[CFRG] RG Last Call on draft-irtf-cfrg-hybrid-kems-12 and draft-irtf-cfrg-concrete-hybrid-kems-04

Nick Sullivan <nicholas.sullivan@gmail.com> Wed, 08 July 2026 10:25 UTC

Return-Path: <nicholas.sullivan@gmail.com>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 86D50112DCB6F for <cfrg@mail2.ietf.org>; Wed, 8 Jul 2026 03:25:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783506301; bh=GAf3zUL/Qxztvhizs4sLr0X1Lc1H/B8v7pmJMdleM+Y=; h=From:Date:Subject:To:Cc; b=IRuffl6Pk87u5GqZ9yW0194JxRDX+hKKmGfkACYKPkJDha6Sn1StIR03BNmTmR5Lx xv+tlDN7NwSHiPzMkUrW/ZkQ/2LqPGv+KxtgWULueoI51PJUH0i15YfYHzL0aeWSN5 4u7H9Lv+c5QZC2TU8i4jSwKcqaQnBFBbnID8u5eI=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XWpYXNLAi7mD for <cfrg@mail2.ietf.org>; Wed, 8 Jul 2026 03:25:01 -0700 (PDT)
Received: from mail-yx1-xb129.google.com (mail-yx1-xb129.google.com [IPv6:2607:f8b0:4864:20::b129]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 1F0AC112DCB60 for <cfrg@irtf.org>; Wed, 8 Jul 2026 03:25:01 -0700 (PDT)
Received: by mail-yx1-xb129.google.com with SMTP id 956f58d0204a3-667a0f55a59so458947d50.1 for <cfrg@irtf.org>; Wed, 08 Jul 2026 03:25:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783506300; cv=none; d=google.com; s=arc-20260327; b=CuplsBh031Z8pzzLLxoQL+PXWtkNxAFgI4UHB14eMsHIZIHCWl8kDsAgIXIBpNarw6 uAe0L8HfhpjpSGHtXUdp2Z3Yv5o6zFwebpYWMyqheJZ88jUUC3Ktm3NCgPOG9B/rK98Y HShv0xhf1Pb44SwNmJRunuKjwL236Qfp8PiKlUxprfgU6ClqegHFKzoJ2EwV8ysuHm/h sRa0fgyrJxMiFvTCVF1ebUXpRwjII1omkqHd4Tc6FREmLPz5mz0uIudTgdPh+ZC8QRCv nwmpxSL0EF1ofY4gtuKCSMCjppPo/kh22qvmcbtPyiNviiNTiLZZdgJZN2tqrJPGv7qf +dig==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:mime-version:dkim-signature; bh=dK5qdgMZ3T+GI6vxggZ+7qsyqPsHTE58e72RGew6B4E=; fh=57v5bQznwvd0VZEWkBr1xlPdp9jcIIkQDz3Hoo1EzAE=; b=elrBSZoIJ2NcwHkbkznSSfwjrdSUZQYB8OY62Yd7msEYSMgL0l9dBpJO6dFLFD4eas 3JNaya8lcvKTgMP43OH9QqBo5PrWtfaCUlyK7IiCtjZZ4d/IefQGR87175WLz45mh9+/ RHD1dy1GQsLerKYT05/tZUsvTq2JwIEfshvZAtX51hfRh+iv8WZWDiMrv3yOS00kHedw L5DOY2J9JiP8Qdik66jlG6vgEaUmXkamGqnaE6NSgBLJ8/djpquIs0UgM5eJhsTdmru4 SQcWx5Oo7bbqTk/IUdSYMAsJAVf+twAT7i4EK4svsOTUJ+LdFWeMFNsObNxqvzwOHM5Z yyuw==; darn=irtf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1783506300; x=1784111100; darn=irtf.org; h=content-type:cc:to:subject:message-id:date:from:mime-version:from :to:cc:subject:date:message-id:reply-to:content-type; bh=dK5qdgMZ3T+GI6vxggZ+7qsyqPsHTE58e72RGew6B4E=; b=ETucXZDGsV5nH1cBmS2qwOXtyH5qZRtCILWTvKq7VGDmivNCIrpbOb3NCN8hLzbz1s iwYCDuCiE/xvHNFOB5NrZlxDxM1Ll9wB8YLnmW51RfN+QCcc2zZbBAuZT+Eb2ibpAr2Z N/cy+Es7bIaHYy0C9Sqzy6Gx80NC2rnE6Nup3wKydxSjtMx87rF24Gs5G8up5prmx8T6 kwTuO55GKpC9irRW9M4XC4vdTzGLGcVxCPbW3eayZyRXF+80d+qfl9immPUmXfxSEfvr zHLUgltdZ/8BBjM4Xqy+0u0SYjnzGZ4NhaWEB7UBelQ935x5SPr2qqumwqcH5fpIulWe maWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783506300; x=1784111100; h=content-type:cc:to:subject:message-id:date:from:mime-version :x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=dK5qdgMZ3T+GI6vxggZ+7qsyqPsHTE58e72RGew6B4E=; b=stF3DjwQAt9mLjaLiNdKtefv8QjqqmWXVNRf7G8aD/ve5OpEma+vT3cmHJSxVdsQKP voq4gM6I9eAerxktqDYSHagf1d66tlF0ZMYKsWOENd6Kt0E2fEF//vmyMNOWvKbv0bB6 Gnfi4aiLx9Dqm8pdb9602YOmhwjtWnwGXmjNjoUNDwJShY9kBd0RIjS3pMBjTQ25zNj3 4IwdqwEXOMjGSPbyz62U0RLS7NvRf5WVov5GUu+MobJzpzn7N8V0Cl0yQqED4Qp62hlO UpPEwh2Pp7dYf+CyDcMA5lygNO3lDu6Da9MbvqrQ9Gya6D21vFGAh4+2BVk6h61elLkA l/ZQ==
X-Gm-Message-State: AOJu0YzSo2s743m6N+EBTCxG3iGDOwDSwdOnP1jX2ZNCkA0wr1OxSVY1 cFNzTdCyJh06Hm3RajC+r9iH5yrrt//Cz9W6MLhxRJrad0proLFEmKgveY1kGGWKkpp+CL3Ox+m anDl7A47zUeWIPAjc+SsSytAai5c6i847dSol1b4QqCvR10o=
X-Gm-Gg: AfdE7ckJb/0+OU0qBdAJDDeicYGOwAhKB9RiCvYainSjr4F4BrPHs46lKTudOzoohsO +iUvqljIMjkaQZObjejdwaKfsvcHq7P75VNQw8l8WvjEZ2HdYCxjlNxBIpzYaY/X44odQCF9+ua lBeXagOdwfY1tHFso/P/BFPOSzml5k0NI64B+ct4w0+z+VC/QtHxwnnZ0TGDd5Ciy6T8xdI++xr 5iVMJuDi/AzG/ug8yIgReVMmC/1qGy6394wj1/9hClOcVtftQPu3UQ442geiai4tG5WxrjkGg66 6vbGTqojS+ONHtUWi1BAcBYiYja1LFIBPNuCOx8gViBsJcOW/w2Q7Or1CvzgylXdruopYgIEzr0 r8yjHHV0MSIgx80uBun0RMO2XYG5lwhY=
X-Received: by 2002:a05:690e:4502:10b0:664:c9f5:37dd with SMTP id 956f58d0204a3-6679f06e2e5mr930517d50.31.1783506300215; Wed, 08 Jul 2026 03:25:00 -0700 (PDT)
MIME-Version: 1.0
From: Nick Sullivan <nicholas.sullivan@gmail.com>
Date: Wed, 08 Jul 2026 11:24:48 +0100
X-Gm-Features: AVVi8Cf20Qloxw8QDamqa3w7Os2IEyljLVQVVG5r0-bSgvht10OaHcpOn7hgDZo
Message-ID: <CAOjisRyRbkNif7mGD5TcoEcUsmbfeKE_wVHq+JH8VMySLcC47g@mail.gmail.com>
To: CFRG <cfrg@irtf.org>
Content-Type: multipart/alternative; boundary="0000000000007aa4a3065616eb19"
Message-ID-Hash: OIUMOXMP2MQN544VAEO63S6GWKNDHJL2
X-Message-ID-Hash: OIUMOXMP2MQN544VAEO63S6GWKNDHJL2
X-MailFrom: nicholas.sullivan@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "cfrg-chairs@ietf.org" <cfrg-chairs@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] RG Last Call on draft-irtf-cfrg-hybrid-kems-12 and draft-irtf-cfrg-concrete-hybrid-kems-04
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/A-bYInAtHtP-h7p-2DIxpttGsGQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

Dear CFRG,

This message starts a two-week RG Last Call on two related documents. The
last
call ends on Wednesday July 22, 2026:

  Hybrid PQ/T Key Encapsulation Mechanisms (generic constructions)
  draft-irtf-cfrg-hybrid-kems-12
  https://www.ietf.org/archive/id/draft-irtf-cfrg-hybrid-kems-12.html

  Concrete Hybrid PQ/T Key Encapsulation Mechanisms
  draft-irtf-cfrg-concrete-hybrid-kems-04

https://www.ietf.org/archive/id/draft-irtf-cfrg-concrete-hybrid-kems-04.html

Both are intended as Informational RFCs. Please reply on-list with your
position
on each document: ready to publish as-is, ready with specific changes, or
not
ready, together with the technical reasons. This feedback will help the
chairs
judge whether the documents are ready for IRSG review and publication.

The scope and approach of this work were settled when the group adopted it
well
over a year ago, and both drafts have developed on the list in the open
since
then. This last call is about whether the text is technically correct and
complete, so please ground any objection in a specific problem with the
documents. Detailed comments are best filed as issues on the repositories
(https://github.com/cfrg/draft-irtf-cfrg-hybrid-kems,
https://github.com/cfrg/draft-irtf-cfrg-concrete-hybrid-kems) positions
belong
here on the list.

Both documents were reviewed by the CFRG Crypto Review Panel ahead of this
last
call. The reviews are on the CFRG and crypto-panel lists:

  Thomas Pornin (NCC Group), 3 June 2026, reviewed the generic framework
with a
  focus on the constructions and reductions, and concluded that it
describes a
  secure construction, with editorial and technical comments now reflected
in -12.

  Virendra Kumar (Qualcomm), 8 June 2026, reviewed the generic framework for
  clarity, with notational comments now reflected in -12.

  Russ Housley (Vigil Security), 2 June 2026, reviewed both drafts and
found the
  constructions and instantiations as specified.

The current revisions incorporate changes proposed by the panel's comments.

Thank you,
Nick, for the CFRG chairs