[lamps] Re: I-D Action: draft-ietf-lamps-cms-composite-kem-00.txt

Daniel Van Geest <daniel.vangeest@cryptonext-security.com> Wed, 25 February 2026 22:13 UTC

Return-Path: <daniel.vangeest@cryptonext-security.com>
X-Original-To: spasm@mail2.ietf.org
Delivered-To: spasm@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id B2B01BE3DCCC for <spasm@mail2.ietf.org>; Wed, 25 Feb 2026 14:13:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cryptonext-security.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wrbqhfyblygR for <spasm@mail2.ietf.org>; Wed, 25 Feb 2026 14:13:31 -0800 (PST)
Received: from PR0P264CU014.outbound.protection.outlook.com (mail-francecentralazon11022083.outbound.protection.outlook.com [40.107.161.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id E596EBE3DCB6 for <spasm@ietf.org>; Wed, 25 Feb 2026 14:13:30 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=rNNgMHfcIu9NzRKBWqJMqRAL3kBLqdzfBa870eakQ/RXuI+MT8TyyMuLCUElT299gCuQCAymEXCQkxu+kq5H3FYWaQ3iwYp0OUUWhzRGpGYr/H1Efe5hLc8q9cS9IXXhGb/6pPmz+bUu0AZSxzHpsemrgRx4B0ZXDvN9qLhMvKSehuL6B5tgxuwhtohEScKYuJAhhaglKuyocte6I3JCKr4Mvj/NdCdJrKXYHAYpZUgZLdmufOa61Yrl+X1YghVnJaxWdXCams3SsLKORNJq7nroJiBK8OoZcxxzpzH1s5qVJ8ONmoE60IKSKpm55l14/Ie1byAgriW+enHEE7f+gQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zwM3tE7LYcEzPwC3bhussAYivbe9bDHir/c0SzTy5q4=; b=v1314/0hNElA41eckeInXSt7ge8ZLfqiICe4vCKe7UEO1km9v25F5dz8tyUaA4OJXX1vida2onCO48DmNeXyQdL08ijPJQ3+T738c5CNDNN+FaLHVew/40HJjJFEqaLQnI5+ZHr4zgqJLjY8V7xypz2Glw9YRimtVubPxpH+SoSLvZcLR8zdIHhIg0PNW1EGqxis1hlg7Vk12UjXsgICwjuEwFvr/DxIMM37dNqwAYW0e+BCnkIh24jFW4XffTRt/+h8567i3a8xT9XDdgC8OmlOJwMZWLApZ+HkduafIkuzK7EXoijr3RTuyV8hudPFPcNib4nwFc7rgZvczje6FQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cryptonext-security.com; dmarc=pass action=none header.from=cryptonext-security.com; dkim=pass header.d=cryptonext-security.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptonext-security.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zwM3tE7LYcEzPwC3bhussAYivbe9bDHir/c0SzTy5q4=; b=fXIMBNtiMgn4obQnI3Df3t6Pnn5Ousap68A1Sw/ojCbcWc8sZiNBuoQDL30nw/dTxhtybVGVKf3FUY4vOcI7pDGCb+W4IEVDvGmEUMkWi6V7SH2GZ0yg2jFvWnd0Xd6K8hZ8csXoklJjU8DkJgCLc21GUBXhfDJ+XZi82lnSjVnRw9554IVYLZPwtxi7LeZ13dm2HtMzOHiwgSKAvSMGaO4mTv/Go/Pxb5h21lh3p1w/e2nmnrcSb8W6pFmisp40du50EOAAbTUgH6hnRv0NM5Gyn+oTVUucYytirZhSruZZjM5NsXTgsJUJunedHNZe2G7GUO7Y4AzAWF0RT9EUNw==
Received: from PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:55a::5) by MRYP264MB6351.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:70::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.22; Wed, 25 Feb 2026 22:13:21 +0000
Received: from PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM ([fe80::87e8:c70b:3b90:e83d]) by PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM ([fe80::87e8:c70b:3b90:e83d%5]) with mapi id 15.20.9654.013; Wed, 25 Feb 2026 22:13:21 +0000
From: Daniel Van Geest <daniel.vangeest@cryptonext-security.com>
To: "spasm@ietf.org" <spasm@ietf.org>
Thread-Topic: [lamps] I-D Action: draft-ietf-lamps-cms-composite-kem-00.txt
Thread-Index: AQHcpobDMT9AbXMkY0Sb9ngpicbJP7WT9wBz
Date: Wed, 25 Feb 2026 22:13:21 +0000
Message-ID: <PA0P264MB6925C4C5AB3F745C6AD38776B675A@PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM>
References: <177204503351.2585405.14901243280094082188@dt-datatracker-6ff7c68975-7k42g>
In-Reply-To: <177204503351.2585405.14901243280094082188@dt-datatracker-6ff7c68975-7k42g>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cryptonext-security.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PA0P264MB6925:EE_|MRYP264MB6351:EE_
x-ms-office365-filtering-correlation-id: 7c5cc74c-28c2-4998-43f4-08de74bb1628
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|1800799024|4022899009|8096899003|13003099007|7053199007|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(1800799024)(4022899009)(8096899003)(13003099007)(7053199007)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: TXvi2KbRAHZnSI7HiqwmRtlGlM/B7Nb5MlvTmTNsvdp3F2Qkh09PUDplNEz9NHh424xAf8JpGp9xZTfG+29yJLvnE2aukURInbKZ5E5V3kUpPiapL4IKxm+858BtpJWj0isC7BIKcGl72jR/EB0uvS+tkRycnvASSWQxrqncAPj76IuIZVj7Y9uSaRfZ4H64ktQyMAv1dDYcZjjV4bNDPpYvinh9H1uYqWL6NnnqwfELCF4b9iPXHfNgDBOPYxylsaIzQCBGzSuQMCl6Yx8oc6jYD6IKNKe785MGX/9p2R+pftpXhFgphra2Q1996xZ3fk9hTcisGtiAWV2Xq/UJHvKDrNkymnnNLdLjmdrRcT7DHmCiw9LFbXe2I9CmSScMTwsVHg0dj7Eplk7ucdnDCIeldOF7jZQLBonM2B8mx+m8IJh/tBoBjyUw0Lmip1bwr9SqDoC4X7dpgEtICBz5mpVKojmuThAGA+g2w8SHbcBzwOgL/Mf5AKBkf7ixqfGkydUF/07V+No08dWuD9OhKW8BVacFwA1MX4ozN4YTGBme/j+l1d7nlLVDcAF65WRXITQu63v67MqQcodCRDWZDBscy2srBjhEPBugY7+ifq91gv1ALgQ+LjEs5vJCKiLTdotgAViX4N+njX+94AJ3HaSMFqZ7/4VodchTjG2wMVGOv9zc79cNait1F07K3D3HraRG9HEmWn6qJ49Ts69QXWYbFvyOgzI/D+0MTnuPxfNsqJ3J9MLk5XdEwRi2VPFXMo/yPcYHbB1GKTxkkjlIjRhLO30cZYZLYEMGro+/B9tKe1RgacXjnyUVtcQKfnYU/lN8QC8t9EnaKXrAajw9TdAGu1zxq2NqMTkzznirRaKkB4SkfY0rdfrgkVhZlgfwBOqlHS2o7UflCDWLcfQDiwbBj7c1JdCn03SFE/Bq1UMuiraJ9uMWN8gzyifp317AFY48wklj7EwRpxztS+1MQeDFWwRgmw6DV5rYfvA9x3meDv2Sq1KUICx/9AH9M6fwBeEjXeAX2tJOoHAg1nmlxSRX/Sd8LkizgKXV6gZZoCp/uwGS4pxWDAZs/2UzkYtZjCFrsk2DfEcrchvVpatGBc5f4syEFT2W3fqJ/GQPyXBcSZHdcKnAzD9iPECLqh5+T/npy/usmznDUOCF+w84XvSco5kXWcGcPiz73wvY78e963YlMUASMd7eknpYTQkxjEEJxFkAKhloEZQHNSRTi0CIn/iH7zblOiZyBjQu83QZMZmD5ltgm+TLtkt0fA1AjXImotm9rVjz0j8xqly4D1w55g0SDoePciMofzMff5MsNlSFUQTtz/gzkNVnAy6xwTy31AK0l6bhKkUXsE3Ndy8o2ZQct2iwn8FF3aKyWNyAqfZdJpEFU4OZTocQDpvxb3cDhTQH02mf7F057JDGjARH7xbtuKHs5MdgiAZy6kIQMyjK3RZeqDln3QHuaUqiIYkSI2oE8U4WSn1PpKi/2L7ENea+WNyv0iifWngCSeCRlNaXZSFPm3vBJpLgwnyJcymS5ymZEGMEMQHa5iWQOF5dAsfM0m++Zi7Bm+2roSqgH8LvwIvXp1nel+OFmnSBb+0Lc2jwusZdIb6yR5R110yGcSGCw0A/0X6/6dZp8QZcdZcGL7+57+6jwM/8F6m9W4g10zFaIsk3enWP/PPZFQ9WTzk+c+b7sMeScdOuy7Se82Vf3247l8h5vvKTvmcCTxaAMuJqaGqjYJylYMc8qcEXIBidOMoV26vVREdFpl/8VIPwyqVFuxrFI5B49ojB
Content-Type: multipart/alternative; boundary="_000_PA0P264MB6925C4C5AB3F745C6AD38776B675APA0P264MB6925FRAP_"
MIME-Version: 1.0
X-OriginatorOrg: cryptonext-security.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PA0P264MB6925.FRAP264.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 7c5cc74c-28c2-4998-43f4-08de74bb1628
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Feb 2026 22:13:21.2179 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: da4a2df1-4b1b-489d-a7f4-224b58fd4200
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: wTMIASu3UO8w1ri1HR3NK1RamP6HY7ewZof+/ycqqfvLoHG3HZhKL1tFn++4MDJ8hNHwfrR51HHHImmHlfp0D+b2O3wG9/FlECVPCrQas3QhMyJM8XH8FfEkVvtylmZ3
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MRYP264MB6351
Message-ID-Hash: L5ZIS67LS32J5E2UGKAT2MWABH4HO3JI
X-Message-ID-Hash: L5ZIS67LS32J5E2UGKAT2MWABH4HO3JI
X-MailFrom: daniel.vangeest@cryptonext-security.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spasm.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [lamps] Re: I-D Action: draft-ietf-lamps-cms-composite-kem-00.txt
List-Id: This is the mail list for the LAMPS Working Group <spasm.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/bpP9dJR2KGLQqICCFT-saQq7URs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Owner: <mailto:spasm-owner@ietf.org>
List-Post: <mailto:spasm@ietf.org>
List-Subscribe: <mailto:spasm-join@ietf.org>
List-Unsubscribe: <mailto:spasm-leave@ietf.org>

The concept for this draft was removed from an earlier adopted version of draft-ietf-lamps-pq-composite-kem with the understanding that it would become a separate draft.  Here is that draft.

The text borrows very heavily from RFC-to-be-9936, so there should not be any major surprises.  The authors believe we made reasonable choices for the algorithms that are used in KEMRecipientInfo with Composite ML-KEM.  Similar to RFC-to-be-9936, these algorithms MUST be supported by implementations; this does not mean that they MUST be used.  We just need a default in there to maximize interoperability.

We are aware of the broken reference to RFC9936.  RFC-to-be-9936 is in AUTH48, I-D.ietf-lamps-cms-kyber wasn't resolving in the bib tool, and I didn't want to manually craft up a reference for something that will be replaced momentarily.

Please take a look.

Daniel Van Geest on behalf of the authors


________________________________
From: internet-drafts@ietf.org <internet-drafts@ietf.org>
Sent: Wednesday, February 25, 2026 6:43 PM
To: i-d-announce@ietf.org <i-d-announce@ietf.org>
Cc: spasm@ietf.org <spasm@ietf.org>
Subject: [lamps] I-D Action: draft-ietf-lamps-cms-composite-kem-00.txt

Internet-Draft draft-ietf-lamps-cms-composite-kem-00.txt is now available. It
is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS)
WG of the IETF.

   Title:   Composite ML-KEM for use in Cryptographic Message Syntax (CMS)
   Authors: Daniel Van Geest
            Mike Ounsworth
            John Gray
            Jan Klaussner
   Name:    draft-ietf-lamps-cms-composite-kem-00.txt
   Pages:   21
   Dates:   2026-02-24

Abstract:

   Composite ML-KEM defines combinations of ML-KEM with RSA-OAEP, ECDH,
   X25519, and X448.  This document specifies the conventions for using
   Composite ML-KEM algorithms with the Cryptographic Message Syntax
   (CMS) using the KEMRecipientInfo structure defined in “Using Key
   Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message
   Syntax (CMS)” (RFC 9629).

The IETF datatracker status page for this Internet-Draft is:
https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-lamps-cms-composite-kem%2F&data=05%7C02%7Cdaniel.vangeest%40cryptonext-security.com%7C5128c924512d4d5b4fc108de749de461%7Cda4a2df14b1b489da7f4224b58fd4200%7C0%7C0%7C639076418654340942%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=l%2FuvsXUoqXpnNeGejmxfG8GuE9HLzRH4N3b8DUnNYzM%3D&reserved=0<https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-composite-kem/>

There is also an HTML version available at:
https://fra01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Farchive%2Fid%2Fdraft-ietf-lamps-cms-composite-kem-00.html&data=05%7C02%7Cdaniel.vangeest%40cryptonext-security.com%7C5128c924512d4d5b4fc108de749de461%7Cda4a2df14b1b489da7f4224b58fd4200%7C0%7C0%7C639076418654355299%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=LSFyPlniZsZsRwCuck1iYFfgpUdfvI1dFV8wpCWgGFk%3D&reserved=0<https://www.ietf.org/archive/id/draft-ietf-lamps-cms-composite-kem-00.html>

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
Spasm mailing list -- spasm@ietf.org
To unsubscribe send an email to spasm-leave@ietf.org