Composite ML-KEM for use in X.509 Public Key Infrastructure
draft-ietf-lamps-pq-composite-kem-10
The information below is for an old version of the document.
| Document | Type |
This is an older version of an Internet-Draft whose latest revision state is "Active".
|
|
|---|---|---|---|
| Authors | Mike Ounsworth , John Gray , Massimiliano Pala , Jan Klaußner , Scott Fluhrer | ||
| Last updated | 2025-11-24 (Latest revision 2025-11-03) | ||
| Replaces | draft-ounsworth-pq-composite-kem | ||
| RFC stream | Internet Engineering Task Force (IETF) | ||
| Formats | |||
| Additional resources | Mailing list discussion | ||
| Stream | WG state | In WG Last Call | |
| Document shepherd | (None) | ||
| IESG | IESG state | I-D Exists | |
| Consensus boilerplate | Unknown | ||
| Telechat date | (None) | ||
| Responsible AD | (None) | ||
| Send notices to | (None) |
draft-ietf-lamps-pq-composite-kem-10
LAMPS M. Ounsworth
Internet-Draft J. Gray
Intended status: Standards Track Entrust
Expires: 28 May 2026 M. Pala
OpenCA Labs
J. Klaussner
Bundesdruckerei GmbH
S. Fluhrer
Cisco Systems
24 November 2025
Composite ML-KEM for use in X.509 Public Key Infrastructure
draft-ietf-lamps-pq-composite-kem-10
Abstract
This document defines combinations of ML-KEM [FIPS.203] in hybrid
with traditional algorithms RSA-OAEP, ECDH, X25519, and X448. These
combinations are tailored to meet security best practices and
regulatory guidelines. Composite ML-KEM is applicable in any
application that uses X.509 or PKIX data structures that accept ML-
KEM, but where the operator wants extra protection against breaks or
catastrophic bugs in ML-KEM.
About This Document
This note is to be removed before publishing as an RFC.
The latest revision of this draft can be found at https://lamps-
wg.github.io/draft-composite-kem/draft-ietf-lamps-pq-composite-
kem.html. Status information for this document may be found at
https://datatracker.ietf.org/doc/draft-ietf-lamps-pq-composite-kem/.
Discussion of this document takes place on the LAMPS Working Group
mailing list (mailto:spams@ietf.org), which is archived at
https://datatracker.ietf.org/wg/lamps/about/. Subscribe at
https://www.ietf.org/mailman/listinfo/spams/.
Source for this draft and an issue tracker can be found at
https://github.com/lamps-wg/draft-composite-kem.
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Ounsworth, et al. Expires 28 May 2026 [Page 1]
Internet-Draft Composite ML-KEM November 2025
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on 28 May 2026.
Copyright Notice
Copyright (c) 2025 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents (https://trustee.ietf.org/
license-info) in effect on the date of publication of this document.
Please review these documents carefully, as they describe your rights
and restrictions with respect to this document. Code Components
extracted from this document must include Revised BSD License text as
described in Section 4.e of the Trust Legal Provisions and are
provided without warranty as described in the Revised BSD License.
Table of Contents
1. Changes in version -09 . . . . . . . . . . . . . . . . . . . 3
2. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 4
2.1. Conventions and Terminology . . . . . . . . . . . . . . . 5
2.2. Composite Design Philosophy . . . . . . . . . . . . . . . 6
3. Overview of the Composite ML-KEM Scheme . . . . . . . . . . . 7
3.1. Promotion of RSA-OAEP into a KEM . . . . . . . . . . . . 8
3.2. Promotion of ECDH into a KEM . . . . . . . . . . . . . . 9
4. Composite ML-KEM Functions . . . . . . . . . . . . . . . . . 11
4.1. Key Generation . . . . . . . . . . . . . . . . . . . . . 11
4.2. Encapsulation . . . . . . . . . . . . . . . . . . . . . . 13
4.3. Decapsulation . . . . . . . . . . . . . . . . . . . . . . 15
4.4. KEM Combiner Function . . . . . . . . . . . . . . . . . . 17
4.5. Error Handling and Explicit Rejection . . . . . . . . . . 18
5. Serialization . . . . . . . . . . . . . . . . . . . . . . . . 18
5.1. SerializePublicKey and DeserializePublicKey . . . . . . . 20
5.2. SerializePrivateKey and DeserializePrivateKey . . . . . . 22
5.3. SerializeCiphertext and DeserializeCiphertext . . . . . . 23
6. Use within X.509 and PKIX . . . . . . . . . . . . . . . . . . 25
6.1. Encoding to DER . . . . . . . . . . . . . . . . . . . . . 26
6.2. Key Usage Bits . . . . . . . . . . . . . . . . . . . . . 26
Ounsworth, et al. Expires 28 May 2026 [Page 2]
Internet-Draft Composite ML-KEM November 2025
6.3. ASN.1 Definitions . . . . . . . . . . . . . . . . . . . . 26
7. Algorithm Identifiers and Parameters . . . . . . . . . . . . 28
7.1. RSA-OAEP Parameters . . . . . . . . . . . . . . . . . . . 33
7.2. Rationale for choices . . . . . . . . . . . . . . . . . . 34
8. ASN.1 Module . . . . . . . . . . . . . . . . . . . . . . . . 35
9. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 40
9.1. Object Identifier Allocations . . . . . . . . . . . . . . 40
9.1.1. Module Registration . . . . . . . . . . . . . . . . . 40
9.1.2. Object Identifier Registrations . . . . . . . . . . . 40
10. Security Considerations . . . . . . . . . . . . . . . . . . . 42
10.1. Why Hybrids? . . . . . . . . . . . . . . . . . . . . . . 43
10.2. KEM Combiner . . . . . . . . . . . . . . . . . . . . . . 43
10.2.1. IND-CCA2 Security of the hybrid scheme . . . . . . . 44
10.2.2. Second pre-image resistance of component KEMs . . . 45
10.2.3. Generifying this construction . . . . . . . . . . . 45
10.3. Key Reuse . . . . . . . . . . . . . . . . . . . . . . . 46
10.4. Policy for Deprecated and Acceptable Algorithms . . . . 47
11. Implementation Considerations . . . . . . . . . . . . . . . . 47
11.1. FIPS Certification . . . . . . . . . . . . . . . . . . . 47
11.1.1. Combiner Function . . . . . . . . . . . . . . . . . 48
11.1.2. Order of KDF inputs with Non-Approved Algorithms . . 48
11.2. Backwards Compatibility . . . . . . . . . . . . . . . . 49
11.3. Profiling down the number of options . . . . . . . . . . 50
11.4. Decapsulation Requires the Public Key . . . . . . . . . 50
11.4.1. Extracting RSAPublicKey from RSAPrivateKey . . . . . 51
11.4.2. Deriving the public ECPoint from ECPrivateKey . . . 52
12. References . . . . . . . . . . . . . . . . . . . . . . . . . 52
12.1. Normative References . . . . . . . . . . . . . . . . . . 52
12.2. Informative References . . . . . . . . . . . . . . . . . 55
Appendix A. Maximum Key and Ciphertext Sizes . . . . . . . . . . 58
Appendix B. Component Algorithm Reference . . . . . . . . . . . 60
Appendix C. Fixed Component Algorithm Identifiers . . . . . . . 61
Appendix D. Comparison with other Hybrid KEMs . . . . . . . . . 64
D.1. X-Wing . . . . . . . . . . . . . . . . . . . . . . . . . 64
D.2. ETSI CatKDF . . . . . . . . . . . . . . . . . . . . . . . 65
Appendix E. Examples of KEM Combiner Intermediate Values . . . . 65
Appendix F. Test Vectors . . . . . . . . . . . . . . . . . . . . 69
Appendix G. Contributors and Acknowledgments . . . . . . . . . . 128
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 129
1. Changes in version -09
Interop-affecting changes:
* Reverted back to the private key encoding mlkemSeed || tradSK.
Editorial changes:
Ounsworth, et al. Expires 28 May 2026 [Page 3]
Internet-Draft Composite ML-KEM November 2025
* Added an Implementation Consideration section with a few suggested
ways of acquiring the tradPK needed by the Decaps() routine.
2. Introduction
The advent of quantum computing poses a significant threat to current
cryptographic systems. Traditional cryptographic key establishment
algorithms such as RSA-OAEP, Diffie-Hellman and its elliptic curve
variants are vulnerable to quantum attacks. During the transition to
post-quantum cryptography (PQC), there is considerable uncertainty
regarding the robustness of both existing and new cryptographic
algorithms. While we can no longer fully trust traditional
cryptography, we also cannot immediately place complete trust in
post-quantum replacements until they have undergone extensive
scrutiny and real-world testing to uncover and rectify both
algorithmic weaknesses as well as implementation flaws across all the
new implementations.
Unlike previous migrations between cryptographic algorithms, the
decision of when to migrate and which algorithms to adopt is far from
straightforward. For instance, the aggressive migration timelines
may require deploying PQC algorithms before their implementations
have been fully hardened or certified, and dual-algorithm data
protection may be desirable over a longer time period to hedge
against security vulnerabilities and other implementation flaws in
the new implementations.
Cautious implementers may opt to combine cryptographic algorithms in
such a way that an attacker would need to break all of them
simultaneously to compromise the protected data. These mechanisms
are referred to as Post-Quantum/Traditional (PQ/T) Hybrids
[I-D.ietf-pquip-pqt-hybrid-terminology].
Certain jurisdictions are already recommending or mandating that PQC
lattice schemes be used exclusively within a PQ/T hybrid framework.
The use of a composite scheme provides a straightforward
implementation of hybrid solutions compatible with (and advocated by)
some governments and cybersecurity agencies [BSI2021], [ANSSI2024].
This specification defines a specific instantiation of the PQ/T
Hybrid paradigm called "composite" where multiple cryptographic
algorithms are combined to form a single key encapsulation mechanism
(KEM) presenting a single public key and ciphertext such that it can
be treated as a single atomic algorithm at the protocol level; a
property referred to as "protocol backwards compatibility" since it
can be applied to protocols that are not explicitly hybrid-aware.
Composite algorithms retain some security even if one of their
component algorithms is broken. Concrete instantiations of composite
Ounsworth, et al. Expires 28 May 2026 [Page 4]
Internet-Draft Composite ML-KEM November 2025
ML-KEM algorithms are provided based on ML-KEM, RSA-OAEP and ECDH.
Backwards compatibility in the sense of upgraded systems continuing
to inter-operate with legacy systems is not directly covered in this
specification, but is the subject of Section 11.2. The idea of a
composite was first presented in [Bindel2017].
Composite ML-KEM is applicable in any PKIX-related application that
would otherwise use ML-KEM.
2.1. Conventions and Terminology
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
"SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and
"OPTIONAL" in this document are to be interpreted as described in
BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all
capitals, as shown here. These words may also appear in this
document in lower case as plain English words, absent their normative
meanings.
This specification is consistent with all terminology from
[I-D.ietf-pquip-pqt-hybrid-terminology]. In addition, the following
terms are used in this specification:
*ALGORITHM*: The usage of the term "algorithm" within this
specification generally refers to any function which has a registered
Object Identifier (OID) for use within an ASN.1 AlgorithmIdentifier.
This loosely, but not precisely, aligns with the definitions of
"cryptographic algorithm" and "cryptographic scheme" given in
[I-D.ietf-pquip-pqt-hybrid-terminology].
*COMBINER*: A combiner specifies how multiple shared secret keys are
combined into a single shared secret key.
*COMPONENT / PRIMITIVE*: The words "component" or "primitive" are
used interchangeably to refer to a cryptographic algorithm that is
used internally within a composite algorithm. For example this could
be an asymmetric algorithm such as "ML-KEM-768" or "RSA-OAEP".
*DER:* Distinguished Encoding Rules as defined in [X.690].
*KEM:* A key encapsulation mechanism as defined in Section 3.
*PKI:* Public Key Infrastructure, as defined in [RFC5280].
Ounsworth, et al. Expires 28 May 2026 [Page 5]
Internet-Draft Composite ML-KEM November 2025
*SHARED SECRET KEY:* A value established between two communicating
parties for use as cryptographic key material suitable for direct use
by symmetric cryptographic algorithms. This specification is
concerned with shared secrets established via public key
cryptographic operations.
Notation: The algorithm descriptions use python-like syntax. The
following symbols deserve special mention:
* || represents concatenation of two byte arrays.
* [:] represents byte array slicing.
* (a, b) represents a pair of values a and b. Typically this
indicates that a function returns multiple values; the exact
conveyance mechanism -- tuple, struct, output parameters, etc --
is left to the implementer.
* (a, _): represents a pair of values where one -- the second one in
this case -- is ignored.
* Func<TYPE>(): represents a function that is parametrized by <TYPE>
meaning that the function's implementation will have minor
differences depending on the underlying TYPE. Typically this
means that a function will need to look up different constants or
use different underlying cryptographic primitives depending on
which composite algorithm it is implementing.
2.2. Composite Design Philosophy
[I-D.ietf-pquip-pqt-hybrid-terminology] defines composites as:
_Composite Cryptographic Element_: A cryptographic element that
incorporates multiple component cryptographic elements of the same
type in a multi-algorithm scheme.
Composite algorithms, as defined in this specification, follow this
definition and should be regarded as a single key that performs a
single cryptographic operation typical of a key establishment
mechanism such as key generation, encapsulating, or decapsulating --
using its internal concatenation of component keys as if they form a
single key. This generally means that the complexity of combining
algorithms can and should be handled by the cryptographic library or
cryptographic module, and the single composite public key, private
key, and ciphertext can be carried in existing fields in protocols
such as PKCS#10 [RFC2986], CMP [RFC4210], X.509 [RFC5280], CMS
[RFC5652], and the Trust Anchor Format [RFC5914]. In this way,
composites achieve "protocol backwards-compatibility" in that they
Ounsworth, et al. Expires 28 May 2026 [Page 6]
Internet-Draft Composite ML-KEM November 2025
will drop cleanly into any protocol that accepts an analogous single-
algorithm cryptographic scheme without requiring any modification of
the protocol to handle multiple algorithms.
Discussion of the specific choices of algorithm pairings can be found
in Section 7.2.
3. Overview of the Composite ML-KEM Scheme
Composite ML-KEM is a PQ/T hybrid Key Encapsulation Mechanism (KEM)
which combines ML-KEM as specified in [FIPS.203] and
[I-D.ietf-lamps-kyber-certificates] with one of RSA-OAEP defined in
[RFC8017], the Elliptic Curve Diffie-Hellman key agreement schemes
ECDH defined in section 5.7.1.2 of [SP.800-56Ar3], and X25519 / X448
defined in [RFC8410]. A KEM combiner function is used to combine the
two component shared secret keys into a single shared secret key.
Composite Key Encapsulation Mechanisms are defined as cryptographic
primitives that consist of three algorithms. These definitions are
borrowed from [RFC9180].
* KeyGen() -> (pk, sk): A probabilistic key generation algorithm,
which generates a public key pk and a secret key sk. Some
cryptographic modules may also expose a KeyGen(seed) -> (pk, sk),
which generates pk and sk deterministically from a seed. This
specification assumes a seed-based keygen for ML-KEM.
* Encap(pk) -> (ss, ct): A probabilistic encapsulation algorithm,
which takes as input a public key pk and outputs a ciphertext ct
and shared secret key ss. Note: this specification uses Encap()
to conform to [RFC9180], but [FIPS.203] uses Encaps().
* Decap(sk, ct) -> ss: A decapsulation algorithm, which takes as
input a secret key sk and ciphertext ct and outputs a shared
secret ss, or in some cases a distinguished error value. Note:
this specification uses Decap() to conform to [RFC9180], but
[FIPS.203] uses Decaps().
The KEM interface was chosen as the interface for a composite key
establishment because it allows for arbitrary combinations of
component algorithm types since both key transport and key agreement
mechanisms can be promoted into KEMs as described in Section 3.1 and
Section 3.2 below.
The following algorithms are defined for serializing and
deserializing component values. These algorithms are inspired by
similar algorithms in [RFC9180].
Ounsworth, et al. Expires 28 May 2026 [Page 7]
Internet-Draft Composite ML-KEM November 2025
* SerializePublicKey(mlkemPK, tradPK) -> bytes: Produce a byte
string encoding of the component public keys.
* DeserializePublicKey(bytes) -> (mlkemPK, tradPK): Parse a byte
string to recover the component public keys.
* SerializeCiphertext(mlkemCT, tradCT) -> bytes: Produce a byte
string encoding of the component ciphertexts.
* DeserializeCiphertext(bytes) -> (mlkemCT, tradCT): Parse a byte
string to recover the component ciphertexts.
* SerializePrivateKey(mlkemSeed, tradPK, tradSK) -> bytes: Produce a
byte string encoding of the component private keys.
* DeserializePrivateKey(bytes) -> (mlkemSeed, tradPK, tradSK): Parse
a byte string to recover the component private keys.
Full definitions of serialization and deserialization algorithms can
be found in Section 5.
3.1. Promotion of RSA-OAEP into a KEM
The RSA Optimal Asymmetric Encryption Padding (OAEP), as defined in
section 7.1 of [RFC8017] is a public key encryption algorithm used to
transport key material from a sender to a receiver. A "key
transport" type algorithm has the following API:
* Encrypt(pk, ss) -> ct: Take an existing shared secret key ss and
encrypt it for pk.
* Decrypt(sk, ct) -> ss: Decrypt the ciphertext ct to recover ss.
Note the difference between the API of RSA.Encrypt(pk, ss) -> ct and
KEM.Encap(pk) -> (ss, ct) presented above. For this reason, RSA-OAEP
cannot be directly combined with ML-KEM. Fortunately, a key
transport mechanism such as RSA-OAEP can be easily promoted into a
KEM by having the sender generate a random 256 bit shared secret key
and encrypt it.
RSAOAEPKEM.Encap(pkR):
shared_secret = SecureRandom(ss_len)
enc = RSAES-OAEP-ENCRYPT(pkR, shared_secret)
return shared_secret, enc
Ounsworth, et al. Expires 28 May 2026 [Page 8]
Internet-Draft Composite ML-KEM November 2025
Note that the OAEP label L is left to its default value, which is the
empty string as per [RFC8017]. The shared secret key output by the
overall Composite ML-KEM already binds a composite KEM Combiner
Label, so there is no need to also use the component Label.
The value of ss_len as well as concrete values for all the RSA-OAEP
parameters used within this specification can be found in
Section 7.1.
Decap(sk, ct) -> ss is accomplished by direct use of OAEP Decrypt.
RSAOAEPKEM.Decap(skR, enc):
shared_secret = RSAES-OAEP-DECRYPT(skR, enc)
return shared_secret
The encodings for the public key (pkR), private key (skR), and
ciphertext (enc) are described in Section 5.
A quick note on the choice of RSA-OAEP as the supported RSA
encryption primitive. RSA-KEM [RFC5990] is cryptographically robust
and is more straightforward to work with, but it has fairly limited
adoption and therefore is of limited value as a PQ migration
mechanism. Also, while RSA-PKCS#1v1.5 [RFC8017] is still widely
used, it is hard to make secure and no longer FIPS-approved as of the
end of 2023 [SP800-131Ar2], so it is of limited forwards value. This
leaves RSA-OAEP [RFC8017] as the remaining choice. See Section 7.2
for further discussion of algorithm choices.
Note that, at least at the time of writing, the algorithm RSAOAEPKEM
is not defined as a standalone algorithm within PKIX standards and it
does not have an assigned algorithm OID, so it cannot be used
directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building
block for the composite algorithm.
3.2. Promotion of ECDH into a KEM
The elliptic curve Diffie-Hellman algorithm identified by the OID id-
ecDH as defined in [RFC5480] and [SEC1] is a key agreement algorithm
requiring both parties to contribute an asymmetric keypair to the
derivation of the shared secret key. A "key agreement" type
algorithm has the following API:
* DH(skX, pkY) -> ss: Each party combines their secret key skX with
the other party's public key pkY.
Ounsworth, et al. Expires 28 May 2026 [Page 9]
Internet-Draft Composite ML-KEM November 2025
Note the difference between the API of DH(skX, pkY) -> ss and
KEM.Encap(pk) -> (ss, ct) presented above. For this reason, a
Diffie-Hellman key exchange cannot be directly combined with ML-KEM.
Fortunately, a Diffie-Hellman key agreement can be easily promoted
into a KEM Encap(pk) -> (ss, ct) by having the sender generate an
ephemeral keypair for themself and sending their public key as the
ciphertext ct. Composite ML-KEM uses a simplified version of the
DHKEM definition from [RFC9180]:
DHKEM.Encap(pkR):
(skE, pkE) = GenerateKeyPair()
ss = DH(skE, pkR)
ct = SerializePublicKey(pkE)
return ss, ct
Decap(sk, ct) -> ss is accomplished in the analogous way.
DHKEM.Decap(skR, ct):
pkE = DeserializePublicKey(ct)
ss = DH(skR, pkE)
return ss
This construction applies for all variants of elliptic curve Diffie-
Hellman used in this specification: ECDH, X25519, and X448.
For ECDH, DH() yields the value Z as described in section 5.7.1.2 of
[SP.800-56Ar3].
For X25519 and X448, DH() yields the value K as described in section
6 of [RFC7748].
The encodings for the public key (pkR), private key (skR), and
ciphertext (pkE) are described in Section 5.
The promotion of DH to a KEM is similar to the DHKEM functions in
[RFC9180], but it is simplified in the following ways:
1. Notation has been aligned to the notation used in this
specification.
2. Since a KEM Combiner Label is included explicitly in the
Composite ML-KEM combiner, there is no need to perform the
labeled steps of ExtractAndExpand().
Ounsworth, et al. Expires 28 May 2026 [Page 10]
Internet-Draft Composite ML-KEM November 2025
3. Since the ciphertext and receiver's public key are included
explicitly in the Composite ML-KEM combiner, there is no need to
construct the kem_context object.
Note that here, SerializePublicKey() and DeserializePublicKey() refer
to the underlying encoding of the DH primitive, and not to the
composite serialization functions defined in Section 5.
Note that, at least at the time of writing, the algorithm DHKEM is
not defined as a standalone algorithm within PKIX standards and it
does not have an assigned algorithm OID, so it cannot be used
directly with CMS KEMRecipientInfo [RFC9629]; it is merely a building
block for the composite algorithm.
4. Composite ML-KEM Functions
This section describes the composite ML-KEM functions needed to
instantiate the public API of a Key Encapsulation Mechanism as
defined in Section 3.
4.1. Key Generation
In order to maintain security properties of the composite,
applications that use composite keys MUST always perform fresh key
generations of both component keys and MUST NOT reuse existing key
material. See Section 10.3 for a discussion.
To generate a new keypair for composite schemes, the KeyGen() -> (pk,
sk) function is used. The KeyGen() function calls the two key
generation functions of the component algorithms independently.
Multi-threaded, multi-process, or multi-module applications might
choose to execute the key generation functions in parallel for better
key generation performance or architectural modularity.
The following describes how to instantiate a KeyGen() function for a
given composite algorithm represented by <OID>.
Ounsworth, et al. Expires 28 May 2026 [Page 11]
Internet-Draft Composite ML-KEM November 2025
Composite-ML-KEM<OID>.KeyGen() -> (pk, sk)
Explicit Inputs:
None
Implicit Inputs mapped from <OID>:
ML-KEM The underlying ML-KEM algorithm and
parameter set, for example "ML-KEM-768".
Trad The underlying traditional algorithm and
parameter, for example "RSA-OAEP"
or "X25519".
Output:
(pk, sk) The composite keypair.
Key Generation Process:
1. Generate component keys
mlkemSeed = Random(64)
(mlkemPK, mlkemSK) = ML-KEM.KeyGen(mlkemSeed)
(tradPK, tradSK) = Trad.KeyGen()
2. Check for component key gen failure
if NOT (mlkemPK, mlkemSK) or NOT (tradPK, tradSK):
output "Key generation error"
3. Output the composite public and private keys
pk = SerializePublicKey(mlkemPK, tradPK)
sk = SerializePrivateKey(mlkemSeed, tradPK, tradSK)
return (pk, sk)
In order to ensure fresh keys, the key generation functions MUST be
executed for both component algorithms. Compliant parties MUST NOT
use, import or export component keys that are used in other contexts,
combinations, or by themselves as keys for standalone algorithm use.
For more details on the security considerations around key reuse, see
Section 10.3.
Note that this keygen routine outputs a serialized composite key,
which contains only the ML-KEM seed. Implementations should feel
free to modify this routine to additionally output the expanded
mlkemSK or to make free use of ML-KEM.KeyGen(mldsaSeed) as needed to
expand the ML-KEM seed into an expanded key prior to performing a
decapsulation operation.
Ounsworth, et al. Expires 28 May 2026 [Page 12]
Internet-Draft Composite ML-KEM November 2025
Variations in the keygen process above and decapsulation processes
below to accommodate particular private key storage mechanisms or
alternate interfaces to the underlying cryptographic modules are
considered to be conformant to this specification so long as they
produce the same output and error handling.
For example, component private keys stored in separate software or
hardware modules where it is not possible to do a joint simultaneous
keygen would be considered compliant so long as both keys are freshly
generated. It is also possible that the underlying cryptographic
module does not expose a ML-KEM.KeyGen(seed) that accepts an
externally-generated seed, and instead an alternate keygen interface
must be used. Note however that cryptographic modules that do not
support seed-based ML-KEM key generation will be incapable of
importing or exporting composite keys in the standard format since
the private key serialization routines defined in Section 5.2 only
support ML-KEM keys as seeds.
Errors produced by the component KeyGen() routines MUST be forwarded
on to the calling application. Further discussion can be found below
in Section 4.5.
4.2. Encapsulation
The Encap(pk) of a Composite ML-KEM algorithm is designed to behave
exactly the same as ML-KEM.Encaps(ek) defined in Algorithm 20 in
Section 7.2 of [FIPS.203]. Specifically, Composite-ML-KEM.Encap(pk)
produces a 256-bit shared secret key that can be used directly with
any symmetric-key cryptographic algorithm. In this way, Composite
ML-KEM can be used as a direct drop-in replacement anywhere that ML-
KEM is used.
The following describes how to instantiate a Encap(pk) function for a
given composite algorithm represented by <OID>.
Composite-ML-KEM<OID>.Encap(pk) -> (ss, ct)
Explicit Inputs:
pk Composite public key consisting of encryption public keys
for each component.
Implicit inputs mapped from <OID>:
ML-KEM The underlying ML-KEM algorithm and
parameter set, for example "ML-KEM-768".
Trad The underlying ML-KEM algorithm and
Ounsworth, et al. Expires 28 May 2026 [Page 13]
Internet-Draft Composite ML-KEM November 2025
parameter set, for example "RSA-OAEP"
or "X25519".
Label KEM Combiner Label value for binding the ciphertext to the
Composite OID. See section on KEM Combiner Labels below.
Output:
ss The shared secret key, a 256-bit key suitable for use with
symmetric cryptographic algorithms.
ct The ciphertext, a byte string.
Encap Process:
1. Separate the public keys.
(mlkemPK, tradPK) = DeserializePublicKey(pk)
2. Perform the respective component Encap operations according to
their algorithm specifications.
(mlkemCT, mlkemSS) = ML-KEM.Encaps(mlkemPK)
(tradCT, tradSS) = TradKEM.Encap(tradPK)
3. If either ML-KEM.Encaps() or TradKEM.Encap() return an error,
then this process must return an error.
if NOT (mlkemCT, mlkemSS) or NOT (tradCT, tradSS):
output "Encapsulation error"
4. Encode the ciphertext
ct = SerializeCiphertext(mlkemCT, tradCT)
5. Combine the KEM secrets and additional context to yield the
composite shared secret key.
ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label)
6. Output composite shared secret key and ciphertext.
return (ss, ct)
The specific values for Label are defined per Composite ML-KEM
algorithm in Section 7.
Ounsworth, et al. Expires 28 May 2026 [Page 14]
Internet-Draft Composite ML-KEM November 2025
Errors produced by the component Encaps() routines MUST be forwarded
on to the calling application. Further discussion can be found below
in Section 4.5.
4.3. Decapsulation
The Decap(sk, ct) -> ss of a Composite ML-KEM algorithm is designed
to behave exactly the same as ML-KEM.Decaps(dk, c) defined in
Algorithm 21 in Section 7.3 of [FIPS.203]. Specifically, Composite-
ML-KEM.Decap(sk, ct) produces a 256-bit shared secret key that can be
used directly with any symmetric-key cryptographic algorithm. In
this way, Composite ML-KEM can be used as a direct drop-in
replacement anywhere that ML-KEM is used.
The following describes how to instantiate a Decap(sk, ct) function
for a given composite algorithm represented by <OID>.
Composite-ML-KEM<OID>.Decap(sk, ct) -> ss
Explicit inputs
sk Composite private key consisting of decryption private
keys for each component.
ct The ciphertext, a byte string.
Implicit inputs mapped from <OID>:
ML-KEM The underlying ML-KEM algorithm and
parameter set, for example "ML-KEM-768".
Trad The underlying traditional algorithm and
parameter set, for example "RSA-OAEP"
or "X25519".
Label KEM Combiner Label value for binding the ciphertext to
the Composite ML-KEM OID.
See section on KEM Combiner Labels below.
Implicit inputs looked up from SK:
tradPK The traditional public key is required for the KEM
combiner.
For discussion of where to get this value, see the
Decapsulation Requires the Public Key section.
Output:
Ounsworth, et al. Expires 28 May 2026 [Page 15]
Internet-Draft Composite ML-KEM November 2025
ss The shared secret key, a 256-bit key suitable for use
with symmetric cryptographic algorithms.
Decap Process:
1. Separate the private keys and ciphertexts
(mlkemSeed, tradSK) = DeserializePrivateKey(sk)
(_, mlkemSK) = ML-KEM.KeyGen(mlkemSeed)
(mlkemCT, tradCT) = DeserializeCiphertext(ct)
2. Perform the respective component Decap operations according
to their algorithm specifications.
mlkemSS = ML-KEM.Decaps(mlkemSK, mlkemCT)
tradSS = TradKEM.Decap(tradSK, tradCT)
3. If either ML-KEM.Decaps() or TradKEM.Decap() return an error,
then this process must return an error.
if NOT mlkemSS or NOT tradSS:
output "Decapsulation error"
4. Combine the KEM secrets and additional context to yield the
composite shared secret key.
ss = KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label)
5. Output composite shared secret key.
return ss
Steps 2, 3, and 4 SHOULD be performed in a timing-invariant way to
prevent side-channel attackers from learning which component
algorithm failed and from learning any of the inputs or output of the
KEM combiner.
Step 4 requires the Decaps() process to have access to tradPK, which
is not carried in the private key format and therefore the
implementation is required to acquire it from some out-of-band means.
The Implementation Considerations Section 11.4 provides further
discussion on this.
It is possible to use component private keys stored in separate
software or hardware keystores. Variations in the process to
accommodate particular private key storage mechanisms are considered
to be conformant to this specification so long as it produces the
same output and error handling as the process sketched above.
Ounsworth, et al. Expires 28 May 2026 [Page 16]
Internet-Draft Composite ML-KEM November 2025
In order to properly achieve its security properties, the KEM
combiner requires that all inputs are fixed-length or length-encoded.
Since each Composite ML-KEM algorithm fully specifies its component
algorithms, including key sizes, all inputs should be fixed-length in
non-error scenarios except for minor variations introduced by
encoding. In the cases where there are minor variations introduced
by encoding, those encodings already have a fixed-length prefix
followed by length-encoded data, so the requirements for the KEM
combiner security properties hold (namely that the input is
injective). However some implementations may choose to perform
additional checking to handle certain error conditions. In
particular, the KEM combiner step should not be performed if either
of the component decapsulations returned an error condition
indicating malformed inputs. For timing-invariance reasons, it is
RECOMMENDED to perform both decapsulation operations and check for
errors afterwards to prevent an attacker from using a timing channel
to tell which component failed decapsulation. Also, RSA-based
composites MUST ensure that the modulus size (i.e. the size of tradCT
and tradPK) matches that specified for the given Composite ML-KEM
algorithm in Section 7; depending on the cryptographic library used,
this check may be done by the library or may require an explicit
check as part of the Composite-ML-KEM.Decap() routine. Implementers
should keep in mind that some instances of tradCT and tradPK will be
DER-encoded which could introduce minor length variations such as
dropping leading zeroes; since the underlying KEMs are assumed to be
IND-CCA secure, decapsulation against tampered ciphertexts or public
keys is assumed to fail, these length differences are considered
benign to the KEM combiner.
Errors produced by the component Decaps() routines MUST be forwarded
on to the calling application. Further discussion can be found below
in Section 4.5.
4.4. KEM Combiner Function
This specification provides a combiner construction with SHA3-256 for
all combinations of algorithms.
Ounsworth, et al. Expires 28 May 2026 [Page 17]
Internet-Draft Composite ML-KEM November 2025
KemCombiner(mlkemSS, tradSS, tradCT, tradPK, Label) -> ss
Explicit inputs:
The list of input values to be combined.
Output:
ss The shared secret key, a 256-bit key suitable for use with
symmetric cryptographic algorithms.
Process:
ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label)
return ss
4.5. Error Handling and Explicit Rejection
ML-KEM, particularly its Decaps() defined in Algorithms 18 and 21 of
[FIPS.203], is designed to be implicitly rejecting, meaning that a
failure within the underlying PKE scheme due to a mangled ciphertext
will not cause ML-KEM.Decaps() to return an error, but instead any
errors encountered during decapsulation are handled by producing a
pseudo-random shared secret. ML-KEM.Decaps() can, however return
errors for example if the provided ciphertext or decapsulation
private key is the wrong size.
In Composite ML-KEM, not all component algorithms will be implicitly
rejecting, for example RSA-OAEP's Decrypt() can return an error if
the padding is incorrect. In general, in the case that one of the
component primitives generates an error during Composite ML-KEM
KeyGen, Encaps, or Decaps, Composite ML-KEM MUST clear all buffers
containing key material and forward the error to its caller; i.e.
Composite ML-KEM MUST be explicitly rejecting whenever one of its
components is. The same applies to Composite ML-KEM KeyGen() and
Encaps(): Composite KEM MUST forward any errors produced by component
algorithms.
5. Serialization
This section presents routines for serializing and deserializing
composite public keys, private keys, and ciphertext values to bytes.
The functions defined in this section are considered internal
implementation details and are referenced from within the public API
definitions in Section 4.
Ounsworth, et al. Expires 28 May 2026 [Page 18]
Internet-Draft Composite ML-KEM November 2025
Deserialization is possible because ML-KEM has fixed-length public
keys, private keys (seeds), and ciphertext values as shown in the
following table.
+=============+============+=============+============+
| Algorithm | Public Key | Private Key | Ciphertext |
+=============+============+=============+============+
| ML-KEM-768 | 1184 | 64 | 1088 |
+-------------+------------+-------------+------------+
| ML-KEM-1024 | 1568 | 64 | 1568 |
+-------------+------------+-------------+------------+
Table 1: ML-KEM Sizes
For all serialization routines below, when these values are required
to be carried in an ASN.1 structure, they are wrapped as described in
Section 6.1.
While ML-KEM has a single fixed-size representation for each of
public key, private key, and ciphertext, the traditional component
might allow multiple valid encodings; for example an elliptic curve
public key, and therefore also ciphertext, might be validly encoded
as either compressed or uncompressed [SEC1], or an RSA private key
could be encoded in Chinese Remainder Theorem form [RFC8017]. In
order to obtain interoperability, composite algorithms MUST use the
following encodings of the underlying components:
* *ML-KEM*: MUST be encoded as specified in sections 7.1 and 7.2 of
[FIPS.203], using a 64-byte seed as the private key.
* *RSA*: the public key MUST be encoded as RSAPublicKey with the
(n,e) public key representation as specified in A.1.1 of [RFC8017]
and the private key representation as RSAPrivateKey specified in
A.1.2 of [RFC8017] with version 0 and 'otherPrimeInfos' absent.
An RSA-OAEP ciphertext MUST be encoded as specified in section
7.1.1 of [RFC8017]
* *ECDH*: public key MUST be encoded as an uncompressed X9.62
[X9.62_2005], including the leading byte 0x04 indicating
uncompressed. This is consistent with the encoding of ECPoint as
specified in section 2.2 of [RFC5480] when no ASN.1 OCTET STRING
wrapping is present. The private key MUST be encoded as
ECPrivateKey specified in [RFC5915] with 'NamedCurve' parameter
set to the OID of the curve, but without the 'publicKey' field.
The ciphertext MUST be encoded in the same manner as the public
key.
Ounsworth, et al. Expires 28 May 2026 [Page 19]
Internet-Draft Composite ML-KEM November 2025
* *X25519 and X448*: the public key MUST be encoded as per section 5
of [RFC7748] and the private key is a 32 or 56 byte raw value for
X25519 and X448 respectively. The ciphertext MUST be encoded in
the same manner as the public key.
All ASN.1 objects SHALL be encoded using DER on serialization.
Even with fixed encodings for the traditional component, there may be
slight differences in size of the encoded value due to, for example,
encoding rules that drop leading zeroes. See Appendix A for further
discussion of encoded size of each composite algorithm.
The deserialization routines described below do not check for well-
formedness of the cryptographic material they are recovering. It is
assumed that underlying cryptographic primitives will catch malformed
values and raise an appropriate error.
5.1. SerializePublicKey and DeserializePublicKey
The serialization routine for keys simply concatenates the public
keys of the component algorithms, as defined below:
Composite-ML-KEM.SerializePublicKey(mlkemPK, tradPK) -> bytes
Explicit inputs:
mlkemPK The ML-KEM public key, which is bytes.
tradPK The traditional public key in the appropriate
encoding for the underlying component algorithm.
Implicit inputs:
None
Output:
bytes The encoded composite public key.
Serialization Process:
1. Combine and output the encoded public key
output mlkemPK || tradPK
Ounsworth, et al. Expires 28 May 2026 [Page 20]
Internet-Draft Composite ML-KEM November 2025
Deserialization reverses this process. Each component key is
deserialized according to their respective specification as shown in
Appendix B.
The following describes how to instantiate a
DeserializePublicKey(bytes) function for a given composite algorithm
represented by <OID>.
Composite-ML-KEM<OID>.DeserializePublicKey(bytes) -> (mlkemPK, tradPK)
Explicit inputs:
bytes An encoded composite public key.
Implicit inputs mapped from <OID>:
ML-KEM The underlying ML-KEM algorithm and
parameter, for example, could be "ML-KEM-768".
Output:
mlkemPK The ML-KEM public key, which is bytes.
tradPK The traditional public key in the appropriate
encoding for the underlying component algorithm.
Deserialization Process:
1. Parse each constituent encoded public key.
The length of the mlkemPK is known based on the size of
the ML-KEM component key length specified by the Object ID.
switch ML-KEM do
case ML-KEM-768:
mlkemPK = bytes[:1184]
tradPK = bytes[1184:]
case ML-KEM-1024:
mlkemPK = bytes[:1568]
tradPK = bytes[1568:]
Note that while ML-KEM has fixed-length keys, RSA
may not, depending on encoding, so rigorous length-checking
of the overall composite key is not always possible.
2. Output the component public keys
output (mlkemPK, tradPK)
Ounsworth, et al. Expires 28 May 2026 [Page 21]
Internet-Draft Composite ML-KEM November 2025
5.2. SerializePrivateKey and DeserializePrivateKey
The serialization routine for keys simply concatenates the private
keys of the component algorithms, as defined below:
Composite-ML-KEM.SerializePrivateKey(mlkemSeed, tradPK, tradSK)
-> bytes
Explicit inputs:
mlkemSeed The ML-KEM private key, which is the bytes of the seed.
tradSK The traditional private key in the appropriate
encoding for the underlying component algorithm.
Implicit inputs:
None
Output:
bytes The encoded composite private key.
Serialization Process:
1. Combine and output the encoded private key.
output mlkemSeed || tradSK
Deserialization reverses this process. Each component key is
deserialized according to their respective specification as shown in
Appendix B.
The following describes how to instantiate a
DeserializePrivateKey(bytes) function. Since ML-KEM private keys are
64 bytes for all parameter sets, this function does not need to be
parametrized.
Ounsworth, et al. Expires 28 May 2026 [Page 22]
Internet-Draft Composite ML-KEM November 2025
Composite-ML-KEM.DeserializePrivateKey(bytes)
-> (mlkemSeed, tradSK)
Explicit inputs:
bytes An encoded composite private key.
Implicit inputs:
That an ML-KEM private key is 64 bytes for all parameter sets.
Output:
mlkemSeed The ML-KEM private key, which is the bytes of the seed.
tradSK The traditional private key in the appropriate
encoding for the underlying component algorithm.
Deserialization Process:
1. Parse the ML-KEM seed, which is always a 64 byte seed
for all parameter sets.
mlkemSeed = bytes[:64]
tradSK = bytes[64:]
2. Output the component private keys
output (mlkemSeed,tradSK)
The function BytesToInteger(x) is not defined in [FIPS.204], but is
the obvious inverse of the defined IntegerToBytes() which is the
usual little-endian encoding of an integer.
5.3. SerializeCiphertext and DeserializeCiphertext
The serialization routine for the composite ciphertext value simply
concatenates the fixed-length ML-KEM ciphertext with the ciphertext
from the traditional algorithm, as defined below:
Ounsworth, et al. Expires 28 May 2026 [Page 23]
Internet-Draft Composite ML-KEM November 2025
Composite-ML-KEM.SerializeCiphertext(mlkemCT, tradCT) -> bytes
Explicit inputs:
mlkemCT The ML-KEM ciphertext, which is bytes.
tradCT The traditional ciphertext in the appropriate
encoding for the underlying component algorithm.
Implicit inputs:
None
Output:
bytes The encoded composite ciphertext value.
Serialization Process:
1. Combine and output the encoded composite ciphertext
output mlkemCT || tradCT
Deserialization reverses this process. Each component ciphertext is
deserialized according to their respective specification as shown in
Appendix B.
The following describes how to instantiate a
DeserializeCiphertext(bytes) function for a given composite algorithm
represented by <OID>.
Ounsworth, et al. Expires 28 May 2026 [Page 24]
Internet-Draft Composite ML-KEM November 2025
Composite-ML-KEM<OID>.DeserializeCiphertext(bytes)
-> (mldkemCT, tradCT)
Explicit inputs:
bytes An encoded composite ciphertext value.
Implicit inputs mapped from <OID>:
ML-KEM The underlying ML-KEM algorithm and
parameter, for example, could be "ML-KEM-768".
Output:
mlkemCT The ML-KEM ciphertext, which is bytes.
tradCT The traditional ciphertext in the appropriate
encoding for the underlying component algorithm.
Deserialization Process:
1. Parse each constituent encoded ciphertext.
The length of the mlkemCT is known based on the size of the
ML-KEM component ciphertext length specified by the Object ID.
switch ML-KEM do
case ML-KEM-768:
mlkemCT = bytes[:1088]
tradCT = bytes[1088:]
case ML-KEM-1024:
mlkemCT= bytes[:1568]
tradCT = bytes[1568:]
2. Output the component ciphertext values
output (mlkemCT, tradCT)
6. Use within X.509 and PKIX
The following sections provide processing logic and the necessary
ASN.1 modules necessary to use composite ML-KEM within X.509 and PKIX
protocols. Use within the Cryptographic Message Syntax (CMS) will be
covered in a separate specification.
Ounsworth, et al. Expires 28 May 2026 [Page 25]
Internet-Draft Composite ML-KEM November 2025
While composite ML-KEM keys and ciphertext values MAY be used raw,
the following sections provide conventions for using them within
X.509 and other PKIX protocols such that Composite ML-KEM can be used
as a drop-in replacement for KEM algorithms in PKCS#10 [RFC2986], CMP
[RFC4210], X.509 [RFC5280], and related protocols.
6.1. Encoding to DER
The serialization routines presented in Section 5 produce raw binary
values. When these values are required to be carried within a DER-
encoded message format such as an X.509's subjectPublicKey or a
OneAsymmetricKey.privateKey OCTET STRING [RFC5958], then the BIT
STRING or OCTET STRING contains this raw byte string output of the
appropriate serialization routine from Section 5 without further
encoding.
When a Composite ML-KEM public key appears outside of a
SubjectPublicKeyInfo type in an environment that uses ASN.1 encoding,
it could be encoded as an OCTET STRING by using the Composite-ML-KEM-
PublicKey type defined below.
Composite-ML-KEM-PublicKey ::= OCTET STRING
Size constraints MAY be enforced, as appropriate as per Appendix A.
6.2. Key Usage Bits
When any Composite ML-KEM Object Identifier appears within the
SubjectPublicKeyInfo.AlgorithmIdentifier field of an X.509
certificate [RFC5280], the key usage certificate extension MUST only
contain:
keyEncipherment
Composite ML-KEM keys MUST NOT be used in a "dual usage" mode because
even if the traditional component key supports both signing and
encryption, the post-quantum algorithms do not and therefore the
overall composite algorithm does not. Implementations MUST NOT use
one component of the composite for the purposes of digital signature
and the other component for the purposes of encryption or key
establishment.
6.3. ASN.1 Definitions
Composite ML-KEM uses a substantially non-ASN.1 based encoding, as
specified in Section 5. However, as composite algorithms will be
used within ASN.1-based X.509 and PKIX protocols, some conventions
for ASN.1 wrapping are necessary.
Ounsworth, et al. Expires 28 May 2026 [Page 26]
Internet-Draft Composite ML-KEM November 2025
The following ASN.1 Information Object Classes are defined to allow
for compact definitions of each composite algorithm, leading to a
smaller overall ASN.1 module.
pk-CompositeKEM {OBJECT IDENTIFIER:id}
PUBLIC-KEY ::= {
IDENTIFIER id
-- KEY no ASN.1 wrapping --
PARAMS ARE absent
CERT-KEY-USAGE { keyEncipherment }
-- PRIVATE-KEY no ASN.1 wrapping --
}
kema-CompositeKEM {
OBJECT IDENTIFIER:id,
PUBLIC-KEY:publicKeyType }
KEM-ALGORITHM ::= {
IDENTIFIER id
-- VALUE no ASN.1 wrapping --
PARAMS ARE absent
PUBLIC-KEYS { publicKeyType }
SMIME-CAPS { IDENTIFIED BY id }
}
Figure 1: ASN.1 Object Information Classes for Composite ML-KEM
As an example, the public key and KEM algorithm types associated with
id-MLKEM768-ECDH-P256-SHA3-256 are defined as:
pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-ECDH-P256-SHA3-256 }
kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-ECDH-P256-SHA3-256,
pk-MLKEM768-ECDH-P256-SHA3-256 }
The full set of key types defined by this specification can be found
in the ASN.1 Module in Section 8.
Use cases that require an interoperable encoding for composite
private keys will often need to place a composite private key inside
a OneAsymmetricKey structure defined in [RFC5958], such as when
private keys are carried in PKCS #12 [RFC7292], CMP [RFC4210] or CRMF
[RFC4211]. The definition of OneAsymmetricKey is copied here for
convenience:
Ounsworth, et al. Expires 28 May 2026 [Page 27]
Internet-Draft Composite ML-KEM November 2025
OneAsymmetricKey ::= SEQUENCE {
version Version,
privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,
privateKey PrivateKey,
attributes [0] Attributes OPTIONAL,
...,
[[2: publicKey [1] PublicKey OPTIONAL ]],
...
}
...
PrivateKey ::= OCTET STRING
-- Content varies based on type of key. The
-- algorithm identifier dictates the format of
-- the key.
Figure 2: OneAsymmetricKey as defined in [RFC5958]
When a composite private key is conveyed inside a OneAsymmetricKey
structure (version 1 of which is also known as PrivateKeyInfo)
[RFC5958], the privateKeyAlgorithm field SHALL be set to the
corresponding composite algorithm identifier defined according to
Section 7 and its parameters field MUST be absent. The privateKey
field SHALL contain the OCTET STRING representation of the serialized
composite private key as per Section 5.2. The publicKey field
remains OPTIONAL. If the publicKey field is present, it MUST be a
composite public key as per Section 5.1.
Some applications might need to reconstruct the SubjectPublicKeyInfo
or OneAsymmetricKey objects corresponding to each component key
individually, for example if this is required for invoking the
underlying primitive. Section 7 provides the necessary mapping
between composite and their component algorithms for doing this
reconstruction.
Component keys of a composite private key MUST NOT be used in any
other type of key or as a standalone key. For more details on the
security considerations around key reuse, see Section 10.3.
7. Algorithm Identifiers and Parameters
This section lists the algorithm identifiers and parameters for all
Composite ML-KEM algorithms.
Full specifications for the referenced algorithms can be found in
Appendix B.
Ounsworth, et al. Expires 28 May 2026 [Page 28]
Internet-Draft Composite ML-KEM November 2025
As the number of algorithms can be daunting to implementers, see
Section 11.3 for a discussion of choosing a subset to support.
Each Composite ML-KEM algorithm has a unique Label which is used in
constructing the KEM combiner in (Section 4.4). This helps protect
against a different algorithm arriving at the same shared secret key
even if all inputs are the same.
Label values are provided in two forms: where the label value is
alphanumeric ASCII, they are represented below as strings. For
example, "MLKEM768-RSAOAEP2048" below is equivalent to the
hexadecimal value 4D4C4B454D3736382D5253414F41455032303438.
Some of the label values contain problematic characters, such as
backslashes, that can cause issues displaying correctly in rendered
documents or even in source code when the compiler interprets it as
an escape character. Below, these are represented directly in
hexadecimal. For example, the label for id-MLKEM768-X25519-SHA3-256
is "\.//^\", but to avoid transcription errors it is provided only in
hexadecimal as 5c2e2f2f5e5c.
EDNOTE: the OIDs listed below are prototyping OIDs defined in
Entrust's 2.16.840.1.114027.80.9.1 arc but will be replaced by IANA.
Composite KEM algorithm list:
* id-MLKEM768-RSA2048-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.86
- Label: "MLKEM768-RSAOAEP2048"
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: RSA
o Traditional KEM Algorithm: id-RSAES-OAEP
o RSA size: 2048
o RSAES-OAEP parameters: See Table 2
* id-MLKEM768-RSA3072-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.87
- Label: "MLKEM768-RSAOAEP3072"
Ounsworth, et al. Expires 28 May 2026 [Page 29]
Internet-Draft Composite ML-KEM November 2025
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: RSA
o Traditional KEM Algorithm: id-RSAES-OAEP
o RSA size: 3072
o RSAES-OAEP parameters: See Table 2
* id-MLKEM768-RSA4096-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.88
- Label: "MLKEM768-RSAOAEP4096"
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: RSA
o Traditional KEM Algorithm: id-RSAES-OAEP
o RSA size: 4096
o RSAES-OAEP parameters: See Table 2
* id-MLKEM768-X25519-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.89
- Label: "5c2e2f2f5e5c" (hex)
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: X25519
o Traditional KEM Algorithm: id-X25519
* id-MLKEM768-ECDH-P256-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.90
- Label: "MLKEM768-P256"
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: ECDH
Ounsworth, et al. Expires 28 May 2026 [Page 30]
Internet-Draft Composite ML-KEM November 2025
o Traditional KEM Algorithm: id-ecDH
o ECDH curve: secp256r1
* id-MLKEM768-ECDH-P384-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.91
- Label: "MLKEM768-P384"
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: ECDH
o Traditional KEM Algorithm: id-ecDH
o ECDH curve: secp384r1
* id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.92
- Label: "MLKEM768-BP256"
- ML-KEM variant: ML-KEM-768
- Traditional Algorithm: ECDH
o Traditional KEM Algorithm: id-ecDH
o ECDH curve: brainpoolP256r1
* id-MLKEM1024-RSA3072-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.93
- Label: "MLKEM1024-RSAOAEP3072"
- ML-KEM variant: ML-KEM-1024
- Traditional Algorithm: RSA
o Traditional KEM Algorithm: id-RSAES-OAEP
o RSA size: 3072
o RSAES-OAEP parameters: See Table 2
Ounsworth, et al. Expires 28 May 2026 [Page 31]
Internet-Draft Composite ML-KEM November 2025
* id-MLKEM1024-ECDH-P384-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.94
- Label: "MLKEM1024-P384"
- ML-KEM variant: ML-KEM-1024
- Traditional Algorithm: ECDH
o Traditional KEM Algorithm: id-ecDH
o ECDH curve: secp384r1
* id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.95
- Label: "MLKEM1024-BP384"
- ML-KEM variant: ML-KEM-1024
- Traditional Algorithm: ECDH
o Traditional KEM Algorithm: id-ecDH
o ECDH curve: brainpoolP384r1
* id-MLKEM1024-X448-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.96
- Label: "MLKEM1024-X448"
- ML-KEM variant: ML-KEM-1024
- Traditional Algorithm: X448
o Traditional KEM Algorithm: id-X448
* id-MLKEM1024-ECDH-P521-SHA3-256
- OID: 2.16.840.1.114027.80.5.2.97
- Label: "MLKEM1024-P521"
- ML-KEM variant: ML-KEM-1024
Ounsworth, et al. Expires 28 May 2026 [Page 32]
Internet-Draft Composite ML-KEM November 2025
- Traditional Algorithm: ECDH
o Traditional KEM Algorithm: id-ecDH
o ECDH curve: secp521r1
In alignment with ML-KEM [FIPS.203], Composite KEM algorithms output
a 256-bit shared secret key at all security levels.
For all RSA key types and sizes, the exponent is RECOMMENDED to be
65537. Implementations MAY support only 65537 and reject other
exponent values. Legacy RSA implementations that use other values
for the exponent MAY be used within a composite, but need to be
careful when interoperating with other implementations.
SHA3-256 is used as the KDF for all Composite ML-KEM algorithms.
7.1. RSA-OAEP Parameters
Use of RSA-OAEP [RFC8017] requires additional parameters to be
specified.
The RSA component keys MUST be generated at the specified 2048-bit,
3072-bit, 4096-bit key sizes respectively (up to small differences
such as dropping leading zeros); intermediate sizes are not
acceptable.
As with the other Composite ML-KEM algorithms, AlgorithmIdentifier
parameters MUST be absent. The RSA-OAEP primitive SHALL be
instantiated with the following hard-coded parameters which are the
same for the 2048, 3072 and 4096 bit key sizes since the objective is
to carry and output a 256-bit shared secret key at all security
levels.
Ounsworth, et al. Expires 28 May 2026 [Page 33]
Internet-Draft Composite ML-KEM November 2025
+=============================+=================+
| RSAES-OAEP-params | Value |
+=============================+=================+
| hashAlgorithm | id-sha256 |
+-----------------------------+-----------------+
| MaskGenAlgorithm.algorithm | id-mgf1 |
+-----------------------------+-----------------+
| maskGenAlgorithm.parameters | id-sha256 |
+-----------------------------+-----------------+
| pSourceAlgorithm | pSpecifiedEmpty |
+-----------------------------+-----------------+
| ss_len | 256 bits |
+-----------------------------+-----------------+
Table 2: RSA-OAEP Parameters
Full specifications for the referenced algorithms can be found in
Appendix B.
Note: The mask length, according to [RFC8017], is k - hLen - 1, where
k is the size of the RSA modulus. Since the choice of hash function
and the RSA key size is fixed for each composite algorithm,
implementations could choose to pre-compute and hard-code the mask
length.
7.2. Rationale for choices
In generating the list of composite algorithms, the idea was to
provide composite algorithms at various security levels with varying
performance characteristics.
The main design consideration in choosing pairings is to prioritize
providing pairings of each ML-KEM security level with commonly-
deployed traditional algorithms. This supports the design goal of
using composites as a stepping stone to efficiently deploy post-
quantum on top of existing hardened and certified traditional
algorithm implementations. This was prioritized rather than
attempting to exactly match the security level of the post-quantum
and traditional components -- which in general is difficult to do
since there is no academic consensus on how to compare the "bits of
security" against classical attackers and "qubits of security"
against quantum attackers.
Ounsworth, et al. Expires 28 May 2026 [Page 34]
Internet-Draft Composite ML-KEM November 2025
While it may seem odd to use 256-bit outputs at all security levels,
this aligns with ML-KEM [FIPS.203] which produces a 256-bit shared
secret key at all security levels. SHA3-256 has 256 bits of (2nd)
pre-image resistance, which is the required property for a KDF to
provide 128 bits of security, as allowed in Table 3 of
[SP.800-57pt1r5].
8. ASN.1 Module
<CODE STARTS>
Composite-MLKEM-2025
{ iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) id-mod(0)
id-mod-composite-mlkem-2025(TBDMOD) }
DEFINITIONS IMPLICIT TAGS ::= BEGIN
EXPORTS ALL;
IMPORTS
PUBLIC-KEY, AlgorithmIdentifier{}, SMIME-CAPS
FROM AlgorithmInformation-2009 -- RFC 5912 [X509ASN1]
{ iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) id-mod(0)
id-mod-algorithmInformation-02(58) }
KEM-ALGORITHM
FROM KEMAlgorithmInformation-2023
{ iso(1) identified-organization(3) dod(6) internet(1)
security(5) mechanisms(5) pkix(7) id-mod(0)
id-mod-kemAlgorithmInformation-2023(109) }
;
--
-- Object Identifiers
--
--
-- Information Object Classes
--
pk-CompositeKEM {OBJECT IDENTIFIER:id}
PUBLIC-KEY ::= {
IDENTIFIER id
-- KEY no ASN.1 wrapping --
Ounsworth, et al. Expires 28 May 2026 [Page 35]
Internet-Draft Composite ML-KEM November 2025
PARAMS ARE absent
CERT-KEY-USAGE { keyEncipherment }
-- PRIVATE-KEY no ASN.1 wrapping --
}
kema-CompositeKEM {
OBJECT IDENTIFIER:id,
PUBLIC-KEY:publicKeyType }
KEM-ALGORITHM ::= {
IDENTIFIER id
-- VALUE no ASN.1 wrapping --
PARAMS ARE absent
PUBLIC-KEYS { publicKeyType }
SMIME-CAPS { IDENTIFIED BY id }
}
--
-- Composite KEM Algorithms
--
-- TODO: OID to be replaced by IANA
id-MLKEM768-RSA2048-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 86 }
pk-MLKEM768-RSA2048-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-RSA2048-SHA3-256 }
kema-MLKEM768-RSA2048-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-RSA2048-SHA3-256,
pk-MLKEM768-RSA2048-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM768-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 87 }
pk-MLKEM768-RSA3072-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-RSA3072-SHA3-256 }
Ounsworth, et al. Expires 28 May 2026 [Page 36]
Internet-Draft Composite ML-KEM November 2025
kema-MLKEM768-RSA3072-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-RSA3072-SHA3-256,
pk-MLKEM768-RSA3072-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM768-RSA4096-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 88 }
pk-MLKEM768-RSA4096-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-RSA4096-SHA3-256 }
kema-MLKEM768-RSA4096-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-RSA4096-SHA3-256,
pk-MLKEM768-RSA4096-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM768-X25519-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 89 }
pk-MLKEM768-X25519-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-X25519-SHA3-256 }
kema-MLKEM768-X25519-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-X25519-SHA3-256,
pk-MLKEM768-X25519-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM768-ECDH-P256-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 90 }
pk-MLKEM768-ECDH-P256-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-ECDH-P256-SHA3-256 }
kema-MLKEM768-ECDH-P256-SHA3-256 KEM-ALGORITHM ::=
Ounsworth, et al. Expires 28 May 2026 [Page 37]
Internet-Draft Composite ML-KEM November 2025
kema-CompositeKEM{
id-MLKEM768-ECDH-P256-SHA3-256,
pk-MLKEM768-ECDH-P256-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM768-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 91 }
pk-MLKEM768-ECDH-P384-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-ECDH-P384-SHA3-256 }
kema-MLKEM768-ECDH-P384-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-ECDH-P384-SHA3-256,
pk-MLKEM768-ECDH-P384-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 92 }
pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 }
kema-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256,
pk-MLKEM768-ECDH-brainpoolP256r1-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM1024-RSA3072-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 93 }
pk-MLKEM1024-RSA3072-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM1024-RSA3072-SHA3-256 }
kema-MLKEM1024-RSA3072-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
Ounsworth, et al. Expires 28 May 2026 [Page 38]
Internet-Draft Composite ML-KEM November 2025
id-MLKEM1024-RSA3072-SHA3-256,
pk-MLKEM1024-RSA3072-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM1024-ECDH-P384-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 94 }
pk-MLKEM1024-ECDH-P384-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM1024-ECDH-P384-SHA3-256 }
kema-MLKEM1024-ECDH-P384-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM1024-ECDH-P384-SHA3-256,
pk-MLKEM1024-ECDH-P384-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 95 }
pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM{
id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 }
kema-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256,
pk-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256 }
-- TODO: OID to be replaced by IANA
id-MLKEM1024-X448-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 96 }
pk-MLKEM1024-X448-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM1024-X448-SHA3-256 }
kema-MLKEM1024-X448 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM1024-X448-SHA3-256,
pk-MLKEM1024-X448-SHA3-256 }
Ounsworth, et al. Expires 28 May 2026 [Page 39]
Internet-Draft Composite ML-KEM November 2025
-- TODO: OID to be replaced by IANA
id-MLKEM1024-ECDH-P521-SHA3-256 OBJECT IDENTIFIER ::= {
joint-iso-itu-t(2) country(16) us(840) organization(1)
entrust(114027) algorithm(80) explicitcomposite(5) kem(2) 97 }
pk-MLKEM1024-ECDH-P521-SHA3-256 PUBLIC-KEY ::=
pk-CompositeKEM {
id-MLKEM1024-ECDH-P521-SHA3-256 }
kema-MLKEM1024-ECDH-P521-SHA3-256 KEM-ALGORITHM ::=
kema-CompositeKEM{
id-MLKEM1024-ECDH-P521-SHA3-256,
pk-MLKEM1024-ECDH-P521-SHA3-256 }
END
<CODE ENDS>
9. IANA Considerations
9.1. Object Identifier Allocations
EDNOTE to IANA: OIDs will need to be replaced in both the ASN.1
module and in Section 7.
9.1.1. Module Registration
The following is to be registered in "SMI Security for PKIX Module
Identifier":
* Decimal: IANA Assigned - *Replace TBDMOD*
* Description: Composite-KEM-2023 - id-mod-composite-kems
* References: This Document
9.1.2. Object Identifier Registrations
The following is to be registered in "SMI Security for PKIX
Algorithms":
* id-MLKEM768-RSA2048-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-RSA2048-SHA3-256
- References: This Document
Ounsworth, et al. Expires 28 May 2026 [Page 40]
Internet-Draft Composite ML-KEM November 2025
* id-MLKEM768-RSA3072-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-RSA3072-SHA3-256
- References: This Document
* id-MLKEM768-RSA4096-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-RSA4096-SHA3-256
- References: This Document
* id-MLKEM768-ECDH-P256-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-ECDH-P256-SHA3-256
- References: This Document
* id-MLKEM768-ECDH-P384-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-ECDH-P384-SHA3-256
- References: This Document
* id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256
- References: This Document
* id-MLKEM768-X25519-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM768-X25519-SHA3-256
- References: This Document
Ounsworth, et al. Expires 28 May 2026 [Page 41]
Internet-Draft Composite ML-KEM November 2025
* id-MLKEM1024-RSA3072-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM1024-RSA3072-SHA3-256
- References: This Document
* id-MLKEM1024-ECDH-P384-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM1024-ECDH-P384-SHA3-256
- References: This Document
* id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256
- References: This Document
* id-MLKEM1024-X448-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM1024-X448-SHA3-256
- References: This Document
* id-MLKEM1024-ECDH-P521-SHA3-256
- Decimal: IANA Assigned
- Description: id-MLKEM1024-ECDH-P521-SHA3-256
- References: This Document
10. Security Considerations
As this specification uses ML-KEM as a component of all composite
algorithms, all security considerations from
[I-D.ietf-lamps-kyber-certificates] and
[I-D.sfluhrer-cfrg-ml-kem-security-considerations] apply.
Ounsworth, et al. Expires 28 May 2026 [Page 42]
Internet-Draft Composite ML-KEM November 2025
10.1. Why Hybrids?
In broad terms, a PQ/T Hybrid can be used either to provide dual-
algorithm security or to provide migration flexibility. Let's
quickly explore both.
Dual-algorithm security. The general idea is that the data is
protected by two algorithms such that an attacker would need to break
both in order to compromise the data. As with most of cryptography,
this property is easy to state in general terms, but becomes more
complicated when expressed in formalisms. The following sections go
into more detail here.
Migration flexibility. Some PQ/T hybrids exist to provide a sort of
"OR" mode where the application can choose to use one algorithm or
the other or both. The intention is that the PQ/T hybrid mechanism
builds in backwards compatibility to allow legacy and upgraded
applications to co-exist and communicate. The composite algorithms
presented in this specification do not provide this since they
operate in a strict "AND" mode. They do, however, provide codebase
migration flexibility. Consider that an organization has today a
mature, validated, certified, hardened implementation of RSA or ECC;
composites allow them to add an ML-KEM implementation which
immediately starts providing benefits against harvest-now-decrypt-
later attacks even if that ML-KEM implementation is still an
experimental, non-validated, non-certified, non-hardened
implementation. More details of obtaining FIPS certification of a
composite algorithm can be found in Section 11.1.
10.2. KEM Combiner
The KEM combiner from Section 4.4 is reproduced here for reference.
SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label)
Figure 3: KEM combiner construction
The primary security property of the KEM combiner is that it
preserves indistinguishable (adaptive) chosen-ciphertext (IND-CCA2)
security of the overall Composite ML-KEM so long as at least one
component is IND-CCA2 [X-Wing] [GHP18]. Additionally, we also need
to consider the case where one of the component algorithms is
completely broken; that the private key is known to an attacker. In
this case, we rely on the construction of the KEM combiner to ensure
that the value of the other shared secret key cannot be leaked or the
combined shared secret key predicted via manipulation of the broken
algorithm.
Ounsworth, et al. Expires 28 May 2026 [Page 43]
Internet-Draft Composite ML-KEM November 2025
Each registered Composite ML-KEM algorithm specifies a Label -- see
Section 7. Given that each Composite ML-KEM algorithm fully
specifies the component algorithms, including for example the size of
the RSA modulus, all inputs to the KEM combiner are fixed-size and
thus do not require length-prefixing.
* mlkemSS is always 32 bytes.
* tradSS in the case of DH this is derived by the decapsulator and
therefore the length is not controlled by the attacker, however in
the case of RSA-OAEP this value is directly chosen by the sender
and both the length and content could be freely chosen by an
attacker.
* tradCT is either an elliptic curve public key or an RSA-OAEP
ciphertext which is required to have its length checked by step 1b
of RSAES-OAEP-DECRYPT in [RFC8017].
* tradPK is the public key of the traditional component (elliptic
curve or RSA) and therefore fixed-length.
* Label is a fixed value specified in this document.
10.2.1. IND-CCA2 Security of the hybrid scheme
Informally, a Composite ML-KEM algorithm is secure if the combiner
(SHA3) is secure, and either ML-KEM is secure or the traditional
component (RSA-OAEP, ECDH, X25519 or X448) is secure.
The security of ML-KEM and DH hybrids is covered in [X-Wing] and
requires that the first KEM component (ML-KEM in this construction)
is IND-CCA2 and second ciphertext preimage resistant (C2PRI) and that
the second traditional component is IND-CCA2. This design choice
improves performance by not including the large ML-KEM public key and
ciphertext, but means that an implementation error in the ML-KEM
component that affects the ciphertext check step of the FO transform
could result in the overall composite no longer achieving IND-CCA2
security. This solution remains IND-CCA2 due to binding the tradPK
and tradCT in the KEM combiner.
The QSF framework presented in [X-Wing] is extended to cover RSA-OAEP
as the traditional algorithm in place of DH by noting that RSA-OAEP
is also IND-CCA2 secure [RFC8017].
The composite combiner cannot be assumed to be secure when used with
different KEMs and a more cautious approach would bind the public key
and ciphertext of the first KEM as well.
Ounsworth, et al. Expires 28 May 2026 [Page 44]
Internet-Draft Composite ML-KEM November 2025
10.2.2. Second pre-image resistance of component KEMs
The notion of a "ciphertext second pre-image resistant KEM" is
defined in [X-Wing] as being the property that it is computationally
difficult to find two different ciphertexts c != c' that will
decapsulate to the same shared secret key under the same public key.
For the purposes of a hybrid KEM combiner, this property means that
given two composite ciphertexts (c1, c2) and (c1', c2'), we must
obtain a unique overall shared secret key so long as either c1 != c1'
or c2 != c2' -- i.e. the overall Composite ML-KEM is ciphertext
second pre-image resistant, and therefore secure so long as one of
the component KEMs is secure.
In [X-Wing] it is proven that ML-KEM is a second pre-image resistant
KEM and therefore the ML-KEM ciphertext can safely be omitted from
the KEM combiner. Note that this makes a fundamental assumption on
ML-KEM remaining ciphertext second pre-image resistant, and therefore
this formulation of KEM combiner does not fully protect against
implementation errors in the ML-KEM component -- particularly around
the ciphertext check step of the Fujisaki-Okamoto transform -- which
could trivially lead to second ciphertext pre-image attacks that
break the IND-CCA2 security of the ML-KEM component and of the
overall Composite ML-KEM. This could be more fully mitigated by
binding the ML-KEM ciphertext in the combiner, but a design decision
was made to settle for protection against algorithmic attacks and not
implementation attacks against ML-KEM in order to increase
performance.
However, since neither RSA-OAEP nor DH guarantee second pre-image
resistance at all, even in a correct implementation, these
ciphertexts are bound to the key derivation in order to guarantee
that c != c' will yield a unique ciphertext, and thus restoring
second pre-image resistance to the overall Composite ML-KEM.
10.2.3. Generifying this construction
It should be clear that the security analysis of the presented KEM
combiner construction relies heavily on the specific choices of
component algorithms and combiner KDF, and this combiner construction
SHOULD NOT by applied to any other combination of ciphers without
performing the appropriate security analysis.
Ounsworth, et al. Expires 28 May 2026 [Page 45]
Internet-Draft Composite ML-KEM November 2025
10.3. Key Reuse
While conformance with this specification requires that both
components of a composite key MUST be freshly generated, the
designers are aware that some implementers may be forced to break
this rule due to operational constraints. This section documents the
implications of doing so.
When using single-algorithm cryptography, the best practice is to
always generate fresh keying material for each purpose, for example
when renewing a certificate, or obtaining both a TLS and S/MIME
certificate for the same device. However, in practice key reuse in
such scenarios is not always catastrophic to security and therefore
often tolerated. However this reasoning does not hold in the PQ/T
hybrid setting.
Within the broader context of PQ/T hybrids, we need to consider new
attack surfaces that arise due to the hybrid constructions and did
not exist in single-algorithm contexts. One of these is key reuse
where the component keys within a hybrid are also used by themselves
within a single-algorithm context. For example, it might be tempting
for an operator to take already-deployed RSA keys and add an ML-KEM
key to them to form a hybrid. Within a hybrid signature context this
leads to a class of attacks referred to as "stripping attacks" where
one component signature can be extracted and presented as a single-
algorithm signature. Hybrid KEMs using a concatenation-style KEM
combiner, as is done in this specification, do not have the analogous
attack surface because even if an attacker is able to extract and
decrypt one of the component ciphertexts, this will yield a different
shared secret key than the overall shared secret key derived from the
composite, so any subsequent symmetric cryptographic operations will
fail.
In addition, there is a further implication to key reuse regarding
certificate revocation. Upon receiving a new certificate enrolment
request, many certification authorities will check if the requested
public key has been previously revoked due to key compromise. Often
a CA will perform this check by using the public key hash.
Therefore, if one, or even both, components of a composite have been
previously revoked, the CA may only check the hash of the combined
composite key and not find the revocations. Therefore, because the
possibility of key reuse exists even though forbidden in this
specification, CAs performing revocation checks on a composite key
SHOULD also check both component keys independently to verify that
the component keys have not been revoked.
Ounsworth, et al. Expires 28 May 2026 [Page 46]
Internet-Draft Composite ML-KEM November 2025
10.4. Policy for Deprecated and Acceptable Algorithms
Traditionally, a public key or certificate contains a single
cryptographic algorithm. If and when an algorithm becomes deprecated
(for example, RSA-512, or SHA1), the path to deprecating it through
policy and removing it from operational environments is, at least is
principle, straightforward.
In the composite model this is less obvious since a PQ/T hybrid is
expected to still be considered valid after the traditional component
is deprecated for individual use. As such, a single composite public
key or certificate may contain a mixture of deprecated and non-
deprecated algorithms. In general this should be manageable through
policy by removing OIDs for the standalone component algorithms while
still allowing OIDs for composite algorithms. However, complications
may arise when the composite implementation needs to invoke the
cryptographic module for a deprecated component algorithm. In
particular, this could lead to complex Cryptographic Bills of
Materials that show implementations of deprecated algorithms still
present and being used.
11. Implementation Considerations
11.1. FIPS Certification
The following sections give guidance to implementers wishing to FIPS-
certify a composite implementation.
This guidance is not authoritative and has not been endorsed by NIST.
Implementers seeking FIPS certification of a composite KEM algorithm
where only one of the component algorithms has been FIPS-validated or
FIPS-approved should credit the FIPS-validated component algorithm
with full security strength, the non-FIPS-validated component
algorithm with zero security, and the overall composite should be
considered at least as strong and thus FIPS-approved.
The composite algorithm has been designed to treat the underlying
primitives as "black-box implementations" and not impose any
additional requirements on them that could require an existing
implementation of an underlying primitive to run in a mode different
from the one under which it was certified. For example, the KeyGen
defined in Section 4.1 invokes ML-KEM.KeyGen(seed) which might not be
available in a cryptographic module running in FIPS-mode, but
Section 4.1 is only a suggested implementation and the composite
KeyGen MAY be implemented using a different available interface for
ML-KEM.KeyGen.
Ounsworth, et al. Expires 28 May 2026 [Page 47]
Internet-Draft Composite ML-KEM November 2025
The authors wish to note that composite algorithms provide a design
pattern to provide utility in future situations that require care to
remain FIPS-compliant, such as future cryptographic migrations as
well as bridging across jurisdictions with non-intersecting
cryptographic requirements.
The following sections go into further detail on specific issues that
relate to FIPS certification.
11.1.1. Combiner Function
For reference, the KEM combiner used in Composite ML-KEM is:
ss = SHA3-256(mlkemSS || tradSS || tradCT || tradPK || Label)
NIST SP 800-227 [SP800-227] allows hybrid key combiners of the
following form:
K <- KDM((S1,S2,...,St), OtherInput) (14)
Composite ML-KEM maps cleanly into this since it places the two
shared secret keys mlkemSS || tradSS at the beginning of the KDF
input such that all other inputs tradCT || tradPK || Label can be
considered part of OtherInput for the purposes of FIPS certification.
For the detailed steps of the Key Derivation Mechanism KDM,
[SP800-227] refers to [SP.800-56Cr2].
Compliance of the Composite ML-KEM variants is achieved in the
following way:
The Composite ML-KEM algorithms use SHA3, and so can be certified
under [SP.800-56Cr2] One-Step Key Derivation Option 1: H(x) =
hash(x).
[SP.800-56Cr2] section 4 "One-Step Key Derivation" requires a counter
which begins at the 4-byte value 0x00000001. However, the counter is
allowed to be omitted when the hash function is executed only once,
as specified on page 159 of the FIPS 140-3 Implementation Guidance
[FIPS-140-3-IG].
11.1.2. Order of KDF inputs with Non-Approved Algorithms
[SP800-227] adds an important stipulation that was not present in
earlier NIST specifications:
Ounsworth, et al. Expires 28 May 2026 [Page 48]
Internet-Draft Composite ML-KEM November 2025
This publication approves the use of the key combiner (14) for any
t > 1, so long as at least one shared secret (i.e., S_j for some
j) is a shared secret generated from the key- establishment
methods of SP 800-56A or SP 800-56B, or an approved KEM.
This means that although Composite ML-KEM always places the shared
secret key from ML-KEM in the first slot, a Composite ML-KEM can be
FIPS certified so long as either component is FIPS certified. This
is important for several reasons. First, in the early stages of PQC
migration, composites allow for a non-FIPS certified ML-KEM
implementation to be added to a module that already has a FIPS
certified traditional component, and the resulting composite can be
FIPS certified. Second, when eventually RSA and Elliptic Curve are
no longer FIPS-allowed, the composite can retain its FIPS certified
status on the strength of the ML-KEM component. Third, while this is
outside the scope of this specification, the general composite
construction could be used to create FIPS certified algorithms that
contain a component algorithm from a different jurisdiction. Third,
a composite where both components are FIPS-certified could allow an
implementer to patch one component algorithm while awaiting re-
certification while continuing to use the overall composite in FIPS
mode.
Note that before [SP800-227] was in force, [SP.800-56Cr2] required
the shared secret key from the certified algorithm to be in the first
slot and therefore a Composite ML-KEM implementation using a FIPS-
certified traditional component and a non-FIPS certified ML-KEM is
not believed to be certifiable under [SP.800-56Cr2] alone, and
requires the ammendments made by [SP800-227].
11.2. Backwards Compatibility
The term "backwards compatibility" is used here to mean that existing
systems as they are deployed today can interoperate with the upgraded
systems of the future. This draft explicitly does not provide
backwards compatibility, only upgraded systems will understand the
OIDs defined in this specification.
These migration and interoperability concerns need to be thought
about in the context of various types of protocols that make use of
X.509 and PKIX with relation to key establishment and content
encryption, from online negotiated protocols such as TLS 1.3
[RFC8446] and IKEv2 [RFC7296], to non-negotiated asynchronous
protocols such as S/MIME signed email [RFC8551], as well as myriad
other standardized and proprietary protocols and applications that
leverage CMS [RFC5652] encrypted structures.
Ounsworth, et al. Expires 28 May 2026 [Page 49]
Internet-Draft Composite ML-KEM November 2025
11.3. Profiling down the number of options
One daunting aspect of this specification is the number of composite
algorithm combinations. Each option has been specified because there
is a community that has a direct application for it; typically
because the traditional component is already deployed in a change-
managed environment, or because that specific traditional component
is required for regulatory reasons.
However, this large number of combinations leads either to fracturing
of the ecosystem into non-interoperable sub-groups when different
communities choose non-overlapping subsets to support, or on the
other hand it leads to spreading development resources too thin when
trying to support all options.
This specification does not list any particular composite algorithm
as mandatory-to-implement, however organizations that operate within
specific application domains are encouraged to define profiles that
select a small number of composites appropriate for that application
domain. For applications that do not have any regulatory
requirements or legacy implementations to consider, it is RECOMMENDED
to focus implementation effort on:
id-MLKEM768-X25519-SHA3-256 (aka "X-Wing")
id-MLKEM768-ECDH-P256-SHA3-256
In applications that only allow NIST PQC Level 5, it is RECOMMENDED
to focus implementation effort on:
id-MLKEM1024-ECDH-P384-SHA3-256
11.4. Decapsulation Requires the Public Key
ML-KEM always requires the public key in order to perform various
steps of the Fujisaki-Okamoto decapsulation [FIPS.203], and for this
reason the private key encoding specified in FIPS 203 includes the
public key.
Moreover, the KEM combiner as specified in Section 4.4 requires the
public key of the traditional component in order to achieve the
public-key binding property and ciphertext collision resistance as
described in Section 10.2. Since tradPK is not carried in the
composite private key encoding, the implementation is required to
obtain it from some out-of-band mechanism. This section discusses
several options, but is a non-normative, non-exhaustive list.
Ounsworth, et al. Expires 28 May 2026 [Page 50]
Internet-Draft Composite ML-KEM November 2025
1. Derive or extract from private key. Many cryptographic modules
expose functionality to obtain an RSA or EC public key from the
corresponding private key. For applications where such
functionality does not exist, Section 11.4.1 and Section 11.4.2
provide the suggested mechanisms for extracting the public keys
from private keys for RSA and ECDH respectively. It is assumed
that this is not required for X25519 or X448 since those private
keys are seeds from which the public key can be obtained.
2. Fetch it from an external data source, for example from the
public-key certificate corresponding to this private key.
3. If the composite KEM private key is being carried within a PKCS#8
OneAsymmetricKey object, place the full composite public key
within the optional OneAsymmetricKey.publicKey field, which
allows extracting the tradPK (and re-encode as necessary for
correctly using it in the KEM Combiner).
4. Use an alternate private key encoding that explicitly carries the
tradPK.
11.4.1. Extracting RSAPublicKey from RSAPrivateKey
Assuming that the RSA component of the composite private key is
encoded as an RSAPrivateKey, as required by this specification, then,
quoting from [RFC8017] you have:
RSAPrivateKey ::= SEQUENCE {
version Version,
modulus INTEGER, -- n
publicExponent INTEGER, -- e
privateExponent INTEGER, -- d
prime1 INTEGER, -- p
prime2 INTEGER, -- q
exponent1 INTEGER, -- d mod (p-1)
exponent2 INTEGER, -- d mod (q-1)
coefficient INTEGER, -- (inverse of q) mod p
otherPrimeInfos OtherPrimeInfos OPTIONAL
}
This can trivially be converted into an RSAPublicKey through simple
DER decoding / re-encoding since both required values are already
present.
RSAPublicKey ::= SEQUENCE {
modulus INTEGER, -- n
publicExponent INTEGER -- e
}
Ounsworth, et al. Expires 28 May 2026 [Page 51]
Internet-Draft Composite ML-KEM November 2025
11.4.2. Deriving the public ECPoint from ECPrivateKey
Unlike RSA, the ECPrivateKey does not contain sufficient information
to simply extract the public key. Note that in the interest of
having a single unique encoding to foster interoperability, this
specification forbids the optional publicKey field.
That said, the EC public key can be derived from the private key in
the following way:
g = generator for the group P256r1, P384r1, etc.
s = ECPrivateKey.getS()
pubKey = ec_multiply_by_scalar(g, s)
where a recommended implementation of ec_multiply_by_scalar() can be
found in [SEC1].
Then encode pubKey as X9.62 uncompressed point.
12. References
12.1. Normative References
[FIPS.202] National Institute of Standards and Technology (NIST),
"SHA-3 Standard: Permutation-Based Hash and Extendable-
Output Functions", August 2015,
<https://nvlpubs.nist.gov/nistpubs/FIPS/
NIST.FIPS.202.pdf>.
[FIPS.203] National Institute of Standards and Technology (NIST),
"Module-Lattice-based Key-Encapsulation Mechanism
Standard", August 2024,
<https://nvlpubs.nist.gov/nistpubs/FIPS/
NIST.FIPS.203.pdf>.
[FIPS.204] National Institute of Standards and Technology (NIST),
"Module-Lattice-Based Digital Signature Standard", August
2024, <https://nvlpubs.nist.gov/nistpubs/FIPS/
NIST.FIPS.204.pdf>.
[RFC2104] Krawczyk, H., Bellare, M., and R. Canetti, "HMAC: Keyed-
Hashing for Message Authentication", RFC 2104,
DOI 10.17487/RFC2104, February 1997,
<https://www.rfc-editor.org/info/rfc2104>.
Ounsworth, et al. Expires 28 May 2026 [Page 52]
Internet-Draft Composite ML-KEM November 2025
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119,
DOI 10.17487/RFC2119, March 1997,
<https://www.rfc-editor.org/info/rfc2119>.
[RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S.,
Housley, R., and W. Polk, "Internet X.509 Public Key
Infrastructure Certificate and Certificate Revocation List
(CRL) Profile", RFC 5280, DOI 10.17487/RFC5280, May 2008,
<https://www.rfc-editor.org/info/rfc5280>.
[RFC5480] Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk,
"Elliptic Curve Cryptography Subject Public Key
Information", RFC 5480, DOI 10.17487/RFC5480, March 2009,
<https://www.rfc-editor.org/info/rfc5480>.
[RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", STD 70,
RFC 5652, DOI 10.17487/RFC5652, September 2009,
<https://www.rfc-editor.org/info/rfc5652>.
[RFC5869] Krawczyk, H. and P. Eronen, "HMAC-based Extract-and-Expand
Key Derivation Function (HKDF)", RFC 5869,
DOI 10.17487/RFC5869, May 2010,
<https://www.rfc-editor.org/info/rfc5869>.
[RFC5915] Turner, S. and D. Brown, "Elliptic Curve Private Key
Structure", RFC 5915, DOI 10.17487/RFC5915, June 2010,
<https://www.rfc-editor.org/info/rfc5915>.
[RFC5958] Turner, S., "Asymmetric Key Packages", RFC 5958,
DOI 10.17487/RFC5958, August 2010,
<https://www.rfc-editor.org/info/rfc5958>.
[RFC7748] Langley, A., Hamburg, M., and S. Turner, "Elliptic Curves
for Security", RFC 7748, DOI 10.17487/RFC7748, January
2016, <https://www.rfc-editor.org/info/rfc7748>.
[RFC8017] Moriarty, K., Ed., Kaliski, B., Jonsson, J., and A. Rusch,
"PKCS #1: RSA Cryptography Specifications Version 2.2",
RFC 8017, DOI 10.17487/RFC8017, November 2016,
<https://www.rfc-editor.org/info/rfc8017>.
[RFC8174] Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC
2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174,
May 2017, <https://www.rfc-editor.org/info/rfc8174>.
Ounsworth, et al. Expires 28 May 2026 [Page 53]
Internet-Draft Composite ML-KEM November 2025
[RFC8410] Josefsson, S. and J. Schaad, "Algorithm Identifiers for
Ed25519, Ed448, X25519, and X448 for Use in the Internet
X.509 Public Key Infrastructure", RFC 8410,
DOI 10.17487/RFC8410, August 2018,
<https://www.rfc-editor.org/info/rfc8410>.
[RFC8411] Schaad, J. and R. Andrews, "IANA Registration for the
Cryptographic Algorithm Object Identifier Range",
RFC 8411, DOI 10.17487/RFC8411, August 2018,
<https://www.rfc-editor.org/info/rfc8411>.
[RFC9629] Housley, R., Gray, J., and T. Okubo, "Using Key
Encapsulation Mechanism (KEM) Algorithms in the
Cryptographic Message Syntax (CMS)", RFC 9629,
DOI 10.17487/RFC9629, August 2024,
<https://www.rfc-editor.org/info/rfc9629>.
[SEC1] Certicom Research, "SEC 1: Elliptic Curve Cryptography",
May 2009, <https://www.secg.org/sec1-v2.pdf>.
[SEC2] Certicom Research, "SEC 2: Recommended Elliptic Curve
Domain Parameters", January 2010,
<https://www.secg.org/sec2-v2.pdf>.
[SP.800-185]
National Institute of Standards and Technology (NIST),
"SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and
ParallelHash", December 2016,
<https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
NIST.SP.800-185.pdf>.
[SP.800-56Ar3]
National Institute of Standards and Technology (NIST),
"Recommendation for Pair-Wise Key-Establishment Schemes
Using Discrete Logarithm Cryptography", April 2018,
<https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
NIST.SP.800-56Ar3.pdf>.
[SP.800-56Cr2]
National Institute of Standards and Technology (NIST),
"Recommendation for Key-Derivation Methods in Key-
Establishment Schemes", August 2020,
<https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
NIST.SP.800-56Cr2.pdf>.
[SP.800-57pt1r5]
National Institute of Standards and Technology (NIST),
"Recommendation for Key Management: Part 1 – General", May
Ounsworth, et al. Expires 28 May 2026 [Page 54]
Internet-Draft Composite ML-KEM November 2025
2020,
<https://nvlpubs.nist.gov/nistpubs/SpecialPublications/
NIST.SP.800-57pt1r5.pdf>.
[X.690] ITU-T, "Information technology - ASN.1 encoding Rules:
Specification of Basic Encoding Rules (BER), Canonical
Encoding Rules (CER) and Distinguished Encoding Rules
(DER)", ISO/IEC 8825-1:2015, November 2015.
[X9.62_2005]
"Public Key Cryptography for the Financial Services
Industry, The Elliptic Curve Digital Signature Algorithm
(ECDSA)", November 2005.
12.2. Informative References
[ANSSI2024]
French Cybersecurity Agency (ANSSI), Federal Office for
Information Security (BSI), Netherlands National
Communications Security Agency (NLNCSA), and Swedish
National Communications Security Authority, Swedish Armed
Forces, "Position Paper on Quantum Key Distribution",
n.d., <https://cyber.gouv.fr/sites/default/files/document/
Quantum_Key_Distribution_Position_Paper.pdf>.
[Aviram22] Aviram, N., Dowling, B., Komargodski, I., Paterson, K. G.,
Ronen, E., and E. Yogev, "Practical (Post-Quantum) Key
Combiners from One-Wayness and Applications to TLS", n.d.,
<https://eprint.iacr.org/2022/065>.
[Bindel2017]
Bindel, N., Herath, U., McKague, M., and D. Stebila,
"Transitioning to a quantum-resistant public key
infrastructure", 2017, <https://link.springer.com/
chapter/10.1007/978-3-319-59879-6_22>.
[BSI2021] Federal Office for Information Security (BSI), "Quantum-
safe cryptography - fundamentals, current developments and
recommendations", October 2021,
<https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/
Publications/Brochure/quantum-safe-cryptography.pdf>.
[ETSI.TS.103.744]
ETSI, "ETSI TS 103 744 V1.2.1 CYBER-QSC; Quantum-safe
Hybrid Key Establishment", March 2025,
<https://www.etsi.org/deliver/
etsi_ts/103700_103799/103744/01.02.01_60/
ts_103744v010201p.pdf>.
Ounsworth, et al. Expires 28 May 2026 [Page 55]
Internet-Draft Composite ML-KEM November 2025
[FIPS-140-3-IG]
National Institute of Standards and Technology (NIST),
"Implementation Guidance for FIPS 140-3 and the
Cryptographic Module Validation Program", July 2024,
<https://csrc.nist.gov/csrc/media/Projects/cryptographic-
module-validation-program/documents/fips%20140-3/
FIPS%20140-3%20IG.pdf>.
[GHP18] Giacon, F., Heuer, F., and B. Poettering, "KEM Combiners",
2018, <https://eprint.iacr.org/2018/024>.
[I-D.ietf-lamps-kyber-certificates]
Turner, S., Kampanakis, P., Massimo, J., and B.
Westerbaan, "Internet X.509 Public Key Infrastructure -
Algorithm Identifiers for the Module-Lattice-Based Key-
Encapsulation Mechanism (ML-KEM)", Work in Progress,
Internet-Draft, draft-ietf-lamps-kyber-certificates-10, 16
April 2025, <https://datatracker.ietf.org/doc/html/draft-
ietf-lamps-kyber-certificates-10>.
[I-D.ietf-pquip-pqt-hybrid-terminology]
D, F., P, M., and B. Hale, "Terminology for Post-Quantum
Traditional Hybrid Schemes", Work in Progress, Internet-
Draft, draft-ietf-pquip-pqt-hybrid-terminology-06, 10
January 2025, <https://datatracker.ietf.org/doc/html/
draft-ietf-pquip-pqt-hybrid-terminology-06>.
[I-D.sfluhrer-cfrg-ml-kem-security-considerations]
Fluhrer, S., Dang, Q., Mattsson, J. P., Milner, K., and D.
Shiu, "ML-KEM Security Considerations", Work in Progress,
Internet-Draft, draft-sfluhrer-cfrg-ml-kem-security-
considerations-03, 15 May 2025,
<https://datatracker.ietf.org/doc/html/draft-sfluhrer-
cfrg-ml-kem-security-considerations-03>.
[RFC2986] Nystrom, M. and B. Kaliski, "PKCS #10: Certification
Request Syntax Specification Version 1.7", RFC 2986,
DOI 10.17487/RFC2986, November 2000,
<https://www.rfc-editor.org/info/rfc2986>.
[RFC4210] Adams, C., Farrell, S., Kause, T., and T. Mononen,
"Internet X.509 Public Key Infrastructure Certificate
Management Protocol (CMP)", RFC 4210,
DOI 10.17487/RFC4210, September 2005,
<https://www.rfc-editor.org/info/rfc4210>.
Ounsworth, et al. Expires 28 May 2026 [Page 56]
Internet-Draft Composite ML-KEM November 2025
[RFC4211] Schaad, J., "Internet X.509 Public Key Infrastructure
Certificate Request Message Format (CRMF)", RFC 4211,
DOI 10.17487/RFC4211, September 2005,
<https://www.rfc-editor.org/info/rfc4211>.
[RFC5639] Lochter, M. and J. Merkle, "Elliptic Curve Cryptography
(ECC) Brainpool Standard Curves and Curve Generation",
RFC 5639, DOI 10.17487/RFC5639, March 2010,
<https://www.rfc-editor.org/info/rfc5639>.
[RFC5914] Housley, R., Ashmore, S., and C. Wallace, "Trust Anchor
Format", RFC 5914, DOI 10.17487/RFC5914, June 2010,
<https://www.rfc-editor.org/info/rfc5914>.
[RFC5990] Randall, J., Kaliski, B., Brainard, J., and S. Turner,
"Use of the RSA-KEM Key Transport Algorithm in the
Cryptographic Message Syntax (CMS)", RFC 5990,
DOI 10.17487/RFC5990, September 2010,
<https://www.rfc-editor.org/info/rfc5990>.
[RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic
Curve Cryptography Algorithms", RFC 6090,
DOI 10.17487/RFC6090, February 2011,
<https://www.rfc-editor.org/info/rfc6090>.
[RFC7292] Moriarty, K., Ed., Nystrom, M., Parkinson, S., Rusch, A.,
and M. Scott, "PKCS #12: Personal Information Exchange
Syntax v1.1", RFC 7292, DOI 10.17487/RFC7292, July 2014,
<https://www.rfc-editor.org/info/rfc7292>.
[RFC7296] Kaufman, C., Hoffman, P., Nir, Y., Eronen, P., and T.
Kivinen, "Internet Key Exchange Protocol Version 2
(IKEv2)", STD 79, RFC 7296, DOI 10.17487/RFC7296, October
2014, <https://www.rfc-editor.org/info/rfc7296>.
[RFC8446] Rescorla, E., "The Transport Layer Security (TLS) Protocol
Version 1.3", RFC 8446, DOI 10.17487/RFC8446, August 2018,
<https://www.rfc-editor.org/info/rfc8446>.
[RFC8551] Schaad, J., Ramsdell, B., and S. Turner, "Secure/
Multipurpose Internet Mail Extensions (S/MIME) Version 4.0
Message Specification", RFC 8551, DOI 10.17487/RFC8551,
April 2019, <https://www.rfc-editor.org/info/rfc8551>.
[RFC9180] Barnes, R., Bhargavan, K., Lipp, B., and C. Wood, "Hybrid
Public Key Encryption", RFC 9180, DOI 10.17487/RFC9180,
February 2022, <https://www.rfc-editor.org/info/rfc9180>.
Ounsworth, et al. Expires 28 May 2026 [Page 57]
Internet-Draft Composite ML-KEM November 2025
[SP800-131Ar2]
Barker, E., Roginksy, A., and National Institute of
Standards and Technology (NIST), "Transitioning the Use of
Cryptographic Algorithms and Key Lengths", n.d.,
<https://nvlpubs.nist.gov/nistpubs/specialpublications/
nist.sp.800-131ar2.pdf>.
[SP800-227]
Alagic, G., Barker, E., Chen, L., Moody, D., Robinson, A.,
Silberg, H., Waller, N., and National Institute of
Standards and Technology (NIST), "Recommendations for Key-
Encapsulation Mechanisms", September 2025,
<https://csrc.nist.gov/pubs/sp/800/227/final>.
[X-Wing] Barbosa, M., Connolly, D., Duarte, J., Kaiser, A.,
Schwabe, P., Varner, K., and B. Westerbaan, "X-Wing The
Hybrid KEM You’ve Been Looking For", 9 January 2024,
<https://eprint.iacr.org/2024/039.pdf>.
Appendix A. Maximum Key and Ciphertext Sizes
The sizes listed below are maximum values: several factors could
cause fluctuations in the size of the traditional component. For
example, this could be due to:
* The RSA public key (n, e) allows e to vary in size between 3 and n
- 1 [RFC8017]. Note that the size table below assumes the
recommended value of e = 65537, so for RSA combinations it is in
fact not a true maximum.
* When the underlying RSA or EC value is itself DER-encoded, integer
values could occasionally be shorter than expected due to leading
zeros being dropped from the encoding.
By contrast, ML-KEM values are always fixed size, so composite values
can always be correctly de-serialized based on the size of the ML-KEM
component.
Size values marked with an asterisk (*) in the table are not fixed
but maximum possible values for the composite key or ciphertext.
Implementations MUST NOT perform strict length checking based on such
values.
Non-hybrid ML-KEM is included for reference.
Ounsworth, et al. Expires 28 May 2026 [Page 58]
Internet-Draft Composite ML-KEM November 2025
+============================+========+=========+============+====+
| Algorithm | Public | Private | Ciphertext | SS |
| | key | key | | |
+============================+========+=========+============+====+
| id-alg-ml-kem-768 | 1184 | 64 | 1088 | 32 |
+----------------------------+--------+---------+------------+----+
| id-alg-ml-kem-1024 | 1568 | 64 | 1568 | 32 |
+----------------------------+--------+---------+------------+----+
| id- | 1454* | 1258* | 1344 | 32 |
| MLKEM768-RSA2048-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id- | 1582* | 1834* | 1472 | 32 |
| MLKEM768-RSA3072-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id- | 1710* | 2415* | 1600 | 32 |
| MLKEM768-RSA4096-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id- | 1216 | 96 | 1120 | 32 |
| MLKEM768-X25519-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id-MLKEM768-ECDH- | 1249 | 115 | 1153 | 32 |
| P256-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id-MLKEM768-ECDH- | 1281 | 128 | 1185 | 32 |
| P384-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id-MLKEM768-ECDH- | 1249 | 116 | 1153 | 32 |
| brainpoolP256r1-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id- | 1966* | 1834* | 1952 | 32 |
| MLKEM1024-RSA3072-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id-MLKEM1024-ECDH- | 1665 | 128 | 1665 | 32 |
| P384-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id-MLKEM1024-ECDH- | 1665 | 132 | 1665 | 32 |
| brainpoolP384r1-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
| id-MLKEM1024-X448-SHA3-256 | 1624 | 120 | 1624 | 32 |
+----------------------------+--------+---------+------------+----+
| id-MLKEM1024-ECDH- | 1701 | 146 | 1701 | 32 |
| P521-SHA3-256 | | | | |
+----------------------------+--------+---------+------------+----+
Table 3: Maximum size values of composite ML-KEM
Ounsworth, et al. Expires 28 May 2026 [Page 59]
Internet-Draft Composite ML-KEM November 2025
Appendix B. Component Algorithm Reference
This section provides references to the full specification of the
algorithms used in the composite constructions.
+================+========================+===================+
| Component KEM | OID | Specification |
| Algorithm ID | | |
+================+========================+===================+
| id-ML-KEM-768 | 2.16.840.1.101.3.4.4.2 | [FIPS.203] |
+----------------+------------------------+-------------------+
| id-ML-KEM-1024 | 2.16.840.1.101.3.4.4.3 | [FIPS.203] |
+----------------+------------------------+-------------------+
| id-X25519 | 1.3.101.110 | [RFC7748], |
| | | [RFC8410] |
+----------------+------------------------+-------------------+
| id-X448 | 1.3.101.111 | [RFC7748], |
| | | [RFC8410] |
+----------------+------------------------+-------------------+
| id-ecDH | 1.3.132.1.12 | [RFC5480], |
| | | [RFC5915], [SEC1] |
+----------------+------------------------+-------------------+
| id-RSAES-OAEP | 1.2.840.113549.1.1.7 | [RFC8017] |
+----------------+------------------------+-------------------+
Table 4: Component Encryption Algorithms used in Composite
Constructions
+==================+=======================+===================+
| Elliptic CurveID | OID | Specification |
+==================+=======================+===================+
| secp256r1 | 1.2.840.10045.3.1.7 | [RFC6090], [SEC2] |
+------------------+-----------------------+-------------------+
| secp384r1 | 1.3.132.0.34 | [RFC6090], [SEC2] |
+------------------+-----------------------+-------------------+
| secp521r1 | 1.3.132.0.35 | [RFC6090], [SEC2] |
+------------------+-----------------------+-------------------+
| brainpoolP256r1 | 1.3.36.3.3.2.8.1.1.7 | [RFC5639] |
+------------------+-----------------------+-------------------+
| brainpoolP384r1 | 1.3.36.3.3.2.8.1.1.11 | [RFC5639] |
+------------------+-----------------------+-------------------+
Table 5: Elliptic Curves used in Composite Constructions
Ounsworth, et al. Expires 28 May 2026 [Page 60]
Internet-Draft Composite ML-KEM November 2025
+=============+========================+===============+
| HashID | OID | Specification |
+=============+========================+===============+
| id-sha3-256 | 2.16.840.1.101.3.4.2.8 | [FIPS.202] |
+-------------+------------------------+---------------+
Table 6: Hash algorithms used in Composite Constructions
Appendix C. Fixed Component Algorithm Identifiers
Many cryptographic libraries are X.509-focused and do not expose
interfaces to instantiate a public key from raw bytes, but only from
a SubjectPublicKeyInfo structure as you would find in an X.509
certificate, therefore implementing Composite ML-KEM in those
libraries requires reconstructing the SPKI for each component
algorithm. In order to aid implementers and reduce interoperability
issues, this section lists out the full public key for each component
algorithm.
*ML-KEM-768*
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-alg-ml-kem-768 -- (2.16.840.1.101.3.4.4.2)
}
DER:
30 0B 06 07 60 86 48 01 65 03 04 04 02
*ML-KEM-1024*
ASN.1:
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-alg-ml-kem-1024 -- (2.16.840.1.101.3.4.4.3)
}
DER:
30 0B 06 07 60 86 48 01 65 03 04 04 03
*RSA-OAEP - all sizes*
Ounsworth, et al. Expires 28 May 2026 [Page 61]
Internet-Draft Composite ML-KEM November 2025
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-RSAES-OAEP, -- (1.2.840.113549.1.1.7)
parameters RSAES-OAEP-params {
hashFunc [0] id-sha256, -- (2.16.840.1.101.3.4.2.1)
maskGenFunc [1] mgf1SHA256Identifier,
pSourceFunc [2] pSpecifiedEmpty }
}
where
mgf1SHA256Identifier AlgorithmIdentifier ::= {
algorithm id-mgf1, -- (1.2.840.113549.1.1.8)
parameters sha256Identifier }
sha256Identifier AlgorithmIdentifier ::= { id-sha256, NULL }
DER:
30 4D 06 09 2A 86 48 86 F7 0D 01 01 07 30 40 A0 0F 30 0D 06 09 60 86
48 01 65 03 04 02 01 05 00 A1 1C 30 1A 06 09 2A 86 48 86 F7 0D 01 01
08 30 0D 06 09 60 86 48 01 65 03 04 02 01 05 00 A2 0F 30 0D 06 09 2A
86 48 86 F7 0D 01 01 09 04 00
*ECDH NIST-P-256*
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-ecPublicKey -- (1.2.840.10045.2.1)
parameters ANY ::= {
AlgorithmIdentifier ::= {
algorithm secp256r1 -- (1.2.840.10045.3.1.7)
}
}
}
DER:
30 13 06 07 2A 86 48 CE 3D 02 01 06 08 2A 86 48 CE 3D 03 01 07
*ECDH NIST-P-384*
Ounsworth, et al. Expires 28 May 2026 [Page 62]
Internet-Draft Composite ML-KEM November 2025
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-ecPublicKey -- (1.2.840.10045.2.1)
parameters ANY ::= {
AlgorithmIdentifier ::= {
algorithm secp384r1 -- (1.3.132.0.34)
}
}
}
DER:
30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 22
*ECDH NIST-P-521*
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-ecPublicKey -- (1.2.840.10045.2.1)
parameters ANY ::= {
AlgorithmIdentifier ::= {
algorithm secp521r1 -- (1.3.132.0.35)
}
}
}
DER:
30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B 81 04 00 23
*ECDH Brainpool-256*
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-ecPublicKey -- (1.2.840.10045.2.1)
parameters ANY ::= {
AlgorithmIdentifier ::= {
algorithm brainpoolP256r1 -- (1.3.36.3.3.2.8.1.1.7)
}
}
}
DER:
30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 07
*ECDH Brainpool-384*
Ounsworth, et al. Expires 28 May 2026 [Page 63]
Internet-Draft Composite ML-KEM November 2025
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-ecPublicKey -- (1.2.840.10045.2.1)
parameters ANY ::= {
AlgorithmIdentifier ::= {
algorithm brainpoolP384r1 -- (1.3.36.3.3.2.8.1.1.11)
}
}
}
DER:
30 14 06 07 2A 86 48 CE 3D 02 01 06 09 2B 24 03 03 02 08 01 01 0B
*X25519*
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-X25519 -- (1.3.101.110)
}
DER:
30 05 06 03 2B 65 6E
*X448*
ASN.1:
algorithm AlgorithmIdentifier ::= {
algorithm id-X448 -- (1.3.101.111)
}
DER:
30 05 06 03 2B 65 6F
Appendix D. Comparison with other Hybrid KEMs
D.1. X-Wing
This specification borrows extensively from the analysis and KEM
combiner construction presented in [X-Wing]. In particular, X-Wing
and id-MLKEM768-X25519-SHA3-256 are largely interchangeable. The one
difference is that X-Wing uses a combined KeyGen function to generate
the two component private keys from the same seed, which gives some
additional binding properties. In order to allow for re-use of
existing hardeneded certified cryptographic modules (for example,
getting the RSA component from an existing smartcard), this
specification keeps the key generation for both components separate
and only loosely-specified so that implementers are free to use an
existing certified hardware or software module for one or both
Ounsworth, et al. Expires 28 May 2026 [Page 64]
Internet-Draft Composite ML-KEM November 2025
components.
D.2. ETSI CatKDF
[ETSI.TS.103.744] section 8.2.3 defines CatKDF as:
1) Form secret = psk || k1 || k2.
2) Set context = f(info, MA, MB), where f is a context formatting
function.
3) key_material = KDF(secret, label, context, length).
4) Return key_material.
MA shall contain all of the public keys.
MB shall contain all of the corresponding public keys and ciphertexts.
The main difference between the Composite ML-KEM combiner and the
ETSI CatKDF combiner is that CatKDF makes the more conservative
choice to bind the public keys and ciphertexts of both components,
while Composite ML-KEM follows the analysis presented in [X-Wing]
that while preserving the security properties of the traditional
component requires binding the public key and ciphertext of the
traditional component, it is not necessary to do so for ML-KEM thanks
to the rejection sampling step of the Fujisaki-Okamoto transform.
Additionally, ETSI CatKDF can be instantiated with either HMAC
[RFC2104], KMAC [SP.800-185] or HKDF [RFC5869] as KDF. Since this
specification uses SHA3-256 as the KDF for all variants, there is no
equivalent construction of CatKDF.
Appendix E. Examples of KEM Combiner Intermediate Values
This section provides examples of constructing the input for the KEM
Combiner, showing all intermediate values. This is intended to be
useful for debugging purposes. See Section 4.4 for additional
information.
Each input component is shown. Note that values are shown hex-
encoded for display purposes only, they are actually raw binary
values.
* mlkemSS is the shared secret produced by the ML-KEM encapsulate or
decapsulate function which is always 32 bytes.
* tradSS is the shared secret produce by the traditional algorithm.
* tradCT is either an elliptic curve public key or an RSA-OAEP
ciphertext depending on the algorithm chosen.
Ounsworth, et al. Expires 28 May 2026 [Page 65]
Internet-Draft Composite ML-KEM November 2025
* tradPK is the public key of the traditional component (elliptic
curve or RSA) and therefore fixed-length.
* Label is the specific KEM Combiner Label for this composite
algorithm. See Section 7
Next, the Combined KDF Input is given, which is simply the
concatenation of the above values.
Finally, the KDF Function and the ss Output are shown as outputs.
The ss is the Composite ML-KEM shared-secret generated by applying
the KDF to the Combined KDF Input.
Examples are given for each recommended Composite ML-KEM algorithm
from Section 11.3.
Example 1:
Ounsworth, et al. Expires 28 May 2026 [Page 66]
Internet-Draft Composite ML-KEM November 2025
Example of id-MLKEM768-ECDH-P256-SHA3-256 Combiner function output.
# Inputs
mlkemSS:
7a87233aa6cfacb3f28776785ee1c3ae0175d502ec6a6ef5f12ae426e1b163ef
tradSS:
ac00870310b72b5a1820e787ff9d553b05275bf70f3ffa9b8bb821fc9964bb89
tradCT: 04d2d4e8a247899f779b6233efabe17d328a0fb3772e5e37eae3405dec
1909e31984c3ec4cfd462d76d84d178ea104a38122b4f5942ba4a95a62e78c68938
8158d
tradPK: 04f080fa8049e82f6a247555cdf04b927d65d9502673ce87c299344aba
bb87de837a22f3704f471bffc04d66807ffccbbf3fde99e12afe3c5a41e05f80f92
36aa9
Label: 4d4c4b454d3736382d50323536
(ascii: "MLKEM768-P256")
# Combined KDF Input:
# mlkemSS || tradSS || tradCT || tradPK || Label
Combined KDF Input: 7a87233aa6cfacb3f28776785ee1c3ae0175d502ec6a6ef
5f12ae426e1b163efac00870310b72b5a1820e787ff9d553b05275bf70f3ffa9b8b
b821fc9964bb8904d2d4e8a247899f779b6233efabe17d328a0fb3772e5e37eae34
05dec1909e31984c3ec4cfd462d76d84d178ea104a38122b4f5942ba4a95a62e78c
689388158d04f080fa8049e82f6a247555cdf04b927d65d9502673ce87c299344ab
abb87de837a22f3704f471bffc04d66807ffccbbf3fde99e12afe3c5a41e05f80f9
236aa94d4c4b454d3736382d50323536
# Outputs
# ss = SHA3-256(Combined KDF Input)
ss:
e8a3638eff395201ae3577199e0655c636974e3d9b8746e8ae4511e84f7158d8
Example 2:
Ounsworth, et al. Expires 28 May 2026 [Page 67]
Internet-Draft Composite ML-KEM November 2025
Example of id-MLKEM768-X25519-SHA3-256 Combiner function output.
# Inputs
mlkemSS:
3553c8859d5013fa95acdaf2e3098f48c513eec4877316d8b118e20848ffe686
tradSS:
8cea86ce190015374dc62e392f62873e879f4b91b4e14833bbc90a3861ec8015
tradCT:
df1cd647a0794c5aff520844148660491922d6b8172e7f93faf722632171b70d
tradPK:
8d21e8c462970d8b8600480f8587277393f113a4e2297286bde54b65aa334311
Label: 5c2e2f2f5e5c
(ascii: "\.//^\")
# Combined KDF Input:
# mlkemSS || tradSS || tradCT || tradPK || Label
Combined KDF Input: 3553c8859d5013fa95acdaf2e3098f48c513eec4877316d
8b118e20848ffe6868cea86ce190015374dc62e392f62873e879f4b91b4e14833bb
c90a3861ec8015df1cd647a0794c5aff520844148660491922d6b8172e7f93faf72
2632171b70d8d21e8c462970d8b8600480f8587277393f113a4e2297286bde54b65
aa3343115c2e2f2f5e5c
# Outputs
# ss = SHA3-256(Combined KDF Input)
ss:
491538ed1a0a9bf9bd5622a25e1f8139209f2336dab28a22b61b43523cf7fecc
Example 3:
Ounsworth, et al. Expires 28 May 2026 [Page 68]
Internet-Draft Composite ML-KEM November 2025
Example of id-MLKEM1024-ECDH-P384-SHA3-256 Combiner function output.
# Inputs
mlkemSS:
4ffb4e09862a6b2de28a94f1c45c0ff156427f7889c8cafdd5ccd05c18e061aa
tradSS: 78d093eca7248340a89dd0109f6f460f0cd7d4d0337b3121695870ee1d
0afdee312e47708c4fa2f7798ef8fbd02ea0da
tradCT: 04b8bec46bf81ac8bd1eabf8d6e9dff02439a1e44e0e65a6df7a73f0b2
13b331abd51422fb0d732f3717f5d7955c267a08648998f793fac2112e7abd8a8bf
c5fe3323acaba0272e4e2e95b5ec8508e93998a26338df5249cb09fd7b421cecd26
0b
tradPK: 04945e7f006691a33aeddd4b9f1a63cf2b322269225a4e20fbf5fd7448
038c7aa27a9ed02998486dc3cb281a8d461db63ad3e7eed8e3960333a60f6e6b295
a36bc109be18e3bbf9eb7495b6a2badedc81f7b554edb5c940d14f3ee903788c7de
c4
Label: 4d4c4b454d313032342d50333834
(ascii: "MLKEM1024-P384")
# Combined KDF Input:
# mlkemSS || tradSS || tradCT || tradPK || Label
Combined KDF Input: 4ffb4e09862a6b2de28a94f1c45c0ff156427f7889c8caf
dd5ccd05c18e061aa78d093eca7248340a89dd0109f6f460f0cd7d4d0337b312169
5870ee1d0afdee312e47708c4fa2f7798ef8fbd02ea0da04b8bec46bf81ac8bd1ea
bf8d6e9dff02439a1e44e0e65a6df7a73f0b213b331abd51422fb0d732f3717f5d7
955c267a08648998f793fac2112e7abd8a8bfc5fe3323acaba0272e4e2e95b5ec85
08e93998a26338df5249cb09fd7b421cecd260b04945e7f006691a33aeddd4b9f1a
63cf2b322269225a4e20fbf5fd7448038c7aa27a9ed02998486dc3cb281a8d461db
63ad3e7eed8e3960333a60f6e6b295a36bc109be18e3bbf9eb7495b6a2badedc81f
7b554edb5c940d14f3ee903788c7dec44d4c4b454d313032342d50333834
# Outputs
# ss = SHA3-256(Combined KDF Input)
ss:
9704485a39219ae696eb9978d24d7641bb2743b1412844808e81cc00afc174ca
Appendix F. Test Vectors
The following test vectors are provided in a format similar to the
NIST ACVP Known-Answer-Tests (KATs).
Ounsworth, et al. Expires 28 May 2026 [Page 69]
Internet-Draft Composite ML-KEM November 2025
The structure is that a global cacert is provided which is used to
sign each KEM certificate.
Within each test case there are the following values:
* tcId the name of the algorithm.
* ek the encapsulation public key.
* x5c the X.509 certificate of the encapsulation key, signed by the
cacert.
* dk the raw decapsulation private key.
* dk_pkcs8 the decapsulation private key in a PKCS#8 object.
* c the ciphertext.
* k the derived shared secret key.
Implementers should be able to perform the following tests using the
test vectors below:
1. Load the public key ek or certificate x5c and perform an
encapsulation for it (you should obtain valid ct and k values,
but they will not match the ones in the test vector since Encap()
is randomized.)
2. Load the decapsulation private key dk or dk_pkcs8 and the
ciphertext c and perform a Decaps() operation to ensure that the
same shared secret key k is derived.
Test vectors are provided for each underlying ML-KEM algorithm in
isolation for the purposes of debugging.
Due to the length of the test vectors, some readers will prefer to
retrieve the non-word-wrapped copy from GitHub. The reference
implementation written in python that generated them is also
available.
https://github.com/lamps-wg/draft-composite-kem/tree/main/src
{
"cacert": "MIIVpzCCCKSgAwIBAgIUELslaxaD7w1XIkGXIz3lWDj6thEwCwYJYIZIA
WUDBAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb
21wb3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDEwOVoXDTM1MTEwNzEwMDEwOVowP
TENMAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxHDAaBgNVBAMME0NvbXBvc2l0Z
SBNTC1LRU0gQ0EwggeyMAsGCWCGSAFlAwQDEgOCB6EA7IgeAYwmSE4u/PLcttUc3WtsL
Ounsworth, et al. Expires 28 May 2026 [Page 70]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 71]
Internet-Draft Composite ML-KEM November 2025
r/K+VZvguaf1GgiI/PHmK08OJyQD1pMAdtncBC06yHMUCjrSu+3EaiYObMYprTHW+be6
8MHi5jla1ae6B0aJGtLVOq8Ex0sHm9YH/Q+uOVHZHSYCJslEwZkKydOpTRpdCHLXjZJE
dz8PHnjsPFxKyDroKhnoSFSfiOcbOvu+ItERORKJQ/DTXAaJRFOFSqSN1FTagEsUxqIi
3bgFBgJPKeakRGsw2zGFa7gIDbQwpG7ImuSElkG9t0fxrkMTxYEL/fJ0GfOGT276s+MR
HJIAIDljrneAzRaTdwzbem7/G53BWJBbYAk6ZkXhJ2PZd9v66W7tb2hEHDAWeZ49fJ+i
aeGLbBrjgB2QWr6cVEl12FW546M+4Azfzyp8C/ne9C4XQ6jOhrCO8P8vGbNsnpoiut8k
87u/pFyvIUjL8vQPJgqgPPcZ64D9KIkvdz/tx77O4OyE4NcoQmxNC+PUIfIIGTfkCb4H
PItZ1y56DvOeX/2EjVGNiaaQaw1T5uQbhVoHhg1e5pq7VJMEXDhSVZSb7Tx4gL93u8HK
9lvOnBzicFORGQWVKowhFuybKrzyHn1h1EiMa3wy+0JzZCr5dUtcq6Ad1JP0s84oZVis
1mKcp9kGgbzKIaZTWr+LBGvR7Ar1lGZbx9U8+zgvj1M1FpqvCVmO91C1Sd+L8k4ex0eP
yE93oWWv250hlkUCr6CwiPw1t1ONXKdomkfRpTOxlMlJ5xUK1sRwHiEiXCwHAzAonkkg
xBWWIk5Xo6OjoNxDxK/6ManZq14frc3TF39LnKjqU2NUsQVWzA5E16xfyFEfPQhw5pgn
T7FQ8jckT5sF18PsCVNZBpBS0kUN7GnCSi1NPsTCcWyOaDZAkycELbTXflbLswlTf5QI
i0x6sLx29f633qlkqGQg42P4DGikV653QnxKL8YxAfgDB0kCklBoH+h1wNJGA2lRpgfn
9sg4bGC19w6foURMJGTYi4Hrn+MmRrPoZe+2ueFcS04kpJiKj9dtEIfdmRioFUAQCM5E
/vgnfszgvm+/6WlmzMq7VFbznNXKEO/KITLwZIExxzFDj3Z6LlV0rNmuc6FE6p74zyzd
uUEv88MA5Ppk97t2oPCOSfMgoqWw5uROqq2S9CvWz30TfKmfj0yCH7wR69MZLAWo3b5g
K/oCFJc9yzQno7t/MFL7Xy7aABNO2WcvsmHSWG4GrkwrWFkWLk4G9Qzi4a4VO+Nq5KRr
laH88T6XZ1pvc+077w9pcisCmH14M4aFRSScUqT8apszyfCsGmuQkFGWVJPs7iNQ1UT3
7fp+NGCrH1773wBO+M43XvsenVJoaebDlbGCbCiQO0EFFpKy+oNuuKgGD30kxIDXNc3P
o6R1qgHtWal1LmnG1H92vw5SMXwsqs4XLKcauz/OKs3EpGSuRVCprVZ1lHPsQwaU+nCN
JM1e0CzwXjHbdIxu9A6+kVg+bLVD/fXv9rmacF1LHe3Z56wJ7KqXS3bgqQL7rqrAKqbd
9Zo1DDzImqmbr0vDelLQvnB1pP9qQu9DJ1w33j4elwHLtksjFL9s8F1gqQv1EVLHKNtX
Jt8VOJem83RAp5NUp8bN6G6tRDex6xa0AtM64YC0XbTqdGcG3+GH7fpgPM5R+Fd6peLO
wFmFiErT+yD8Gy/lOQtmnpYkfptYBRytwGfZgH04mc/0VgUZ33sl1TvqhLaB0sjwyM1n
Cw0wia5MiD/jL6DzpE6D8cY2flE85UEFJ2d66ryIq5vkJZ/aA/4vr6nAsTtfBaLnPPiM
neqNaRDGGpOfIAdnekHEAxNOYPDssVTe7UZD6L8+MELbWJyog0NufW08eQ85mpSxaRcB
uYsTQOB37dvqXxHdCKmEHyEVBAegLIg28a+046+bNocVHqLGz7D+WzJ1fy0Yd11mT7UZ
qSTNwDz1K4q0smuBk7ISn8nFtARSifntucEZzAWlIvETluyW+Ysw3BBfEflQOb6A807B
3GYj1JGwsfEMFmSPK5v/RlaE9bDOILfiNRs9CQdl2R7W3TcDQKUpJ3fDMihV/Hi4abRw
12H4DIBofT8FY5RpwkkRD7Rsvlep5YMBJHOrSUKaQCZ5zH9I2VQLSkgiroxzBtKD01uv
6ovPbI0/28uXoXd8bVyExqdOUk5Gt+/c74x1mJgu/EBkFYNFNMUuCw459EIeWxJLEdg0
JhhX+HvA901T0zDqZK/DW94DAHiFBlm4sxKJN8wEbbiG3iGPUy5CEV7dB/eLxS5ttNfi
UX1OmUzI2jd1+9MFME6xMUD/Bwsi/1wKQiCfxet8mIEdYYDPu6bXEMTO4+pG7ZQqX4Me
BFeLyWphLyRAqHkY9C8zpPA0e3mGdSDiH3X44MDz0QUK66T8iP1hZJIbBjCo+5MDp53K
bJseb9bMOtOR/SwQ11hfE1nDiQJBdUuh6+Mv7Ao8+niDxBI6nTDp++OxII0viXDCAFbW
9WOxlYd1l0NDoVKz3I1hQH43SPGJX9Qmwdi2Urv23RVdGwL1dgFAL3scI4jEkIER14q0
3uB3NIyXQ8YvYvLWuuPfhTUp0Ybi5Cw8yuhiNrVKWi7JSxC9fjur3+1LWO/JeCHpUOCw
+Dvwmqs9rdr8/d95KRGmyM0IOhu7b3XTIIX60JmikQeNonrWjV2CT7Ln4b+nAgFVYJ6O
den/cSbISIQbVdohUI16aKPIDEDXO2hwgtsQUPlNMO7y9DnLDkYzsRbKxkSjbGOtZmkh
d57uJwkh3Xj6jaYmxFk+STgJlsrc3YdusTCokBYT+zdOxUimc6SwUKorRXhfVHCC5PoO
QQGxWVPoyYEe0Ggw9v9qlsKltwYFISr1iIP0CFhQLfKu0rTTfReSOtWriPfRFM8tH26L
hxjC8lXMc8cMjGcvm2HScc0ynRmjiLJmzlQyJ0pIaZNY5lcBZvPc48rd/A+fEhKZC02c
jXDMiuserRjAs+DM9WoG9EcX6cpHMnvBO91y6/PX1TSvGOZowksQEQxF1imrL16CNmiS
d2OnrqpUMjKVGvGdituDBTzCilCLZaJ2OJogswnw94syUJcjjVvlXKSD6JifESvGOj66
C0rwWbsWYiVhQy5cOH+Gv2OhDT0ECa1yY/qal+tj1WPGbfoeQo3C8fSCxJr+1bawdKCF
p4pKsmRj7t1c7OyoyBlBtiqNE5YkjCgwLYPe7v0/ROO+HHB8AfQcPJejfw6VLGxrMc2q
DQKQPjx1UtPnqL4NffJfCQ2OReJxaqQBh6T1qr+90oZZ+4b/hsqXDgXP1cLABHWJFKlB
Ounsworth, et al. Expires 28 May 2026 [Page 72]
Internet-Draft Composite ML-KEM November 2025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",
"tests": [
{
"tcId": "id-alg-ml-kem-768",
"ek": "a+uG8RhLCuiAX1Nj6gkJYiCYeMVMaOg2pEypFxigUZUiKJCO+KkTTBKRJBLNF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",
"x5c": "MIISkTCCBY6gAwIBAgIUUaOcelwDq0c0aqL9/tV4yjb01H8wCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 73]
Internet-Draft Composite ML-KEM November 2025
IqrmviU4bcDoftWyLtnRVhqZKhajN5fqkEcnImNzV0MZVCQEObuxJVESQ8acVumkBmRS
IaLlwbH7wqraYvXXF5EVHlk7EtZEHnOcbAk1WhzBDYs0i9rXtLU5R6HLYhoooRyjYBL5
SU1Vz6gWYngUXRxLEGsKxFKYTfDZF/uyelPwByWsUhSAQbenpJ3DEMCmATUqeTLqVudA
KDd4QwYLdP/oN/WMx/PozQZqxcTrNSjjVNV6fccVI5VGUO3xWPiyzAtSznZ8LV+8vJkl
ZKsXZHeEgxigZCyqhX8Lc43GibDCQ0D4rilMpXBLKoeytInGuIJUczp3fF5HmjhSxZTJ
cTxhuCJHXIEmn4MQjS+pjEsnhEVszrdrCrmbtBDBOzyENGnGlSccvx6TbHWCyrRARQYx
xHmjB+DbCPvAJkGsLUY1N1qrcIqZrN71ZIZcRjaGokymrREEibQcedCTYpbhYN0Jw9sj
YWq2gyAlHvoHWmz2ByhRG0j2ris8RYn1NaYBTA/Vfgl5QEIaC7smWR+ayeObqmyChQGF
XIMKLQjMD/owRX8DO9/AzXIQALY8Y75BIJlGeddaeLlFbZ13vXS2e0XCtRKlFFc4XFes
MxVic68cUQirUPIDfG0ALYSSYR9DWoxic0rnMbAUJSv3Ie1cGkw0Lha3iLWnySIGauMp
A4DARQjyaxK7dM6WsnbcE43BHMpCpKjJPAenNJwiPN/hqJYpoOxgN3osLl9XRwW0VWDh
yGq3mhmiB/81LLVqmeyEnlhxgLHFBz4aVSVLZMj8pDljJqPbdmBjXgWmRkUppxOBGNcM
n8/MK/T7rFIAxSObwEL0uy3BMjrhMo2clmTYKAQ8L09pE210PAw6vnlppwBUiCtCGbEB
wV8gc91XaBSYgMz0NTZbnlxhdA+wdxKsoJHFY3T5yBT4SQARc1sjDsvMZ7vKpHpKqDX7
ofHJNXKmWsjr5gTr6RJE6Z8UaNJ0DJOyihTa/R1QC9F/MJCgVDu+oxIwEDAOBgNVHQ8B
Af8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gBOKGIBviaADAgAE5Y4JdgCKIpSeDIC8ud4
zq2rdOjX14uLgOaO1OMpOtM/03Q9x00L3G/WMVgZ8Luu51wtqf/EJZ4etFVIAKLSei1a
yR7zsiNcJDeYx7PqjZVDC8RbCWfQlwkKmQajbSRr9DnWsr/5wIFNPwXPMASH3q51rRj/
v/NCUyDSdbkNkGPtXGDzgy7hPtQoLV8rLXCkn2pnQhyeHhZGLy7uvja0+iYSdOEQ8x1j
lwn8sYUIBkxLi3EMPQ0UEgto1pTG4Q+EpAZOC+VLH7hXQs1zbqe1AnFcBe4plAq6anXT
Fu+pUy3vs+Qwrjrq+16k6ctXmz9+ZyXVqSNHVgIs/aIlI92gzMX0L+A3ZBB82dVypCVL
A0YzUCUL78urN0pEzV2fEQmxLwaDNmKNKDWrY7geiyoccFrusQr8yuVjDDdBbRuO+OoR
aK4Bwt44/uPCBjhiC4VNjZ0noYqFiLxONn1ocYGXzYndKD81TV5DIsEerZEYfgQpoWeh
NlaVVFHJTmHQQEMW/Lm0NWWnFZn2NujiNX++Kvc6wkW9/E0o+XfcfMOzYMiXSBiSzYjB
A7hsdfVfhX2+7ejarKiIutAQqfoxYqP0kuh/S9XvTk1tMCIz/1wu4VkGcH99vKSECXrk
ecP4jqwzymBZhd8TC3iJLoBNQqOOmjZe+gfqHkJd4Wkj8iqEp8Eae0uX/ZgssymIrpaT
uM4rJX7egJUi9ZuouymxEtky8DxLbyFGbnU0Jl3tra0GQpDXg90RH2mT2Ad7sGHL2PKL
f2NKTbcb+oHnXM3rLiCDkiQfovr3R/5lMePIw4zAc6xwSOKTGaYjLdsn8g+0IwK8CZ8o
ih6D0jaDVY1TJOdeKIEiXefFi6srif7ILfhnnjjBl8A7SKVbZNUrKLpv7HS/n6SvjXP3
wSN9Qm8IxaXUQAVOYcAodQsXmL9R7wy7VwxayV64aW4QlLjcUagbKrwlCz7ag3+rnRLo
G2mwjomRUNrORtpqvEsq2NvTIxiq3K9w5jS5mD19AFhRTyHgTTer3dOw3sYutogY1D4x
qlRdrUerY0YB2fUX3C3pvlmfFlj6GAhEJCt4G40Amy5unmdI6kn5TGzIIbjFt8AmZlKC
xJ8vFmTXJ/oFmf3pZp1NqlEP7ad1y27Yg9ibJuCqIVcp8toP18IAJvZUswOZHw6bugB9
Yfyjr/Fm6z7TfwATHQ6RZ6w6ynmdgFv0Y950JfyQGn3jjxaFIYe4UtJK0lcDpUfhu5HY
kB+Bm0X13s/8cGLAEWfUP1bn3pOBJbr8xmk+mDrIh9wbcW6GqFxM36L+fDUtHN1vzebm
JedQGVYtcXYmPZPwZh2nK1a6AAuopvYo/qxBSh8O9S/efkgRyLBrdlQdG0DJ3MB2VpqC
Aq+NBC2oCGVkpWk3eozoU4GEsr+/SSffHNJNXtjCqWBPmtg04Sdjqudj9mf7GRJCdSA6
g0vhhTdqL0as5cmRBjRcebRN0nKwldWU8zi11WOHJrzYfxwkxh424Aui7TYDP+EBM7/B
2h447X+2lWiOfwJvM/DL4EKlmNMq3EH2/GA6pH/Vv1hAjggUB6AuQxpR4fa8UAt+zfv2
n8FL9R8K06KkZWXtM2OrdV0nmr2ru8awso3aQhlo+2HZoN/PuBzeePIZzz+zAUTrRTDR
iX4HIR5kuhuGVsiGv6q4eclIcsxn5qOMBllB4ZeN9aQ08NlWvuKjjq4JUcNsU9ie+hQN
0gqukqOW9Q9VKWNahSKGFA5+TqgXP9L98oXJ5IghtdmpM9/6ZUliaJ7G3WuAm2xYZf0X
mQ/H3o3QJ+BK8FegY0OYDvbu0UL5/qkaGXwoH79eDjspb0K59I8SAO5W9nudR/lnkypw
MTM/jpuVp6e4yMh9bLFGDZD0O44uBdwvXqeZrhHU6tHX92aQooGQGuJiZ2qd7t04nFzM
tlvOzUbJ958uD7F0wREHNz0IPjAt0gPxySB5Ta49jAMIAmot4kGrt9sLoZVlffChzzVD
By5kbeJl18PZa6Fd/Ah7Aaui+ZIc/2MF82l4tdnljLqoNI8E28Qu21K6ksADUOWK/fgs
OJfDLvWgUZyRr3l9weqd278OAuHESMhp0t8+YXQNwKTz5f0XFy5A0AujyIdiiwoJKpKj
jI9tdU/3+ooWc80SxEI8cokZ2v/tr264NUCmQDufjWwYh1bAmxbmQYdHkZPEfU466nKq
Ounsworth, et al. Expires 28 May 2026 [Page 74]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "emJPPMfM+sQV3Ok4i/UbQuQm4xz5aQonXtspo0YsgXqHlMhJO/GvBERUixhPe
1vA/zah0SGiTsaWzNZWbKmeVg==",
"dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQCBEKAQHpiTzzHzPrEFdzpOIv1G0LkJuM
c+WkKJ17bKaNGLIF6h5TISTvxrwREVIsYT3tbwP82odEhok7GlszWVmypnlY=",
"c": "loCPgBo0GpAj0Ux2fwd5faBhwEKe1XOtWuf1wcRUYh4WSZ3aSBgHYgqMuiklYA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, et al. Expires 28 May 2026 [Page 75]
Internet-Draft Composite ML-KEM November 2025
ZY6ErP4qH9riRCQDM32RXNHYKXTveJAHt1lLZE3U5tbr8idI8lEAS2otXeQXhcVIw6NW
rVdmwdYRm9sXCAI5vpV2Twpb0U14as8x04bpFS28A9BVOlcq4pOfqhd0g9KQsespBfM7
dhKEGnoraUngmDCPflP9lfThhoIrAYotL/ypQUn4o7LVFnaS00vreRP6hnuDWlW6AHPF
EmvHIP2VWah81eskAGnfhsbCzxIE8MXOjSFHNh4ccdmB37igklrd3xToTdy9mmO074vw
mawNEc8T9NYSSTXTAkAnEZ+FOvxRkEPenswi26GKUjNrQ7T1+WGXGW3JBJey0V5/Bv6F
M3e++M7VDnV8QZDsx8wWSFkb4yt63OWK74osZoRFlvaGYLSm+Fq2crJyu9msvtGn+Kt/
SCWyd5HszyBJ9T/9foTxcUSg8vXpq/5ndgXCyY6eW5bCqGNL1szLo1Qu9s/2cjdpWyj6
Jm5EEfoe4lKZiMfRMv1c7QHuqW0tKtKA7h66XHkS9iq8HRV9lhdUEWEb6Y4s+ljS92xX
0UJMOAStUTgTqVWQKY5skV99gXANU9fEwHw+lBSYHhI1Hwsdms1HCqlFhRn7wEe98qyU
1uwEyttArqjQgIVME/9VTV0L//DO5qJmnlH2OgCb/9/86iKOkUPCLLGX+v6zFkD9iiq0
IUkt6BdLYC9jgRdJhRmRmt0rZiqBU=",
"k": "YhR+8UVm6sAquJ7aKh4cqCc2tG0fBuJy7XqgKP+4RIg="
},
{
"tcId": "id-alg-ml-kem-1024",
"ek": "n1ag32ErMaUKZagCZ2U0OgJv0fQvq/M3VwpDA9YoDvXFedUYyMmirsRgqanGN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",
"x5c": "MIIUEjCCBw+gAwIBAgIUM9G3KeNfrGP+UovXgpLnMowWMFMwCwYJYIZIAWUD
BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w
Ounsworth, et al. Expires 28 May 2026 [Page 76]
Internet-Draft Composite ML-KEM November 2025
b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMFoXDTM1MTEwNzEwMDExMFowPDEN
MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxGzAZBgNVBAMMEmlkLWFsZy1tbC1r
ZW0tMTAyNDCCBjIwCwYJYIZIAWUDBAQDA4IGIQCfVqDfYSsxpQplqAJnZTQ6Am/R9C+r
8zdXCkMD1igO9cV51RjIyaKuxGCpqcY3iypMS1/6cGSG9hwOLAZPDIfT2CL/dUAo0FKP
qoO+NlsX7MNXoK98970VEy3fMXKQQrZ7Nr2dB8dSNDTR4kshECfaYr4FzIaR08VeUT0/
drzb+y+CZR/tGgxgmCyfhSWNxorNAqiT7EiktcVc9LR3IjyY6qOLfGsJmYhGCtBKOSiC
gRLpJAULy838umaghG+3sHsvdUg5mi9nM4DIZ410YEW+l2BxNicm1GLKGBxIeptLAm/p
mkYMqgmU4pqoBLIbNio2t32kRldUYxG/VmNmqjxrMsZfxGOX0XsF0GGAfHRn047YLEWh
FauNYbNuGjueS4TXus00k152UFs+cn0pmUIX8lubmcNFUV/x6HVl9qWNiLtLxjkusRRg
olpI6GI3Y6sYK1GArHMgHIuVxlDGFWgTl8FkPFlZMHK4plnLOq4zQ86JxD2VBM39VUhN
piJPGJFcJ2T5tGWvpbqCWFB8U5MKJaAUDIYxOircC2TYDLP5Mk2FO1LaLI6Jy3SyQot2
I0/xQaVlyDdNs73Z7Edau2oh43NTIKZR11PWByL3Ew972yGxsJkE0g4n/MSpDLWi6a+Z
ZJYBiL3F5Fza+U34N6YCTKT7RixYmEvGtBBiqgVJenDNInr6p1O1YkaQGrJq1ns+qYXZ
nJSrCADf6LkNZA/R6LDGUHbIhTaaqLBrcIsfwImbEaZi1F3woIoBaGfUMmM/k6mopm9f
GSolzDtkRybbxCWyEwBEgc6G4AvPRXr6mqX02wSRYgnbRIC5U3GliX4lkjCeHCd2sjb2
shPmEEE1aHP0OCGqdp/IGG3ERGPchb+RQZt0XAauKHKd6gx6i48cA8pMQXRZ7IlpgLWg
0G5XtVDVdi0KMkAKAgcT+l8GU15B1C+r9L4O8woKQwwi0KEjlJl6eXDXisfnjA7/TJyv
8C9VqUSlIBUNSjG0SChZO0OyJBhH1qvo23gmU7h/OahbobvO8CpDBABc1Hm7KZWmE6WK
NnXooJHdmspi1EpijHuFapyFF3bOV5qviFj77Dmr23sp9oVvIyF7q8BdlL+tMM5/Z8M+
OpsPfHgCK849I1zuorx2CGimTH1n1WDB1SCEQs9Foiz2t6s9sQ83yXoGNlBOaqwxO1lO
PAS2kj9Qi8MKzCFIlQWEV7SGVsEXKFzLpIpb+wC7yykmOM7vl55RGcZssJNsiHq5OZSr
JD/6p8RguZbBVwRnJYCVVGXcVbl71CjYNJPw2BeC2mO4kSgGXFu9BK++6W7Jabaiti0u
kmmzzHUfdYEflExa4AoXpzFYVz9EKIJjh0+L13SyO0RLoDR3FlIT4WfPhxV41ofOaRbP
RaLao07d9E37wXc3yJQFtjwkWAPNBLRD9GLJiZ5BeEfueEBzVWBP6nq0IXZ/0zVvSo//
lAz0Ck4ogC5Ptk82YJYQeSRB542NRWJFNRt4iWBQKTccCKmT5Yn4SY80kFL88xJz1iZf
7CJGnIW6ZV2h4AFAnDF7cmagZE3Qu4+glSWfRpy0AGY4+6F+1E+zVJMmlVh2kBPnYzU5
bD6wwc7wVx+GuDF/s8n168RfoVTI10lSBR/am7Ca9okSB5zrCMAwZsU0C5At5cvFCMB0
CBgH87dzZp39lbGWIVU8wx8Fel5dnAiZJE2mQ3vdgnxICVVGC1iZvKOzYRAMKbX/E3iQ
MzO1BoFJGTKFCgd25667BNCBobM0AydY05cRgRe9Rq+OFThsYHzUKizVNkaCBk+htA8V
mqd2Q8V+2BH81BR36YoO5RMnCMw9S7yYGQt3Zxx8CK1354bphBVFNMbmfCClSTk1YiSF
VV4a6rm4OH28cLHQpguvzI5MtKeGaSAr1JCJO1VKyZm7q8SPCoSewK4e1Ma9m0bV2g5p
uxIgdQWMhwLM5h+yG6F5FAadcK9+LK9U0DgfpioIxWvVaheZJ3Cp9lkVWLXkSwgHArOF
QjlcGG4XVXAL0aV61mB1WGYxRlHTdDd75EPxVBxdmJyyZUN5lX2u1Nr6HEJlQjIPAV1+
f70JwgRwzymBv3iynBOflaMSMBAwDgYDVR0PAQH/BAQDAgUgMAsGCWCGSAFlAwQDEgOC
DO4ArQ1ogCSntQNMMe9sbUjQ+saJc+nNSg0VSUHx+IjeXtKn/7aGTgCVFq3XPmwmO4J+
oBCpez7njuoI/7La2+I7n4K7gnSXzJabf0xsHhZ3yYiOVxy4lSW//MRy/0loPpYW/MHz
JG8CrGp9wGlB5oWdufXX+4em0HqnkIRfBpdcubls/9KydBfOEWLsdzfY2y0tJMJnnYnu
+FX+q2lHo17wsUSmXLEtTrgqooh1kpMKhdxOeWiKVvlRQnwUFBdq15cFuLGdZNJ/Te0K
KB2karfTUfMXLRRFPFGjKoF5qhHtilyLR2+55YW/T/OWG/S9sB2EgFFFmA5yzWEZlZk/
XMb50ySRF1HMEc0iqtk1uv5vrpXXHvRSNJweiNS7abhG8GoCRHRtaur3lJ8TGcwz3EF6
iIdbZx2oCfPRGjAYvR9shGzvU70bGtOaY4mTX9ASASERcdMb00AJYmpEMxUTz07n9jAh
nCU9Bpl+mAkjpxbZEvghBzuY2P6JKF/xxqxdoYh1g0p4u+dBI3SeQ+qj+phHahx5y5Ga
0G4QkedLUi2DUhrrQEkOXvr4ZZ+LwvcMzwIRsiy0ljTSgtDJfDguqBk1hMzm162mm+oB
GCmhRqucGEh0bllBrmE4rjoUgX8DcS5YlXO+lipDVPOa7gkcHb6THmXI7hQEGyvFpYiC
0wzOIBLmAnZIQYre/b7KU4HsMslR4VSc7CkQr+AnHEenP3VuuLE7fZZkOzo5oTWc2/v7
PfM9lUR1v6HPwMwnX6icr9DRkGSNanQM/lLnjTpkdH0S0f9fd31uHU3do3rZq4aj3cOu
MMdCB8Uz9/0g72N7rB4EVUFQTdQEbswWhvSlVZwe7AEu3P5Pn7cB2UAWnIFC4meSKlUV
F0Q0BBEkzlVQBWn1cmj9sR7Yk/QwA3FOCve8Qmy3zwOzSH/GvuSdDexI9ZF9Q/+qiwkb
Ounsworth, et al. Expires 28 May 2026 [Page 77]
Internet-Draft Composite ML-KEM November 2025
RiZSiwh6TEY718MYB2lR94wQjcm/wzrK3/9PU6Enui+EHoZsiJbUTdFyobhOmDZUr2Dz
HrKzuWJTAyKHuNMH9PjaKjDV5Vy/nrkWPioFybt/q9SVpkFHd7wkAgg1J6rEDFEovUSB
L9HcJXpvQN0akzo6YlyVJ7wVJfKvWySQPlIR/wjD+1tyujHl3a3y5NL23ekImG31u/Gf
LlDTUD2ABnl1Z/1Di2RiN84Qg6sIBIFjbLPSs8ZQO2++0wA9PTbccS3hV0t3RwmE0dTA
Rc8PakkQyjuDwKJO0N4hAet7vuvWyT3RoSTBTRZ60lgH4i5GiZgVQ1frDBdNLsrLmtys
HxfrX1N0uMC7rlsDaNwg4lhnKazQJdyxAO83H+ytf8aFtQcZl46bMUvsDJPbPFJ7FdfL
QrMpqqkXoeXE7+SFdGO3x2zJX5ikCW/VTJ/pjbeRB9+1miNQEMjuiKSXFkTm1wvoamAa
TpJvLGbFvF81hsyYycnd0mJbAXa3gx98GfFhFr/+sComNL/IvSApHilAQuHZulaGl5pr
kC8v+jWiZHdoKuSAXTa2PLBao8XlKul1cA/8j0KUofy/Mn1Upr+6nS/l72y5JHEfXjf3
G0wTocczX7ZUplgnC44wGtSDAz7KFtTTIFO+qFBoGy2ghSPTSTPPOFW41a44sP3C5PeT
Po1BhRNG59p6ulbUcQlcdoabnsWLP8OLml9XMGwHC0Wi6B0XdfqB5cd0IVP6M48t/nI4
vYiO5FGV/qLdhHOz4XRqjiWADe25QLCflZJGxghnHSltnMjG+tB9PL9btu8Rd6DGi0mR
XcaFiiUE6K5chIxDTLekK51VvfrAXmV2Cqn8NAyp+mL/nPkICZAs3M/42uydpBU75X74
f88RXVayfEVad6CiJM4cs0hSrRk1K7y7nDb5BpxsT9TSZzgwy2xpIaOxyXlqqTAXunyM
lDX/jrVPVU/2YVu8KUMv0DdvcggaC7FQXZ8la3hbmxnJmo330W8fv5X/bY3nLKQNRKhl
KZ2yAQMEAuDDHBgpvC7e2A4ylbH2eaXr0R+Rh/PmQ63upvthl160f9vCAD8PfHvCviPy
ZsOiuVeHB214d1Rpvmy0QISMhykgGIGX3wLHfaw1y1B/ftUONfjme3EyKlsRvxWymPmj
tl4g6s1d1eS4jZZDyv0ObuatLVLF2eGn47w1DC0IW0hUJuzzbIKuFLmKpkjbJP9Uij+g
JZbI0hZVoDRmdBQBd4NW4wfOw6JmThDMbgqBgsqUxf9/eC9OP3NVuyls5LnjLcVRuAlp
DEBfR48FM+vVXpsRoGMOym5YWy8nD3v6K+Ua4u9kC29JjH3nX+/fjMa01v5zFMqStbDC
sHbVOZNTvLcH7inusY185Jfwa2qzuY0NM1h8uNRzO6iVZQb3azsXmvIRZ6M6jt7lqPR4
uJtNp3JhIrS3f+Qk/Gm7uNTVlyenHYBdnZraNYJ2HgHqXZhmH55AM3XTAzD8evgsphXU
+odUm1TU4olKz5MOoQgJK6aB4F7MaoCB+nYkUlOjsx3CGaw4e4ju+yZL88QEvnG8xoWA
f3UeAcdnpAHBu9P3raMhvnsRQdy0x4fXuBfVX10zy0YrUn5WecfP6Mx6bE6Cd4R7/CRQ
DtI4iCjHg1in9v7zzM1i7N+K6T4GASgzgn6UDZXy/MMZwmtb4H7en03bjzkmG+7PBIbq
OlS1yltr60BzXm36j1bj0YbNHHGasnqscTLeedTG35c10bCz4AzpDB09Mtz9Bgd3YIq0
xJzr4C87k8hn5rALbkhR03OqGg+jQ4ZpPn9P1WQ2urhbWux54mwvvA2SWNV2gn0dgiyD
YUQePHGX6e4H2+3hPLOcIJZf+X5IGaPsNU6P+bJDUqq5DLDBZDqKJAVN/1DaxyfzJzfW
EF6/ARZGviN0F4OD6ijpE67VaVTYqwlBH46wp5F2MDiyp+GYuADLPRdLAkjJo/3Al9+3
z6UOVaXnAGFbJ5xlPoG0YwHj2iJ7vCCwGflduDu+0dhO+Dkhm1s62sKdk3BqrIP2bPKh
/H4/QneU+9FyVRxrGHplDKJuEd8w/pDbf0NZvhuJ+ARqB+VvR1xgi7M6TCpTm8hMPzUq
lGKDIeSCniUzGfIuTnSJh57/chZX831yskAyAPHYptHeq0l8WY0sCyBxNAAb/r98i5gk
qw/Zmmje0fYBb7yK2uLgtwktEIVHmGioAwblXWeiSUSlMsQwelhiaq7qX2h/HfaKnIaV
YKLl1WZQWXYFuKO18lZa9LvWsJqggpjj9VPbqQOED041aFKisbOLYxUmo3pYfz3TCG1u
VfuPCN8F47a8fxGFOFI5qkdAvkDDfguubRWgn8lIqHfGCn9Yc6kg5XAH66PjVzxGYHBq
MbHgu/MoMJe4W5hvehxBu+zJxLLTcKgjEcnX4V7m7jIfcM4KvvfF9LGOV8Dv4hMEv+yp
VwWpPTTMsu+201OckDG1jdve/tcJCcbzpaApBXrkccXbYwuK7bzfsJdl/xGlD1Hdi1Mw
RXsFzfGCnbjRx8KDBZp9fLVAozakpXgZfCLywwHotJEVsDv60hrLU9Ku2xM09VSSNsMu
fUCIeBUwWA37BrhKf5gQsDayr6PkHLPgjZiLWBo7xGoCBdlsC1g7Qs4s6ZeqUs07diHW
bTZ+mscnXTWiS+6XWQIWG4gDNSxGSMxW5EKwwOA38NWtnLc1LuqfLAjsJgE4iaKFjHEe
B8Q0eK69X72KrzirWb247iyuzze3FSlAn3kgcpMaMAGRhh3vfe08YdUm2GxLb4Gmadii
yvuJJSgMYpD+ksBkiekxDUSvHPFBlxAu1ATXTdjPhZTUspVXB94KjuTHD84Eu5FZP/wT
1lbbkgII9+aFFSVacHl2Stg7d/7giN4JzxMT7ZjnzYeJYMKWn/THNzFLyVg20fuahcm3
O2iws0SaKRwU/aPc1+pUHXgI4EyAvMZvPU6+M5zNGhcmjIWxjPFDg7Q2sh6kXy85Z/BN
sPSYo9N3Fr82dBKcd9C254iH4JzvJYWCsTgn5h+eJdnR//jHZuvZ0ySMRV5XCMVxZ52T
6rSlVVDdPSh9eLyJdgm9/JYXMdarUfj+vO+J0jcuy/o5DAuu/omh3zkCj0/PeKAKr/CD
2hI7iEdL1cpy1l45mdYnvAo6bu5LOP0uwFLE/1nN3bMjX9WO+3yAxsTr9kmPH4mMjI8j
r1oUsKBS3juK3CezwsfZSXhs/6TV+Y1wWqbIAQAS2TdgWs1merooH6u+7o6qwwqBXzX2
Ounsworth, et al. Expires 28 May 2026 [Page 78]
Internet-Draft Composite ML-KEM November 2025
hBvs/533DoedhDbGYt+Y3w7tKtTH2cep//Sqb+HjnEs5DYGHvbNBX8f/kDxV65quYU4c
r9jNJghOQP/01ZoAh3nnuPYKGf+Lq0ZKd6+1snA5MxxamMkk1HNVbW65NGqEu9cdjqAO
Wp6+0v0iOJDOYqTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAkMEhYZ",
"dk": "w7PHIGqZs7+m+f7GH9c8bqjhIudaWJ+DcBpbgipSJkBaCjd7l7nRAuegppUHw
Ti9sSUNDHaXETYtk6ddj0YEqQ==",
"dk_pkcs8": "MFQCAQAwCwYJYIZIAWUDBAQDBEKAQMOzxyBqmbO/pvn+xh/XPG6o4SL
nWlifg3AaW4IqUiZAWgo3e5e50QLnoKaVB8E4vbElDQx2lxE2LZOnXY9GBKk=",
"c": "jLrhxPctlOh2E7Qwe4yW/CCVVL8dYzv99WJH9nfSo+EgjUKJA59dG85E2esmj/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",
"k": "xa3QqXcaTL/ZvGrz9PYyfujcuzrmSrrdYCP/qaXR6PY="
},
{
"tcId": "id-MLKEM768-RSA2048-SHA3-256",
"ek": "5kqkVpyVPiKJ5kQGoOcwbutA8yEwsBIpFZTA1OZyPmNPF6BAOFZZCkQzxFu6a
vknIQc1uWYo/wqTSLFocpaa6ogkNaAGoUNpgqx+OVLGHpMPUGMNDiNBIfxzafnNVWdcC
1LHixbLnYKVcUEEPxwiNTIeCiIBVWsjy/wCebtD7hJAZRFlYPXEskU3gpSlvpoMtCksf
QVn0VvIJSJaHouzhgFUUbUb0ylKC5RVlCvOtotFpOlIiYZ3T4G0P/Y+2rM9A4G/mStn7
dEWEFSr7UfEcvgBxFSVCtEd+GG5YNJ/zZXNwbuEnwOmoYInxpYKoxqnJ7GAf8ZU65uHc
mPKztoUYlZUMBnLv0JO2xjMy8iig7eg0QXPaAxvfqFiYTtmjaC3Gcejg+yWLOmAEqeV0
Ounsworth, et al. Expires 28 May 2026 [Page 79]
Internet-Draft Composite ML-KEM November 2025
JxHYGJGflohULVK/kxPRChy8QBzsSAjcOETUwos6FsqKBwqhBArqjOXoqmdb3CVoTDFh
nhSAIW09RKQuNZz9kNeQfi1oLOnuOyTq4xzjBchsjAwPFIsEQMGaryWX+UWZ4OZNwsvl
6anZ5E+gqgtgDNbQCus1blQouRhCrIhADJyQIZ91VxgTYGb19UU4yC1eetn2WBovfWoB
la7NzqxlbCYRlQeJgccpeGtHHEsUmXLn1Rb1OpY+kKGzBAujtYPSolQcHEG0KLNe1sRk
EYm/iVXVjLE0kLCg/suUqLM3HTG1iwXIBFaYjlRmya43DV53BGp5gZSckgAu4Bu2kZ4k
rWKlom1aMY6CBq4qSzCrQoltSIzqVSXr2gEAEa06TkA5GcgdaOMItA1YWsA1PCcg5loV
HtSfNiIzMKS/oCS+XaWyXm+/5aLSpnIj9AG1FK2cFqsVQJwqfJ1pgUqGIcLYLlSPaQDQ
ykyRHYa6OGkCcJQqctKt9BiinSNGpu+o7dh7ct38qppRZeiddBWOGJX9QaW/KS55ajEa
AgE7muCtnnBNmws+UuFB3Uti0PJyjys1PZLGVeLzUF5j9EDr7FVuTRLwZwTWosDWZRKS
FfG9HCavQQu2zmCalSPD5tu9Mix6ZE4djiyWvwNnfR+PjyIw0WHl2c9FlZTLnFOzodCm
QM3QbKtRZQW94yVFxJCXOoga3GJ3PJv/hGoHTx38TWq0SKOamALqRldsjRoMHfCkSlvb
6OMvFUr6HGTQJAKCMIOg9GXK7MmAGyxILTGW+HDHpqjFxexMZAxrFwuxWzOmcseODEVe
mVScZW6EVQvdiZsYvMn3ccqqKZp4nQyOelpUOATWfq94aMND9bA6thUtfwdoWIdKlZTK
ttmatNT6SCI74U7zFp1CVdXjpDM1xJpRxSYgpx1zWV8UTidnQdJUQA3D1fMIiq/aAwqQ
WxzsxeIuIhAgdatGhE80DOTGPZ6o6O41demLldEFcUduLN7KREw1hpvLWAWVZcFA/BSf
TAtbpwb9lK/QyaX4iMRSriQ2mW6PjvD/9PMfyF6umdvxJgVAnFFhmoEWfkwand88qWI/
EdiQWtFokNhW4WL4zplnzRdg0lJ/owtLEydkief3epupigKdtKjZk/Y7573Jjszb6ORX
gyo1H5drDkeri24wDP8JLwwggEKAoIBAQDz9mXLXYPlBxooTA7eJYoAPnw3yo3iUUlL8
m5bIAILsJ0C1hXeACt05tAwLgn9P84z+2HhE9AMeC1LwYwn6NK9qNWt5b715N9HA/a/K
MK9jyobq+L57zQnl6s2lHQwLV/W2Qd68HgTU+3hdupN1T5n21hGknIVSZlGJUZcNVppL
WsdcRlOblQnd9JKHyVvavGc6sBKvZs4sNB2QLcHZhJ4vby+vMs9eLb2Jxz76oGmbZeyp
eSZ4dkzHm6RF2VDGNUi5UQeBpg/XyaulHZYq/egDrFNmhGX/ebA0J4oDNBpOOEAK3Rkc
bN00y7VJ8MoBINmGmf6Um7ZIsewMupJTBPBAgMBAAE=",
"x5c": "MIITrDCCBqmgAwIBAgIUfPcEPXyqF7xJCPYr1e82q5EBq0owCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 80]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 81]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "u00VG+RP4++IUPgC5C/YYCtWhBGduJRkSkZPg1zyUQni0HkZSzfr99egFDS/X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, et al. Expires 28 May 2026 [Page 82]
Internet-Draft Composite ML-KEM November 2025
OUkElF3g00CgYEAwXHaVl9Zi4psrPtaIE8CSN+nmRcnoFzRDeUi7YU84Q2gGP4NHEz2v
qkrE7UMYOPKu6BpXRAgwwqf6BD6bs36rZQtTyTE6ZrVd32j4TrVDUmUv4TIuy8pQIhlW
qVF/jRHv9B1ZgLUmLak/cLj+wBdGxlBRIiMAL5V9ig7zvRyFaA=",
"dk_pkcs8": "MIIE/gIBADANBgtghkgBhvprUAUCVgSCBOi7TRUb5E/j74hQ+ALkL9h
gK1aEEZ24lGRKRk+DXPJRCeLQeRlLN+v316AUNL9f5hcHcreV4JjywmSQ+OxlLvaTMII
EpAIBAAKCAQEA8/Zly12D5QcaKEwO3iWKAD58N8qN4lFJS/JuWyACC7CdAtYV3gArdOb
QMC4J/T/OM/th4RPQDHgtS8GMJ+jSvajVreW+9eTfRwP2vyjCvY8qG6vi+e80J5erNpR
0MC1f1tkHevB4E1Pt4XbqTdU+Z9tYRpJyFUmZRiVGXDVaaS1rHXEZTm5UJ3fSSh8lb2r
xnOrASr2bOLDQdkC3B2YSeL28vrzLPXi29icc++qBpm2XsqXkmeHZMx5ukRdlQxjVIuV
EHgaYP18mrpR2WKv3oA6xTZoRl/3mwNCeKAzQaTjhACt0ZHGzdNMu1SfDKASDZhpn+lJ
u2SLHsDLqSUwTwQIDAQABAoIBAACWo/eUWZqff6gIKnKmsZbWeHkcVziDRNysHBnCrsb
Sp16KVitBxsHI3gLtjpdeaDod5rqVPNFVyoItrb42t/W2ovqE1u+yUst8b09d2U1uM6c
tlcrbWypovI/g8XSuDOnuhhxKwcy4jyZAobyAakdoPq+khv9H3/AeLccKR+ePu6gliJN
BVvBQLoFP2Zxpu2qoTDwmMrCqWxgyEo2v6mJnEihZjYmXyvLAZhd9tTj55sjZiA6nEWR
dgoD+Gjw/yLP87CHAvDYPOsbgC4SO116+omDTqDf+n1HkbZV3+YfEmMeik/xob9HFzlB
k/HUaoZzPCUaZiL5IJTeR9DKYWwMCgYEA/BsN4xPR998C8SfOXsVjfRXwMDTU+IROm1q
GN1V1FDgBIigTdtJeCgnKqIzN1py7TzsHz/REvXaNlbG/OTSGoXHwsrXMqWwpTIuhQFo
d2BzzU7m6duYa3yJlPysx1uVwFOEPDtbKjgyd4Pd1M9YrZgYIc1Ce7s6XJu+uhYvUzF8
CgYEA97skLwm/Too37Y94311VZHAU3p4tD6CB5/PhCVjlUfNLiRlTjq3/nhR1Mm9KCRx
wP1l9J5xbTMwPjM1h6ZRkWFO0svXmg7UsmLi4nepxFsjot6TxhD4he9RRxJfWb9WVNzh
rHQS8ZTvDmqNs6rLZNKkMl6RKr0eN4x7bYxcdE98CgYAAti7W2kJ4eaeveJZLjDEYtEw
mRq/nN7BlHd9NHq+i6/mM2CId7sAXNSneSe920KByu87s1lqvUjtaFdNdXPmYURMF3h+
Cxuxi6+37mYWGC6bgMKEHHuUqhhVVFVEhsyoa1PvO5epSdlSnwusQx2T997xkXvDj6a9
hi8GpXNiv7wKBgQCR2xNQxpJmcabALeriyBcQzZTcBZFOVBhoMwTZ9gb+mxpsHAdASF3
p+u2Nxkx21NGZ2tx/R+XRb4vwQLRXTFFQV+haPcF85lzdhlTcVT5ERgIOrgSs8c/REo8
aCrPsoHn8SzF1omYxzGA8WeA0xxxvjuClH8wBK0X05SQSUXeDTQKBgQDBcdpWX1mLimy
s+1ogTwJI36eZFyegXNEN5SLthTzhDaAY/g0cTPa+qSsTtQxg48q7oGldECDDCp/oEPp
uzfqtlC1PJMTpmtV3faPhOtUNSZS/hMi7LylAiGVapUX+NEe/0HVmAtSYtqT9wuP7AF0
bGUFEiIwAvlX2KDvO9HIVoA==",
"c": "H50AI0e1KOFaOAJF9swwnuOHmYiiaP+4Sm1r3ocMv7njTLlXR6oaSimvg6od/b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, et al. Expires 28 May 2026 [Page 83]
Internet-Draft Composite ML-KEM November 2025
LJwEBM7ei9nDQRDtESambZoXRLElPBrtfTMmNPzS4S0pwjMihem8r4X1VbgXBV6aNSkI
JZrXlCzIPlIg55qmOH/HmumzxuczJ/5XRmsyluT4WA56Ly6Dt7rsfW/wzOPGufJV8UQz
k9FYgH7/QOlpgLK81birXiN8xNE3Svkm8a8XKPuVt2C0iZQ7xESPQlS/YPiH59R0ObKi
yMkqns7OIryZ6TIOEiPshSqEINBP0zT0TEieEBdgY/Eikj9wzshuKy2YKrlSQfri1kLJ
4uj2k1bbCZEVp7WHTXsedw/2jWcC6499KyvdRmbDty8OKKs7wW3Skjr+3s4TEhWghGCM
BPBk5xEht+8etsgw/b77VJ359yp3OMK6zQe0GFi24cguTbx+XYG7Zzy0fGf3Jj45uuYq
iO1zwGFFIytElblmuQxqdKvLtvu1pWYyYyynYCpSBpQ9an/lfHX+KACVr3N5T0g2DDns
I0fe3m5b599XdR2jBXCIWvKqeUUzPh",
"k": "OAjwncX1PeXEDjges1qJFVPMTmGNGXQbS0c7msK3x9M="
},
{
"tcId": "id-MLKEM768-RSA3072-SHA3-256",
"ek": "WbmobXUAR8jI2yAp+Up0MRalFciFP1pA0wYMMWI9PwMy8InJx5mzXlOqNGc0F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",
"x5c": "MIIULDCCBymgAwIBAgIUcG3/zVgk4Zf2XBMAziBaVqbtD1YwCwYJYIZIAWUD
BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w
b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMFoXDTM1MTEwNzEwMDExMFowRjEN
MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJTAjBgNVBAMMHGlkLU1MS0VNNzY4
Ounsworth, et al. Expires 28 May 2026 [Page 84]
Internet-Draft Composite ML-KEM November 2025
LVJTQTMwNzItU0hBMy0yNTYwggZCMA0GC2CGSAGG+mtQBQJXA4IGLwBZuahtdQBHyMjb
ICn5SnQxFqUVyIU/WkDTBgwxYj0/AzLwicnHmbNeU6o0ZzQWVYvlO2bnRqMzmnbMgzDT
QaPWYwXwur1oingfswcJCKW9DFVf2qxyCSjUSUxjOCZBMXA9oqXu0KevBalXQCvxtMp+
wlwx1mveJbf89kpIwcRRAyJ/h4p5OSsJdIdnJ4sKQwWgkGtrR5vFsSEZxX8xaUVtwV5B
ywJu1V0yk2oLASTK8pnttM2MYlxy4cG8I7BuNoSlGxl1eJS6YHwfK6bMmZZk5V964UQT
Onrsm3ywu19LY4w7yGporI1cI7XrmkV/al6ypxCiaGGUWcaaKDbNED0BeKPZZBzwoTdA
erGpJCnFFFpebKWda8NQyhQts1vAkEfhoimq/AzxCoPAwpOAKAP06GPLFBNXwWbODE5b
ApOgQyumgimWeBzTKZMMoZdGhyVKK1jlJ8XKejOfC1wEi1sR4Ks2i3N2dUctlgeV5BcT
0QnK4D0fyMf164YNjIfjYopVKwhP4iPYJHLd0IiISrASOnzD4Iz4KQyfpRt2pFWrsL27
QQqgIbWEpzY2kHoowZjHCUs/AVyRKcITxndA7L+AtSw4BmvLZDf83MeXQLpVNWqClVFN
tkRBUkUv9gcjh2IdQiBj9Fgu3JBdhEqc0a5kHLqd+sq01QGL/J2eVwIM6jwHQp898Ifu
PLGkI8dKFpGKO3t1e7/dPCwSoFVLeF+kKzlz4s+0yFTdITNedVWkCBPe4V9mwTQDMpKu
xltK4LWn0wZZIFBiNb6TJRvGGyiYtrojCU/tfGzsCnv6ambJRS+T5XWue3gelGPvXCqK
6rNxp7I3SwuksntL947rgGN6coYC9b/+gEEFhsrBVMfOlxnpYJuUZFFnGitF+4plAZMK
lsk+OQjxNBrIGs88SHWmJp/QmyEPB8cUGWmRCEZnGz6fUadUqAzr8sUuwHvvJlWtpFmS
3LK9RUlRsiZFuMFcp2TZopLcIasPg4HMc2WU1om9xMuj7KfEM2SGdYrnMAPGNHxIqodR
eVKUyaRz4qvzoJLLAMq86LWhs5iR2h905L2jMKZ0MFz2PHciSXchmxxfM6meg2ycwXBG
CSZaOVCPEYysRcFHYh33IzLFQa9spTB41qtLKsW8lBwb9wDOo0VTaTMlmBPB+BL30WfJ
2RIdQUaHtTle85SA6W1oUGCQPIQ9Ba/FkTcykGmKyFvS7AKCHMrIQbGDrBKJEiOzh2IT
zMy76DMymYgBuR/lEQl/Rr6kZV4u91pU5FAlhQ2tgR93Fhu5ZoJTpF6rW133UHk8xXl1
B8USg4srE34c+1FnpCd7hruZerBaS2JhOXKqd39YcWr3U6ofBCKLASYgsbGhqKUsGqQ9
Vc+/V60KqzPsTJptY1uJYrfRaA2TGMrzmMQJ4AGR2mu0BJrVO7FX1o1n6EWMMCPQtalv
UkCrWT8IyV/cFX//LCJ1QnUo6syTKgDAXAbNsUc+LAnsoSkLFZV7AztLkIWf1HqyWHel
wQQ+8FGC6SEPeKq1Wj8B8GPMayO+pAuXSMiwjNE8eM6EI+2qjguG84xRSPaanvkQUbWr
TDCCAYoCggGBAKvkwZThvUloABZinya3xytRjhIm1W5MZvKEp6Y6IDwYQjVtdKZGeg4x
K8cl0xClK1fZXxPwttf8mEX+UyitaUAU5tgLPC3XdLNccz/uOs1LRjpq2bJgFQIJfRga
b4+0O4hM1zJJ7POvx9HI9Njtod0xJpyD45IrCqbWKWskyUGedfca+MfrcZ0Ot4Iqspz9
m5ZFSV7TQZ30jqOElWL7Ga9Bb6JuuUZKMxgGb6ctO4oOaZ3ruspDWHVKYmfGyZuKLf/m
Bmw47fpo8qW5e05mVNiAqRkRIW3LpTmdeHKU3bFDePLEp9ypm5SmdusYSAedJuTX3A45
MQ3R+Cmtx0cgh0K/k2qwTFamannC2+/Fe1EEQaR2VhIvlfzcHynjUR8sLiusMaKOnXqq
TRHYRuX/RpcpB/vaLxUEQ5QXxUsokRRAry7eKZcMa5iOIgNTGV5qTWfqTmeQwAJ0qUUP
d2viWp1z1qGQK6vJpT2kyB0Diirl56nrnmr2RYaBbDGwwp6oxwIDAQABoxIwEDAOBgNV
HQ8BAf8EBAMCBSAwCwYJYIZIAWUDBAMSA4IM7gBOnyk5Hq7rv8lrPPP0iRavvYPf/3Wm
/gaZ3EAPBTjP3EHu/ZGTn8bJ2xfqmN2OukGzwFVCYP4lcs1ZwRGb/eu2b4843p/16m8r
cIloH4ZSF6/smywQuLYYm1Ekf01p3hMzAW1GC1uh6G5B9t0/Q7hSngKcpR0FehP++Pde
P2D5fsdvIDvUKzGs2LAbU7p9FPaBJw7Gm563IJIYazt2G45+U4TtnZGZGssEja1+GXn7
Xc605pWxxzHeCgv7kDoAUb8M1lNxDIIjh1lll4fcNCGhKGjGgizJjT+YSCUznOzgxoUl
Slj18SV97kpCaI4pdmCJ+fgFtAWV+MTLiUFe6rD3XnR0MrMk1YsoKShNsbmPBIuVZLYu
07iXHGc3eMJ+iwtTJLO4zeXrbqjKDYr4Okf8oPue7Aiw9u5vS5dcIZI2y/+9gNpwn+6k
1JHa1KFC0Es+uz/HA9mo3JMghx+MCZSQL+VfK8ueka6i8A0R6MTTB434Aq/deIZJK/94
+IKPSs85CPaRo+aKT5DTM9pnI07z0+iNrWIzTeXESNlvxBzWb5knf8F7sQXphYM+j6dG
NP/BdxY5v8EQoJbTpr40HAHHYdxLcBJ0G8e0RPG3wsT2/y3Qh7WjR71c+4j49GwgMy49
iY8t0Ak5kDDj5cSQbGpnMEBSsifWQ0xtZBXbTkzzZP+nj/5lh0Ab5H+Pm36TiUVxhuDT
fJq9apJYOeQs9wuuQiF5dTH8z6Cmrs77dam2q9X2mLUY/2ZiCk/FSMS9QPv6cqefh3r9
gmTq7zUoOFwFFmnTpE54uZZ2vspq5BqVQObrSfKSV0LITtfCKvHQMF1V0SlZCj6RU6LV
dsF4MRZwBEhZTLyOpANq+hQPO3JMaIJtFHwERUwCEcPUmDo8cVn9efAeTCgAVKvxqJhj
F2L5+RH/puy7bLpfB30NJillKCX+/Z/oywgvygHt4Uc7dMQrGJgnWp31wj8R5egY1/3f
EinQ2lXLfjvmM2ge0P8702TIpHKHF+jRa53y/aXjsofQsDYd0lRUGYoVrz+9zTorPTs7
Ounsworth, et al. Expires 28 May 2026 [Page 85]
Internet-Draft Composite ML-KEM November 2025
7R8mz8tMGObCMD/4PtZ1YQ8MY9rfmC4ypZ0KZ1LW9/aztpn3J7LMqkNm64ztgcH2CAv1
fyFPlRpl8Yzhwc5lOhhJX2qdizkT5ncCYxUJx3UpCBT57QWJp+aMHv2F1pSDKQJ25kkx
bGpKhv6D92zViPbgYH4Nv4riRpYPF79LzBMzeBTUQTuz/eKpnFCbQxnYwbsKsAeEoVDP
xLOgyNABgDvGRihaNnT8mhRHTpqqoYCRsAP49+ayt9IyUQM1BG/Y4x1yG5Hj2HNKi++a
gWgFgUm/PTjgzummeX+Ag8kysaEM6C65/Ji8b4UbaxkzStcqaZgWX+r2fBRCc2IAgsrk
pk+UrnO8zO9Z4hNahoP0sv5hwLQyn8faCXcFbzDVFVF8hRlsMqDPk6FQTLFOdtiRDils
vzRVFkNUaJhs9x4/edNM3QTVwxtBdjhSYMqueoBCjaoeTKWmGLyyAcktgFYIWX5Eg+Dr
6eL5fOs0CSzyl0P0X57bqM9BYrw6FG0kyt0ZU1XfZ4sUSVhyQUJb/9vnb7HvCra03U2q
yuM0w0JSLe8UtCGqnlnR6yIhR+/3iGi4KTxHXvDFf5aFx4UX2FrfkLjN2ubcejNHsB38
46Qbok5Gl3nCpFPcUYWa8yQMwRoZWEOvhU2IkBWk2BcCI9f8iwRtkkk5aIxyn9mONxsE
tOJrYwkwPtdogAZ103vMRG5HAoSbd3/9v+3c5Rdhpmv0ue9lVnmsBTMC+FLZ4wHeLVXL
RC5h/W4BDY5eFHe8twAL2Jo+XQojGEmQn/xkPGS6MoULf11CZURi+rR7p1v7dmGxjB9v
VMSteN0m+Fg7C/NJXNS6plvnGzuEy87pzfHrw25N/mbNxj3nYgD28AEEzL0/kDvz1FD1
3ilcFapZIKrwnlj1zzQKKtJuzoAvyzqLMHyvExjMwmCcQkSrtGx6ZWyMi01rU1tfY+qW
BZlyWOIzIqkQsTAgD0d5B5uQXbDBiSB0ptIggZv4Rn+6sO2O6fi7qdvMlye9TZImJ/d4
EAKp1jRhzWjRLDwf9zax4qvTRy88sZ+xGGdY9dKVFisA27HLyNlPBYsRBszSLMmoDJzk
bYxAtlTAyITcI9kUhvqcmMdDXxDnJwX/Z9jvD+XYXKzwFIdVnarG/kx3Xq4zQDzGhriF
SqQRwS/5SFy7c/SdCAlgOadnSU0DwvEkKbFQPcfCTti66919kZLz2vzvDR6I9Em0IdZZ
tkKA5z+Kj5EfRzSUjtGKXU314/tM53m/ziw1fFtuFQG+PCtMUh6w2OfbbZQ5jFwPa7+6
z2kIKn9to7MjiehMqAMmBpsS/3FqeDaIf9TSGCS4aNfy5wuUXTMFS9z/tIhMvjQFzHK/
E7Any/fQzSTLAjhjJTVLvtjiHi+fqh62r7iO10U0hAKqDnn9IEtDlx3+XX9xyWzbxi/Q
hDBI88FP2XktHLXtlp0xy8qsbDpKbfiX781gbs7zqLlXQW2C1TbZ2wQwmNIJGbCL+QkD
2mMA1jH9TykIN2knGMHIYFcbUKV78aHlNzT+9Xzuonyz8VjXh/e6zFK2VFCPnav63fNt
iROjbq3bZyxLuf/KA+O1a90Ovu/mjzae8T1Y3N4MpY/tKriomZfFWy7s1yTErE9rET6C
PErT3jueW6Y/P+XCQY/OzHpiqbJKGJGSVOKkRWXXJxFNmUnrC5thxIfsPmWsPz+HAfSx
TnxbPPqYT01/Zy1J+EMh//18z/bztvfjoPImV4efgZmP60Z/GHkxpc2J4Hma+SdqX1Pc
huQYSyccbPQudu9TR6ig5QB4+Oy/ASUD8CqrR8zRhRrL9GRy8oelx7lmBm2sc4GL+HUQ
7h1eay0DspVqoLVrqsjdSgmmXxwtsVZpI+APhwdunzdPeAx0oOrcv/rYp+IRmlPF+9Ar
0g+3DQKyab4NV01AiAOqPqCUD5H3aZBnu0V9gij3NatcjH20UyuXIXuOnUEwuHp5g6xI
K/fiyvGlaBkYlFh0HatZZsc7UfqipMdA7br1CmVcClrTmXiG/kGp+c3v2z/Wl6RCY9wA
79mNs6p9+ryk0fMe6uwKTb6CUQnoNlIgYfJUqXdoZK1Al2ZFObn0ILuFxIPDxwby3GEz
qwznpQQrqUaW0KTHSte7IanTcDwSz2s5097sIYY+KiWuAnNmbaBA3f1jPRO0bVFDV2/A
94SDzJnhMh+7uBxJFfDQHxUOCsOUBKRfU1rO0+r6k9gi+z7tpJOBslfs23CI4s1ADSIa
FaZWyMGpotuy0LkLZC8WWniuExmi0PI/7YLuTClFeWAs25mM6XZ1aEt9m2uZRP3N3vI+
k32W+ONlnQh7SnOt8VDLmEmSYnf+pk/lQehfjXYuBVmWViwnZuFjhj7EfcM+z/h3xG4O
yNvuU3y+LX45eTLXUqyrFupv9ApkZen3FMpKFqxXze0jJ5dP27UpxmrgOZ+XpsnXfucB
unnPyEgurwh6lkFRysZx0UL3THu9DairKYjdAA12UqXK0zcB+L9kJt8V3Idn9ZXj5Mi0
lafP3PS2zVwFpTDAgi/JxFyPkE9/aasfrU0UnZV0Zbte0Do/o1DW7Onqpi5c4H1FFdVz
09Yg7ZgKhkvGMkaN1TTLB2nnRT3XR5LD/0P5wEc3e5leAEVLf9KKwUHCYwBpiIjmBFUu
RfHKmvQYlI4p8XTCrKTDDFi7RrT1YgY6/nPMKIhgHf56OPrGqCTJZItzrt/e6psevnbW
lF4x7q/M+RQEzknRIj3XXCdHuQJq1cc3TW5R2oK/GtahEDHqqd/dTFb6mV0KUK5DHwoc
dyN8BBr23dSUkAVlCmFGhkgtvXPYm0OTgL5RLKfh6rFpSL2uONDMzWfBS/cFiP9dnYKF
CLxRpcpSLjHT23qzE1wLeFS+2mdowEmkRiXA/abuD7kc/Jp4kq0/NN+hXsAoMXdBvo70
UlcM5eUX+alGuHMX0aDEmWK5JFwDE7dkVd4KwOW7ZJb7w9pB4KU853StseamzJBldrnl
XzeqVogm+bdUQ/MdaLj+ag8nQFJjYR+tescAvYunNMA9PBYuP9uKkjQ7u81eBkjXDRsZ
L7g90u04JZPPXFzTmSmH1DDJzsFOWBHkwnNwxbM0/2OYR9d42xwdtNwyyWfP+pNLarxk
TDqorGBRp8lJKN+4EJ7OjUHxpFRc41dI6ciFINmAjq7/ln3BcQra0nw9Ut6Aw+GREe0c
vFWZ06CiDyo9lRkqM0EQ3W9RqNbkNTKTPLJ7vNqaDNKFMBfxmqEF2/aU0Hzogq4p/p/4
Ounsworth, et al. Expires 28 May 2026 [Page 86]
Internet-Draft Composite ML-KEM November 2025
X3mzhIgXIY+Mc1Od/w0hJyxkc3h8kJ6+wcTO3SNIrc87P22y/hEfVG246Or6AgMeI0NY
lavYBwuEiqG/4PsAAAAAAAAPExggKTE=",
"dk": "UzSWgAko3M+TN/5aU2YgbnWf47+Mz+3H+rRcw/bX9DxGoZ9cskqRG2UvPcr2z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",
"dk_pkcs8": "MIIHPQIBADANBgtghkgBhvprUAUCVwSCBydTNJaACSjcz5M3/lpTZiB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, et al. Expires 28 May 2026 [Page 87]
Internet-Draft Composite ML-KEM November 2025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",
"c": "y4y7d+lppqBBMCmI+i4rhJaWfO5aZjxgG9wKK/EgoGa9p7l2e/Pm4qdbzEN/E1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, et al. Expires 28 May 2026 [Page 88]
Internet-Draft Composite ML-KEM November 2025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=",
"k": "zNNcC58g1jlgtVf+Sgve9vF76tvbDskM9hX1h1UNR2Q="
},
{
"tcId": "id-MLKEM768-RSA4096-SHA3-256",
"ek": "CqhSRUJjrbyPwTaH2uWk7XymENmaA7YO4enGXBY/QXd500nLoyKOa9BAeFpkM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",
"x5c": "MIIUrDCCB6mgAwIBAgIUEnqIqtl+8BBQbrhMKBjv5yQ72W4wCwYJYIZIAWUD
Ounsworth, et al. Expires 28 May 2026 [Page 89]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 90]
Internet-Draft Composite ML-KEM November 2025
mj7bKsc/bVRXT40sn9Q78IEz2/OXH8hFOiwK4LmgyIUCYy7b+Z9bL48mXU+kZeGkXI4U
hZNHXUT+Rc/QpYblVbQqtZhrnHPicisk7z1UzJ7UbYVH7Ihy1EXFof3RUQxLrA+5A6jO
EE0+vDuMWePrhiAcC4VkekrJUr2ZFNaYsnctIZ84jqEnvSnhOieVmzq3eFnLJKdegpx3
FQOPFNZAYYmUBbmJwO3snt8etFHrCHL7N268bFrZAIEOkmWZU270TQQMzocdrbxR+no7
HCC3E7zQH09mU/KELxdlTgYgGgqf8ZSKxPXrmun1VkPvv1eYs3J/9RGdtZvskQng6jn2
WVJXnNcIz4Ztwn9IKkcmlXjN4uqszNefvxOi+GBesX1rU3BVg/5vo2pUaEkbjKqljtF3
VXm85zvUPxjF9BtYGAyUCmK7ndBAWqQ4sp8uWA69qAze8BAF7bAWmAcA/zDJ8CFUnltf
SX9006nRoZLeE1JwyFZXiiohGefpQI1uildi8UtXw3CWBCcv+nAiykOqT4eSPkWcasIJ
EjocGsb1FxjOPRKFX9Lmspaz5z4OTv9XLaZlzKHUHIj03NxL+ZqqNuvhv5K9nYg2aTpa
+qtufOgff7pN+mAwbFl4TNIUZKGZpWMu/9/dtgHpuwFD2c0d9rcSWTwAjChh7tV6UxNJ
WT6hwzePismm2gwsXri+1RYL/d8mxNl02+B+F3nk8NcJLzjd0DciGSJUW5RVKZbCUyf7
9GhU5u0heNRuHSr6J4tu5fHHgUpHyCx7/DsK9zrSS8TQbcOAN6vZekgKm41AlwpnXQhR
xHPxzymzbZscdzGVNrpwnwrIc5Zp+DVRd970eJGu7q1K0xB7cA3Q88kPjVDjuQ6N3UnI
oLHkCHWtzqNk9puSo24oKsQnPQ5hSbJmWwPjOwXy8nn9Y/6Y9XEKzZwKiDChPgWag2DP
YntTcPRoVfMtXxW6f3SIsKDVcdrExcKwIYoxbQwUF3bLi6iYt6+zL3c5OP0Osq+mMXx8
1RfbHLkLE0JdrA2+8iUpU+EzfWQmpNACxowbO5D979T5R7NFgzJ7sGBfMXmA3D7X4pa2
rQ19SiD0r3pL6dvlA3YEXzZv8fzVs/qePnlUoPkAmEPPJkuAk4Vgeelh2rnw6Vh0G1T0
5+PaBaV0VWc1KOBkSgtkSb9JfNApuecQgA3oCCVPVvGaYRNX1QbpSoJqrB9LofCxPcBD
tt+WguthtIY9eUueczu91aSsHzaZcCu0ro+6C/COWj/DdJJ/M5UsghvTjr5m0xOg30js
QQ7cawfPX49An2UwZ27tdR1GsK/+eslqOVzd+VzjmzkSLbspYw3nwmbOZIxGZL6nlBv/
nrJfrIKMqBUgoDQn/A+SMlhKbRdGwfqO2bgDnyYOTVCOU7sXfj9oulybKzENcFyyIQaN
9JUsmvNmymeb2YgmgKUfc/5WIpeoVAiQaSfGDghKmASBM3ixKGLrZnEMd/aVvabPtVE4
VGhe+DTsumEb/gDOwljAZWCx8kbPETXrHlSDKMScRzVcWJE87SgvUEJWO6ET7O9hbxjH
3Pp4GFxsTJqRE7UqoIo37gVWdKEeEFBS9Jk+Q6VxcMUwfiOp27dmmRS+vyFmDowjc4ia
hzr6oWYraZ6OJYUA4ZgUtMdQIQKnnbx2YwfuGqgD7kUspYl+TA5Wb7Q9MyG0+Xny0dYD
KS0EhgLBdgTVgukjnxq1hM7DSaiTBM4+LO4kS2Ih10zN9AnVuqgLaUyAX8Gcj4KlEOnb
5qd+74WElgX5n/gdM5AjzdknFgtR8ws1+UaEo5hLGsa8SxgEqqONxpE3wKd7We7CrlMm
09HEFJg9MIFIGR/k+L8/hzzWt+kNNXgOOnzuaqo+884SpNMISHJYgVgLsC6nQXTB7jKA
GSPZanWQ0K16MppGLGrRVpLd6Qb3UFfZsGKPfawdU+4RwAGUjUvBtMrZddGV78zP+rHk
DXqvAPFCHXMbtZpfC6wrshQxzgw1UZo3y2WELRPZgfkISlEdRTEUyh2j+lTSHgVKQXOG
tSY9QShycrSIn3NLptf6FZe/einhcJ5VaY70XU4Bb2KdrpYcaJzGOKqwZvfg543MSXjT
QhM37xS2DRD5Us8HiijXCZ3rgXzvyzZnwLuYOTXRn5nAQ2z7hAKzfFpwVOrFSuiRaQBB
HdpNvXhj1cHgvb497m231rSl5YcVVcVavC4k/wKPyOGSsb6MfUzlK8cOAuEYJ+fyd0b0
wY57FMf4Ytz7FHO6Wl73EZpl4OslhYRJNZ7urmBluTt66GjK/Urrp4Q+MpBTrH6h1965
bm/ucgNK8JRFgDCQf22v5f++FoTxGH63mh5ARz8PjF3JWy6/bpX0TtHPe6gBcnt/WMzt
c+ccgf7lB9TIIl0KFoSEoAMzJOr4GTboyoYqnugG+6Sd9gPZULEugvgMm0qFAQmkIHd+
ZmCes5au7/atNAea67m4UpQKR7k/1WjAbYGrlq4FYZFZliQGD08xcjcSVn+gOzdFPoqH
YVhzUL0LeCtVdErt5dvJ7uG0onBeK+T24uNg++VMqGvB/DDMqH+3ZwDW+UagU5qb+6wo
Sr1MbyDABZOu/PaV182iEjEy1N5xfd+QxX3jjJeXRBXe7NqUghMVZPggnZexdg7+it3A
Cj2gENdRYkdVBk2CiQO7LpCEma0Sv7hHGiUx7pWbPVVZU/UbKSwJ3W9BEivY2f8NpHK1
JF0Ts08bABGRDxRSA/XBWZy72K633j4c5s3YNxI1Hd7VIRamk8fPRs4hC64PPJ/1jPJ6
85K5+LzoKZQ3naksGOZBRWFl5Pi8DXlQoKMf1ehBoltQ96C4j8hEDOUJcdjcsJa4mLXH
CJ9ODOtWovDYW13wYs2ZNJcLB8Ie4jQzFX1KLUdGG0qOWEUkTj9rTsS8f91ckTfEGpOL
0xLS01GuJz3F4x+yy8Eu9v5s0Pu+VUqaI28+XOdbWyerC4NF26qdHi4Kba/EgsROhYX8
4nEDshY/k6MdiLmmRTvY6HDxO47A6DvRBgtLx6cSJ0mIVXqVSUE6AV5kFaf8ZmEVm7qx
VafPItvx7Gd7Fh6iOMSBCLMcfHknRWRQ3HlQiTM2jS9kmq26hoFNER68aNL3LeASyFS1
1zXX1A7f3ve9AfZf/V2wnviPoIi9kbHht8OP0GXTj5d7isAWlqDvTyvgVa6Y/WN0eYsY
hytCFs4VBjPVJ0b2EHtEd+pp1mVzl/gQQUi1hnplOAw/FO+ckO5PqHud1twT6am51heG
Ounsworth, et al. Expires 28 May 2026 [Page 91]
Internet-Draft Composite ML-KEM November 2025
c/5dgXNn1Lg5nJEScVmVgfkEh9QwAWjbLaHIQNTkbqIJumc8rox33kO6+Y623Dpd5JrX
72HkZqLDDNIdJ3VmN/9P7pWCOJAOYqlhuD4R1xFQ1SN2Lx6hPLsQafcEM0eY4oO5/JO/
P+6uta4b/qTGTG7LvAPHTfMKPLBUVyNsfsZiVVmAqnG46mCt8kq6w6CbD1zwUu5TSDeA
rAgG0ePTK88PkPWAEMpBlWxnWsmNal5M99hVe8DKhl772Bz7MSpAjnQ0pPGH8MsCS7dt
HZ9zP1/UtyMVRG17tqXiMFFvwY+/K4N1oyGzzzsF6+5ia9mxAhqY7f5fT4m+Razck510
fSN3lMHZqF34wD9Bg39AkeRamv8mXlmBcTxOV9WPo9R6NDsSWFr9ChkaJIayztf4KTm/
5wMfZnGpueFHUZ7Q63iGlrcgLIyzyOTtAAAAAAAAAAAAAAAAAAAAAAAAAAkNFBkdJA==
",
"dk": "D1keFtmDLEkdnLdyLy2EW3wX7T6s4MX5bNXeByh5yu3fdqVYOyuIOjhaOVNjJ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, et al. Expires 28 May 2026 [Page 92]
Internet-Draft Composite ML-KEM November 2025
Yj1tDHVjMgQsxT6uPVSlm4yR09HT+kKaJXNt3W52QCl6xEV2Qgnml6YKOHIcRLMBYyYQ
4EkC6XFHKesfMGTFdnAvFGva+y7cDkcnY7Vxp9p1pEiypsEg7NJO9EaSKedAkozQU+bT
X6h2u7SlWGLhSYh7N27OQKCAQBnuTdt/svxg7tw7M926PDZmLHr2qk+5UpowekOMjxvI
uTJRSWaVZii4iXGC1NkxKOiNhjOxaEL7q9Tn8nIKxyVW2Tgsg/+hLmW/5rK7BgSK8KOO
OVflEo3HHOU1n6iVv8nyn78sQTkFfXzWXF/O3Ze2vfXlX5DAPYQXHIfyxfVqwVlCYwlP
SnCnEizWV1BIH/88BajVhGqmehmHZlarIs8kKXLII4/FG+bkqDDMo6wuI2nA1m1qvFSy
QbJwNOriyuGakc9sGO3oKakf26ttDf/e1Qb2xv8i+xKvam3h9Zp+sH2nLKUTFzJtO5Ot
7wLsrXqsSsfyHJpLvOwwbEP3INK",
"dk_pkcs8": "MIIJggIBADANBgtghkgBhvprUAUCWASCCWwPWR4W2YMsSR2ct3IvLYR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, et al. Expires 28 May 2026 [Page 93]
Internet-Draft Composite ML-KEM November 2025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=",
"c": "lVszs+2KTEmPxPhEw13XM/lohSNIbvFdoiTrSUgVu3vIm1n25gVJD0mUZVsv5c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",
"k": "ogKBMHJGJxpCeGnmGZ9RQqeEE+n8GhUpL4he6+DOB3g="
},
{
"tcId": "id-MLKEM768-X25519-SHA3-256",
"ek": "eDNUgCoxd3MPucIz9TB+3gtHkZlC66PCqXZGo/mxCfQM1Bum5EYwDpaaTak+I
hapzerEgbREYzq275ms/WdjCejPBHS0BMlLLTdeLvgKmCSgF5FZ7etHnXgpatsnXGSFw
6Obv4k8ySFPNDQCgjiRDpZeymRSV+U6M3d/5lbHedEtqfGpxvW4OtaomgUoGJaJQdq2+
Ounsworth, et al. Expires 28 May 2026 [Page 94]
Internet-Draft Composite ML-KEM November 2025
eqEBSJLYBi/vBSoZrGvdpWUz0KDnOZKo3yx1oJ/bZN1psSbScuiY3W17agecjOH0iAiO
TVz1PkVYRMtNYoTlkOsfnGEjLlm9AlhWoZmXyuLtsgzO1SdfiGPG+hgKbgu1LaPVcIwd
FLAjxwGpfmSKdWsdcSs6+qkPxFXzqglnQGEJyFiyXuv8iq696VqX7mTw7YcymQsxde9k
cSSLgUsryQIWkbJGKIicRVhPQxjGngI3hNrlQYpcXVPPZSXOwuZ2qZDS6ItvOxGSncM3
OHBoMMnu0J/QZRPzPse4rymedSnLsnOPjQ0a5MJnRgFtEeYK9K5wntlHEiL5JMmC+s+A
oKCzJyoudcjNuprKbquXScxBREVnzmEtHJ07bLBhTAktGtv9htKatMQ9Zlo8BtJlnoaZ
zpFLmss0ht7FtGhMQpCrgFJeDMHsqVXnTXOLDyVrRgk0gugNASwWGAHvZEoyojJXKVe1
EMuYbGCJBLNmryO48UKHNSTVxS8yWm9U+WdSQAojdRgNnlUuKLEZcDN8cKS7EFs17uEL
HTP7sQKMZAf5VVt1euqaAZKqPG8boZEzjkqqJmOBldv6XecjTla9yCMr6BLVYJD2je85
zZSMMcXk6lkvJNElXFhrjaI+WkWLkvNoEwSaSAFFrbH51tXDplu9WdCFxOu3Xkfc9Ryt
1EiXxQalYdUXfhZkaSdwlq5WMFfC4GrUQUUBNHKS0GmBInMNLmWDntQXphHBTzBpFQEZ
pXHTrQWB8CuDDtHLMINVotCJQEVuGtAgkSbzLK/AB1tvGNT8DgbKlVFX0mShcaTKHy4u
lUvE6EhdyJO7amBebFwjBqxG+HHkoOH/HwN45t1ZVlqo4VB7YVWC4ArK6kUgUW17WMjs
mYk1Fp9v8olPyt+sUlD6tKUTAh8HlJvh+IKCXCtimwmGosUu3uivNUI4eAxvna+ObsnC
tTOi4cInQkpuaey1uC65Qm/4rw8rlJ3msGvsnJX1sJBOakaCYcZFGdAgiJ60uQsJFFZK
PJLmxPO4KWUrWiWoMwoJ4tHdYJ43XRGqNaFhbSFsPh+Z6fN5thDzArA+Clb+uAZ+BlQo
9xth6tjN2wO+bMSf8AgDvCkaXYUOainhRpfqwQxqsIIQXQHKhWpaKNxHYE+t7ejh4xEr
sdGImYYFTlD/ILP9INYMUDFeaa7wIRZarO3giGyrEq9fJaSVMk82rWogyW8cJrOD4FRV
TR779M5swkcF5ZGg3Mq43QYoQjIO5C1rbe2leE2yLMNqqglI+CrV6xhyLpAr/GCxoZh8
fgmBsOv9lGDf8K1bHzDtydRhShdItmi8kiZUjqBFWqWycYSdcyoTZ0S1LfZXy/mtQbaD
rnqUoCxFBNCmrBxD1sDIEmdtXxzx+ITWKAGpjXkxJ3UoO01cJN+5TrsKQj3F1cEBg=="
,
"x5c": "MIISvDCCBbmgAwIBAgITUMSJEUfPg3WnL6esD0y8lCEuITALBglghkgBZQME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, et al. Expires 28 May 2026 [Page 95]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 96]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "19hK6xQjWC0qrEb70yo1l+/SGrp4owtvgvVCvJoPH1+6f0Da0ovn46ktPNlNK
4lrrWkL7MAhn+h0L5onbCLwFZh++rUnVXRrg73qOM8wJj8HoJQ4KZsmyXZwgYGyGgd7"
,
"dk_pkcs8": "MHQCAQAwDQYLYIZIAYb6a1AFAlkEYNfYSusUI1gtKqxG+9MqNZfv0hq
6eKMLb4L1QryaDx9fun9A2tKL5+OpLTzZTSuJa61pC+zAIZ/odC+aJ2wi8BWYfvq1J1V
0a4O96jjPMCY/B6CUOCmbJsl2cIGBshoHew==",
"c": "YANgng7GbROULaM0ObtoJXxrqOM8mGUHT0RTka+xRR+xQjA8C+Dmqcx5ooINo6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, et al. Expires 28 May 2026 [Page 97]
Internet-Draft Composite ML-KEM November 2025
0GTeVxu5O1ETw9oDjIj9BQkatWwcA9NVG8h7WJwM9voQk1uzOikMLVGftt7aOL+7mxIm
GfOg==",
"k": "uRfBiaroahywi6Y+ECanMJsJuauPauljpN4LZ15mLHk="
},
{
"tcId": "id-MLKEM768-ECDH-P256-SHA3-256",
"ek": "yOhDMho0npN6WPgh5tYdaCukAvB/3Kl7NjS/bis7xfVSvXZ9NECE+Uaj7VoA6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",
"x5c": "MIIS4TCCBd6gAwIBAgIUbGZ8xGdvbsDfJMShujhdNL7T+pUwCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 98]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 99]
Internet-Draft Composite ML-KEM November 2025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==
",
"dk": "QgoL9DN4T5OrE/IOUqH6hsPvFHSZhHQb+wDcMqqTv0DmdLqqv2suCj8YRtC5X
p9mli5sCI7vzQBldPIlJSty9jAxAgEBBCBw6+qOxORaRC00Nk/UvIWvN+S/5oZElgeDX
LzIGDQ36qAKBggqhkjOPQMBBw==",
"dk_pkcs8": "MIGHAgEAMA0GC2CGSAGG+mtQBQJaBHNCCgv0M3hPk6sT8g5SofqGw+8
UdJmEdBv7ANwyqpO/QOZ0uqq/ay4KPxhG0Llen2aWLmwIju/NAGV08iUlK3L2MDECAQE
EIHDr6o7E5FpELTQ2T9S8ha835L/mhkSWB4NcvMgYNDfqoAoGCCqGSM49AwEH",
"c": "/m9aHQs23dtkp8oTilPb3TpyNLgKzJZU4Q4oN2OAGOI3Ia4cy/d2C0bLv6nscz
YfAz6CK48KkON7htyPo0QirtdwX2CyZpokSoDd+6+QULFzm6DkHq6XP0VEngXHdyV4Mv
0scedgK9U8GxNrQBtSlsAdOHw9MS5YwkElCY3CutO7xR/SSFpbOvuPrEWzJ2x68Rrqph
3Z/eYTm5+ZAEeE6NWyOLaRNe0L6naB+uC9FjxvmnsvWlI3JnXWXhjo0/MAxL7d9RJVf5
qLdhDb/hCNQn9oNAyxwl3s8GUGpadX7buUGdzqdObhHoBRRI2PmxxB8JqNkW239JC0om
ZTv82sp5mzWSlS+4uiV15GeihJ56dya3HpxJzuoeTVWXpfeh4cUau2o+7YHN8KiK/Zia
9pg3TAjdCmpYvQyQeafZmFZDqL06oStqTV3jysvsB8J5Ck1Mpo54/KfUPh0D05CQAiAV
RJsN31SE5yqZEXvgn/Xu0//djvI3UQiIT08qzrD6M9oGd4jEhlkDAJstbKhHdfipi8jE
FEIbueW26UagqZqn8RadFnj3ozRtHDevOdxkrpnWIXJR3DXbWzi4iY/+l4sC1gX097BO
Datnc3aLHI68R+JII3zfb7YuZnmQgZNhOPLyXJMFRbmnJG+C/vWatdzHk39UHagv4gSt
9ONMKdQlPyTXHRIoB+2jKLdEawsYsYpkJPOdhECfLYJ745vJJUjgZV4Oxa7rhqqTWmlj
Ounsworth, et al. Expires 28 May 2026 [Page 100]
Internet-Draft Composite ML-KEM November 2025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",
"k": "Skz9eyB7hdN5ELIhki/gWS1ry3qidy3QoNxZTUU/C4M="
},
{
"tcId": "id-MLKEM768-ECDH-P384-SHA3-256",
"ek": "zUbE39gpIZpDVrG2WHcBZbqpBiSyoDKRbaVBO8AqTkFWFgFkJFnFKFkSVKMqd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",
"x5c": "MIITATCCBf6gAwIBAgIUCj8CuNe+rSqyZPd44febyylUqRIwCwYJYIZIAWUD
BAMSMD0xDTALBgNVBAoMBElFVEYxDjAMBgNVBAsMBUxBTVBTMRwwGgYDVQQDDBNDb21w
b3NpdGUgTUwtS0VNIENBMB4XDTI1MTEwNjEwMDExMVoXDTM1MTEwNzEwMDExMVowSDEN
MAsGA1UECgwESUVURjEOMAwGA1UECwwFTEFNUFMxJzAlBgNVBAMMHmlkLU1MS0VNNzY4
LUVDREgtUDM4NC1TSEEzLTI1NjCCBRUwDQYLYIZIAYb6a1AFAlsDggUCAM1GxN/YKSGa
Q1axtlh3AWW6qQYksqAykW2lQTvAKk5BVhYBZCRZxShZElSjKnd6uaZgtkzRpQ0IxK26
Ounsworth, et al. Expires 28 May 2026 [Page 101]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 102]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "NpI2bgYrOPyMQke7f1T4aB9Q1cqzYiSMNHfym6/CZC+dcRUeXkMvUV+zpi5dx
TDzGoGLB4KvUXg3cNoWJ1c12TA+AgEBBDB++GU2CgxQGoogIvuwdy44KKyQHTgX6vipx
YU/HRod3Zyh0zpkd0AsCqqroLgOudigBwYFK4EEACI=",
"dk_pkcs8": "MIGVAgEAMA0GC2CGSAGG+mtQBQJbBIGANpI2bgYrOPyMQke7f1T4aB9
Q1cqzYiSMNHfym6/CZC+dcRUeXkMvUV+zpi5dxTDzGoGLB4KvUXg3cNoWJ1c12TA+AgE
BBDB++GU2CgxQGoogIvuwdy44KKyQHTgX6vipxYU/HRod3Zyh0zpkd0AsCqqroLgOudi
Ounsworth, et al. Expires 28 May 2026 [Page 103]
Internet-Draft Composite ML-KEM November 2025
gBwYFK4EEACI=",
"c": "C0k/vLkSJ1vrl14zqHXCnkOlxuGvLpE8i5N+bb8PYI7E77gFak2lV1DcwEFPa1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",
"k": "4MtkQZzy9oM3lk1u9SvtVWz/qmeTMV6jUq/owfcqEvM="
},
{
"tcId": "id-MLKEM768-ECDH-brainpoolP256r1-SHA3-256",
"ek": "uBN3z0scTKxQyrEVRhYgCgig6KaXjVrJjhrEXiBMlwIAzSZXisxoPqKELyaB/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, et al. Expires 28 May 2026 [Page 104]
Internet-Draft Composite ML-KEM November 2025
Bs60BasuIQ04Heby5AxIKScWceohCBgGjWTebS835U3JQPDMqzLhcWzG1A+rTirS8caK
SMLDlcCw5ohGkKISnQQFPZUVXhB2HsBWWikW8onRkoDbtodQNEmR/ZjCqcjboptICVir
ygjNhAQx0fFK7Re/nHAFFWjy/dHXBk8e0ukrYM2BdODIjqji6wD3Pt3s7Ic7JpJ/jUDZ
ptXmplHRfYrgPJ1CMAsYrOuPwVMxUDM2FBA+XwjtkAk7nd0j7iabNK0FR12KbPWbeI8Z
5DHQNT1adiN+qHLxRPacpMEk9CJbBO6acarDGVsJqC1v/UDUe8Qzr5BD/v63BQIOwcc9
3BaNOCy7B/jgFOMxGhOq0A/+hL8EVU/5Gf21Kuuiw==",
"x5c": "MIIS7DCCBemgAwIBAgIUTcmrmYqf1ICJedMKHgFM55iYjzgwCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 105]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 106]
Internet-Draft Composite ML-KEM November 2025
3sISIB1CZ9mXEhvMnaX6FyP9u7yMGS8WJ5o6uYoIuf39tMhbrCbVMLyn+VrKwJGmT/oX
e0/sEjMiPq2Rj3P1BaWoQ2NIUZbf81ZbOsLn/fj7Wp77AI/MWsaZjc5gS1NaEQxw+pX6
q7nPFQfEo0Dvj3DVTeYoaC87eMrLhN+1VhyKNpEWs3jP+Ui9XNau/I2sEWIi0hJVWjd5
IEuu7Vji8ttDFkV32y5EDBTg86xFJbTZdFhUok0UT3cXaqgoCiot7La9GKz/zTl1kfYX
J0JZYZPNATZUm6C0vL3aCg8rNJ8JDyOTmftnuMrLDDVSl5vSAAAAAAAAAAAAAAAAAAAA
AAAABxAVGx8l",
"dk": "hr2TLIlZrKKwQtcJCzJyWPfD4g9fweyvx1nL2jQ7ChehOU6NOjpU0s4NMEHDw
bIcggwhWgvDkVtBy/Aej67FqDAyAgEBBCAkiS9A/MQWnWrclgUW1bnrw9FITW4C6c+jM
K3THZHDA6ALBgkrJAMDAggBAQc=",
"dk_pkcs8": "MIGIAgEAMA0GC2CGSAGG+mtQBQJcBHSGvZMsiVmsorBC1wkLMnJY98P
iD1/B7K/HWcvaNDsKF6E5To06OlTSzg0wQcPBshyCDCFaC8ORW0HL8B6PrsWoMDICAQE
EICSJL0D8xBadatyWBRbVuevD0UhNbgLpz6MwrdMdkcMDoAsGCSskAwMCCAEBBw==",
"c": "a9i+hICVHPH4iVXLsZV/0Rd9yXMorgBE+O1zICskgqeHA4jQDG+Kj/A7yc9MLE
ca7no3q1R0CUEk3AddaY1Nc8EkFqXtr/Zlc/LKXB8v0UgdjblNNELcYjltVXl9II97u8
sFtYsmPWWvX/YzgrJWtIy+Jca36bx6GGBkC+L+3g66+QPNHox24Iu1nkIgfpnTb0m6Ig
l4+dJOGE7htNljr2YivziqcOjwOmV5ribMWK9a2ZxJaEe1ir2veszXDJ7ITuT7ZlH3I5
jCb24gnZtL7ROvyloasQhx6u4xXEcaaL/LxSCWhOKe0EPjWSKP30axpbp88UL5RpqA92
4xyu3IPKN9CvoE3g/+HP0yeL0NJJXFsgJgP8KqC2wjl5PkVG57tv65n7TaGxFQ+bCwPX
6MHecYE09cvlm1Uc5Ybc0d1C0FHIzIcvoaEPsNdNWkUV5ahLZoDihG13LRXPZiXTgkZH
NcW2mJdZiJilBZ5bXqbZzV+2lfmQipOYOh6nLlpMQ1TDUOk7EU5ss/ZDDdeEbIGRbRgz
SucH58Zfdfgyl7NpsFE06MhZU7L3aU/RiKkjBoQsswhQht23OHnz6q1SZcVzJZVU9NYU
cV67eAC2vc6cF5fQjCGEfCf/51zGpNRts68ZNXQSrblymJ7PApzCVmWtL92moMvHko6K
7wLsU0ktk1URgbS1U3HELGRjrKs462L5J4VifOMWppUuj9WuAG99wRpYxJA7RzhqsuQ9
lSzdqLxMM6j4HUjrppeUD3AdhQN5SNPUFYr4a8ANrCsp1Hjgv4udDWNU8lyhjDmP1brL
hoVAdmEt00U3TkWdEe0SdIo0+ElbMYTJfKF2QeofjAh97HpKZLrvaEq9tWRJwnPnfstv
Gk6oTPFEmIq3yTRkDXlsUI7uoscO235MnUgjQI1WKP2i3ROYeox1RyZoQpQj64BqesCA
p4wnP74DeqGgvaNn+c9LvmJSEiE6IwhwI0Dph91VbM/iO9+PRHIytxmelMXC9lqZqcMJ
CjaDhVv3aUKUeLzoLTGkbz6tXz5F0NCm/1j7kKl/VzaqFLTHp+/h6pTPy9ALURLHwGkt
fTvcuApXF/B1+v1rOOFZTj0W98K8Fm0wCgFGDmeEycEpkHIqFnQWkPTVWeMoN5W2i2BO
7zVuAJFEdYRg6LqWGVKv8ZdSWCSR5luoTcECQEsP43Sw3u3N7RBclC44Tuq7484fR9TC
N6wepCNiInuJduX0E1d8/XOzs5YjR1jcEeRley7TAtKziB79BU9igekF48UnH0VJPqJc
SrS5T1StkVin1t5EtPwhsLzKiEuVP5ZeVs6SXEDjelxDmKMyw+fgykn0lqaiwzMFAFpe
YBzaKlsob3MPBC7oplndprAlSdmIqZXidlJZ43G4pfgRrwQCygE4Xv45qtK3Pjpx1uhO
AG9V7AOup2N3ZVi9jIBP9xCQuKxykEZCRkGbTggBvc+VPKSnAlqqrBhskDrlCKpomQTG
KiOjwVTkrtFRIUB0Mm5bgz0QehAkju834Jhcve+eKPYbSJ0g==",
"k": "knbuHT+fn30tMFpmoxNandjA955Y+KhuTfsCsyCtcK8="
},
{
"tcId": "id-MLKEM1024-RSA3072-SHA3-256",
"ek": "DpwfPoIbowRVeyik29UymCEqWXNIi1JCkuRVmPQRkJQO+RgIN+Ew5UGJ1SqXn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, et al. Expires 28 May 2026 [Page 107]
Internet-Draft Composite ML-KEM November 2025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",
"x5c": "MIIVrTCCCKqgAwIBAgIUVdzPbC1BOUU77YROwAfWJbBh9HswCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 108]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 109]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "vQ4PA11FOV/0enUAtUUCZGW0jDqDJb7aIaXW11BSMOQJQ0phr4ru+opdDOrso
F5/Dri4GMIXYR3Ayiu+LPdOKjCCBuICAQACggGBAPnFgCix9ou9RnusLaEM4nP8MGslZ
MJtDZThkP+hOAfN+4mTSpi2VjXYOxcyuwZfZuDd7bOhY5ZtucgjfFsyDaT0u/KLoKu+w
tCFdvPnYlNHfIkCnjE2fu46AQZqfCcO38STbWG6g0tawx31m8VMsJnF46UF8u7fSpqI0
Ounsworth, et al. Expires 28 May 2026 [Page 110]
Internet-Draft Composite ML-KEM November 2025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"
,
"dk_pkcs8": "MIIHPAIBADANBgtghkgBhvprUAUCXQSCBya9Dg8DXUU5X/R6dQC1RQJ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, et al. Expires 28 May 2026 [Page 111]
Internet-Draft Composite ML-KEM November 2025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",
"c": "wPZJY9g91xrY/AOv+WvWyzhwlKU+z7yrBDmG7Fx7SmHgtHBOyDikaKyZNsOeP/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, et al. Expires 28 May 2026 [Page 112]
Internet-Draft Composite ML-KEM November 2025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",
"k": "j39RzzxeIeX0hKEPfoRwk6gvYfL5D5yrQJWPPfctaw0="
},
{
"tcId": "id-MLKEM1024-ECDH-P384-SHA3-256",
"ek": "1ImKa2NHJgy11XFtLeDAwEqhbkIQlLPICPZnJyeNmYV28OJr36Z4a5ejFjU4D
maF9vBOLyhNOLIbMMNU8tJ3urrNLFVQI/o3j8JmNLugKQWbLPCq7gMoqUWNNueBg+fB/
AY80Xp4R4ID0FJFVUAHpTLKQ4kjxZgHocZXuNZicGuHVHJ/ckwILTSyWKw8VpV6opEdJ
VhLvgfIpCGYvzMP5UEKpUEiXQKcu5oduhtalBJ/tDZRJmnHcpLBoDy9lMQNc4ig/HZgb
WiPZQwISMWtMbh7lKSUa+q5ClAf4BlnFcw68JqSdpYbhMk6VaBueFWd28G77aIaUKEhQ
0SMdhuohjpOPWZK6AsaQ7QLuFsgddR93pQM1oXPyiafgPoNK8J7MEpeYXFok3C3q6O6P
xWhK+obdnWsXPZ49xJW5GcDCNUBpTFpMnrLORi3YqA0oYylVyF9oMy4NnWfXGaRsoWTD
ooIe8iVAGUIHwhGElAy99cN3xlkptKEjnVZAlZ9TZVmVdOBUNpRGbRKtlhHl9qVHXvBZ
og1u9qqIdlaATmwdJS2vHwFA1HOVNJSyiwj0ak9d/AGlotwwdZ19wtcXmnJ0eRuNAHE3
wVwcBI9WnoirkZrtGU3WulEdNCrWditQodBeXY6xsvCx9OkmKdRAMVBslJysUODMpOT8
PmLsyaxYMup7RZ2fMt5xcZmc+RDheN6oOPMv/GJq3N1hdDFuJq/aajJnso3sfNy82oYQ
iJVAamT+abBcwnFdpaudXpG9Rs87JFHhmgIiwfPC7S6KYh7Y1I+k9xVl0Vs6XGhHjith
PMSLMTDc5RfmTEmxUKV5wND3iVwz4J1xHdkaeCbQYW0BeZ2lgI3WymPbcWOr1PKeqs4W
3ZgcndMFDy6bhJwYIsysMN7tgdBCwdr2pUZECOQgtGFJ+pZbwLDPWMiN6gb0Ll0YQMlL
zxS9pgYHBSXsZkSi/G6zQqTPsg4B1JzhHaJyTioeXy3gOIcfcSyISe173VI/0bItMxsa
OFqmGZ0hvaRJplvpppgYOUX7wnHIwSb5CsRGxe3HaRJDjtY5qCjbdKTuNVdrjWh+Cgw/
DGaIcw4SonD7ZcBw8EPH5J7sQJU6def3kA69EQ4sVgRw+dPiqZsISkQiLWbD+EDy/aIL
Re3roNKLTuDtCEtDfDLMWFuLZw42BaFbphQMfF1S7BpPdQ3RYooApogVyFnIspOfKVwK
sUpTkqS18YEz5OEbyjFsOBx5bfJIjooEAyerIq8RnBqCAwN5rwbDbwmTnQlUbJMDnLFd
qteNexdr/yo/nMvHtPLDSrHcKqheXZqS0XJQrw/SGTCxpFcNyqIS0KNezEoWBZxHaBuE
9RiH8C1TglRRfwjQcQAQkqjwqgtD7IyufCEEuc8ATSxGQjHZzCP87aP0+k9rWIiLQgYs
9Zh6iWVkkI3rmM+YWcRLxU/xnUVfWa/8EyVQ9lhWpVNDDq9p4E4DdQW3irJJnrKFalvq
RMsnKTKarF9Ihq4QZzAxRdzLviotFciJ2Aq/7cG9ndl9TRWMSgw+5sMY2mtiTFpSbNlW
0dSWhiehghrH1E6mRYCGGNlMtyB5CYXkMydt3cvzKwxByi1U3bGlOs1AHyRMUplrvWE4
VKLgUuwSfAzFFyCj5wjf2BOcKiOBTsdrEyHthMXhXcO8AkTohJc+fS5uFm92zlXqSsGN
GwPuNDMkVaxChWHGzAgDxsXKiNSO8KLPAResfMVvxPOJpnIpYRF1wiZsNIFdyNckQU+S
QaqSBCCeHyFtcLG08vEbPwphLaOUZA5zzhEnaoHOiuuA/INDDtEtdNuztIerRG6lRxQ6
gIPajB9CGvEdsURp0FDD8tyhPBUhhqMYUYE7iOXWWkIHQWyXdcgCqlVxaR2dsunmMoRY
nJGIGZSHNfDHlg3UTRumuZJj1Rv8pElZNSFcuR466u7UxVx+aNc1tMqeRRSkURkQhYkk
DZa4/V/qMFyyDWvYzRm7PpvPwgUOlYKL1GHOWQbkoYQCtWPvKcZfhKm8vx3kyNgC0cmo
AhCB2VflIw5V+c8+e/ag2tCcX228qVTf5lgIBMZz8b7cgYQYDgYxAiwFqwENK4LEbaTN
Ounsworth, et al. Expires 28 May 2026 [Page 113]
Internet-Draft Composite ML-KEM November 2025
f5FERdDHaE1QRFDOV6wvI9J8w8Cr6bcdshvnpKbAvrQcysyaKQZbEi7X/HoVwNhz0kfW
ubPYxpCrf+QdUDVnRfJvOpbwrxHDdCw6UE/ZGn0njfJhCslb8b3",
"x5c": "MIIUgjCCB3+gAwIBAgIUZvYC6mYN3AebXXosaOpYUsl3wpUwCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 114]
Internet-Draft Composite ML-KEM November 2025
LZIVyuvdYvydmVKbAraovcyerSFfhKucrTe7JdRbTv8oKI+ty2D5As6aOrcD23dNnkiR
xYYO3f+U2EDkFzsJMuILuWFDI2UyCjfl5AQiaBSBsa5QzZ8Wjyxy01MtTSwJuU7+CZvn
znvhn946CvYKMB+rf8P3E37U+k6KVQMfwwJSaaN0wzYF1R1u6NhUlSX1Y9b4J4s+b7Cr
Ec+7ma7DYc7OaTWBCHUqZLTpjuJGrSe3mpvDwtIqYgbgk1qyP6+D92+CEk2DhK+AS3pK
PG/FYFvqoSp9gbj2k2jvW4j9vQJG5P4LcKsXYkEI0gfZvb5vb1VWg68zym0ZFpd9/lsK
0+vg5dFuQvgneZiDhamNKYvDP+RGm8OVQDSvsFNu0Lr6TesIuKNbZ8Di9RsEULO4aR+Z
Z7ar4WxJ7kqEBEzn6IcSBBl23EA+Q6nHm7lGamO6ZL3HG+I6WkI7D2oQXxlTzfJNTkF9
16380GLfgWZGea6aIAQllKF/kXm8wJZXJohtFOOye5Z8JM+VSpEocuhWw1CPMdYPmKQo
R5pZBqTAmxlgyFzUolL0i5jVlQl2wYFiujEdPEoLUrONGuXp7+jGRl13o2r4KsCVcaCR
crC0ZyeWwBT062YQLdjHhVq9MzCDxovbYEL0+Kf4MvvcmK5IJvkbsWFe0pm8/ACDYfzA
YUpy7ekV748wGyc0MxiNQdCfXnj59xkrliC2bH5cCjsAqvjVyh4QuhGK7NNHPk5MMMyf
TvHkPx7aiMqavNDUGEG35vwlaGeliE0oTJfmR4M4RgFu3JYbMTSLEc1I8q3k3VoHPv6Q
bpebmAOPGiOnzD3euAWlN5wDB8ULRoVs9wZ9EkYyQsh3KnBzW55d2m3EYdCJ0E94MaQy
dlmT15QmpEWnwc2N/WefqHNrXD112VPgBbYLVy7LBWOAvIbV3h3qOkEns5+MfN/geKw1
5M0LNRNgjh9hMu8Eh44o/1zTmYaF4G73fg2KzZPkc+/HXthSkKYHdgI3WAgibs3V0WYk
AzYSzgFH2JKfm8UTJwg5QPG0BDV7+Ah1dI06Bj1guF0CzFFAGmSe8SoljsKJuqz6JGxS
uliKQX2RpCkNuaSh8aP0GZuK0OQrBmFKIc02CG0PmBbXvubfSJvhRUfmrX9XKrwt6niP
CmUqsT+8Q1z07sYrlDfwbp5bMopiB99/Gr/2+QMi4uPLMo1rd3fWsNdZTZxXuRg7aOpo
mAAYy4gMxc5OJ99eYccuXXPOnDlPTrXSX6xX+aFsNeflPsLlF36NszxrWd/BCdAfTRo9
fbB8gEVgDTQGWCul+zQEjvRqBkIx+PVEzpo+O18Elxqledsz9cTxVW9cJ3jmZaOEZAga
B9hUAi1V+gkivtZOeZyR/06pg9pfyuC/NW4KKv3Snul5PpfSov+QIP4vNf1QLVoOmEdO
fdbtfMJsphH9b5t9MjGvuVlSMwN+KWKejUo2Dqlv3eapuNBCL7KpRXKQRBRvmqeKWWFz
YyoBLF7GEBG5NNoM75m/N9M2CZwLzzyQO1ngR/ozMz2TpT7GZqngE/ijlUoDahZSilJL
3gZTyJmtqrn8qDKTwD9kjdhmt+LUXwQC4H4vlv8tT2xHF5F2fARs5dovibZHoqAo8twU
LYIhUsswFU9FRhJkMDjsZp6hkcXvDlsRj+WqrvWWVIE1gG36bgtpNgYxZBHXbr5O5wz9
7now9wx1CfPr7XHIcXIiO/eG7xqn4NXSH1nX8KKRksG8jfRmOJ7Yw/DSCVDgE58htrrq
6F+dUMRez9WFo/UbLRLrQ1H+lcTK9ibtKwdnz7iBGhn0r++mh1hj3nNNdllzJ8ef3PPA
Yg9mPEl80kRdDTk3JJragZuUZGCaZyLeM7GgXFGlLlkpCPBV+QMzgY6VAWWg7EVPOSNr
Eu0ZTHKmam+muZsIsWwCyFZDrDTMVcmgJteaMzMbMdoHzCZF+JALfT1PBeKe2jZbMKHx
UetKmo7Vqr5hVais4x1F8qNz+BOdnIBAm9TVybzK0EdFrjXb4K02N3+NVDpJhlA2M124
cM8DslhL+bpG/r0u/Ml6lJC8y1rNRwFABnJXn8VgWOTPMeSO+tVriIYevOE5+DTH9vW0
mDBhbxHVomoxyzZ4CnN6A+xCB0+x81Qny//MfnpKRT0HLA7hpak0Gz0rpRdlRdTU21CH
dAcDgQMgV66r+mkXVkuVf2o+O6kxtTR8huTPpsvcuDGrVIr/ypauiXbbBySNl9FchDfe
Tib/NZqAprO2l2aWSnMbwONjJzIqcJMLCeYO0aFm0cenpRuj0/FG/xVV2u+Z825owVck
YQpbaEGgqnxuKvKGuxQIcgXqWPtdc1IJqWSITa1WLnO9zP0K9MnjnFQnTvO9K3CDf/z5
9TD9bZyN/SHFPrBHuQ0DMq34nCn2JNeTf6ajRHVc8TkSKvY2xaeh/BQai1CmhTCZRyw3
TIl5sOwuervHCqi0JTPBqUWaQNf/BDIfA13JDrfarWkfhsqtepO0Du0B+9dNl88B5Sta
h4qi3fC3LO7yImHu3owbK4RD+4FsHlxTuxrtV3s1MkCW/e+Zi7C0e5qTwMi6tPwp/lsu
2rJZprbJQOuE8cY27ekqEpGtV4tUp2Fn8BX2hD5paSvviWiPhmkm+iVDQHFEm9NpeqQf
Qw4YwT6Grgt6+OZzyw2gN4rd4W68R/sZ4UPah6aBo3dn59y7K5YE4ug3ziUBpx9GEUr/
VXu9dsRi3NKqI7n/LLMj90UN6jkA1nltU0p4/pHiyHk0Si7/c8rarGqqRj2tNSLTFMag
ldc0nCd0E9M0FuGwYaxYt7Ddw8N2HwuUUwRqs6BS4a3XxLydrZwv6tEGjn438adYQd/D
4t81Cwmh5FiwwLi6DHH9tGIEdPAbM9BjksJAKvvp+JIPIICAxnq7p1kTT4p2EyEwi4WJ
uQ4akAURuPV+WCvGprA6k1rxWAKl6EfVxPlXUZrBBIrbg3HjlmsXKYbDTu3EdbmF4tVT
zX6/cCCKJcGec3cjcNGk6w9H1jMZP1PAJ2mb7Ruk2fwBFNR0QjUxHQNUFs+Hr/sAGy+c
D82b4BijEDdPse4DFl133G8GMr0Sc3K2a/95diiYs+oIyCFMHcseCZHIJU9uYNssl0kK
5+TT1NBpEbDpmwLJVAwgBP05VgQM6DQfBbuQjcv5S5R0WFmfKjCmpMhsZTVQerUKvKC7
RtJtoPY55lwaAzA+SFn1Fba2D3IVfaB4N6veufwX8lw2IDYqYTqL6hxyRCL0X403pu36
Ounsworth, et al. Expires 28 May 2026 [Page 115]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "jAOpydMF3HGv+kExyJqLbWsKpiGDu9k7VY2MbX2BEzHtoeT9a6Url7t8FE+mO
kelVayPymBLqXAVtX48MG4PGTA+AgEBBDCiUaQBJeD8d3ckAO/Xj4QdOd1kCQgberM9v
bhr3hmP0QzXAMLhZXLLYpyK3DUkfk2gBwYFK4EEACI=",
"dk_pkcs8": "MIGVAgEAMA0GC2CGSAGG+mtQBQJeBIGAjAOpydMF3HGv+kExyJqLbWs
KpiGDu9k7VY2MbX2BEzHtoeT9a6Url7t8FE+mOkelVayPymBLqXAVtX48MG4PGTA+AgE
BBDCiUaQBJeD8d3ckAO/Xj4QdOd1kCQgberM9vbhr3hmP0QzXAMLhZXLLYpyK3DUkfk2
gBwYFK4EEACI=",
"c": "OmmuqeG+Pl7IAqsuk5eHS3OHBo+DqOtfla+d11vPM5y96JCTf5sgx8ccxP9SDD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, et al. Expires 28 May 2026 [Page 116]
Internet-Draft Composite ML-KEM November 2025
gMo8BCNpFIvcaB76EqIJlclkAflD2VioSmD3mrpCSRMt4U7hpRH2Sk42BQSRPxLOKVul
87oRf8TgreEg9REauHU4+59u6DUJD3wiOsTV0GKKwuj9dXYzPs",
"k": "g1kbKxggqWS4Nfp3bLdGctC0iQvwuOng/xGuf6C5+mw="
},
{
"tcId": "id-MLKEM1024-ECDH-brainpoolP384r1-SHA3-256",
"ek": "2acvqCEw1zV5aYmuOZgWh0uLbskHkTvCjfUzJtyw0tVeNgNUQxFQnTdq3zpXg
VCXxRt/SEAptekty0dbRsg+XXEXnrNw50yGymux4lVeSOMt7rUsNPWEucG953pioTMKa
+agTvW49bpi5EISeyVx17rLEnAi1Lo3DuiNOzqrphwG+8IiOCgWyXlo6mZbmKRJx8fP7
8vEgrRzT9XOpJOKZfpM47gVlaEmDRQS0fClzRU3qly/VYMI+2U4vsOliwY8iAZ6LMXHH
RqNHTossQxz7ERmidJ9EcGJG2ZEc7xEu8qEPEsebNY741E0zQpXKmei4pqkhaQ/agzP7
9ufdoW1Fnqci5cutyMmNGMzTogUOkdiUDtAHzo2bHY5Z/F1g/hZcEYcUPkUGxnP1TFJN
3A4dhjJGwPOZlUSaDyIOwMVFyWgvGeOVOBZ11lDcpSnWDFv1Ns8TIe/p+BL1eQ9F9st9
/p2pjc+mElEMbIvSxgaC7m+aHcKNHV+4zAhWpZyuJCOABRfBVuWzemnPeRLSWGMUzWJ5
PhlMWNtMyJXFACsp1uh9WZCYEELGLo4KTTCpLZ/7eTLtVoat9GIitsTbnGPAqexvHTP0
KGPOXjLCZckEmerh1mKSVKbjYSP5sgmq1Mj8raV0JRfG3JoqyTCLOtwTiCthsN4IVqJ1
wyQIiV97hg4M4nI9HCPdsA12UZX9/mNEYOs1oAU/ywyLjIfTAvMJ+pE8Igdk3Wmi2oXX
fsnK6Z2oLOtuqgn3lBAdYrKAZciMYIKgilPeqETjvQYxzIEB0MVkVoUS3kXW0lu5Mkg9
BWV+KCUoqnOOhVARoWa85eQ2ISsnrlmqeRYK2lVA5I05oWHuObKsumubPPDCKu+HyRkX
WkbElkjSSsHELoGIAWQU5PK80M9SZtHZjGwfqpkHATMrcGFgbggj5eZyTcqz7QgYfQ0F
FTNsxpJcMSW50JXKzqEmBQBpdmUHTkHYAoCJZw+FGuw+gKyUlZja9GqTlBE6UQWAahzf
Ya32KK+68e/FuDLJExaPUAdRGM3UJPAF2SaK0Ibx5hZb+Kvp5aknpcaN+nPhyh1QVhNS
aSFu8sVsudDnFVA3qe4QVqtMtsNawev9KEinRFACDR60Fy1KsJBzlA+4aFUBkYwp4qzr
qKUNKRTunXOiJmWS1tAtTXJ94Q/I1k/RGeHD5k5zxrKfxZujrMrI0NmXBeQG8OR+1epC
lSu99SPhNkBm6Z0Y6uJ9xtQ+6VL9LWlxaSlcBPNEnMeUqIxNSqYC8M8u4VK9rFvn8p9h
rkPafY4GtaD7OJUlUcVm0SfZvYW55a6uGoF01dnOsIJvkmb9lKK8FiELGW6cdwJ4IBV/
ER5FCuhfsIj6EQdEsyIUKyh6/pijTqqarGwoRwPoeiK67oDIxmPwjUJNQA/R/ONQiqov
Yh8vDVjN9hzMWGEYhiuu4d9dVJB1UMdCpgUXNc5EYYoDwu6X+BmIXkbvbCfMplX9iit+
3mLF1XDNvsxw4LGAWmwbOAJ9BtCZ4IG19gXhBHLn7REEQYfxaQCWcSVg1yDt3CP8IO2Z
VJIb5wQsDFqffE3axhhTkE4a0iZ4OGVh5IYZcXFDuBHo/x8YXgNTAgLxrOUfDMl9sihx
pY8voZ65JxAKbhW6/JO5qcxQeK6NPuANGa549stJcqeuncVQMcU6Hyo8Rl7womqtclB/
HkHgnE1xFjEazUBJGs3KDwXIwNmHJQSOalOnsqcw3hhsASyKnWFr5W/BlB+ZZQampGhP
lpR1vmUDIQORcnN8wdOv3hDlSlUrhbPvXVns/ZDYsukezpnkIhqcuQzpul1XpBZH8g2R
owBwUyYJKyQUeUQmkWqm7kNkYalPdRkYflJ4fp8oWaal4ix8vgD32a/G4eJr3h7PxONG
0UcITpTHIUb9NG8JprDTNESvOQwqxyhpsgJhcheKLtdSCjBLphuQbZwRfsdP6kLJFMUN
RY0k8OSZqQAmKQZfOlw07OO/HMvI9yFK/inQnrDHQkNvKhAZCC113EOyxBBcaIzlApEq
hciyVq081ZIFjG1Kj8tP3Zk6Pqrqob2JlBHaannAZ1s/ur/94zxAJvK7MwEgiE2ez0FW
652o+hDCVMuUBrBJE4PotAACvbG40+8ZKJSSa271jQawM7z/JSgI81hLrTBKy1vMzhfD
X5fsQhaCEZV9hrQaJxC5rop7daZbUUzn2+WbjPLK8KM1wg1Wkfs",
"x5c": "MIIUjTCCB4qgAwIBAgIUaUSbJBUd/pnAV6lcQfEEjLrDs98wCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 117]
Internet-Draft Composite ML-KEM November 2025
jR06LLEMc+xEZonSfRHBiRtmRHO8RLvKhDxLHmzWO+NRNM0KVypnouKapIWkP2oMz+/b
n3aFtRZ6nIuXLrcjJjRjM06IFDpHYlA7QB86Nmx2OWfxdYP4WXBGHFD5FBsZz9UxSTdw
OHYYyRsDzmZVEmg8iDsDFRcloLxnjlTgWddZQ3KUp1gxb9TbPEyHv6fgS9XkPRfbLff6
dqY3PphJRDGyL0sYGgu5vmh3CjR1fuMwIVqWcriQjgAUXwVbls3ppz3kS0lhjFM1ieT4
ZTFjbTMiVxQArKdbofVmQmBBCxi6OCk0wqS2f+3ky7VaGrfRiIrbE25xjwKnsbx0z9Ch
jzl4ywmXJBJnq4dZiklSm42Ej+bIJqtTI/K2ldCUXxtyaKskwizrcE4grYbDeCFaidcM
kCIlfe4YODOJyPRwj3bANdlGV/f5jRGDrNaAFP8sMi4yH0wLzCfqRPCIHZN1potqF137
JyumdqCzrbqoJ95QQHWKygGXIjGCCoIpT3qhE470GMcyBAdDFZFaFEt5F1tJbuTJIPQV
lfiglKKpzjoVQEaFmvOXkNiErJ65ZqnkWCtpVQOSNOaFh7jmyrLprmzzwwirvh8kZF1p
GxJZI0krBxC6BiAFkFOTyvNDPUmbR2YxsH6qZBwEzK3BhYG4II+Xmck3Ks+0IGH0NBRU
zbMaSXDEludCVys6hJgUAaXZlB05B2AKAiWcPhRrsPoCslJWY2vRqk5QROlEFgGoc32G
t9iivuvHvxbgyyRMWj1AHURjN1CTwBdkmitCG8eYWW/ir6eWpJ6XGjfpz4codUFYTUmk
hbvLFbLnQ5xVQN6nuEFarTLbDWsHr/ShIp0RQAg0etBctSrCQc5QPuGhVAZGMKeKs66i
lDSkU7p1zoiZlktbQLU1yfeEPyNZP0Rnhw+ZOc8ayn8Wbo6zKyNDZlwXkBvDkftXqQpU
rvfUj4TZAZumdGOrifcbUPulS/S1pcWkpXATzRJzHlKiMTUqmAvDPLuFSvaxb5/KfYa5
D2n2OBrWg+ziVJVHFZtEn2b2FueWurhqBdNXZzrCCb5Jm/ZSivBYhCxlunHcCeCAVfxE
eRQroX7CI+hEHRLMiFCsoev6Yo06qmqxsKEcD6Hoiuu6AyMZj8I1CTUAP0fzjUIqqL2I
fLw1YzfYczFhhGIYrruHfXVSQdVDHQqYFFzXORGGKA8Lul/gZiF5G72wnzKZV/Yorft5
ixdVwzb7McOCxgFpsGzgCfQbQmeCBtfYF4QRy5+0RBEGH8WkAlnElYNcg7dwj/CDtmVS
SG+cELAxan3xN2sYYU5BOGtImeDhlYeSGGXFxQ7gR6P8fGF4DUwIC8azlHwzJfbIocaW
PL6GeuScQCm4VuvyTuanMUHiujT7gDRmuePbLSXKnrp3FUDHFOh8qPEZe8KJqrXJQfx5
B4JxNcRYxGs1ASRrNyg8FyMDZhyUEjmpTp7KnMN4YbAEsip1ha+VvwZQfmWUGpqRoT5a
Udb5lAyEDkXJzfMHTr94Q5UpVK4Wz711Z7P2Q2LLpHs6Z5CIanLkM6bpdV6QWR/INkaM
AcFMmCSskFHlEJpFqpu5DZGGpT3UZGH5SeH6fKFmmpeIsfL4A99mvxuHia94ez8TjRtF
HCE6UxyFG/TRvCaaw0zRErzkMKscoabICYXIXii7XUgowS6YbkG2cEX7HT+pCyRTFDUW
NJPDkmakAJikGXzpcNOzjvxzLyPchSv4p0J6wx0JDbyoQGQgtddxDssQQXGiM5QKRKoX
IslatPNWSBYxtSo/LT92ZOj6q6qG9iZQR2mp5wGdbP7q//eM8QCbyuzMBIIhNns9BVuu
dqPoQwlTLlAawSROD6LQAAr2xuNPvGSiUkmtu9Y0GsDO8/yUoCPNYS60wSstbzM4Xw1+
X7EIWghGVfYa0GicQua6Ke3WmW1FM59vlm4zyyvCjNcINVpH7KMSMBAwDgYDVR0PAQH/
BAQDAgUgMAsGCWCGSAFlAwQDEgOCDO4A/YfYcbvweFb/LzKFGQRaNiCJq8vHq92PqZP1
WSaQnEVJHp450t4p2OmFCD66YbLzzE0iZo5E+GFRPOI59+Sg50KIhTkFnxG98L7nS9oM
Z/pgiZKGDG9I+avfQaf1ns3itfWFTETG83/yb3u+zfqBE2qSafofqiw3rjFDM3M2dUzI
Xe3U0f93MTmrJqWYKB4mrCmNTdiaoyaIzPPf5GmWrwIipJFe4fwNdZ3f57gVg6HMKAYX
jX3DrtOsiBohAHvuVAddoUyo4NbdMGoeLEbmIQalnpddniEucGWff9zfjP1TCX2Q0hqt
nPufWU5FL7CjAyIwSRxx9jeiQqFK0nDdt8PgXrqw59jNZpybsPBMstEBfuy+qWSVi/Y6
AcCJjzX+O63JhpSFF66emwYaTMcsRav2ZHEZAC0Z/TOzVV+ejzw8sbzdbxTapKVw3T7M
eyp+DIwLL/5GzOHatiXP3Fs2W+XB0WTPDErYZxkD3/99xDr3dEUg3JJOAm3Ddu2O0Niw
Tv1Uhg7VXcrlur13I0/aQhWT8EYVeNLPuZPvvcAss8S/rq/CkawmjA/U1EToNvx+arND
NF06cMuht1m8x8M18OgIgSCt7X5lg8wg6c5fjvwzPqOAglwWWpqvw6NMmk9YoqGJKGGJ
8LE8GbJ9suYoPGHq45p9RH1pEspKCrv6QeZy6YmxAEVS8yVpJWNXylRwALXIPPgCdByW
nowFrsUtK+kpchuOxtW6ngUFAra/K0CVNuVAYNQupQd5fdtPfDwxwa+nN5q6N2ITXShu
FCHqsLI9X9q+E7p6GIsGPCdZd8FmgdUv8l5BILi9NhWZqqf3hfzDGuF80FtxqnQ/FtWH
uXZzCTA6P7aNnw9e9vCqptrpFTiTspTgQ4bWTwcv5G4IT9nzC62tGeaSJl65OgEGHk9j
BELeYddI2My2lOlmyPU46DpaYKS5+nH+zeB8j2bGPzcF0QJKK+UIaiotwxqiYlOkXLkh
/SzC+m+qTL8giLgxgvEtyMxUF6YwHnvgsuRX3DH0gV26Rl0nzX3gu76eS5qZwlMZ0lOH
pisZsvw2KYMUWQuUMvvFk1PFA6/pojlHgvapkiUs7S/D8IbegOGTgd6rau2z+/OM90re
JgGJYckk26BZM4bKm86uki09u2rytAh7yYPf7N2h+cmk3fgpcQ3f1joZF/ZZCQO7B3DA
tXMoguKMA4QzTYsFfJmaahsFZIVb7Ii+3kFdMnrNfpE8AcM6XNdBoznWFM76T8HgdEjt
Ounsworth, et al. Expires 28 May 2026 [Page 118]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "GwDBoMtig3sqf7+8yAoQ+9r7q1G1ASzjxFLXE/w5WOHJ8nAu5GPPAJN8FSBVJ
Ounsworth, et al. Expires 28 May 2026 [Page 119]
Internet-Draft Composite ML-KEM November 2025
Gh+ukIqmZil12Oyp1l6bc7dkzBCAgEBBDCI7DczbmQPu9sQ9so6AJvPZlPE8E4geXDFx
AatG7zxjyZLoXdvMG7uZYQk/RmkOVWgCwYJKyQDAwIIAQEL",
"dk_pkcs8": "MIGZAgEAMA0GC2CGSAGG+mtQBQJfBIGEGwDBoMtig3sqf7+8yAoQ+9r
7q1G1ASzjxFLXE/w5WOHJ8nAu5GPPAJN8FSBVJGh+ukIqmZil12Oyp1l6bc7dkzBCAgE
BBDCI7DczbmQPu9sQ9so6AJvPZlPE8E4geXDFxAatG7zxjyZLoXdvMG7uZYQk/RmkOVW
gCwYJKyQDAwIIAQEL",
"c": "DcnHu4C19OSQIlhBVBF3hU+oJk1FJIU61KLeAT+g6PMy1Uqt2DBBf8W4SQqwDP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",
"k": "iamSiVnBBQIrM6RiZF5V5DBvPFjSCXmEm2pyEWtmtO4="
},
{
"tcId": "id-MLKEM1024-X448-SHA3-256",
"ek": "//TOH1y4fAVKU3KrB0RJ6BhbJkJqXuoZ4NkiBxVn8Gwl5MXNLwhDDSUvmdoQc
6kh2FBTK/dV76aiUPwYWSlZU0ZX/RcKH/RcXMJhcYeyxOyGrTcuUkbDFOcuiJasmig5O
EheA/J5t+N/7JJuDvQYgMq249GTjQuEVNM9g9OSAoUOiAYSXTJ4YFYH3anB2lYAcAs84
HRDvbWCxXYffSh0ybIL6YZIXJC/VKG0+2cl5wO621MbDDnAV6c5L6QxZ8g5TojCbgclf
LST9rco1iKdG6MXmKAhpesIUWujD2VkhZIyRfQ2bkoxdNVv6xSBddAFxIcydMJsVTd4n
Ounsworth, et al. Expires 28 May 2026 [Page 120]
Internet-Draft Composite ML-KEM November 2025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=="
,
"x5c": "MIIUVDCCB1GgAwIBAgIUaP+k29OG/vRrJEbm1l+VbGEZWtkwCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 121]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 122]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "lK0eQYttm2IYFF0inFR3ZuAkmB3rPvLDUv0YDA/PYgDjwH1lcOkbs04qBfQnk
8JOu4I/GI3bY8Ac2ZziItSUz5w8qubZpQa8/Hu8TyjiRr8y7R8vgc+YZ1RnMC8Mu0q4l
t8lW0zVC6mxZ2CvSjPpJyquI4fQmo6P",
"dk_pkcs8": "MIGMAgEAMA0GC2CGSAGG+mtQBQJgBHiUrR5Bi22bYhgUXSKcVHdm4CS
YHes+8sNS/RgMD89iAOPAfWVw6RuzTioF9CeTwk67gj8YjdtjwBzZnOIi1JTPnDyq5tm
lBrz8e7xPKOJGvzLtHy+Bz5hnVGcwLwy7SriW3yVbTNULqbFnYK9KM+knKq4jh9Cajo8
=",
"c": "6QcjorUEPLxjG6wc+FuuvN8d0R0+HxkoI8zSG1fAFLW/k7oOTET1hwA/AWnem2
VqWV+fkipeg35AzoA5iO2q1Tnof/E1eW6A2H0bmvGv5QyvTuPHVkbtQxrZxZKq6TDSrN
PvZhRDlLHpcVCM+B8h319kRMYl4j5x176j5O9VIzlYeo4U80ptBhoLgYX+EWc8CDQDPZ
9hbBSTcB3aa6eeBITCysTMNEm9rN1NFz3u+E5QEyCJyzPnaRc4M4Xs/8z3ioc5Fv3kON
JWrIEMGz4MZhNE1FdK5HSTBMeDN37oWrySb77rDzdCrmxh354h8Z5kYbr1JE4E2lOW92
DMQDrLqXOpZDtUWA7Cjp36Ihc4bjN8Gqeobc5o0JlQx/I18efOhAHpCjczqPf3vhTMy8
Ounsworth, et al. Expires 28 May 2026 [Page 123]
Internet-Draft Composite ML-KEM November 2025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==",
"k": "Snw9WglEMAjMqI35CcMCVQ1JbFvlJ0xvepxs2Fok2n0="
},
{
"tcId": "id-MLKEM1024-ECDH-P521-SHA3-256",
"ek": "Cig5MLAxoraVm5LBPstYtYVftRCkNKsJ+GmY3dJgXMFRywgKshhkJmF0uqMeo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, et al. Expires 28 May 2026 [Page 124]
Internet-Draft Composite ML-KEM November 2025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",
"x5c": "MIIUpjCCB6OgAwIBAgIUGGpg0CteQo8Pl8a3dhCQv+ci+8gwCwYJYIZIAWUD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, et al. Expires 28 May 2026 [Page 125]
Internet-Draft Composite ML-KEM November 2025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, et al. Expires 28 May 2026 [Page 126]
Internet-Draft Composite ML-KEM November 2025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",
"dk": "ZclNOEDzScuHp6bWOUzm7fS9l10eB8GhF4jGbcpoBwKFposcMwvO+oGZWFiok
f8F0jUXsASqyTWqDnS0MjbajDBQAgEBBEIA3bk/J1DjCwqo0S08aJIXwaZSMcq0TINTh
pZPsXQ8eOFsDEvcoDbwYzmiSauhiLPaKRNAjgzJi1matynaqZ1h1SSgBwYFK4EEACM="
,
"dk_pkcs8": "MIGnAgEAMA0GC2CGSAGG+mtQBQJhBIGSZclNOEDzScuHp6bWOUzm7fS
9l10eB8GhF4jGbcpoBwKFposcMwvO+oGZWFiokf8F0jUXsASqyTWqDnS0MjbajDBQAgE
BBEIA3bk/J1DjCwqo0S08aJIXwaZSMcq0TINThpZPsXQ8eOFsDEvcoDbwYzmiSauhiLP
aKRNAjgzJi1matynaqZ1h1SSgBwYFK4EEACM=",
"c": "rhGfjqRn0YJKw/WiXuip5exVtQmnXDQuQworz8nn/wOxNi0wIGkIofknrJ/nVa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, et al. Expires 28 May 2026 [Page 127]
Internet-Draft Composite ML-KEM November 2025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",
"k": "+ugl+zSRoMgL166U0orhwk+4QtQKYvT2x0Oe1Yy/TeM="
}
]
}
Appendix G. Contributors and Acknowledgments
This document represents the results of a many-year effort by the
LAMPS working group. Over that time the following working group
members provided valuable review and commentary on the document:
Serge Mister (Entrust), Felipe Ventura (Entrust), Richard Kettlewell
(Entrust), Ali Noman (Entrust), Peter C. (UK NCSC), Tim Hollebeek
(Digicert), Sophie Schmieg (Google), Deirdre Connolly (SandboxAQ),
Chris A. Wood (Apple), Bas Westerbaan (Cloudflare), Falko Strenzke
(MTG AG), Piotr Popis (Enigma), Jean-Pierre Fiset (Crypto4A), Carl
Wallace, Daniel Van Geest (CryptoNext Security), 陳志華 (Abel C. H.
Chen, Chunghwa Telecom), 林邦曄 (Austin Lin, Chunghwa Telecom) and
Douglas Stebila (University of Waterloo).
We wish to acknowledge a few people who have made notable
contributions to specific sections of this document.
We wish to acknowledge particular effort from Carl Wallace and Daniel
Van Geest (CryptoNext Security), who have implemented each successive
version of the draft over multiple years to provide valuable
implementation experience and hackathon testing. Thanks to Stepan
Yakimovich for contributing to the reference implementation to be
able to provide and verify hackathon artifacts.
Ounsworth, et al. Expires 28 May 2026 [Page 128]
Internet-Draft Composite ML-KEM November 2025
Thanks to Giacomo Pope (github.com/GiacomoPope) whose ML-DSA and ML-
KEM implementations were used to generate the test vectors.
We are grateful to all who have given feedback over the years,
formally or informally, on mailing lists or in person, including any
contributors who may have been inadvertently omitted from this list.
Finally, we wish to thank the authors of all the referenced documents
upon which this specification was built. "Copying always makes
things easier and less error prone" - [RFC8411].
Authors' Addresses
Mike Ounsworth
Entrust Limited
2500 Solandt Road – Suite 100
Ottawa, Ontario K2K 3G5
Canada
Email: mike.ounsworth@entrust.com
John Gray
Entrust Limited
2500 Solandt Road – Suite 100
Ottawa, Ontario K2K 3G5
Canada
Email: john.gray@entrust.com
Massimiliano Pala
OpenCA Labs
New York City, New York,
United States of America
Email: director@openca.org
Jan Klaussner
Bundesdruckerei GmbH
Kommandantenstr. 18
10969 Berlin
Germany
Email: jan.klaussner@bdr.de
Scott Fluhrer
Cisco Systems
Email: sfluhrer@cisco.com
Ounsworth, et al. Expires 28 May 2026 [Page 129]