<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.ietf-lamps-cert-binding-for-multi-auth" target="https://datatracker.ietf.org/doc/html/draft-ietf-lamps-cert-binding-for-multi-auth-01">
   <front>
      <title>Related Certificates for Use in Multiple Authentications within a Protocol</title>
      <author initials="A." surname="Becker" fullname="Alison Becker">
         <organization>National Security Agency</organization>
      </author>
      <author initials="R." surname="Guthrie" fullname="Rebecca Guthrie">
         <organization>National Security Agency</organization>
      </author>
      <author initials="M. J." surname="Jenkins" fullname="Michael J. Jenkins">
         <organization>National Security Agency</organization>
      </author>
      <date month="June" day="26" year="2023" />
      <abstract>
	 <t>   This document defines a new CSR attribute, relatedCertRequest, and a
   new X.509 certificate extension, RelatedCertificate.  The use of the
   relatedCertRequest attribute in a CSR and the inclusion of the
   RelatedCertificate extension in the resulting certificate together
   provide additional assurance that two certificates each belong to the
   same end entity.  This mechanism is particularly useful in the
   context of non-composite hybrid authentication, which enables users
   to employ the same certificates in hybrid authentication as in
   authentication done with only traditional or post-quantum algorithms.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-ietf-lamps-cert-binding-for-multi-auth-01" />
   
</reference>
