Description

Since we are still skeptical about PQ algorithms that have not been battle tested, composite signatures have been proposed and defined as layered cryptographic algorithms that use both classical and PQ layers, and the whole thing needs to be broken to access the data. The exact definition is on its way to being published: https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-sigs/

Once the standard has been specified, it will need to be implemented in cryptographic libraries, on the Signing Server.

What SSTs and Layered Product teams should review this?

Signing Server
redhat-release
OpenSSL
nss
pesign