<?xml version="1.0" encoding="UTF-8"?>
<reference anchor="I-D.wiggers-tls-authkem-psk" target="https://datatracker.ietf.org/doc/html/draft-wiggers-tls-authkem-psk-04">
   <front>
      <title>KEM-based pre-shared-key handshakes for TLS 1.3</title>
      <author initials="T." surname="Wiggers" fullname="Thom Wiggers">
         <organization>PQShield</organization>
      </author>
      <author initials="S." surname="Celi" fullname="Sofia Celi">
         <organization>Brave Software</organization>
      </author>
      <author initials="P." surname="Schwabe" fullname="Peter Schwabe">
         <organization>Radboud University and MPI-SP</organization>
      </author>
      <author initials="D." surname="Stebila" fullname="Douglas Stebila">
         <organization>University of Waterloo</organization>
      </author>
      <author initials="N." surname="Sullivan" fullname="Nick Sullivan">
         </author>
      <date month="November" day="4" year="2025" />
      <abstract>
	 <t>   This document gives a construction in which (long-term) KEM public
   keys are used in the place of TLS PSK keys, avoiding concerns that
   may affect systems that use symmetric-key-based PSK, such as
   requiring key diversification and protection of symmetric-keys&#x27;
   confidentiality.

   This mechanism is inspired by AuthKEM (and could use AuthKEM
   certificate public keys for resumption), but can be independently
   implemented.

	 </t>
      </abstract>
   </front>
   <seriesInfo name="Internet-Draft" value="draft-wiggers-tls-authkem-psk-04" />
   
</reference>
