Skip to main content

Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS)

Document Type Replaced Internet-Draft (individual)
Expired & archived
Author Russ Housley
Last updated 2018-04-03
Replaced by draft-ietf-lamps-cms-mix-with-psk
RFC stream (None)
Intended RFC status (None)
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Replaced by draft-ietf-lamps-cms-mix-with-psk
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


The invention of a large-scale quantum computer would pose a serious challenge for the cryptographic algorithms that are widely deployed today. The Cryptographic Message Syntax (CMS) supports key transport and key agreement algorithms that could be broken by the invention of such a quantum computer. By storing communications that are protected with the CMS today, someone could decrypt them in the future when a large-scale quantum computer becomes available. Once quantum-secure key management algorithms are available, the CMS will be extended to support them, if current syntax the does not accommodated them. In the near-term, this document describes a mechanism to protect today's communication from the future invention of a large-scale quantum computer by mixing the output of key transport and key agreement algorithms with a pre-shared key.


Russ Housley

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)