[lamps] New Liaison Statement, "RE: PQC migration of CMS signatures"

Liaison Statement Management Tool <statements@ietf.org> Wed, 17 June 2026 21:39 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Liaison Statement Management Tool <statements@ietf.org>
To: ETSI ESIsupport <ESIsupport@etsi.org>
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178173239172.696474.2012705891120657458@dt-datatracker-f9b87776f-8pmmg>
Date: Wed, 17 Jun 2026 14:39:51 -0700
Message-ID-Hash: TBMBLSDNUPSC6I4K2G5NFV2ILSXNLTRO
CC: Christopher Inacio <stndrds-inacio@andrew.cmu.edu>, Deb Cooley <debcooley1@gmail.com>, Jean-Emmanuel Perez Hernandez <jean-emmanuel.perez.hernandez@nowina.lu>, LAMPS WG <spasm@ietf.org>, Lucas PRABEL <lucas.prabel@huawei.com>, Nick Pope <nick.pope@secstanassoc.com>, Russ Housley <housley@vigilsec.com>, Tim Hollebeek <tim.hollebeek@digicert.com>, liaison-coordination@iab.org
Subject: [lamps] New Liaison Statement, "RE: PQC migration of CMS signatures"
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/_FTjuA25FgIifrnYuGYqc_Y9-qc>

Title: RE: PQC migration of CMS signatures
Submission Date: 2026-06-17
URL of the IETF Web page: https://datatracker.ietf.org/liaison/2199/

To: ETSI TC ESI PQC WG
From: Limited Additional Mechanisms for PKIX and SMIME (lamps)
Purpose: In response

Email Addresses
---------------
From: Russ Housley <housley@vigilsec.com>
To: ETSI ESIsupport <ESIsupport@etsi.org>
Cc: Christopher Inacio <stndrds-inacio@andrew.cmu.edu>,Deb Cooley <debcooley1@gmail.com>
Response Contacts: Russ Housley <housley@vigilsec.com>, Tim Hollebeek <tim.hollebeek@digicert.com>, LAMPS WG <spasm@ietf.org>
Technical Contacts: Nick Pope <nick.pope@secstanassoc.com>, Jean-Emmanuel Perez Hernandez <jean-emmanuel.perez.hernandez@nowina.lu>, Lucas PRABEL <lucas.prabel@huawei.com>

Referenced liaison: PQC migration of CMS signatures (https://datatracker.ietf.org/liaison/2197/)

Body: Since the CAdES specifications rely in particular on RFC 5652, the LAMPS WG wants ETSI TC EIS to be aware of the work that has already been accomplished to prepare CMS for use with PQC algorithms.  First, RFC 9629 specifies the use of Key Encapsulation Mechanism (KEM) Algorithms in the CMS.  Second, several specifications for the use of PQC signature algorithms have been written, including: RFC 9708, RFC 9814, and RFC 9882.  More are on the way, including support for composite signature algorithms.  Third, several specifications for the use of PQC KEM algorithms have been written, including: RFC 9936.  More are on the way, including support for composite KEM algorithms.

Since the EN 319 412 technical specification series build on RFC 5280, the LAMPS WG wants ETSI TC EIS to be aware of the work that has already been
accomplished to prepare public key certificates for use with PQC algorithms. First, several specifications for the use of PQC signature algorithms have  been written, including: RFC 9802, RFC 9881, and RFC 9909.  More are on the way, including support for composite signature algorithms.  Second, RFC 9935 specifies the way to carry an ML-KEM public key as the certificate subject public key.  Similar specifications are on the way for other PQC KEMs, including support for composite KEM algorithms.

US NIST is assigning algorithm identifiers for PQC algorithms that they specify, and you will see that the RFCs listed above use these algorithm identifiers for these algorithms.

ISO has assigned algorithm identifiers for the FrodoKEM algorithm.  The LAMPS WG is considering adopting specifications related to this algorithm, and these use the ISO-assigned algorithm identifiers.

IANA has assigned algorithm identifiers for HSS/LMS, XMSS, XMSS^MT, composite KEM algorithms, and composite signature algorithms.  These algorithm identifiers are included in this registry:

https://www.iana.org/assignments/smi-numbers/smi-numbers.xhtml#smi-numbers-1.3.6.1.5.5.7.6

Best Regards,
Russ and Tim
Attachments:

No document has been attached

[lamps] New Liaison Statement, "RE: PQC migration… Liaison Statement Management Tool