6e016c2e4c35f6f7649ad3bd 52ec67ec1c5c6e7b9972771218be9554bba7727f0b84c44b9b0a8bd831fcff2c 9779ccd4ca30c6ad75b04983e41de893ee5f39ea7355180b709c7045c22d33a0 83f6ae07a114746d1bfdccbee5b9043879bb5a2e120e2a4636283f4a1cd4924a 2de6a4aa3d99ddd88f48aaa4e88bfd1ea769d82c10779f2ded796db542971ca2 89b76863ede5997b7e9ce183b43ccec278b10d92b87442ce0435bb1625171db5 554b470239c50d2a0c3a41b2a38807db070b47bfb3e7d10f3cd979d69963c8d7 9f8029cc4a48eb04fcb3d708844febaa8b6ddff01ab64d59358e6505c4ec1d7c bb14ed2212df458ecefc03fe03037b1505a4c9444322f5f98dfa91a4cb8c4586 0a2dadc7515350bb6d431e49a6bc8f5ba956e682b0e513321a97d1962602891c 9078f62a8a9646a31387a6f09684264837899e0d8ec7d11c565901298b20b345 081690eb4c562c1aa3a25bef06566cb34c79bc0b25e4095d6ba793e81311e41a 3329152686f00d4897f84fc4edf4b26d545365785ead8d63aef64a87c0b91a2e 5500383956cdf5f6e37cf9d5482d1c8e3a5be38f17259ac45c9fa1c4bd3bf177 d312ee52a6da023c05722a8738274dda8d1b04e99831cf57c87282a256c565c2 96d0524a063a3a41a48a83009978d98d8abf61af68e8013b594fe151d9bec199 902c4c70b49584201743c6b53103d2fd24bdf078dc90b5a188b4f8d772179988 d0416c94d4c57c0860b9d7b53d4cd261f332a1851565d52ac37f008747cafe32 0f363d9beb6e4117db43fd8aeebe5e0ce2f54e3f0367eb3cc971bbe0c301a8e5 2f96094936035c6ee3ca2d13db483a0dd04dc16247de0e0894ad7cb7e1ae7ebd 4f8f900582b20021e77f70254501c6ac3dd15d43bbb7931c5283244312158c2e b1b3e1117e194f0a1e4c783efbc62c9f81c21562d0d34a5f042b5eaaf32f31f9 5c5b055f4e7a2070fb096f56c415549cde74f3864e8b9fc27e3299724b463998 6044b55928fd6972785b280c25a3e21aab814ecbfb0c3cbec0914907ec907f25 a1d88bce3d319ae8222a35945db62af7cc75cd29c1f5d98fcb93f750dc303107 6979bb51dfc37d23e8eea78073a24d3e26c68e7bb10e459f2577b90080359ae0 aec10318dcd9e0f9e34029c31b3e54b1855645db420618783346dad5b55eddb4 f977b326a655525ebe2195eca9cec38a3c0d2273b77d3e68f1901c2ca5149734 a51177bcb089476b18cba09fa8b9b46d94a2946f358e1decb1998652c58a9085 2423e2c85e79d19724461627e6390d1a81fb1a72f9c7edc4bd747dd5c85217b5 856141028414ddbe71458f0a0b2b589df2e1b051783b8f718676b1defbae98ba 496c2a935e92eeadea0a8393ef59f9e914f0743fe65640ddf9981cea6dbdd957 a534ad4e790efc974ee89938ad99d53c5b680775399326834729bb37b082e795 f8d87f52e6c8a8db68e515c277bbea82a7570d4280896c987a0608903e306c63 2a223c55f0ea3682039c4a3f5440f4b5ac3e6ed2b2dc900cecc72b72f50e49b2 629ad30f0487b2707b86286f8c4f55659b25f9bdd7a6af460cc3c57a3982663b b717461581e196894929d84153d87a7f482d284b5b894ce1a78216b2a011f2b8 8742cee52d5133e8fe77edae242f5af91637c37ffca32430509b2fe4756303a9 a3659fe32528af1e10d8d43bea991b2d109786cc66d35b1d78df254b92cdaa40 Prabel, et al. Expires 11 April 2027 [Page 80] Internet-Draft JOSE/COSE Composite Signatures October 2026 f91a987e4a922ca81050e5bc3530ca85493bdf2a825374d0a8310a6860284ec3 ec732326eeeffc42bbd42bc91b73e5e7c6b599d016490637629f3876c3e42f8d b590e66a85a7838c818f78fffb4853cbef09434989803545dca87657cf7c7e7e 6afa71382bc10fa0bb6480f243eea1b861101006fa0cff3275621943cc58eb4d c3a0428a5e425670fe82268de71c511d8ffbdc11b0d0f961120e971015ad5f44 8886b802e3fac11672319d487c84f1001339cb969784cb57344f2807f8b425f1 d73caf8496d742ed237f4c9fcd5a4e84fba7e27fb1a8ae12c4f0427ae24e910d 951bd8c35d61f8a678db01caea8ef789a95b62ee1b8c5d32c6baa536ba88a107 0ea61aabbf59294e3f6f974c4c91cafc5bbf6b7ecfd57a18fb7557d71e06e900 d281b0b49aa00feabb35714af33870edd7ac2393d93177f79ee5606c9df176f0 25ce49a6e5ff51a2a412ebf86ac0f40471c96ad4c119df230be6173df530ed65 6cbd8069214741ecdd0271c603fb6c4a8614ff878d33e726cac6693e938ca3fb a82c4995c14a2d4af9014fe4c4c50b794cac596b52189f66a7106fb325b526ea 3b6a27bcceb6a42d62a3a8d02a6f0d73653215771de243a63ac048a18b59da29', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-65-Ed25519 / 1: -58, / kid / 4: h'93fe1616a4131f5a' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534136352d456432353531392d5348413531320013 bf26c18c38c85eec2ea1676900c4e51f304ab5d26947817f2729d93ee9eac71c c5ba8f35065b5b44b2fe52c4dc3e8b686dd0098edb8775206a386db94e305f' / COSE_Sign1 / 18([ << { / alg ML-DSA-65-Ed25519 / 1: -58, / kid / 4: h'93fe1616a4131f5a' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'87d1c8ddc4b0604e2ba43597c743bd02ebcd1529c00a57f4064a22258d676130 Prabel, et al. Expires 11 April 2027 [Page 81] Internet-Draft JOSE/COSE Composite Signatures October 2026 d05cf245a6cd5f2e85bf8f9baaae3d295e50850618166f07480cd182a0a10c28 7f9dd0dffd6c14a2cf60a89165997d6659ef884d71ac41d83d52a5553002c890 e3edc58e8e828e194c3573fce2dd6044975d8283b13dbb6c7642401ef90a0930 89d7e593ed04b0766e755b3edd23209c80e1998be8accf72584d4a6e33ab0bd8 1fb530b49d24737ab7cbf6b03db261c56163819066ee14a3c7d0371ca742470d c7a33a08a35052eb5d3e4ecdb8d8950b9fbeaa694e5aa0d9b7e45ae09d6d92b9 d51e99e2eac4334ee0c404ecf28f25494411f7e6288594657ee2fcdc4fe54166 f76dbb1f2cef71f430228b161bc850ac43bdcb80379658c3321bcf4a7379fee1 dcaaf46d16693b3a1262d3af45f1c91f80e906fc8124aa269540dbf287261d7d a562a83073a2f2d4160473219c4ba41227a39f480bb08e61ad59300996062735 c9df06fa5eb4e7830e7d7dd3e767f07dcb6fc39ba9a01409520684f406bd2f2e 1421730f547e5d92f8af3b335d70580c6a6f452cee6aa44bd0c440145a7c2b64 cccc8f8f6d3258d17fbd4a1b87fd5ec1bc837ed275a4f6440ab230e996817f25 0bb37a078458ad5c747513ec52dcd015ed64dd03aaa5edca6adeb144336863d4 6f36385099dbf6f1b12dca8241d8819f9499a702f2cb5a7a2d93a2714ee4ad87 161c9d41104888c483c8472cc27ffb5c84fb4fb388ee14de18cd4796c247b676 df4f4d59e489297777d0a9130b3815956d18167f78940b2d355469806ebae845 c4be54c57ec14eab7a0fcdefb6e20a96ffb6d637d8d79412e9dbc892ea89994d 49cb08d6a0fc0f31296f8930bdd74f131eb19a3827bcbe40506dbb2d4327100a 269501325f86303289e4cb0bec2c5024ba23081b6610fc0bfd7605bc63101143 fa9833ad55aaa056164d097eefdaea0f56826051ee9a808d983cb20572da144a 884acba016749c3962d2cbb5b6cde867f7b31b19f78443860f145da2536358b0 4bfa2918283cb278ae401af937c6aba3d9089ecba820e8299935fefc8997969c 6b9be7220a306cf1f7d8cc492b06f94ef7b43a2cc3e1ae3f0d4baf4e558a6769 80dd130d7c44b92dd99804e342d0f6078872badfbf2580dd86a26fc10495a69e cc985ced0b34248558c5400da617ea552f8671379b788e1d09e8e83575cc32cc 8f3ed81a63b4c945dcf2ff54f3266ce28089f5f68bb0e49714ad9ef80bc8aa70 20da6a038e66972fcf335742ad8dddc8b959620ca177717ad498524cd96014dc 15514f514cf17f0433db1127526f25ba17c0938359e373e43998169bc99a07bb bdf1bbd7c363cdfa6249ce1bd207923cd2c286994ec75e9f26fdd0ff752f44bd 011cb3e753fc0717d11f88011a0c84db8d88038c351b91931ad5cd477e02859e 01c4c2bfd9945de2f1fb067bef79e430f00b069dfca02c2533e56c0ebdb47594 83155bb7e45ae86f47eb0fa051cde714833c9a0aef8deeb9fb98ddbfa3d8f7d7 86218d54eb9593c4011d38d5521067bfe03a3859d3606b4b3eb3b2cb1760b7c2 0d0f886810f3656edebf4bdb1c51711aed2f452bd69cc04546da0922b922670d 4d9110ea24986b85bcd6c707146022863ad85556e857f06ed6b0bd585f89c119 59ab1650851b23b773518ed9bbfdce997711940d47f915d0bc11170a0babe85c f6d1c272e5d0573d4aac2e595579c7457e4d6c881443f472cf5e865a69dec3c6 69d8c1775a86b249cd8f3618c9259add0a71a5a82c375137067e0ffe4f8d544d 5a825c1a64ec33707da7e3de4ffee65064711c4e06626e66c85ff13ed50242e2 1917a2647e47b8c158137e716ff308b207e80c95c3c8eba252d00d5d475a130b 931d11995200ed0e2a24a0795c436a997f00b6ee47ce6ab66f53502f64e02180 dcada208f21a584d703a996c378de45964768200cc42c5471f07d9d82652c826 534c6c1a7619231b073171575dee7764a274033f066ba6051a87cc864e2d3033 6ea6a49dcebab9de149ed8b07bfd3264120311b3bd9a1f05bf343e2bc1fd4e85 64e6b8bde25fdc7af3e90db002d0b1b1d98760692dca483af82c337e3595f714 4668cea652cd0de44ccb9c7e367dd50bd5fe61c03a3d7cd605552a5d439f556d 600b60b6f1e984a6af1ea083cee8dfaec7d1190b99423320fcbd92bc884c4b40 Prabel, et al. Expires 11 April 2027 [Page 82] Internet-Draft JOSE/COSE Composite Signatures October 2026 9d776eeae6dbbfe0864237c5748a243eca01c2da9a6c8d7d5a832c2acf1989de da9a75b6218a5074d34e769d62a12a58aa4e7d805b1a44b1fdfb2d4e90890865 5a3b063593d6b9d02ca57eaee51e8ed1dfd424ab35a7ac80ebff839167e33e19 c68249b6a54e9f7016ad111f13a0857249a97231e37a860669bf9a094093c8b2 0d721e06ba200691e7e551112a90905fdc7b083b36cbbf4647aaa2b66c9f9e5d 221fe1ef48a46b35df63898383f90a99eca53840aeb71df47849adbbb449a707 7aae229aec51c3674ffac50ef6a8c7f047b382d2da716b32c381168c2799f650 779bb8532b470fa81091a12fc9ac43499124cea67dba8203b71b203b8ede4105 c91e13d4364cdbc7a7c05c7b5ca38a0d1e55389286b54a51ca5b53b73c785ce7 8a4d854c6f37d5bb2a6a658f1e51a916c9ff573cf23b11def800792cd83fdb64 ed773010ae15f5bc6890b3fc5c2410998d6565427823b200b2390aa9dc209850 b1da9152e97f3b87afb356cb86b95fad6c5eecd1e4184c0f8abf2a8d1b088def 6a973f97d5c6210e8a471f82a246babba14774e1dcbe25da51f0ddbd86d1284d 0a6f1d4b4e8056d098ed7cd66acff2e5cb54217c0a6890f36fb9ec70f08f887a a437395a0efa9be575b05aa37187a4c032468e539d637eebc998b5a026502a68 fccdee1545bb74bbc518e5ac5f49e607ba8c047393160f9f330e2862045694e4 521beee46a6594bbab59802d93377b7158ae7803a56b908e98879ae6f94ba2e5 ce58d7c3367ac216391ab60592b690bf936193cb25cc6ae23d7fda0089b485be 1790a9a3d9198036597e7315507c637de1f890566bb8ba1adc00d4eb2623ebc7 8849d167d5b6a69e8b8b541e252963404c62c16a4476efd04ffd49a65e44a030 c4ed134878a483ff369f5553a695bcb90f31dd0bee1d28a1f240950ba9cbfa4f c53015f98a04ddb3a69ebad552b51604fb864d636fd1c5f5758416cfda17cc33 049b1119cf82706d28900a36e8af5fb6eabb01ae2384237c136aad9142364886 26bc3fe073086a1dbc64f7f39a9fece1719e3a3ab8581c964f6470c71d1008b4 cad337ecf297eeb3978f4a9618073a2ed4b6df84a2994c2dd442d8eb233dbf8f 7aae015d54cae131bb575c5031ad8c909d16c778c95d95ee0605e255d0f1d8ab 2b8f1602865de9132e8f52e667001b1115b4fec4df86b7c9dc02f75ad3f85757 c4202342729e0b0cd986f4918d2f68d607a075237976843b80fbec81bc1592f8 68682ce14bd9afb31c1ffe9baa5b23bbcdbf9dcd3193333f4c600c8c19f53c34 c43c964bed80149c990f9af7b7259a37502d8671a1491c4b3faeea8a8c331fcd 73c3ce7f7c4efb1782f2a78f117e174d498ed5127bb043861cf276330dcf120b e7435ca7d62ae7b7a2ee673931bc891df1f3737ff8b2bba6eb741cf37d279c0c d41e2691a8f4534c02803ea720b50d4339d75ea9998650c8b30db56e95333875 6b8dd7a242c95e92fc8825bd9cb2700af12ab75a17f73935b9f8013ec6f8a6c0 7d2f856d9f7a02ea851b71452d978c7eccc3de248aee679021d4758d12379811 5d6690040a57ce722b0e8bf6b3b63382615c570da0fcd7d75f228878020e7c40 b3cc8b79d2e6e5b0b520b928d1a717f0f4815677d5f3978d309615cb69cb3faa 9b596d4b48c6ce8edbd73b37f0cd002170b4bdaca4d05b82d7f5f41a8c6cd9db cfc0567d709017ec13ffb54a598b52b0d0490c0731eb01554a4909004501aded f7f82d0a282514d03eadbea6cbc3c1bbfe8aa56ce1bb90611730f644debc8976 e064b3d2a380129cda5f290f95bbc47c5420174370a1c2c548ffacc1bd51b0a7 aaf8fcf57c975044b74df7a462dcbb808521e935b7ca4dc663208c0859fcf5cd 3e2be1f29b0cf5df8e5e348d9983889924810d3e4be6f51c365adf3b6c015058 8899f4d782daca9b4231fc35ab5c9445d25adaf773d20ec893959306d6255759 dfdb26b0625cabb2764f00b58afbbee7081cf35165494fba3cf6248da5e24611 0c9288a20bc3047e99374e2e6f70752d707a377d8846806e8626bba3891f6ed0 884a601fc27c5885aac1b46919dcab0399b60c43cb1b8143b798e1eacd1ab663 e2241d4d228230dd53211bbee783fe6363122a001994f45321b131ffb91ce395 Prabel, et al. Expires 11 April 2027 [Page 83] Internet-Draft JOSE/COSE Composite Signatures October 2026 7b6de21342cf456365e59863f90c83ce7bc3a565a885eac0f9b34fa10c52418e 1d70a8a065ec5682c48eacf731354c0e89823e94ed20ed7c50e4ffab56dfb578 04c020649dedf5fad3a764fe3f97901d2e56176facf69ff1b03d2c645707c6f9 165a6136eb1cf0ad6eef6d315c479e3b717fb88b254528230e54769e758fc4d1 ee611e04884c9c2090a23e2900c56a48011a3ab7f3214354676ea0b61c5474ab c9d9fbfd081a30565ba1b0d74e8a8ea7cbe5e90c243e4771ef00000000000000 00000000000000050c141c23296fedf9de10b3aaeba9ab0de9820002613293d2 68425d7a34c3e2aa1cc86d28ef32fc69b2f842ae14de62f70de597c2b16cbe61 67d2629dca0fcc3cfb0b6cbf09' ]) Figure 10: ML-DSA-65-Ed25519 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / ECDSA private key d (48 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000001' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-87-ES384 / 3: -56, / kid / 2: h'10da59a01e274d3d', / public key / -1: h'e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b4 68cfc82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91 fdb643b512f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfc fd12565433c4afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4 318bef5eb6e897e8b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ff a496445967e75217bfbc9048f9956443d8731f833eb30de10dac96fffe7cf65e a0445c3e31e8601e133be6a100764fe3196e267726441f31751fbf9a6f588064 4f4e7275e57de2b0f105e4db055d50dd1c9c934fddf535b8de28b0c74c0449f2 22cd2ed0bb8fbc775ccee8c940665b40f712f4f7e00750e9e1e4cd9cff25d194 5c3e9bca53ccd4f12eee7581856ebd68f26845956e3e7beb761f0fe75bdd31bf e2fa018113397b387bd59d62a68b8af7fa245ab932e69f778e2ceefd21304fbb 8099ea13d8ea57c1813197a2f75ae251075b51dad38f853669e9d5f98a365509 8941993a1594860fba71fe530ee5c29f58f2978af688ccb75a5838a359c112e9 8e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0874e35befcf3 e6119684768f36e008f04712177cebe627607381e56eaaee161c1729b8de51db de474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab5a3a 049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24 feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c24851248 885107b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff 6c3e20a47be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283 c850d8c58d1e5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c50 1a8ef2ecadd1b677a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24 Prabel, et al. Expires 11 April 2027 [Page 84] Internet-Draft JOSE/COSE Composite Signatures October 2026 fd92b7b5b4025feae996d3e48fd4c650d82dbad7eaf936639698512f26253d2e f6847c8518e8565cc9a5495c6fff57cde7323882c54a7db470ab2daf8ffd2bf7 94fa7c692d9e7fbd532eecc1d7880e2ca0b3216128be28b4a9f1d151fac97808 b0bd98b7b43a612a9ac865812bfeac6f47460277840b52a3b087f916ca7cedc0 f768ea2bd19ea21155f84b4a04c4000ad2ae0587154d560bc0a477a4f9329a89 84dd31eb1f2a05e3d918701d630cfca9af61ef088d2c5581acb463e439902e5d 425719e956b8d6df7305b28e0ff27d3ad0de2085d292499b19a3390d4396fb3b ac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe24360f84d14f8e47 2712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186d3b764ad9e9c feee456a73c291d8de3912414ac43911c372173ad7b472af35c6853ced2fe7b5 fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094bad0 7136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ce ecab72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c3004 8bbaa797d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bb fa15acb5cb37d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c5 4d6f87457373a0d6ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bf a336e5bbad14f73640f1b9febe800dbaefe1630c61fae635b074c564eaa9db18 9c9e7302873fc64e6d497bc5c29080987a07a21d4af210703a4fa07f2fd816f1 2fd1e29b4c0f44afe9bd4a1eaa8a7ae6f02a5b4258f52caf6127f62632a67cf4 e8310be56a7c28c86b2e277600c3e92c8d23d42586244c571e90568df202f2f6 d81f860a565f9eb91a3c78372e2a8b1be61c5418cf49bf2d6c8955d4a482a991 9b7660b3f9a4404ffc454ea073e1e4b2689ab2cca4e46bd7004a6c491fa26ee7 a57d60f35edb2b821e6266442c8f335d452d524c772e0353724c23c7dd15b7aa 155e91442022140c5fcb0153147edcf3e8952f6f0399a3c88066a72756c94099 15de63f64fa797841c57c796c6fc550ef745dfe9f179457f94755ae5a2506a76 4f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec0b36e3a6 c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb97b68 5ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd87 9b64f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f 33288e689ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2 d38fdb7a65aa43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05 d447f9f58ebeb84c65b36c8afcb83727a1508994e826957a663b0b9b8a003325 ab6d6d6462ee4e106019c0dffe10323b7bde7d82a38f85fd08786e860ba66c16 1b64b0708c363de5c6af62d8db3c243d1e1b712cb1d59e942b9b6b4295a5a500 b182cbd5fd1bc6ce9376d91b47a2284f1fbe0ad1c048cc2cfbb4afa3a9eb9697 503b69feca990eba7e9441af9ca44cb3ac6b5ed66e591c201fe30efa8a7c471d c613d6254c263a8e132104bec47f1aacb3b2fcd4051b69b5e3fcb1c147a65c2f 90c4b5188bafc521cab03c12a309da50b5a7517727ed41228ed123fe1b152f6a 6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff9b2fa40ba5ed56302425 39e5d96823e89dc818a13d16675ee3079d976f694f5acc9760ae789e9b3391b2 89e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a290810ed35e56bb19 d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67fbe761db 9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a2e6a 152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6 b9e2b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe9994 Prabel, et al. Expires 11 April 2027 [Page 85] Internet-Draft JOSE/COSE Composite Signatures October 2026 1b1e8561d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23 cc3a65601313f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d01 1b01b4154d1b920af003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b6 2124b0861b163a3b91aa4bea28076c3432df3b29b6c4e1ba588def420071fc15 7de90eb2722ecc9ab00df3c669383a61a91bb67bd287ce349b4745ee7a479dbc eef166b9acc412eb579fcd6437307edda253d606b7be7599c38092bc52a85984 80edab8b82b1d21c565d2137ceae0b6642619b16133d91205d6355029e9cdfeb 9a28b373d95916b6b707d4c712c09cf36daf1a511b2bedb1aa70ee58d46a0666 bb287784b0a3840c589a7a04d5d6f2216be90aa4a512d5632f5c9bfe7b8b1338 2f999b95d367c7c46b968074ce315197a5ff3545c7b77a804ade56a95b5c24cd ece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b57b763439686d4a3 04aa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a 385502f25dbf55296c3a545e3872760ab73617de4a96262c6f5d9e98bf9292dc 29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e 5f', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 303e020101043000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000001a00706052b81040022' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-87-ES384 / 1: -56, / kid / 4: h'10da59a01e274d3d' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534138372d45434453412d503338342d5348413531 3200bbabaaf08599f673a61a129dff4e96c866ab8c91e80e69e099425785cb2d eac04139c7dbd1e3c73f98b266ed8a3a2fe2540474de88cca0c9729bee6c9142 64ad' / COSE_Sign1 / 18([ << { / alg ML-DSA-87-ES384 / 1: -56, / kid / 4: h'10da59a01e274d3d' } >>, / unprotected / {}, / payload / Prabel, et al. Expires 11 April 2027 [Page 86] Internet-Draft JOSE/COSE Composite Signatures October 2026 h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'c0d61764f4117f858818b80a1d418d0dfb91cac5e4cbeddacc6cc396a4db3f9e f9853502cf7b08ba48cfea1be7a0cefc1f0f8e63b773b4cb8df73fd85738b654 21a7cd0075feca49be9dc113db76bb41f71bc2d57d8713584d61aed2d0b98d67 f41c49a2a91c41fe36bfbed30945cd61ab42b4b3ad965ea45538b40681e479fa cb8b82441aba8d64b43b9617764df001655e9a3d4d314d5cb6eeb0b70797cf3d 6dc4a2ff6cab59bf29833f447eb13d2bda8f6560debf06e0d7f526bf78a1904d 6b2a9c21a85cf9c31551dc3ab113a0806e60fe58f839fa4024a9faab1c76e0b7 42a869f1b72c407975cfdd04b4e9091523b7bbfb6111214525aa198c2c46a685 6cc1727f49572b0a7c226aa913eb5d4a2ab62f50ce55a2a8c5e060dc1ac73dbe 26bb0b8015e287e7c43171a2f397aca587a8de87b976da79dd0733ce60845289 84acd70fc79f869913e9a973f0e68548b574500e3fe5eb0ecb9ec0d5e7f93750 b8a9b35787b6160b3fac2a22b96ab89150c13d755bcf9e3993d87f13a42d1ef0 c49039214f288c46ad4e0df32a755f050ccb36613aa9a90348a7b09f87f5d3e7 9f67d1df50cf792e59ca42f0c19ab3302b54eb93601852aaa0795177aa40fdb3 2efaf070258c7bf469327b9115f7e505998a80651ff774e998ea1a58de763775 68f7d82662799920ce22837c6c065d150fd6a0a3c11764c93fd8ce6fbbf86df9 c33e604fec239a09f352001bc71b71349dc83b06a136f17283dd27bb5a5d911d 36906c4afd4eb52a40b83c6ed9bf37860c467c5d49c2fc07f2ae28d07b6830e4 aa6f7501f1ad3de07868ec927df0997e676480c3672cd490fdf58a1d38651a6a 0f412c68ec53b6204678f6719c88bbfd76351019936fc6dc00491453cc38cd59 a22a4c5a70828cfb31d7929ad31c7abf92d928448938bcc14947907a239afb3d adb38d5f023d3da5b04e4cc6e2e3ce211a14a4517acd9c24feee0b7891f7fe56 bc7a655d61bd4045c4afde430f66065dffc77eeca15ee0524fa8b0746fec97c2 031707129cf181aeb96973aaac54664f65fa0c2c3180a87aa9e4b8925dcf2815 7e3f2aee652103a14760984c82b9c8a2799d63ff8365a6c2457f2e636ca5cafa 1ee07f4ca5f178fe6dff55a83af673b9a3faf25e263582323d9f6c21e5c0bd29 b4c11d0a9bcbc911a58335661be37f40da4c60e15a5ee2b8e6d79e1f468b1d73 6b75950330ab8b35e00f1fcd63334a555a5cef77964204e84bb3687fdd6f763f d3c963da8d9b3d6e3177ddce707d27b4aad7446608c1c28409b4fafcea397b9d 109af8a58f2051e3f75797549daa31198bd17bfa3ef40f4424e20d9b9694be25 c2946edd6c0d47d9b92154bfb12594ed7e7dd18ca0387e5ce9dc9816598ab1b4 c3edff62d1070eb4a425a57ef123166fea1926479e987a4d25baa01a87da8544 99f62897e82082fc6324d9ce090fabe9711897c194438dd82763c52f7285eb21 073910a6262937aca4f3a23d832690d81b33e6231675bcf7c3eb55c7f2897e0b 353bb0a9c42ed4130fc283757672c44a032d95893cc2c1e2144b2ec591f4a5ac 5f87bd64a99f2b9030a6318ea4da8c20e11c9561448a08e381ad07392a21f99e 669080b51f1534c616d896f2dc7099b49be62c926bddb07d7943a35685b2cb00 c2e2e8a7a45c55b8da936ab1579277a77d951848a40f8e70287903d6c5dc7830 ac6cee48c3766933f141cc31e499ffb12992bb3fa0376477d1f5fef3b7e22abe cf6731acec6f3cd2a8e2fc20e1c32088a615f54787a0edbb0b6ad01e10446986 80e3a17e52420939487a55b1c4775213a709de05a51a6e644105b9c09ade2a65 2892f7d01bc7e48555a1ad7e875bae864fac68be1603495f01e5b548666902ed afec2daea3e15c2c1ca2e44721bfeb37f45627103236521e1721e723f042e033 e900323cf6d60ccabcde46245eaef55e59149ea7b0bf79847d2f065578b70bc8 e94702f6bdfe40b4c178138d9a5793319dc6988e1b4e66e4b49f2f30c0fb00cf 60e78abd030993f6029c178dff63031d5beb1c910c23f1dd98f8aaf16806ca28 Prabel, et al. Expires 11 April 2027 [Page 87] Internet-Draft JOSE/COSE Composite Signatures October 2026 abe4dcaa7c7b788048b937fe671856d7a2377c1da51666888b2c81ec1e7ac032 2d9e8d7b12a6bb1fd8e1a68f3d0aaed52de2180832329697a04e8343818924ce 88721ca96ae8847ed66aa06f5b2858b89525d0ab782c60e879f8a8b311ef5060 9611f13230d9d74e0ea9c052cd02bfc7b27ee62cf807fc25e37091b0e9dc3f7f ac101df5647929606a21cd7466888816eb0547d48b02281b473dc6f3decfee6c 059cf9b42b66b9da9c2cb20677d3bbb5d764fa21a040ff87c90213d1a1d80d1c eb9363a030aa0df508c06622e6180eebfd4497e6481675e2c06756f71a01658e cc5f6934ee10993e005946b78abf172298ac6714f60a0b57b3382051664cc54d ecf4d4e1868a78874a64e6f866526051d5285d39840512404d8c6ab9902eb6a8 5e4936b4b6d89ebe5e7138a6597f65b44821a49e5c5648cef772a17348fb419a 956f5efa0614414ef6c77d95d3ec6dd7483497a7556e4324115fd632f5d30c96 4a07ab8eba3c101847b7f39638b1265d6eb4cd243d0ce79137ad980faf022d58 40851a4b2aeb1d238a7400f07e0c3327fdf92be28f53fc77db3ef35f441dc315 d56b2e8e919e655a456fb500c8649f39d4befed9c4ee234d887785a001455243 86f7d8e2c4446faf99d40ecca83e50714bfaa78453d213fc87b87db336b724dc 50026013b48bf5fc1003602be2d29d94f7fa3e0f3a96efca1524052f116e9779 a764c614103cb5536db28718978d7e606536f22daea6444f640a49abe5f1b270 6b4906340fb79bd219fdee9f756e9107055b9f1d5e567f9ea3458c2a9edfe908 98b09daa0398dda6b0b892caaeb4144364c49b00ff2b329db0b6c86946cbd103 a3a1fb4c2c8077cd81f1673a4dba25db3081ccbf03e23769d98183046422899d 332e94a186132e9ea49e47ba3e888a2a9a13370cbff2a2871f4e5d0f94f223f1 369beec4700a05eb52e0ba1d599c5d000f907d49b09e37ac84915f685c28fc36 d879407d9c8d061e556f209c0291e109dcfaf6cf5301fa1a169dd4d50b3beac5 eb18442aadfe957448c3c2a210afe388c11301bdec55a5a72849eb9288bef0aa 70cbeb79d99c6efef9468bf00bfaa7f6d0dbf995c44461cd22e24b6d1d70d4ca a344fd4b57895bef8c17f62cf27b92feeda5922b52a12fa39b69bcac22f222e9 4720b1f5d57d274d72a3dc310932f11594f7cf59c199072404d5060cdadd8801 cd292189ae40e349de3e3acf124166d82bbd4b7af5c9ebdaeaea9a6713833531 0d157e2bbb46fd2b28d555d91cafd5fc397785bad3e57350d5238b509815c390 b7de0e1927327b2b1f5def273900ca13405bd342e405d156bd1b79beb53d63a9 6dc377cd26cce22355a1ce0f23f1a5272a6f264a7a2414d56d81832649837972 6406d3b3d7f025e3f0736f98087e3ac533e64798e63e74d22c0635c2baf5b670 0f4934efe85e8fc0123e0d239aeba0dfdca64fc6879bd93e1638117c5c6c6d17 462945e1d46607691dd33541924d4e6d9f77626a489d37d88681ff6f1318c5f7 183613d4cf8e4e263026a8d6cfde54f7ba4f70e68e286c882c134e13373d8695 694b53aa21029f329322c13f753a5959aa3224306ad3b2e71fecbc63b333777e 42958bbff88aa9a97578ffc3bcbd98782bda53e27bd629edd10b3bc59e680703 fc03acae032fc4f5e0bace98163b0c52b4677bf651f0040cc6be7f66a8d4bbe6 c2ea590c1adbb4b12a21df9d4367f8d4aeb43c9ea763b406b4c6f467db2007a2 bc7f2a410c9ae9648ec9b421f85d7e2063c23b6e6ba8f218106e911bbda38fca 4aada43eebbc0d4923917bcae82a55ab4484cb11b2370732911d98cfa7e7627f 9654ce4e6f815a6a0d2d6dbae97b436b736bf2bfd31b89017a209c321c542b15 255ab9c869b6a528141b8862a52560bbbfae22c8b6aab04ca18ac8647cca68f6 38aa0ab7f01f8407787842c8a36be4ef9bc0eea5e201267ae93f76dd6aec5a1c bcf82d7acadeac9b9817abbd5602400198dc97937cc07d35554b84d52a99f8a7 741af3d412575c8dcd89e05a436cc2a7c7f048b589d833bb9f327a8db83a458f 47c424579808781cf95b1d0a65b816a0656f50aabb07991a63537952ac5ac964 c27af35ad72a22650063dae2e1aa385cfae0594e6358b3c6728f5ec90d0d4080 Prabel, et al. Expires 11 April 2027 [Page 88] Internet-Draft JOSE/COSE Composite Signatures October 2026 153754b850ef61ab85bf994e745928274c611c43f1cff9f2798c2400856f657f f6c298be5d8131edb903d7fb53cec5fa4fee8fea1add2fc057a6d3d00c6322e2 063e7377675706203dbd8412334594eb1aa9a320f0127f950f1d28af7ce4b014 04e843510e2cc34ad94040905516b87fe221b8c05faedbbeea6ac5ac738e4301 015410e1dcef82925596a50c9587ad7e52be83cd8faad6e8d3aea6e199dfd19b 4c231575978d1275b34befbb0a58fc4c7d3d0fc3faa49f77210d9d639f45df1a 4a7a0b12e2e568821566241d9a77e47f6065bd987a3b1a933c6e8d80420cd2c8 a52b49f26a76327fe98aa245f3d5f0cd33223d87a38024bb55cd2da3b1b123c7 c48b9aed2560a9b0c75c93123cddddf2f893993d19db066f4887ecac6a721bc7 768c16f3e8aeda165e1cdac8e232adf6b87a5bb8833f2cb6eb52e2245911d276 d238c7001536119c7ffeb331330ba4db7f6ad8dbebbaef00e267cec50dd9c24e 2ae8b776753592f3725b36259377767f7995860a6b2d278d091a423afc941d7e 14fc1709e8494d7825fd526097321f04cfd87b90d7aecd745ae454e3334d1fb4 3f039666c016dda2fb7701ec8a76da63fbcca2e72cf3ca55c87262dd309c6742 f6fd3c6f9ca892fee69dab0d23f553926b6a756b5b3c9947cd93e8db21547748 85b6ba33a4e405c140ece61d8718770d6177396a1f5699bf226f767f11e4dfe1 03011f89782711440792ffdc685746d5c9474b6b9d3127f31e486c6c25426ebd 99ab321d9d3727eb494f2a6e4308d657557a6128d15414f72a74c9c075afe2bc e67aa7e3bb7517ff1c31f9f31bacc127d59a64b853ff3c1db74188efca83c1ac 8dfb50db5c9487729f8231f6e2687fa3f2e8a66132e729be4cca18bc99bb0794 1ebe0be96a25c13e466a31f306e03a3fcdd014c498b28f522ef0af5e34c775c0 15e2c53547eb77a725310ae10290822683c994d9089e2f4fac4c3c12ae7f5afc 6bec064b6896c3ae1fd856d7a4a12e768e0f9900f29a58e31f0c69888b29de6c 44818a12a1fbaceb29d4be169c570aee12cb645c4d64694a73dcd4f917ff975f c3196d438770c09a02b52ac2c9f88895d14f58e279cbaa63effbd88fcd356633 9882158110028a63e8a3e689d1d0637363d9e2392c3f8a87991cfd25b183eef4 88248484e509eb6136a8c063ab3d6a202c763dec6925fa9e41bc9a7104ab0606 056a8b32927d47c004eab3a55be198b5818408f55993ef833702e4db3c052c88 578190b8879d4a599fbecd6b2e01c9be1b146b145a9f624084fe48511c047064 0fe0d036a535cb0a09647591fff7bf40dae5aea121177dbfdf0264b7a8b84532 28754af3561b61533a5423f4f9641f4f8cae3288587e1c8edba15224acb695c1 91441675977382d922dec3c15e50f0a9502d95e0721e57b46e79b2aa68c03112 a22491fb3bc84db239f06cf64ee179bd61ad93cea5a179bdedacc66a8ec28b84 2d28719110a5d48be8c9db42d7e74ddb0fd99b17cd5ba60efa3d3b1ef406b65e 3078ff9fd59e4db1f0ccdd61fd78eda87c2876cb998d8e38d56453112b975c57 cf8a4d907ef06ae9df52cad6596d7f33087052c3fc0445a30029b8997350ffa3 fbf14781e5359dcbb3e4baab4119c335a7477cf14eba23c65f783e281fb2b0f6 6356d85c597064bb9b68908fade8d1f1845306a1094da620a693c6c61bdf87f7 60a9c319c7376e0c8939b92fff1bffc3143939f871500a4b11b7adc250600c8a a448086b6fc629e95a7e2633b80df5dc189ca800614a5b6fd2e1dabafc69798f 8675a851cc3f73b42f6ac99e4f48c6fa596f96b8e46aa1ef977bed3182b4baf0 87af5b160a0f12300171fae57df2e845c785a0427ba05388f55c6321b88587dc 7537f2099998a6b205cd1dabd484f95f07f48cfd2e4fdfb2d31c69acad42d102 e909cc27129882004fdaac32fd5be0219b5a20bedc038ff5bc697c04c8341634 10039d16dca4cd0ecf1247dfc5b85a10d2956c24ba5ea458041f850b461e38ba 82c9c98eeb509ea9c782e80adbaa28f16a0c6c57294a28b1912dec4f702d02d2 3faac7c33bf407f6d3bdc5a95d2cb2f66cf5f5e5f341d999c3a0f5e8eda82886 76d7fe9fd9fc369d8a4b5cbeab254c490457691a45241ec145ed7c56fbd541a5 Prabel, et al. Expires 11 April 2027 [Page 89] Internet-Draft JOSE/COSE Composite Signatures October 2026 14193949627072c8d6272c3b46cbd90b247cbbd6ec1646619eacc0e006233568 a8bbc1deeaebec051f363889d1082e395bb70f383a405f9dc4f0000000000000 0000000000000000000000090f151c272d323a30660231008288d16bd680f871 f8f009e6ec2938f0e3c250c3a8f657bf9cf70631a00fc1cb62d1e58b6dcf8a07 6ef61e25379ee89e023100fb3339e0d292290d12e5a036f37951d77d54a614e8 fbc666834433eff74cba5f71dc5a15e35d4a31b6d404238d79f0c3' ]) Figure 11: ML-DSA-87-ES384 / ML-DSA seed (32 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000' / Ed448 seed (57 bytes) / h'0000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000' / AKP COSE_Key / { / kty AKP / 1: 7, / alg ML-DSA-87-Ed448 / 3: -59, / kid / 2: h'a03b6fee7d98ff7a', / public key / -1: h'e45ffc8cc73db885dc662e62a18cd8e3803297117fa5658814a985b5ff1db7b4 68cfc82bb929f1d86b77ed14f5ae16a65368772ce51912410105e0456975ae91 fdb643b512f124d5e60bd68b8c7e31fe01c7b0dc65ae470501cc565a6e1dfcfc fd12565433c4afedd511821e2e9610c45275e2836dee35ced69d7efa672fd1e4 318bef5eb6e897e8b451aa202ded042b2aaef77a7be3f699146da229a8bdb3ff a496445967e75217bfbc9048f9956443d8731f833eb30de10dac96fffe7cf65e a0445c3e31e8601e133be6a100764fe3196e267726441f31751fbf9a6f588064 4f4e7275e57de2b0f105e4db055d50dd1c9c934fddf535b8de28b0c74c0449f2 22cd2ed0bb8fbc775ccee8c940665b40f712f4f7e00750e9e1e4cd9cff25d194 5c3e9bca53ccd4f12eee7581856ebd68f26845956e3e7beb761f0fe75bdd31bf e2fa018113397b387bd59d62a68b8af7fa245ab932e69f778e2ceefd21304fbb 8099ea13d8ea57c1813197a2f75ae251075b51dad38f853669e9d5f98a365509 8941993a1594860fba71fe530ee5c29f58f2978af688ccb75a5838a359c112e9 8e25a8583ac8dac1f861fd58e2afba5de5a52e020904f5b42bc0874e35befcf3 e6119684768f36e008f04712177cebe627607381e56eaaee161c1729b8de51db de474d48cc68249ea27162b87993e60c84ed6cc6423cb3676d9eb50b2cab5a3a 049ef131381d623fa6fbcbc9db1e7cc025ea0418b9dad2cc6ccd4e95fa2cec24 feeca70318a751716b7213f63edbf65a63338357f838f94ec071822c24851248 885107b3d1c4e924678c7614ea1af038104619f2ae372940becfa69e29cbb5ff 6c3e20a47be4a4f74bac34c133c00a6a706accc6ffd3d8e4fbd69a99704e1283 c850d8c58d1e5753cd9587b83c4c346cb9a58137213ec10834c66adfe2bb5c50 1a8ef2ecadd1b677a3df1a6deb86ebf0722c4f5030e20f9018dd5b6fc53eea24 fd92b7b5b4025feae996d3e48fd4c650d82dbad7eaf936639698512f26253d2e f6847c8518e8565cc9a5495c6fff57cde7323882c54a7db470ab2daf8ffd2bf7 94fa7c692d9e7fbd532eecc1d7880e2ca0b3216128be28b4a9f1d151fac97808 Prabel, et al. Expires 11 April 2027 [Page 90] Internet-Draft JOSE/COSE Composite Signatures October 2026 b0bd98b7b43a612a9ac865812bfeac6f47460277840b52a3b087f916ca7cedc0 f768ea2bd19ea21155f84b4a04c4000ad2ae0587154d560bc0a477a4f9329a89 84dd31eb1f2a05e3d918701d630cfca9af61ef088d2c5581acb463e439902e5d 425719e956b8d6df7305b28e0ff27d3ad0de2085d292499b19a3390d4396fb3b ac9a8d8cbead2a7a4290fc9ac6fca045f98a614a45a39cbe24360f84d14f8e47 2712aceb74dbf45b53d49a0e4737e476ffc4d5b2f7cd247aa186d3b764ad9e9c feee456a73c291d8de3912414ac43911c372173ad7b472af35c6853ced2fe7b5 fe0a89565ab33baa6f65cdd928319d7065e040e7a5e84f9aa903f7648094bad0 7136b16927b8ec6dbc2bef0cc2856de1e795923e1412c49f24deeb6c21f6c8a9 765c9c7986e0da4b4c67d8e0d0c8d466824fb923d8573148990cd2ef133c78ce ecab72ed9dd285c5a3766852d54534207ffd34027f6c76ede8fd1a32d72c3004 8bbaa797d5df6fde27d087de5721ad7b7fa3e8d3f70d6bfc3ab2e252335368bb fa15acb5cb37d4694e8b23cebe25de9c925a221a183b904d3f85df9929a919c5 4d6f87457373a0d6ecc1403e4cbbe620999435e80696634cd1a8e4747e9825bf a336e5bbad14f73640f1b9febe800dbaefe1630c61fae635b074c564eaa9db18 9c9e7302873fc64e6d497bc5c29080987a07a21d4af210703a4fa07f2fd816f1 2fd1e29b4c0f44afe9bd4a1eaa8a7ae6f02a5b4258f52caf6127f62632a67cf4 e8310be56a7c28c86b2e277600c3e92c8d23d42586244c571e90568df202f2f6 d81f860a565f9eb91a3c78372e2a8b1be61c5418cf49bf2d6c8955d4a482a991 9b7660b3f9a4404ffc454ea073e1e4b2689ab2cca4e46bd7004a6c491fa26ee7 a57d60f35edb2b821e6266442c8f335d452d524c772e0353724c23c7dd15b7aa 155e91442022140c5fcb0153147edcf3e8952f6f0399a3c88066a72756c94099 15de63f64fa797841c57c796c6fc550ef745dfe9f179457f94755ae5a2506a76 4f327e550be3dc14dd41f3b04b147d454938c63a8d69b2ea4c5710ec0b36e3a6 c72571fa5d59dde036c42033df35af056966ff0cd1204008971aa6ba9fb97b68 5ab9ffa2a9d1778104cd2c3b326de1fcbc242e94d0311c3275b12850ed30ceea d3a2ee6d060508411d4396f5421d8b6d067cf7cb5e826785fbe119e05e21bd87 9b64f57cb0cd1972c2815f20abe7ce6ab34d0f471af44baad179e90644122f5f 33288e689ddddc5ce833e9755df1e73c65c5a201c4ede2ffa6b19274927719d2 d38fdb7a65aa43708b7fa9a94aa7d3210253d78d3b181e1020d0000bd0a1dc05 d447f9f58ebeb84c65b36c8afcb83727a1508994e826957a663b0b9b8a003325 ab6d6d6462ee4e106019c0dffe10323b7bde7d82a38f85fd08786e860ba66c16 1b64b0708c363de5c6af62d8db3c243d1e1b712cb1d59e942b9b6b4295a5a500 b182cbd5fd1bc6ce9376d91b47a2284f1fbe0ad1c048cc2cfbb4afa3a9eb9697 503b69feca990eba7e9441af9ca44cb3ac6b5ed66e591c201fe30efa8a7c471d c613d6254c263a8e132104bec47f1aacb3b2fcd4051b69b5e3fcb1c147a65c2f 90c4b5188bafc521cab03c12a309da50b5a7517727ed41228ed123fe1b152f6a 6319cd623bf34ad7b8e064ab993260bcbd405f5b7fff9b2fa40ba5ed56302425 39e5d96823e89dc818a13d16675ee3079d976f694f5acc9760ae789e9b3391b2 89e0e22a7ef17cc6a4577157b6d95c09baa4fd532e3ee0a290810ed35e56bb19 d9b61fb98a97c617425b06093d98a5cf0ee2dd127f0eea600b9a0c67fbe761db 9b77e5d5bba9701da1b883e521a0cfe88451f57bd36085b67e56f061f84a2e6a 152a71bce6e522daab6a0a33ce22e537fa9793d28b617e6c0a4176a83aa3be57 8afac0f2f5547c5516d218984755b7445c7143afa4e551fce0071bdb873b34e6 b9e2b9e79ed0c69d288ed6421f237e860a0c6492ebbdd2a44c2c4f368dbe9994 1b1e8561d859d3859f496cee3d741f252973f8fcc539c409e35cc80a5ed6df23 cc3a65601313f5d681fd9540c5291a9e30a72e38c96413c47c61ff84fde78d01 1b01b4154d1b920af003f7abb1e1999dea6a766cf9fd2702b3ce0ee57af931b6 Prabel, et al. Expires 11 April 2027 [Page 91] Internet-Draft JOSE/COSE Composite Signatures October 2026 2124b0861b163a3b91aa4bea28076c3432df3b29b6c4e1ba588def420071fc15 7de90eb2722ecc9ab00df3c669383a61a91bb67bd287ce349b4745ee7a479dbc eef166b9acc412eb579fcd6437307edda253d606b7be7599c38092bc52a85984 80edab8b82b1d21c565d2137ceae0b6642619b16133d91205d6355029e9cdfeb 9a28b373d95916b6b707d4c712c09cf36daf1a511b2bedb1aa70ee58d46a0666 bb287784b0a3840c589a7a04d5d6f2216be90aa4a512d5632f5c9bfe7b8b1338 2f999b95d367c7c46b968074ce315197a5ff3545c7b77a804ade56a95b5c24cd ece5937b5c0366d93ad03da9bc5db1b551dfb91e9b343d2b57b763439686d4a3 5b3afe03878a49b28232d4f1a442aebde109f807acef7dfd9a7f65b962fe52d6 547312cacecff04337508f9d2529a8f1669169b21c32c48000', / private key / -2: h'0000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000000000000000000 00000000000000000000000000000000000000000000000000' } / Sig_structure (M) / [ "Signature1", << { / alg ML-DSA-87-Ed448 / 1: -59, / kid / 4: h'a03b6fee7d98ff7a' } >>, / external_aad / h'', / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573' ] / Message representative M' = Prefix || Label || 0x00 || PH(M) / h'436f6d706f73697465416c676f726974686d5369676e61747572657332303235 434f4d505349472d4d4c44534138372d45643434382d5348414b4532353600eb 80b80e807c0f16622892f1601d0d3490d4bfd302131d01a2d4bf7bdd3a779cfe 9e8f724e18e0c40bbcbc6b765ec6e265d470334456a0ea65eceff85438207d' / COSE_Sign1 / 18([ << { / alg ML-DSA-87-Ed448 / 1: -59, / kid / 4: h'a03b6fee7d98ff7a' } >>, / unprotected / {}, / payload / h'68656c6c6f20706f7374207175616e74756d207369676e617475726573', / signature / h'f0daaff4a8ad5dd198507460ddf682da14042e8b9b959e87f288c0d1ba23988a 74dab4714bf83ce0e08faf21fa583ff32a17aaa82b47c20004b8a1b5268ba2d6 1090ef4759fb88aae86ca29d64b37892a213ecd7e42f75c2c309d4b600157694 5ad7f4350a44a4f695727ad919d663b6e9c316c00bead18dd9a612ce0dfa30d0 Prabel, et al. Expires 11 April 2027 [Page 92] Internet-Draft JOSE/COSE Composite Signatures October 2026 ffb38883b5e078901d6c316ccfc2f68e833b20e344c8f0d76f197061198434f2 60939eafffa4004fe6ba52203cdf38576eb0d0ea0663b4faebdd447aae574fd4 e4b415e81aafeccac2461099679dcc77cd07bcf7eff34267646aa1b603f8b304 783a36c1478ad7e09f545d0f3a9c56f89433d74a410161e98c5f94bb8e0a15af a09e89d2460a7f5cdd28336fb63812dd43f5a58f311e4484ae4e7a543e11b134 124a5f85c3b3c7a46270e2a36c733378d8b94946ca0c84d32c40c60430ef1d1a d34c975e8a919e978eeaa001ecac29f0e26a5a96cbb33686101235ea18f293c1 4c4d1d50e1f8f5e7ca656e216aa363745707549d5ab5e423a3e5449506e56523 15343344da1c07b6c57e2da431583b21a3cf43d03a90ffb7cc58acb5eca7e801 ad18a8aeba1827a799dd44054c65e512da40f00db77ec3757a166147e077bdea 275f64d7e14a0b9c1fc69b58e210450b77a0cb4ea1659a84a42c576681c6cb6b 962d795cf2205fe460f52a7bca3956fb583ccc31a1ef753dd5418e7072f70000 77a57c2c286d6c6d7e04f5d3f71504bb084a88f2fd99138b18cd6d94d0b9835f 920701a26541356d0b2a5cad75e07726d41a5d2cf97ad4634f120800b766ba96 4b905141d163c896a60d24803fe82b8acaf54850e5094d14e3c5b974f6920b27 47b8ee0f83ffaa7e3fd03c83c38cf7f357590e04cc58555ff7c7d30b5d81708b 60719d4c87ba37a02f3b45097b92b62b96010736a6b90d59d9c8dc0113ac6bec 5858e5423b40b9bb5fb6d56065681fcc15ed8662d99448393cfbbbbff3bfbd42 1006b33c73a7dddd825aec52ef8994ae51680989514b36e41901fe2fc6fe9398 63e683d76777a54911776a1243293d3649401742765835acd99ce355d156abcf f04b24d7e0e3b060086abbb44bb1208916712cd78fe969ed00bcd184df271dd3 5f2af483412f77e097de302e8b41503b00ea6c2035c1a6531c426b95946f792e a7613ed9f441d7bcb0a1988e337109f7fc4b6cc2a3d67d36d60b8f3d8e378f61 3e05612ca610ca8ffcd5a87c1dbddef704da1a935e8f58ba0e10613bc321dc6b 0be699755891138b5596da7b3a3ab73fe196808e3cb37e3d7f5c57bccb7d0c0e 859291b87239ee764240f1bcfa75a9d777fda1d15d46d132d4ab77ad990ded3f 148780db9a262a79102023990d863eb6a8d20a267851d704fdd264c989c39038 a339e41ba89e1600869df1c4c5a5be4476af6feac43fd98f3c7c6be37f3d4118 d8555c31933c8bd87c57fc8aa2ee0cf1ce6ccc4bdbfc5eadde807d22e1c4fc4e 8d905f77cba4acb88989384f78b966d8eb511c34c686cbb542172dfc616c5789 950c03c877bfa62729e733c0acb945a4bc75479afd0d3c2ab8dab5947d507322 4500ab781c26a817983bee7fe704c939b49465094957814bfca726354f1ff25d 1c97040803c28cd0b36dfec32b5ce3e0b5d47441a9af3dc63127bde4caecb23d f954ecee58b68292f804e449f672449a2512bd89cc3faccfeffdb288fe434c03 88c6f585d84f02ef489a10cba22639ea252ad9a61e64b2b11672c6b5ebc910ca 045779a2b1de7f5d2587dcf8a22e4651e21cd95f0a190a08fe25da94ed31b1b5 928fbbe746f58ed47d816d9a12d02cf91fc80ca28c48ec7d77a0829965a44f84 5139c845876349a09c4909b5914ebafee567582af2bd26e7b0f9c01d77682085 82b123223dff3dd9cb68a7f74ba7592496aa9ee30c8a32eb0c7d15cb5b3eaf5f 94e5e219300ec93ca5e903d0f1d548d47b1caab71b2b2883625442e138412acd 58487062d5d0f4664381013c0173aa16f6b7344df63be78ee4a4a5133fd8ca76 fba958f56f7fdff3beb271cd309c397c3ba72f67305946661a3ac430c8774704 f7af069591f74c3184f6e3d45f37d89ab9cefa0085d46f231c5c641ff36c1115 4ad82c76f81a59dda5a03446af7b25635ac46ba6912bdc4c1dbe47c263159707 512a7b6d91d28c407610c567bb694ba3e5ddbfe63b4220d1a3438c12bcb82ccc e97ac5052748516ee56b605ecfe5aa5b9572efcc0ea05b327d253ea4bee956cb ead080ab735e65ba7894f64acbc96eece3f3c47e6d2d8b44167f030652e4a82b 292c3d1f0fc7e9b4aee8686a3fac99fbdbe8c71b9aab0a5b3121c68bfe89c17b Prabel, et al. Expires 11 April 2027 [Page 93] Internet-Draft JOSE/COSE Composite Signatures October 2026 96c67095a6e43b5ae90fa622fcb99adcd91bbce0f08ec073184c245df0664207 adee86fa220e3d7193c262e9a1c2a8cf58badeb48fe97b9db780ea3c904d438a 18eb72489d6e191b78c157049ff733b553fa7ffd4c47547d3a675b40a93378be 1888690e4d661aa42aa63ab14d4fafc0db81b38584d8df1f6aa8cf45eabe33c9 2b7932426267097a5643a1c7b400c2deebb9aadb42e8fe9395666fcb947e4051 0078068f30f8fd8c8c1fb40fa0fa67e1e520afac66cd021addc50ebd9185b4a2 8752dec586c1661d0dac4a387e289cde7dfe216eeea96e165c67ecfd41e7c560 8c0d9092a92584866230419edf5a7db40fe0526831eb2ee658f2398cc93420ed 64f6bd4b3b2873c148d4d9f4722c24992ef9ef5ea04e86ea0109dfdac965355c 6531950cb497e2b95ae7f36e1a80e9b18f7d9cfbdc98f29404e95235a03709f1 54d8496d0a245ceb62d433901dae95001a95df6d16968db01f0e53f61c69183c c4855eaed460c53eef95c9ac59b69f8be5f856caa45ed389ba9a5e9b65ad3d0b 496ea2fb3c23362ae314cb67066fe78838a410a0378b2ace255bf965ef494475 d741c1f25a610733792c071cd067709a3b70e03e6b443de436f890893a00222d 20223618d680efd0090a386855bd80dea02a7a1c7b9a8077dd8b9cea56878202 7b4b9bd549c433746cbdfbeb1c9e877230a2c7f8d24ddde580a8d25bf15b3ec1 08c5a1cc84ff7b263d1cc36663f45b50d53ef8c50c465faa135afdb99d482906 84492198c47c798e650d48022a66a1d2d44df4194c99901be3a23952c1aa7732 e83b3183b42d2386118410ede7ebc8e738cf6580ebc3f7a4d194c9105f94942e 570d853406075c7032f9066d86c774dc0d3eec2eb3ec63f7b433196c51746524 f0808f45be8813a89250e8afd9183754cfa9345749ab897d79104efbc52728cc cfe6d0d06aa74adebacb181d04ba53826de7b676292a32fd0879441b2ff16fd9 19b40a9c09eb77af0c9f14254137b39a70e8e0033aa1bd4b1901d9126ec79ac3 de23f2ed3c6e816b3550485ae00c6ef2e5f3dfbcd9415abcae46a4149ec95351 5e3e072715697613d20fa32d86be4ed734eaa4d8d2341c570e2e51d11b3c5753 8bcb9face76a8afb9dc9b8e862f9974cfb266c5165a83d4b93f2da3d00f23172 ddbcf3424b724175ce69353dfceb73af1c293bb048b31ae71461ae54a144b2ea 09455a909d4d46d666500d1a4f1e5785e27ac1295f2a1ec00b6c4f3a04b451be e912f96ab80cb4c3559419cf307d00de7eca7585645e6443a1a58636085bc63d 50ff0b26aabdafc495874caaa43766198fd652e6949d3a09a35537105a7d6c0c 1eee2ca43c2a830adadb0c4dd1ca17cd4c3f2da0ee114f70237019a222daf1d9 fc68255ce9fca00eaeab2f66c1691d293e272d8a6fc818deca35b169ce875bdd 71e5904d322fbe56e4db2916a4f779ef54d355b2a5690184ad42299da27200e8 6141679886b2a5f3a0cd3b6962f33e502d07c44363c058714d3c792074aaf9dd 26f92fcd2a9bd0850ee30f025826996ff5fa2046f09aa1248349ccda0fea91c6 76dd36e0f84cabe5344d88721ad8cb3ec52e1117e48bb82a92876c2f7617638b 563dbff74d984cb324b927c1e19e9f46f233ff0a8f5ba433521f553e42379912 443731fd82d2b8101501be1f63eab6c5d7648f9028bb2610154e7e45beb4fb5a e66c1d90e9dfdbef6f8f6c27bb939795f06415cea46efc999067327376513997 90aa0486e1241bcce73c0fa5d1f46bc9c203a4156f9bcbb7e46d3d9e7d7e5592 078facf12685ae550fc9806ef2c52cd668b5c5f4de1e3e0ffb6cfd2158b5bc46 29c172f7db81cf077c2e43f5d7722bc6058ee7a64f5fa3ce4f80814e5e168ed2 f69130cdc7a26cda23b9d6b4f3d521b2a03fa83473703d57fb6714c3f40f9b12 e1a2e5df462019d597a42f0bb92161be6e6e2ba64c22542bd4dead5753330751 7807935c062703a05c2d79c51a5e661312d740823ef73fac7170de7b2458399e 49c25304f0c2e889f62892717562981ab274892fd2a663505068149a81b48cbd 069bad6bd0f22d35c4f998264f2fcf600ea500dac7fd86db5015ee6e3e34e23f c246c0d8d3a3abb8d6dcc87d034e98076cadbe2a52f4038e4dea8c50c60641f3 Prabel, et al. Expires 11 April 2027 [Page 94] Internet-Draft JOSE/COSE Composite Signatures October 2026 c68e4c7cc34153b2bbb2033464bd26b286c11993d35b13ae6fe001aab44d7abf 4eb933ea0ad64186d0e87d7b3cac21232097655ea4f90dfb9f59e3d936f1e298 256aaa0a9b772ffcf7aada0674276010027c1b5ca9674678e780215986606bd8 9fc47ddd3af77cdfb29efc3828561fea5d786ae556639d8b9058c95972fe9b9d b429a639b96addd1ba31bcbe00d068723450cb3c6169adbd987b040c9dc17259 1ddd61db109027905e30cf6643ba77c34b46f7bec71ef7b868a88d7a6852cb01 e72a099278dd0511073419b829df0d97bb0e73bd83a43a112a27fb7a6032451d 7ac48527fcd93299fa282f9c1d9d89f4c5e22694b906f9de335bc0e958d16077 95f23eb205d4110be165e92964f45865b405005df1f8697260e2dedf788374bb 0350da2d3f655c5a79be0333299293851c8a1671c21d08dace45bbb8da8fa4cd ca88418d0f9e992d188351a500fd7304cc7429d0c237bff6891d4efa5e6e33ce 6cdd3a7ec15a99b010cd4386298ed4a444e8cbd0f9d3e59366596a25306edccc c890ce7772d65f3519f9407f4dda76b509ba2b208ea7a178bb40f6315c70f639 dc1d84abd25628954d78c32509eba5f6652010cad55b2625d418257416e65591 68dd372d3ce79234c417edacc0150a6fc6918360fe4885822d06cded80ed9f5c f4a75305872aec90fdb993a87f5eaf4188a22225713a3c2d5e83880491aeb8f1 12238391935c3af9cf8b744973ae2c629fadd49be904d68f2850144456dfa9b8 f2c3082df42253232a73a54cf815cb399755d2da5ac8a5df6e4ef8fbd32a3dda 41beeb4ca6c39b429bb4e5e2a8870f3dcdd7db96ce39f14023584fdab750f6c0 2cdaa3535734d5d451f032b40058ae10d467d7bd5f09653a46d537ec783b2ae8 2df1a0aa7a2df1c61513a3fe833c35923658670651615f268e0b69e50c5ed08b 24ba21be32c58da5d88462ee2977ed2439f79fdac1ff06e70ab9d4e19556fa14 3b591b31550d89c04da670e51fe61049a1b09f892a41f374f37e3d78acabd0a8 110eb5f01666df2f6cad3041705afe446360388386a7c638a91de78421bd1069 2d428b8b28c45580fe78de631a92d70d415ca7ac09c6ffe402ee9300faf51563 4c143eb1b8f3d4f472baed7e6d677da61ced15d6020ea747e9a60b935c87e21f 90c0bcf61de09d2ce76cb08da76364e0ec48ca5d68843c9a80dff6a5945d1693 64460adb04b1c09b5f468e32c08ae0397a706fade0c491bfa0e51c082543b0f8 15c30c90c5e00bce1d2417abed483ac9464dd7b7b73fe2c108703d8e3735eff8 3c2642aae0c2340cc77cba0dc70637399e27957a90131045f2cbdc41989682a2 d6cd3d72b4d927261957c311fe43e8c217a131df6961c481f32bb52ef4c1d2af 998e18e4443dc41d429b6b70a812a9ffe159c3d374a981ac142a064b1747003b 0c82fcc60e0a3160f9065eb5ed379e5c01fbbc047c936705bc12c9e3c3f948b3 713c2ed01d56a68e87554214a356d024b1630e4ff879fe561a1fb0fdc6834d8c 3dac25519fd45cbf8e91a0fae36010cb2ac565fcb16a36798952842c302ef427 6992db67d4aef58401b36a404e5e0880ee7a016b7156fe2c79d4d1cb90809232 ae8f6cfd56280e4fdd9a228437919096b1bdbf3ced4da0b2fa7bd10c8b277015 766216c20dfe8f5a91a744f22c83d6c0511812b3d44082b609a3c6f506b053c0 46c9eaeab574991928df91d58efd4ce6ae4f26964a51de3a04b69ce1c4444f7b 5606a88a44580f0b179472f3dd5b0ffcda7d05b19b2a6b82ed32fd85143e76e4 0c970ff93c35aac17a60912449e3a25027ae84cae1775ba3a978ec8170384e66 ad73ff7cedee0c841d11e032cb824683d5bb76a0ac954e27ed5d12e927526fe9 0c344368717ccaff171a2b2c477f88a5bacede17263039435188b7f300051a2f 38537a959e42438d8fcfe4e6202935466ea6afd3fc9bcfd3e81424627aa2a5e5 eef400000000000000000008131c252c353942682497c03104f244b9bd4f9a8b 3eb24f760d4823561d23b259698e3efa608a939b09bb5877074deed54c523a38 c1879f5e484eb27a037b0b0012d40ab02ad6c9e9a2a465b827cb90b9dbf7dd47 2dd37041f2e7729225c7715c8776428b52b67982facd1a706a2a502a5afe1b1d Prabel, et al. Expires 11 April 2027 [Page 95] Internet-Draft JOSE/COSE Composite Signatures October 2026 c960f62200' ]) Figure 12: ML-DSA-87-Ed448 Appendix B. Acknowledgments We thank Orie Steele for his valuable comments on this document. Authors' Addresses Lucas Prabel Huawei Email: lucas.prabel@huawei.com Sun Shuzhou Huawei Email: sunshuzhou@huawei.com John Gray Entrust Limited Email: john.gray@entrust.com Tirumaleswar Reddy Nokia Bangalore Karnataka India Email: kondtir@gmail.com Prabel, et al. Expires 11 April 2027 [Page 96]