[lamps] Re: WG Last Call for draft-ietf-lamps-kyber-certificates-07

[Russ Housley <[e-mail]>]

Dan:

>> This is not a mandator-to-implement algorithm.  If one chooses to
>> implement this specification, then that implementer will obviously
>> need to implement ML-KEM.
> 
> That makes the algorithm mandatory to implement.

We disagree on a vey fundamental level. The PKIX WG and the LAMPS WG have been very clear that there are no mandatory-to-implement algorithms in the PKI specifications.  Rather, othr WGs that specify protocols that make use of PKI can make algorithms selections.  For example, S/MIME and TLS are two protocols that use PKI.  S/MIME 4.0 (RFCs 8550 and 8551) includes statements about mandatory-to-implement algorithms.  The TLS 1.3 (RFC 8446) includes statements about mandatory-to-implement algorithms. 

Russ