Last Call: <draft-ietf-openpgp-pqc-13.txt> (Post-Quantum Cryptography in OpenPGP) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Tue, 14 October 2025 17:33 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-openpgp-pqc-13.txt> (Post-Quantum Cryptography in OpenPGP) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <176046322907.947400.17920413358799703945@dt-datatracker-84f8f646b-tg6mn>
Date: Tue, 14 Oct 2025 10:33:49 -0700
Message-ID-Hash: BPZIIA5LAE5YV4IOLIGEKENYT7CKZTA7
CC: draft-ietf-openpgp-pqc@ietf.org, openpgp-chairs@ietf.org, openpgp@ietf.org, paul.wouters@aiven.io
Reply-To: last-call@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/POn-newnr_S8nw9NpJVD1qcyimk>

The IESG has received a request from the Open Specification for Pretty Good
Privacy WG (openpgp) to consider the following document: - 'Post-Quantum
Cryptography in OpenPGP'
  <draft-ietf-openpgp-pqc-13.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2025-10-28. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   This document defines a post-quantum public-key algorithm extension
   for the OpenPGP protocol.  Given the generally assumed threat of a
   cryptographically relevant quantum computer, this extension provides
   a basis for long-term secure OpenPGP signatures and ciphertexts.
   Specifically, it defines composite public-key encryption based on ML-
   KEM (formerly CRYSTALS-Kyber), composite public-key signatures based
   on ML-DSA (formerly CRYSTALS-Dilithium), both in combination with
   elliptic curve cryptography, and SLH-DSA (formerly SPHINCS+) as a
   standalone public key signature scheme.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/



No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-openpgp-pqc-13.txt> (Post-… The IESG