[lamps] Re: I-D Action: draft-ietf-lamps-pq-composite-kem-13.txt

[Russ Housley <[e-mail]>]

I believe that this document is ready for the IESG.  Please speak now if I missed an unresolved WGLC comment.

For the LAMPS WG Chairs,
  Russ


> On Mar 27, 2026, at 12:17 PM, Mike Ounsworth <[e-mail]> wrote:
> 
> Hi LAMPS!
> 
> This new version has been collecting changes for a few months.
> 
> The big change is that we now reference two proof papers (both independently the first week of March, one from the authors and one from an independent research group) showing that the RSA-OAEP combination has the same security properties as the X-Wing proof. That's what the WGLC was gated on.
> 
> We did re-roll the test vectors at some point; I forgot why, I think there was a bug in one of them and because of how our script works, we had to re-generate them all. And a few other minor editorial changes for clarity.
> 
> @Chairs according to datatracker, this document  <>has been in WGLC for 161 days. Do we get an award? Also, do you now have what you need to move it along?
> 
> 
> On Fri, 27 Mar 2026 at 11:12, <[e-mail] <mailto:[e-mail]>> wrote:
>> Internet-Draft draft-ietf-lamps-pq-composite-kem-13.txt is now available. It
>> is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS)
>> WG of the IETF.
>> 
>>    Title:   Composite ML-KEM for use in X.509 Public Key Infrastructure
>>    Authors: Mike Ounsworth
>>             John Gray
>>             Massimiliano Pala
>>             Jan Klaussner
>>             Scott Fluhrer
>>    Name:    draft-ietf-lamps-pq-composite-kem-13.txt
>>    Pages:   132
>>    Dates:   2026-03-27
>> 
>> Abstract:
>> 
>>    This document defines combinations of US NIST ML-KEM in hybrid with
>>    traditional algorithms RSA-OAEP, ECDH, X25519, and X448.  These
>>    combinations are tailored to meet security best practices and
>>    regulatory guidelines.  Composite ML-KEM is applicable in any
>>    application that uses X.509 or PKIX data structures that accept ML-
>>    KEM, but where the operator wants extra protection against breaks or
>>    catastrophic bugs in ML-KEM.
>> 
>> The IETF datatracker status page for this Internet-Draft is:
>> https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/
>> 
>> There is also an HTML version available at:
>> https://www.ietf.org/archive/id/draft-ietf-lamps-pq-composite-kem-13.html
>> 
>> A diff from the previous version is available at:
>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-pq-composite-kem-13
>> 
>> Internet-Drafts are also available by rsync at:
>> rsync.ietf.org::internet-drafts
>> 
>> 
>> _______________________________________________
>> Spasm mailing list -- [e-mail] <mailto:[e-mail]>
>> To unsubscribe send an email to [e-mail] <mailto:[e-mail]>
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]