Last Call: <draft-ietf-ipsecme-ikev2-pqc-auth-09.txt> (Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) using PQC) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Fri, 10 July 2026 15:50 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-ipsecme-ikev2-pqc-auth-09.txt> (Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) using PQC) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <178369864860.960.14154708875928377731@dt-datatracker-d4d6ff9d9-x8khv>
Date: Fri, 10 Jul 2026 08:50:48 -0700
Message-ID-Hash: VMN3UWRTWDVKUHFJMME3AOAZDIPY5ZAI
CC: draft-ietf-ipsecme-ikev2-pqc-auth@ietf.org, ipsec@ietf.org, ipsecme-chairs@ietf.org, kivinen@iki.fi
Reply-To: last-call@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/bvu594stSgYbSv1PsH0wY50iqNM>

The IESG has received a request from the IP Security Maintenance and
Extensions WG (ipsecme) to consider the following document: - 'Signature
Authentication in the Internet Key Exchange Version 2
   (IKEv2) using PQC'
  <draft-ietf-ipsecme-ikev2-pqc-auth-09.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2026-07-31. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   Signature-based authentication methods are utilized in the Internet
   Key Exchange Version 2 (IKEv2).  The current version of the IKEv2
   protocol, specified in RFC 7296, supports traditional digital
   signatures.

   This document specifies a generic mechanism for integrating post-
   quantum cryptographic (PQC) digital signature algorithms into the
   IKEv2 protocol.  The approach allows for seamless inclusion of any
   PQC signature scheme within the existing authentication framework of
   IKEv2.  Additionally, it outlines how Module-Lattice-Based Digital
   Signatures (ML-DSA) and Stateless Hash-Based Digital Signatures (SLH-
   DSA), can be employed as authentication methods within the IKEv2
   protocol, as they have been standardized by US NIST.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-pqc-auth/



No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-ipsecme-ikev2-pqc-auth-09.… The IESG