[kitten] Call for adoption: draft-bokovoy-kitten-pkinit-pqc-02 (Ends 2026-10-30)

Alexey Melnikov via Datatracker <noreply@ietf.org> Fri, 16 October 2026 09:33 UTC

Received: by mx.ietf.org (Postfix) id D2A7E47; Fri, 16 Oct 2026 09:33:28 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ietf.org; s=mail; t=1792143209; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=FBwPRSFn+Bjl2nF7macVWj6IdO1FivJ4FbKkcVoxBn4=; b=UP7Outu1iA+jFSs79qA/72DFuO2bPVFFr0hJmOy9uwMhFz7lc/wDlmH3uxnJAJiglQzHI5 iSEKSddjOGYfTty4kGsCmw2n4IpN1G0tkz2h/yWKe0HFQtNq6bm1NdBrVhMyERB4co10eg Zs7chxls11i8nSLvz684gqyER2cWlAo=
Authentication-Results: ORIGINATING; auth=pass smtp.auth=mail2@ietf.org smtp.mailfrom=noreply@ietf.org
Received: from [10.244.8.185] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 302AF13AAC717; Fri, 16 Oct 2026 02:33:28 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Alexey Melnikov via Datatracker <noreply@ietf.org>
To: kitten@ietf.org, kitten-chairs@ietf.org, draft-bokovoy-kitten-pkinit-pqc@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.81.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <179214320814.806.12724571475820610085@dt-datatracker-7457c9c988-j45f7>
Date: Fri, 16 Oct 2026 02:33:28 -0700
Message-ID-Hash: DXZISH2I5DYZWSQJ6PQVH3W4SJF7D5A3
X-Message-ID-Hash: DXZISH2I5DYZWSQJ6PQVH3W4SJF7D5A3
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-kitten.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.10
Reply-To: Alexey Melnikov <alexey.melnikov@isode.com>
Subject: [kitten] Call for adoption: draft-bokovoy-kitten-pkinit-pqc-02 (Ends 2026-10-30)
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/flymwrW8CQFC1IZFCoZFKKH7m3w>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Owner: <mailto:kitten-owner@ietf.org>
List-Post: <mailto:kitten@ietf.org>
List-Subscribe: <mailto:kitten-join@ietf.org>
List-Unsubscribe: <mailto:kitten-leave@ietf.org>

This message starts a kitten WG Call for Adoption of:
draft-bokovoy-kitten-pkinit-pqc-02

This Working Group Call for Adoption ends on 2026-10-30

Abstract:
   This document specifies extensions to the Kerberos PKINIT pre-
   authentication mechanism [RFC4556] [RFC8636] to support post-quantum
   key establishment using the Module-Lattice-Based Key-Encapsulation
   Mechanism (ML-KEM) algorithms defined in [FIPS203].

   The extensions define a new kemInfo arm in PA-PK-AS-REP, a KDCKEMInfo
   structure signed by the KDC, HKDF-based AS reply key derivation
   (HKDF-SHA-512 for ML-KEM), and downgrade-prevention rules.  The KEM
   path framework supports multiple KEM algorithms including ML-KEM,
   composite ML-KEM algorithms, and future KEM standards.

Please reply to this message and indicate whether or not you support adoption
of this Internet-Draft by the kitten WG. Comments to explain your preference
are greatly appreciated. Please reply to all recipients of this message and
include this message in your response.

Authors, and WG participants in general, are reminded of the Intellectual
Property Rights (IPR) disclosure obligations described in BCP 79 [2].
Appropriate IPR disclosures required for full conformance with the provisions
of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
Sanctions available for application to violators of IETF IPR Policy can be
found at [3].

Thank you.
[1] https://datatracker.ietf.org/doc/bcp78/
[2] https://datatracker.ietf.org/doc/bcp79/
[3] https://datatracker.ietf.org/doc/rfc6701/

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-bokovoy-kitten-pkinit-pqc/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-bokovoy-kitten-pkinit-pqc-02.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-bokovoy-kitten-pkinit-pqc-02