[lamps] Re: I-D Action: draft-ietf-lamps-pq-composite-kem-12.txt

[Russ Housley <[e-mail]>]

his revision include a new Section 3.1.1, and this sentence:

   In cases	
   where the private keys never leave the module or are otherwise not	
   required to interoperate with other cryptographic modules, it is not	
   required for interoperability for the private keys to match the	
   format described in this specification.

I think it would be better to say why a private key format is specified,
and then say when an implementation might do its own thing.

Russ


> On Jan 7, 2026, at 11:50 PM, [e-mail] wrote:
> 
> Internet-Draft draft-ietf-lamps-pq-composite-kem-12.txt is now available. It
> is a work item of the Limited Additional Mechanisms for PKIX and SMIME (LAMPS)
> WG of the IETF.
> 
>   Title:   Composite ML-KEM for use in X.509 Public Key Infrastructure
>   Authors: Mike Ounsworth
>            John Gray
>            Massimiliano Pala
>            Jan Klaussner
>            Scott Fluhrer
>   Name:    draft-ietf-lamps-pq-composite-kem-12.txt
>   Pages:   109
>   Dates:   2026-01-07
> 
> Abstract:
> 
>   This document defines combinations of US NIST ML-KEM [FIPS.203] in
>   hybrid with traditional algorithms RSA-OAEP, ECDH, X25519, and X448.
>   These combinations are tailored to meet security best practices and
>   regulatory guidelines.  Composite ML-KEM is applicable in any
>   application that uses X.509 or PKIX data structures that accept ML-
>   KEM, but where the operator wants extra protection against breaks or
>   catastrophic bugs in ML-KEM.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/
> 
> There is also an HTMLized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-lamps-pq-composite-kem-12
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lamps-pq-composite-kem-12
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> Spasm mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]